last executing test programs: 7m58.292307379s ago: executing program 1 (id=292): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x0) mlock2$auto(0xdf, 0x80000001, 0x1) setsockopt$auto(r0, 0x1, 0x1000, 0x0, 0x5) syz_clone(0xc100400, &(0x7f0000000080)="283fb45c1dd0a4e559017e1903e4c1b5f4116a084c8878334013f2513b73083d0b115f77d28f4376a21f4e4868081604ac9f45989bfb364924d3c534fde6268fd354acca4e20c447c5b9b7ea889f9c299d8fbc8f9aef3f4822f4e221f665996126bc1d57bd612f1f17fbe918ae43604ffef481bcdce68c4891fed5b7518d494f7370f221d0c82971b6645b9aa8", 0x8d, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="b0c5cbe2d47e63c66e7e0b5942177b1eb6b201944b9580d004d62ca90fe72b73302f076faf6043acbf362d6c61125f3d3b9572e615d82d0071192f0442e0f83f566f85b3dfeb98c0bb606325d63c1752ff9c5ddbccb69286ea49fb39030db2a79eb7b522dcfc3104016754139f02566e16fda4f2fd430c49339d599382fb5cd3b0eade827c23401e58e1cdb977ad51769f90112c364b694c49bd50e8c37167ff2467abdddc85ac3dda94c983f6c0855c0aecbe351cd7e1fa3c342739a79400518f4ffc6e1351dcce884187c569613a") r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x28240, 0x0) r2 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x16d000, 0x0) close_range$auto(r2, 0x8, 0x0) ioctl$auto_evdev_fops_evdev(r1, 0xff, &(0x7f0000000300)="80b1501d6a36c0312fc3cd697af5ae341699f50b31f3cbb9ffe319306db74a682355a8c040864c02a34a1a9f26cc8eb1bba4862904dad344764d4b1f1d18883d3ca8406886eab1702ca088770e4b84bf1ac63411d640aef42eec6fc931995181f03d675a89133f0a57238fad4d4f35540cf0ec2bef") kcmp$auto(0x1, 0x100000001, 0x5, 0x8f0, 0x24000) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff000, 0x80000000, 0x20) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_options\x00', 0x2, 0x0) close_range$auto(r0, r0, 0x7316) connect$auto(0x3, &(0x7f0000000140), 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x2, 0x1, 0x0) (async) mlock2$auto(0xdf, 0x80000001, 0x1) (async) setsockopt$auto(r0, 0x1, 0x1000, 0x0, 0x5) (async) syz_clone(0xc100400, &(0x7f0000000080)="283fb45c1dd0a4e559017e1903e4c1b5f4116a084c8878334013f2513b73083d0b115f77d28f4376a21f4e4868081604ac9f45989bfb364924d3c534fde6268fd354acca4e20c447c5b9b7ea889f9c299d8fbc8f9aef3f4822f4e221f665996126bc1d57bd612f1f17fbe918ae43604ffef481bcdce68c4891fed5b7518d494f7370f221d0c82971b6645b9aa8", 0x8d, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="b0c5cbe2d47e63c66e7e0b5942177b1eb6b201944b9580d004d62ca90fe72b73302f076faf6043acbf362d6c61125f3d3b9572e615d82d0071192f0442e0f83f566f85b3dfeb98c0bb606325d63c1752ff9c5ddbccb69286ea49fb39030db2a79eb7b522dcfc3104016754139f02566e16fda4f2fd430c49339d599382fb5cd3b0eade827c23401e58e1cdb977ad51769f90112c364b694c49bd50e8c37167ff2467abdddc85ac3dda94c983f6c0855c0aecbe351cd7e1fa3c342739a79400518f4ffc6e1351dcce884187c569613a") (async) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x28240, 0x0) (async) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x16d000, 0x0) (async) close_range$auto(r2, 0x8, 0x0) (async) ioctl$auto_evdev_fops_evdev(r1, 0xff, &(0x7f0000000300)="80b1501d6a36c0312fc3cd697af5ae341699f50b31f3cbb9ffe319306db74a682355a8c040864c02a34a1a9f26cc8eb1bba4862904dad344764d4b1f1d18883d3ca8406886eab1702ca088770e4b84bf1ac63411d640aef42eec6fc931995181f03d675a89133f0a57238fad4d4f35540cf0ec2bef") (async) kcmp$auto(0x1, 0x100000001, 0x5, 0x8f0, 0x24000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mprotect$auto(0x1ffff000, 0x80000000, 0x20) (async) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_options\x00', 0x2, 0x0) (async) close_range$auto(r0, r0, 0x7316) (async) connect$auto(0x3, &(0x7f0000000140), 0x55) (async) 7m57.34169283s ago: executing program 1 (id=297): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000b8008001c"], 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYRES8=r3], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x20044800) sendfile$auto(r1, 0xffffffffffffffff, &(0x7f00000000c0)=0x9, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = socket(0xa, 0x802, 0x0) shutdown$auto(0x200000003, 0x2) removexattr$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='-!:@#,\x00') bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x1e, @new_prog_fd, 0x3, @old_map_fd=0x9747}, 0xa3) ppoll$auto(&(0x7f0000000000)={0x9, 0x3, 0x600}, 0x6, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x6c00, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r7, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_VDPA_CMD_MGMTDEV_GET(r6, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0xd0, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@VDPA_ATTR_DEV_QUEUE_INDEX={0x8, 0x11, 0x400}, @VDPA_ATTR_DEV_NET_CFG_MACADDR={0x9d, 0xa, "75652d5931eb56216ec9b4813bf92e4cd4106649e19d0c39cfb2d8adb7e5f4ccb27dd71a15a95fb5d11162caca52f42c48b9c13a4d25a3aa7369ee26f3669dad59cb42336ba3dac90f00f949f9c5bdaff6c445c9876cb9a5b2807a1becbef23166409fb38c67428d4c5297078f808ef64566773f6bc650ba9ad85ff7d80aa00293fe0c6a08170c967ada67e42dadc8f619a4d3a4938abfa302"}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x4010) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x40d8) r12 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_usb_hiface/parameters/id\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r12, &(0x7f00000000c0)=""/17, 0x11) 7m55.624254991s ago: executing program 1 (id=305): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x8}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "f0131353d442c8dc7d25"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0xd1) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x6, 0x16, 0x1001, 0x100000001, 0xc, 0x9, 0x0, 0x1, 0x7ff, 0xd59, 0x101, 0x6, 0x2, 0x80000001]}, 0x0, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto(0x2, r0, &(0x7f0000000240)={@siginfo_0_0={0x7, 0x7f, 0x5, @_sigchld={r3, 0x0, 0x0, 0x3a5, 0x3}}}, 0x7, &(0x7f00000002c0)={{0x5, 0x9}, {0x7ff, 0x5}, 0x2, 0x8, 0x5, 0x4, 0x6, 0x2, 0x8000000000000000, 0x6, 0xac74, 0x401, 0x3, 0x3, 0x7, 0xfffffffffffffffb}) 7m54.995750804s ago: executing program 1 (id=309): madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) r0 = fcntl$auto(0xffffffffffffffff, 0x7, 0x0) mmap$auto(0x3, 0x2000d, 0x4010000000df, 0x10018, r0, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) syz_clone3(&(0x7f0000000200)={0x383281180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 7m54.534505032s ago: executing program 1 (id=311): rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x3a) r1 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) clone$auto(0xffff, 0x1, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x5, 0xd) tkill$auto(0x1, 0x7) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0xa013, &(0x7f0000000100)={&(0x7f0000000280)="f7", 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1}, 0x1}, 0x2, 0x100) epoll_ctl$auto(r0, 0x0, r1, &(0x7f0000000140)={0x8, 0x7}) 7m51.466769498s ago: executing program 1 (id=322): socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040c4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) r0 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r0, 0x6a, 0x8, 0x0, 0x0) 7m51.05071835s ago: executing program 32 (id=322): socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040c4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) r0 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r0, 0x6a, 0x8, 0x0, 0x0) 7m43.357107282s ago: executing program 2 (id=351): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.clone_children\x00', 0xb02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) socket(0xa, 0x2, 0x0) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000024, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000003a40)='/dev/snd/controlC2\x00', 0x82000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000003ac0)={{@raw=0x3, 0xfffffffb, 0x2004, 0x0, "3befbd29ff81d6aafdcddd262a7b03d1088f4e9500", @raw=0x20003}, 0x0, @enumerated=@item_ptr=0x0, "5b36157248e5b64a57458368d9ff8f291df9931c9c81078151dc8d8e171205da2875ee0b30dbc4f3f987e429670b4d48f1ae11afd36a9a58a2e430189bc330f0602cd5079e9f4cb535da741beadbfc9ffeedb3f06789e74674d49055b272d779cdcfc06d787e56d9b237adf712097ef4016bd86ed0c676680b218ebba76e00"}) socket(0x11, 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x5, 0x0) select$auto(0x5, &(0x7f0000001040)={[0xfff, 0x1, 0x9, 0xfffffffffffffffb, 0x998, 0x6, 0x80000006, 0xffffffffffffffff, 0x80000001, 0x4359, 0x3, 0x1a80, 0x60000001000, 0x3, 0x400, 0x8]}, 0x0, 0x0, 0x0) 7m42.857221356s ago: executing program 2 (id=353): r0 = socket(0x10, 0x80002, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24008050) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) ppoll$auto(&(0x7f0000000000)={r0, 0x0, 0x2}, 0x4, &(0x7f0000000140)={0xfffffffffffffbff, 0x9}, &(0x7f0000000180)={0x8}, 0x8) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000001c0)={0x0, 0xc4}, 0xfffff7fffffffffe, 0x0, 0x0, 0x6}, 0x4}, 0x3, 0x0) 7m42.64841039s ago: executing program 2 (id=355): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000001265843a000000000000000000", 0x11) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/features/oneway_spam_detection\x00', 0x48000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x7fff, 0x30d}, {0x7, 0x4}}, 0x0) timer_gettime$auto(0x0, 0x0) mprotect$auto(0x5d, 0x6, 0x9) r2 = socket(0x1, 0x5, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r2) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r1, 0x0, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/dfscache\x00', 0x40080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000280)=""/65, 0x41) r5 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000100), 0x141800, 0x0) close_range$auto(r3, r5, 0x9) ioctl$auto_MON_IOCG_STATS(r3, 0x80089203, 0x0) madvise$auto(0x5, 0x401, 0x80) close_range$auto(0x2, 0x8, 0x0) 7m42.34433146s ago: executing program 2 (id=358): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000038c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x109040, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) open(0x0, 0x22240, 0x155) fcntl$auto(0x3, 0x400, 0x1) link$auto(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)='./file2\x00') lseek$auto(0x3, 0x7fffffffffffffff, 0x1000001) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r1 = socket(0xa, 0x2, 0x73) write$auto_msr_fops_msr(0xffffffffffffffff, 0x0, 0x0) getsockname$auto(r1, 0x0, 0x0) fcntl$auto(0x0, 0x407, 0x100000) mlockall$auto(0x7) 7m40.997168923s ago: executing program 2 (id=365): rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x3a) r1 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) clone$auto(0xffff, 0x1, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x5, 0xd) tkill$auto(0x1, 0x7) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0xa013, &(0x7f0000000100)={&(0x7f0000000280)="f7", 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1}, 0x1}, 0x2, 0x100) epoll_ctl$auto(r0, 0x0, r1, &(0x7f0000000140)={0x8, 0x7}) 7m39.214469944s ago: executing program 2 (id=375): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) (async) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x148, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x5}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x898}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x80000001}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0x9b89}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0xc}, @HWSIM_ATTR_PMSR_SUPPORT={0x10c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x3ff}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_TYPE_CAPA={0xe4, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x3ff}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0xfed9}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x85}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x7}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x4b812a13}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x86}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x6}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x6}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40401}, 0x8000) (async) sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x148, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x5}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x898}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x80000001}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0x9b89}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0xc}, @HWSIM_ATTR_PMSR_SUPPORT={0x10c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x3ff}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_TYPE_CAPA={0xe4, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x3ff}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0xfed9}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x85}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x7}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x4b812a13}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x86}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x6}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x6}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40401}, 0x8000) madvise$auto(0x0, 0x6, 0x8) fsopen$auto(0x0, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x80000000, 0x3532) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) setuid$auto(0xee00) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x840, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x40, 0x0) fcntl$auto(0x3, 0x4, 0xa553) (async) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 7m38.685424941s ago: executing program 33 (id=375): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) (async) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x148, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x5}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x898}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x80000001}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0x9b89}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0xc}, @HWSIM_ATTR_PMSR_SUPPORT={0x10c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x3ff}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_TYPE_CAPA={0xe4, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x3ff}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0xfed9}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x85}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x7}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x4b812a13}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x86}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x6}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x6}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40401}, 0x8000) (async) sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x148, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x5}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x898}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x80000001}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0x9b89}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0xc}, @HWSIM_ATTR_PMSR_SUPPORT={0x10c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x3ff}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_TYPE_CAPA={0xe4, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x3ff}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0xfed9}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x85}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x7}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x4b812a13}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x86}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x6}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x6}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40401}, 0x8000) madvise$auto(0x0, 0x6, 0x8) fsopen$auto(0x0, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x80000000, 0x3532) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) setuid$auto(0xee00) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x840, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x40, 0x0) fcntl$auto(0x3, 0x4, 0xa553) (async) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 5m16.858634437s ago: executing program 0 (id=1025): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x161240, 0x0) ioctl$auto_TIOCSWINSZ2(r0, 0x5414, 0x0) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) setresgid$auto(0x81, 0x800000a0, 0x8) setgroups$auto(0xc00000000, 0xfffffffffffffffc) setresuid$auto(0x0, 0x8, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2a582, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0xa, 0x2, 0x73) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendto$auto(r1, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) shmget$auto(0x14, 0x2, 0xe64) 5m16.631095058s ago: executing program 0 (id=1026): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_aoe_fops_aoechr(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x7, 0x20005, 0x22bb, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0xfdd) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001c00), 0x60000, 0x0) read$auto_tomoyo_self_operations_securityfs_if(r0, &(0x7f0000001c40)=""/105, 0x69) statmount$auto(0x0, 0x0, 0x1fe, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xa, 0x2000000000df, 0x9b72, 0x2, 0x7fff) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) syz_clone3(0x0, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x5) socket(0x840000000002, 0x3, 0x100) r2 = socket(0x2, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0xb, 0x0, 0x9) connect$auto(0x3, &(0x7f00000001c0), 0x55) sendmmsg$auto(r2, 0x0, 0x3, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0x10000) 5m14.973543906s ago: executing program 0 (id=1032): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) ioctl$auto_evdev_fops_evdev(r2, 0x40044591, 0x0) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) set_mempolicy$auto(0x3, &(0x7f0000000b40)=0x1, 0x10000) r3 = memfd_create$auto(&(0x7f00000008c0)='/sys/kernel/debug/x86/boot_params/data\x00', 0x0) write$auto_kmsg_fops_printk(r1, &(0x7f0000000900)="58d975", 0x3) finit_module$auto(r3, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 5m14.450889803s ago: executing program 0 (id=1036): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) msync$auto(0x200001ffff000, 0x80100000000005, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200008000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) remap_file_pages$auto(0x6a27, 0x2001000, 0x0, 0xdc, 0x100000) (async) mmap$auto(0x0, 0x400006, 0xdf, 0x40000000009b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40603d07, 0x0) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x20000001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x11, 0x3, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x8, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) sysfs$auto(0x2, 0x4, 0x4) mincore$auto(0x1000, 0x8001, 0x0) io_uring_setup$auto(0x2, 0x0) (async) socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x4, 0x4) (async) mincore$auto(0x1000, 0x8001, 0x0) (async) io_uring_setup$auto(0x877, 0x0) 5m12.877828091s ago: executing program 0 (id=1043): r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x12800, 0x0) mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, r0, 0x4000008000) socket(0x2, 0x2, 0x1) (async) recvmmsg$auto(0x3, 0x0, 0x8, 0x0, 0x0) (async) prctl$auto(0x1000000003b, 0x1, 0x3, 0x3, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) adjtimex$auto(0x0) 5m11.849612437s ago: executing program 0 (id=1047): ioperm$auto(0x7, 0x6, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x161342, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setns(0xffffffffffffffff, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, r1, 0x1, 0x70bd27, 0x25dfdc03, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x80000) r4 = socket(0xa, 0x2, 0x73) getsockname$auto(r4, 0x0, &(0x7f0000000280)=0xaea) fcntl$auto(0x0, 0x407, 0x100000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) memfd_create$auto(&(0x7f0000000140)='A\x00\x00\x00\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb0\x15\x03\xa4\t\xb5\xe2\x83\x9c\xbf\xad\xe6\r \xcf\xe8\x03\x00\x00\x00\x00\x00\x00\x00\x8d\xea\xdb}\x9dY\x90?\x9e\x9b\xa26\x95\xc6\xa5\x8f\vu\x82<\x01NO\x9c\x16\xfd+R\t\x93\xf7\xf85\xfb\x04D8\xa4\\\x13\x93\x87O\xa1Q\xc7\xb4\x82\xe8v\xdd\t\x7f\xfd\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xb) rseq$auto(0x0, 0x8000, 0x0, 0x6) r5 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x404241, 0x0) r6 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r6, 0x0) mmap$auto(0x8, 0x100000000000004, 0x4000000000e6, 0x40eb1, r5, 0x300000000000) landlock_create_ruleset$auto(0x0, 0x9, 0x0) socket(0x1, 0x1, 0x1) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x94600, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) 4m56.643828011s ago: executing program 34 (id=1047): ioperm$auto(0x7, 0x6, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x161342, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setns(0xffffffffffffffff, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, r1, 0x1, 0x70bd27, 0x25dfdc03, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x80000) r4 = socket(0xa, 0x2, 0x73) getsockname$auto(r4, 0x0, &(0x7f0000000280)=0xaea) fcntl$auto(0x0, 0x407, 0x100000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) memfd_create$auto(&(0x7f0000000140)='A\x00\x00\x00\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb0\x15\x03\xa4\t\xb5\xe2\x83\x9c\xbf\xad\xe6\r \xcf\xe8\x03\x00\x00\x00\x00\x00\x00\x00\x8d\xea\xdb}\x9dY\x90?\x9e\x9b\xa26\x95\xc6\xa5\x8f\vu\x82<\x01NO\x9c\x16\xfd+R\t\x93\xf7\xf85\xfb\x04D8\xa4\\\x13\x93\x87O\xa1Q\xc7\xb4\x82\xe8v\xdd\t\x7f\xfd\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xb) rseq$auto(0x0, 0x8000, 0x0, 0x6) r5 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x404241, 0x0) r6 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r6, 0x0) mmap$auto(0x8, 0x100000000000004, 0x4000000000e6, 0x40eb1, r5, 0x300000000000) landlock_create_ruleset$auto(0x0, 0x9, 0x0) socket(0x1, 0x1, 0x1) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x94600, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) 3m57.258722119s ago: executing program 4 (id=1238): r0 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_TXSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r0, 0xf08, 0x70bd2b, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x20000800) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x161342, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="13000300", @ANYRES16=0x0, @ANYBLOB="0100"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x40) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) r2 = socket(0x10, 0x2, 0xc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x800000000000000, 0x1}, 0x4000000) 3m55.59554412s ago: executing program 4 (id=1240): socket(0x29, 0x2, 0x0) (async) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) (async, rerun: 32) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/kernel/shm_next_id\x00', 0x0, 0x0) (async, rerun: 32) ioctl$auto(0x3, 0x89e2, 0x91) 3m54.905741794s ago: executing program 4 (id=1242): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, 0x0, 0x5, 0x20000000) socket(0x18, 0x5, 0x2) ptrace$auto(0x4206, 0x0, 0x0, 0x5) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x141002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101000, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x0) bind$auto(0x3, 0x0, 0x6b) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x25, 0x2, 0xfffffffd) close_range$auto(0x2, 0x8, 0x0) 3m48.680327241s ago: executing program 4 (id=1247): bind$auto(0x3, 0x0, 0x6a) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x52ed7693, 0x0, 0x4) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x1010001, 0x100000003) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) mprotect$auto(0x2, 0x7fffffffffffffff, 0x2000000040) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/setgroups\x00', 0x2, 0x0) mmap$auto(0x0, 0x5, 0x4000000400df, 0xeb1, 0x401, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x80044943, 0x0) read$auto(0x3, 0x0, 0xf34) socket(0xa, 0x801, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4, 0x4) mincore$auto(0x1000, 0x8001, 0x0) r1 = io_uring_setup$auto(0x877, 0x0) setns(r1, 0x2000000) io_uring_enter$auto(r1, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 3m43.712767664s ago: executing program 4 (id=1255): mlockall$auto(0x7) socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000f45b7599651f4dd40f9dc5e2d5a7bac52bf33b06bb28a06d245598310bc6c470a8b41887677bc140fafd7b21fe5b326f3e1ca0bb44de04fb3ddb7255daa2eb01da1f1ec43dd7", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf250100000008000a00080000000500070058000000080009009c781e01060002000500000006001a0000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x7, 0x0, 0x6, 0x0, 0x4}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0xb1) r5 = socket(0x11, 0x3, 0x9) r6 = syz_clone(0x21242011, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r6, 0x1002, 0x0, 0x0, 0x0, 0x2) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r7, 0x5001, 0x7) ioperm$auto(0x7, 0x6, 0xffffffffffff4064) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) copy_file_range$auto(r5, &(0x7f0000000100), r7, &(0x7f00000001c0)=0x5, 0x7, 0xf) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x8800, 0x0) mmap$auto(0x0, 0x8, 0x6, 0x9b72, 0x2, 0x8000) readv$auto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x9}, 0x8bb) open(0x0, 0xca240, 0x17e) unshare$auto(0x40000080) ioctl$auto(r3, 0x8942, 0x2) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) 3m39.423967246s ago: executing program 4 (id=1261): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x40, 0x7ffffffd, 0x7, 0x2000000007296, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x7f) (async) close_range$auto(0xffffffffffffffff, 0x8, 0x7f) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/apparmor/parameters/lock_policy\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/125, 0x7d) r1 = socketpair$auto(0x1c, 0x1, 0x0, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x8000000005, 0x80040001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xf7ffffffffffff92, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x7, 0x2, 0xfffffffffffffff8}) bind$auto(r1, &(0x7f00000010c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x6a) r3 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/o2hb/livenodes\x00', 0x0, 0x0) read$auto_o2hb_debug_fops_heartbeat(r3, &(0x7f0000000040)=""/4096, 0x1000) (async) read$auto_o2hb_debug_fops_heartbeat(r3, &(0x7f0000000040)=""/4096, 0x1000) r4 = socket(0xa, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008) (async) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyv1\x00', 0x0, 0x0) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyv1\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r5, 0x8924, 0x0) (async) ioctl$auto_TCFLSH2(r5, 0x8924, 0x0) close_range$auto(0x2, r4, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) io_uring_setup$auto(0x9cb, 0x0) (async) io_uring_setup$auto(0x9cb, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xc040aed4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x80000000eb1, 0xffffffffffffffff, 0x4) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x4000050) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) socket(0xe3e8724293b93e6b, 0xa, 0x73) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)=ANY=[@ANYRESOCT=r5, @ANYBLOB="7d0fc33f64090ee574f6e3c80e4cf29d5a5380ff620783b237a8031aa5220e62f4aad06506acba30d587efd425383d174e26b1a1b0264a45e996aa9fa9c35ced618c6632d57e5a46591474bb7b97f773d71c42944d47fb93a5d17c0e0841b180bcf086e197aa3aa9799b7037c4dab7175d6623ee625c89c30dfbd67cdde85e8819057b00ff803f", @ANYRES16=r2, @ANYRES32=r6], 0x18}, 0x1, 0x0, 0x0, 0x4000840}, 0x24040811) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)=ANY=[@ANYRESOCT=r5, @ANYBLOB="7d0fc33f64090ee574f6e3c80e4cf29d5a5380ff620783b237a8031aa5220e62f4aad06506acba30d587efd425383d174e26b1a1b0264a45e996aa9fa9c35ced618c6632d57e5a46591474bb7b97f773d71c42944d47fb93a5d17c0e0841b180bcf086e197aa3aa9799b7037c4dab7175d6623ee625c89c30dfbd67cdde85e8819057b00ff803f", @ANYRES16=r2, @ANYRES32=r6], 0x18}, 0x1, 0x0, 0x0, 0x4000840}, 0x24040811) 3m24.333728885s ago: executing program 35 (id=1261): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x40, 0x7ffffffd, 0x7, 0x2000000007296, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x7f) (async) close_range$auto(0xffffffffffffffff, 0x8, 0x7f) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/apparmor/parameters/lock_policy\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/125, 0x7d) r1 = socketpair$auto(0x1c, 0x1, 0x0, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x8000000005, 0x80040001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xf7ffffffffffff92, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x7, 0x2, 0xfffffffffffffff8}) bind$auto(r1, &(0x7f00000010c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x6a) r3 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/o2hb/livenodes\x00', 0x0, 0x0) read$auto_o2hb_debug_fops_heartbeat(r3, &(0x7f0000000040)=""/4096, 0x1000) (async) read$auto_o2hb_debug_fops_heartbeat(r3, &(0x7f0000000040)=""/4096, 0x1000) r4 = socket(0xa, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008) (async) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyv1\x00', 0x0, 0x0) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyv1\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r5, 0x8924, 0x0) (async) ioctl$auto_TCFLSH2(r5, 0x8924, 0x0) close_range$auto(0x2, r4, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) io_uring_setup$auto(0x9cb, 0x0) (async) io_uring_setup$auto(0x9cb, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xc040aed4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x80000000eb1, 0xffffffffffffffff, 0x4) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x4000050) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) socket(0xe3e8724293b93e6b, 0xa, 0x73) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)=ANY=[@ANYRESOCT=r5, @ANYBLOB="7d0fc33f64090ee574f6e3c80e4cf29d5a5380ff620783b237a8031aa5220e62f4aad06506acba30d587efd425383d174e26b1a1b0264a45e996aa9fa9c35ced618c6632d57e5a46591474bb7b97f773d71c42944d47fb93a5d17c0e0841b180bcf086e197aa3aa9799b7037c4dab7175d6623ee625c89c30dfbd67cdde85e8819057b00ff803f", @ANYRES16=r2, @ANYRES32=r6], 0x18}, 0x1, 0x0, 0x0, 0x4000840}, 0x24040811) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)=ANY=[@ANYRESOCT=r5, @ANYBLOB="7d0fc33f64090ee574f6e3c80e4cf29d5a5380ff620783b237a8031aa5220e62f4aad06506acba30d587efd425383d174e26b1a1b0264a45e996aa9fa9c35ced618c6632d57e5a46591474bb7b97f773d71c42944d47fb93a5d17c0e0841b180bcf086e197aa3aa9799b7037c4dab7175d6623ee625c89c30dfbd67cdde85e8819057b00ff803f", @ANYRES16=r2, @ANYRES32=r6], 0x18}, 0x1, 0x0, 0x0, 0x4000840}, 0x24040811) 3m2.185542002s ago: executing program 6 (id=1303): close_range$auto(0x2, 0x8, 0x0) socket(0x1f, 0x80000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x282, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) sendmsg$auto_NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x4000001) r2 = getpgid(0x0) pidfd_open$auto(r2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x3000000000000f3, 0x9, 0x7, 0x6d3c, 0x5, 0x31]}, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000380), r0) r4 = setfsuid$auto(0xee01) fchown$auto(0xffffffffffffffff, r4, 0x0) lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xb2, 0x0, 0x101, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x9, 0x80, 0xbd, 0xc40, 0x4, 0xcd75, 0x3, 0x5723}) lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x8, 0x8, 0x7fff, 0xfda4, r4, r5, 0x0, 0x2, 0x0, 0x400, 0x8, 0x4, 0xfffffffffffffff7, 0x0, 0x4, 0x0, 0x2}) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x45b0, r3, 0x602, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x0, 0x11, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x9}, @NL802154_ATTR_ACKREQ_DEFAULT={0xfffffffffffffed0, 0x1a, 0xa7}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xff}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x6}, @NL802154_ATTR_COORDINATOR={0x4558}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}]}, 0x45b0}}, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0xfff, 0xff00) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) select$auto(0xa3, 0x0, &(0x7f00000000c0)={[0x1, 0x7, 0x3, 0x1, 0xa, 0x2, 0x3, 0x4, 0x6, 0x7fffffff, 0x5, 0x10000, 0x0, 0x2, 0x9e, 0x6]}, 0x0, 0x0) r6 = openat$auto_fops_blob_file(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_fops_blob_file(r6, &(0x7f0000000200)=""/136, 0x88) 3m0.224620418s ago: executing program 7 (id=1273): close_range$auto(0x0, 0x5, 0x0) (async) r0 = socket(0x2, 0x801, 0x84) (async) clock_nanosleep$auto(0x6, 0xe, &(0x7f00000003c0)={0x8fd, 0x1}, &(0x7f0000000400)={0x0, 0x7}) (async) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) userfaultfd$auto(0x1) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r1 = socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x3, 0x73) (async) socket(0xb, 0x1, 0x5) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x84) (async) socket(0x2, 0x2, 0x106) (async) io_uring_setup$auto(0x6, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) (async) r2 = socket(0xa, 0x2, 0x88) (async) socket(0x1d, 0x2, 0x2) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) connect$auto(0x3, 0x0, 0x55) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) write$auto(0x3, 0x0, 0x5c8) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=r1, 0x4, @old_prog_fd=r2}, 0xa3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/queue/zone_write_granularity\x00', 0x800, 0x0) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000380), r0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) (async) sysfs$auto(0x2, 0x4, 0x4) (async) mincore$auto(0x1000, 0x8001, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) 2m59.93462621s ago: executing program 6 (id=1306): r0 = socket(0x15, 0x5, 0x0) r1 = wait4$auto(0x0, &(0x7f0000000140)=0xfc8, 0x4, &(0x7f00000001c0)={{0x17}, {0xb155, 0x1}, 0x7f, 0x9, 0x3, 0x47ba9705, 0x101, 0x4, 0xbaec, 0x93b, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x6}) move_pages$auto(r1, 0x1ff, &(0x7f00000006c0)=&(0x7f0000000680)="fbd88fcc94b6566cf8b19721825d307504e2d37c1f6ae13c3335a99969047d416afe1d9f2a6ecd541946aab0b60eb870", &(0x7f0000000700)=0x3, &(0x7f0000000740)=0x4, 0x1) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x28c, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0x6d, 0x129, "d6c05dafda115cee60bd94910a70669918a005d99c1dcbb1ebe48e361620b173e6125551f7477896c7077b4d981617a998821239fed2785c175b627afe1a54e76d5b31dc5bdd82f2a604efabdf507b0b67fce4a27e02459f7da99a093da6e50e6f3f946647fa023302"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0xfffb}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEY={0x1ec, 0x50, 0x0, 0x1, [@typed={0x8, 0xc5, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x10a, 0xe3, 0x0, 0x1, [@generic="bb1b3c88936696d1a1825a56a5be765be02663c8eccc01b80259dfa8636755164789151654735d7f9c5a80d3822afbfac4041f99ec4cb5fe146e8d54318732fec22e14d7089a2d7650ff9eeb467e34e8999b71f4392b971dce29a423d70c5db284d071b5", @generic="34fd81ef1e115ae3e2f6581dd877e4e46b7b531326e6b7fc4d945973c765f74a46a7c18df612ec1ebbcf8841ca2fb1c7e8b92583674d24cdd3f3d2565ed105dad6a09bf6bfabd07cae1dfcd6e626333ee27763dec943fe998ab14cb9c4d8963c4eb5419cbd15c63a7b9d6fddd631aa1cd4ea4619cc6c60c143219869df1cda471f6bea2959fca3ebc3cf914a617241bb05d6bd3c657ee9b73f7b7cc242f1a66ea6ae"]}, @typed={0xcc, 0x111, 0x0, 0x0, @str='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14'}, @typed={0x8, 0xec, 0x0, 0x0, @u32=0x9}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}]}, 0x28c}, 0x1, 0x0, 0x0, 0x40410}, 0x4801) ioperm$auto(0x7fb, 0x1, 0x4000007) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000280)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0xc, 0x9}, 0x283) 2m59.330555142s ago: executing program 6 (id=1308): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) (rerun: 32) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000300)={"5adef7dee7f7018957844cff29ed32b5e06502a30816a7b0342aecf5f00ba22f9f22c23d86776e7d6063852dc51b297d7b2b2c3f6165dd465564daa9a2cca3b9b9c39d9bbb61b295c05520b6fe0b8472ba8186c035fd2688b67c36b68ceca32e2224537de625d65efabc41094dbaf17f9de8de04b004d05ab550d26bfed7346e", "6a1bad4244cddabc5ab8d84a2115e0e70d0facb940aa64b6d9eaff2acebd7c5dcfe4787051ec26364b7ae8d7baeeb9e4889b7d58e1d448845d4af2ae37e050ae070000000000000052e042e71a82d23e1948a0361be893b768934ff405d41b80790ac47f793c6e9bf2a139c3504753c3fc1f121a0e28e4b321ca105318fe4dea", 0x1}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) madvise$auto(0x0, 0x10001, 0x100000003) (rerun: 64) r1 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r2, &(0x7f0000008d40)='($}-)#@\x00', 0x40) (async) socket(0x15, 0x5, 0x0) (async) r3 = socket(0x2, 0x1, 0x106) move_mount$auto(r1, 0x0, r1, 0x0, 0x277) (async) setsockopt$auto(r3, 0x101, 0x1, &(0x7f0000000000)='#\x12+#\x00-\x00', 0xffff6e15) 2m59.085752484s ago: executing program 7 (id=1309): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = gettid() process_vm_writev$auto(r1, 0x0, 0x3, 0x0, 0x4, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x40400, 0x2, 0x24}, 0x18) fanotify_mark$auto(r0, 0x194b, 0x0, r2, &(0x7f00000000c0)='./file0\x00') tkill$auto(r1, 0x8) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x401, 0x100) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0x4008af03, 0x0) clone$auto(0x1ff00, 0x0, &(0x7f0000002040)=0x7, 0x0, 0x10000000000000a) 2m57.873686071s ago: executing program 6 (id=1312): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) arch_prctl$auto(0x2001, 0x2) socket(0x22, 0x2, 0x24) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x40, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) ioctl$auto_SNDCTL_DSP_SETSYNCRO(r0, 0x5015, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x189000, 0x0) socket(0x1e, 0x5, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) mmap$auto(0x3, 0x400008, 0xdf, 0x1000000000009b72, 0xffffffffffffffff, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) ftruncate$auto(0x1ff, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) shmat$auto(0x0, 0x0, 0x873) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x4, 0x28000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000000)={{0x0, 0x400, &(0x7f0000000040)={0x0, 0x404}, 0xf7, 0x0, 0x402a, 0x8}, 0x40006}, 0xfffffff9, 0x10, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) 2m56.42192983s ago: executing program 6 (id=1316): close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tkill$auto(0x80000000000001, 0x7) semctl$auto(0x9, 0x70d, 0x2, 0x6) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, &(0x7f0000000140), 0x55) 2m55.687517046s ago: executing program 6 (id=1317): sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x0, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x8, 0xc, 0x62) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) prctl$auto(0x2f, 0x1000000, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x20002, "0600000000000000"}, 0x2) getuid() shmctl$auto(0xc, 0xffffffff, 0x0) socket(0x840000000002, 0x3, 0xff) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x80011, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 2m54.899037082s ago: executing program 36 (id=1317): sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x0, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x8, 0xc, 0x62) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) prctl$auto(0x2f, 0x1000000, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x20002, "0600000000000000"}, 0x2) getuid() shmctl$auto(0xc, 0xffffffff, 0x0) socket(0x840000000002, 0x3, 0xff) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x80011, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 2m54.881469539s ago: executing program 7 (id=1319): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x13, r1, 0x25, 0x70bd25, 0x25dfdbfe, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000e6000400110008002e00", @ANYRES16, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4100f7b4a8132d759892f424887b55fbcf38553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43341a1e670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100045800c00c50003000000000000001800368014006c800800150002020000050018005d0000000000d0cb580b273180"], 0xfc}, 0x1, 0x0, 0x0, 0x4044800}, 0x50) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x20342, 0x0) unshare$auto(0x40000080) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_submit$auto(0x4, 0xe5, &(0x7f0000000100)=&(0x7f00000000c0)={0x100000000, 0x7, 0x3, 0x1ff, 0xfdfd, r4, 0x601d2dc9, 0x3, 0x0, 0x0, 0x7, r4}) r6 = getpid() sysfs$auto(0x2, 0x4, 0x4) sysfs$auto(0x2eef, 0x2c, 0x7) mincore$auto(0x1000, 0x8001, 0x0) r7 = io_uring_setup$auto(0x877, 0x0) io_uring_enter$auto(r7, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) process_vm_readv$auto(r6, &(0x7f0000000040)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xf}, 0x6, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0x9) socket$nl_generic(0x10, 0x3, 0x10) 2m39.498126024s ago: executing program 37 (id=1319): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x13, r1, 0x25, 0x70bd25, 0x25dfdbfe, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000e6000400110008002e00", @ANYRES16, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4100f7b4a8132d759892f424887b55fbcf38553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43341a1e670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100045800c00c50003000000000000001800368014006c800800150002020000050018005d0000000000d0cb580b273180"], 0xfc}, 0x1, 0x0, 0x0, 0x4044800}, 0x50) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x20342, 0x0) unshare$auto(0x40000080) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_submit$auto(0x4, 0xe5, &(0x7f0000000100)=&(0x7f00000000c0)={0x100000000, 0x7, 0x3, 0x1ff, 0xfdfd, r4, 0x601d2dc9, 0x3, 0x0, 0x0, 0x7, r4}) r6 = getpid() sysfs$auto(0x2, 0x4, 0x4) sysfs$auto(0x2eef, 0x2c, 0x7) mincore$auto(0x1000, 0x8001, 0x0) r7 = io_uring_setup$auto(0x877, 0x0) io_uring_enter$auto(r7, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) process_vm_readv$auto(r6, &(0x7f0000000040)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xf}, 0x6, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0x9) socket$nl_generic(0x10, 0x3, 0x10) 30.058307851s ago: executing program 3 (id=1541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40815}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000004d51724fcaca0e2147d57bed0af2a8ca42f34b53c311e5814a07f89c7a1270d62e68f564037f4b19813c74e9f258a3c4e65929fcda55449897baa7751c6b38a823c7b2f2a02d29d3b342e9491a6c24d9817f826faad5ac85ac2bfe1b0579e6a5b3e871c9696afcd1ffed484162b3d6d1cad1eb9d040000007b1fc7f0e00e76b8a4f6e6f9bf86775ece75b273fc7393fee8fa363ea468c58d51d1e2803cbc040325d78a223ec10e82f9e7dbbfbbd471d02b1914e7c537cb9948f762fd3bba442238248cf00afa7d860689492c982ffa80317eaae53253253219e1e0d879ac8e96830300"/245, @ANYRES16=r5, @ANYBLOB="010027bd7000fedbdf250d00000008000100", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="18030000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="080004005293000008000100", @ANYRES32=r3, @ANYBLOB="080004007f0000000800040085439c7b08000100", @ANYRES32=r6, @ANYBLOB], 0x318}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x2, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb1, 0x401, 0x8000) r7 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r7, 0x6b, 0x4, 0xfffffffffffffffe, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2$auto(0x0, 0x80) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = socket(0x2b, 0x1, 0x1) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x51, 0x0, &(0x7f00000000c0)={0x400000000000005, 0x2000006}) r9 = epoll_create$auto(0x3e) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000000), r8) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/rcutree/parameters/qovld\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r10, &(0x7f0000001c00)=""/4111, 0x100f) epoll_ctl$auto(r9, 0x1, 0x8000000000000000, 0x0) 28.246462149s ago: executing program 3 (id=1544): io_setup$auto(0x80000000, &(0x7f00000000c0)) mmap$auto(0xffffffffffffffff, 0xfffffffffffff7fc, 0x5, 0x15, 0xffffffffffffffff, 0x1fe) r0 = inotify_init1$auto(0x1) mmap$auto(0x2000000, 0x1000, 0x4209000000dc, 0x4000000000040eb2, r0, 0x300040000003) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r3) mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, r1, 0x8001) r4 = socket(0x2, 0x1, 0x4) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) readv$auto(r0, &(0x7f0000000300)={0x0, 0x200000000001000}, 0x4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="e54aa1f2c5bd1a3755704bd08ee29fb76b7475dd10916979b1a83205e49890bcbae32adae4555a23a6041459744de71a3e577370c46e67c2308d039616c9e63600"/79, @ANYRES16=r2, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x200480c0) r5 = socket(0x33, 0x801, 0x2) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x84) close_range$auto(0x2, 0x8, 0x0) socket(0x1, 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r6 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$auto(0x3, 0x40104d07, r6) fcntl$auto(0x4, 0xdfff8001, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r5) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x64040001}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400c0}, 0x4004002) socket(0x22, 0x80000, 0x0) 27.072410661s ago: executing program 3 (id=1545): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xf000, 0x9, 0x1000000003, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0x1000000002, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x1, 0x1000000002, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0xab09, 0x0) (async) ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0xab09, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0xa, 0x1) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(r0, 0x0, 0x9a6, 0xe000) sendmmsg$auto(0x3, 0x0, 0x2, 0x9) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) timer_create$auto(0x9, 0x0, 0x0) (async) timer_create$auto(0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x0, 0x0) socket(0x2, 0x5, 0x0) (async) r1 = socket(0x2, 0x5, 0x0) r2 = getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r3, &(0x7f0000000080)=""/45, 0x2d) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x80180, 0x0) r4 = socket(0xa, 0x1, 0x84) close_range$auto(r4, r2, 0x0) 25.777842065s ago: executing program 3 (id=1547): socket(0xa, 0x5, 0x0) open(0x0, 0x22240, 0x154) unshare$auto(0x40000080) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0xa41c2, 0x84) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fanotify_init$auto(0x7, 0x3) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) 24.013917429s ago: executing program 3 (id=1550): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82082, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r0, 0x0, 0x1) r1 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xac01, 0x0) mmap$auto(0x6, 0x1, 0x20004000000020df, 0xeb1, r1, 0x8000) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcc, 0x8) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) socket(0xf, 0x80000, 0x9) (async) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r2, &(0x7f0000000200)='\x00', 0x0, &(0x7f0000000100)=&(0x7f00000000c0)='\\\x00', 0x1000) 22.499975604s ago: executing program 3 (id=1555): madvise$auto(0x0, 0xffffffffffff0001, 0x14) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) read$auto(r1, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xfdef) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000080)="3acedbe30aa1dd0cf91cb526a4df8fd074971bb72629f26b0f80eace3f029808faf8efc950ddafb4e9e23283400c063a58f3acd7e88d334c32", 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x200000000000011, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) sendfile$auto(0x6, 0x3, 0x0, 0xc01) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x20000040eb1, 0xffffffffffffffff, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b76, 0x2, 0x7) chown$auto(0x0, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) io_uring_setup$auto(0x6, 0x0) socket(0x16, 0x2, 0xffffffff) 16.647351989s ago: executing program 9 (id=1560): r0 = gettid() rt_sigqueueinfo$auto(r0, 0xe, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0}}}) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x42, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_mcast\x00', 0x101000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8000005, 0x185, 0xeb1, r2, 0xd) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(0x800000000000c8, 0x0, 0x1a) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x10000, 0xde, 0x11, r3, 0x28000) read$auto(0x3, 0x0, 0x80) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4048090}, 0x4000) symlink$auto(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00') mmap$auto(0x28, 0x1, 0xb, 0xfff7, 0xffffffffffffffff, 0x8001) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x39b8) close_range$auto(0x2, r3, 0x2) socket(0x2b, 0x1, 0x1) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) open(&(0x7f0000000040)='./file0\x00', 0x8400, 0xc8) write$auto_mousedev_fops_mousedev(r1, &(0x7f00000000c0)="00642fdb37b35fba2154e23bd03ab19f268db768651c4f6fc2979b5b97b0b4e938b90361c4c96b3d7d39e13016bcf4184d3e9a5322bf3303f7132a884c34471862710a60b49d05f5ca975c37392301b0bc95be145959cd9b119f56e51e5ecc965d", 0xfd55) 14.823414093s ago: executing program 8 (id=1564): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000001c0)=""/191, 0x1f8) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/194, 0xc2) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) socket(0x2, 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0xb42, 0x0) socket(0x840000000002, 0x3, 0xff) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x20400, 0x0) mmap$auto(0x3, 0x4020009, 0xdb, 0x10, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) r3 = io_uring_setup$auto(0x6, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x6, &(0x7f0000000140)={0x0, 0xd6c6}, 0x0, 0x0, 0x5, 0xffffffff}, 0x620}, 0xfff, 0xfff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r2, 0x4018620d, 0x9) r4 = socket(0xa, 0x1, 0x84) kexec_load$auto(0x2, 0x8, &(0x7f0000000000)={@kbuf=&(0x7f0000000240)="88d9c42cd4b7b4e089cde7808195b89e4159a3af27c8364b4e4da8c11bff6a1a0b7df0ae0fa745cb6440c3ede6e007d084bc2d3eff1784adc3c2efe77bb4a8f0efe0704f43bda97fd83f3da1058e042e5cb88ce1f6a1fb08a11fbe4bfb2ea89c100d1030e5c1cdc6d81d794c71dda37fbd87793fa0a967e4ce88bd6909bd9a238952eb70c3c161b6ecd97e59528b", 0x8, 0x100000000}, 0x9) semctl$auto(0x201, 0xfffffff2, 0x3, 0x0) clock_adjtime$auto(0x3f, &(0x7f0000000000)={0x7, 0x8, 0x4, 0x8, 0x7fffffff, 0x6, 0x6, 0x5, 0x3, 0x0, 0xb6, {}, 0x1000, 0x7, 0xb, 0x5, 0x2000006, 0x101, 0x7fff, 0x3}) setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0x8) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000180)={0x80d, 0x275, [{r1, 0x0, 0x9, 0x9}, {r4, 0x0, 0x9, 0x1}]}) bind$auto(0x3, &(0x7f0000000080), 0x6b) listen$auto(0x3, 0x81) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x5, 0xaab, 0x5, 0x7]}, 0x0, 0x0) userfaultfd$auto(0x1) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x8}, 0x80, 0x400400) close_range$auto(0x2, 0x8000, 0x0) 14.822917726s ago: executing program 5 (id=1565): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01d40bd2f82f8940aace3729bb36d0367df9021e08000000000000006b80f7f97000fedbdf250a000000080003000000000008", @ANYRES32=r2, @ANYBLOB="0800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(&(0x7f0000000100)=0x24, 0xc, 0x1, 0x0, &(0x7f0000000180)=0x5, 0x24) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r3 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000140), 0x1a3000, 0x0) ioctl$auto_dvb_frontend_fops_dvb_frontend(r3, 0x40000000, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/smc/autocorking_size\x00', 0xa0002, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fffe000) (async) getdents$auto(0x0, 0x0, 0x18) syz_open_procfs$namespace(0x0, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x2000c081}, 0x2404c802) 13.561401016s ago: executing program 9 (id=1566): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0xc0000, 0x0) r0 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r0, 0x0, 0x0) 13.176701461s ago: executing program 9 (id=1567): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) madvise$auto(0x0, 0x3, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6227, 0x1000, 0x0, 0x100000000, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x3, 0x67) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x2) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000022c0)='ns/time_for_children\x00') r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000002040)=""/4090, 0xffa) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 13.034813752s ago: executing program 8 (id=1568): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) read$auto_proc_pid_numa_maps_operations_internal(r0, &(0x7f0000000000)=""/110, 0x6e) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setpriority$auto(0x4000000001, 0x100000001, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xfffffffffffffffc, 0x5, 0x1, 0x7, 0x0, 0x7, 0x1, 0x4, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0xf63, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0xfffffffffffffff9, 0x80, 0x8]}, 0x0, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200)) socket(0x15, 0x6, 0x80) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) setregid$auto(0x5, 0x6) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r1, 0x5404, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0xa, 0x3, 0x3a) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="17000000", @ANYBLOB='U'], 0x1ac}, 0x1, 0x0, 0x0, 0x663e94553c5db1d5}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x6, &(0x7f0000000100)={0x0, 0x1}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x5, 0x4000a98) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) process_mrelease$auto(0x4, 0x0) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x7, 0xfffff000) ppoll$auto(&(0x7f0000000380)={0xffffffffffffffff, 0x6, 0x9}, 0x9, &(0x7f0000000340)={0x8010000000000001, 0x8001}, &(0x7f0000000300)={0x5e}, 0x8) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r4, 0x1002, 0x0, 0x0, 0x0, 0x2) 12.309588746s ago: executing program 5 (id=1569): r0 = socket(0x1d, 0x4, 0x20000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) io_uring_setup$auto(0x40005, 0x0) madvise$auto(0x108000, 0x800034, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00'}) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x69) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x62, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x1, 0x5, 0x200) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x303400, 0x0) sendmsg$auto_IPVS_CMD_GET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x69c041c0}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x711, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x91) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0x1) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x1, 0x9, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) bind$auto(0x3, &(0x7f0000000140), 0x6c) socket(0x15, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, 0x0, 0x4000000) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x12200, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pts/ptmx\x00', 0x4d8402, 0x0) 8.817833425s ago: executing program 8 (id=1570): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x3, 0x8000009) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000804}, 0x400c000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) read$auto(0xc8, 0x0, 0x200) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r0, 0x80045400, 0x0) 8.364408196s ago: executing program 9 (id=1571): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SAR_SPEC={0xd8, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0xd4, 0x2, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffff0f35}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5e}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x788000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xd8000000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7fffffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x145}]}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000005}, 0x4) mmap$auto(0x0, 0x508a, 0x1000, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0xc0000, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r1, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/ip6gre0/ignore_routes_with_linkdown\x00', 0x202, 0x0) sendfile$auto(r3, r2, 0x0, 0x401) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r4 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r4, 0x0, 0x0) 8.211707315s ago: executing program 5 (id=1572): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x0, 0x6, 0x8000000000000000, 0x0) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r1, &(0x7f0000000c40)='ethtool\x00', 0x5) close_range$auto(0x2, 0x8, 0x0) r2 = open(0x0, 0x22240, 0x155) r3 = socket(0x2, 0x1, 0x106) r4 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000100), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x28, 0x0, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @uid}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c011}, 0xc800) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040c04}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x2d61}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0xa}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) r5 = socket(0xa, 0x1, 0x84) mmap$auto(0x4, 0x4020009, 0xdf, 0x11, 0x401, 0x8000) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e24, @multicast2}, 0x67) r6 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000280), r5) sendmsg$auto_NFC_CMD_SE_IO(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x91a1200}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="48200000b01aac399782175fac230200000000000000a4a9754ac2a7eb6a43c8a803a6429fd6d0a93386ce0a214c9b5dbf0c1b71c263dac5", @ANYRES16=r6, @ANYBLOB="00022bbd7000fddbdf251b000000120014002f6465762f656372797074667300000008000e000104000008000e000600000008000100030000000600110004000000"], 0x48}, 0x1, 0x0, 0x0, 0x33d6d6ba1cb02d11}, 0x4c051) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0xa}}, 0x54) getsockopt$auto(r5, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(r3, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) connect$auto(0x3, &(0x7f0000000140), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) 7.590600256s ago: executing program 9 (id=1573): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x202841, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4, 0x4) mincore$auto(0x1000, 0x8001, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x618040, 0x0) r0 = io_uring_setup$auto(0x2, 0x0) rename$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') io_uring_enter$auto(r0, 0x1, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) 6.97880458s ago: executing program 9 (id=1574): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) connect$auto(0x3, &(0x7f00000000c0)=@can, 0x57) recvfrom$auto(0xffffffffffffffff, 0x0, 0x9e, 0x100, 0x0, 0xfffffffffffffffd) r0 = fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$auto(r0, 0xf, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0x9f, 0x9b72, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) gettid() sendfile$auto(0x6, 0xffffffffffffffff, 0x0, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0xb1d8, 0x3, 0xeb1, r2, 0x8000) mmap$auto(0x0, 0x810004, 0x9b6, 0x8000000008011, 0x20000000000003, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x161240, 0x0) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, 0x0) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) setresgid$auto(0x81, 0x800000a0, 0x8) setgroups$auto(0xc00000000, 0xfffffffffffffffc) setresuid$auto(0x0, 0x8, 0x8000) 6.847909966s ago: executing program 38 (id=1555): madvise$auto(0x0, 0xffffffffffff0001, 0x14) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) read$auto(r1, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xfdef) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000080)="3acedbe30aa1dd0cf91cb526a4df8fd074971bb72629f26b0f80eace3f029808faf8efc950ddafb4e9e23283400c063a58f3acd7e88d334c32", 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x200000000000011, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) sendfile$auto(0x6, 0x3, 0x0, 0xc01) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x20000040eb1, 0xffffffffffffffff, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b76, 0x2, 0x7) chown$auto(0x0, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) io_uring_setup$auto(0x6, 0x0) socket(0x16, 0x2, 0xffffffff) 5.104693154s ago: executing program 5 (id=1576): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) write$auto(0x3, 0x0, 0xfdef) 4.947041054s ago: executing program 8 (id=1577): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rpc/auth.rpcsec.init/flush\x00', 0x441, 0x0) mprotect$auto(0x11, 0x1, 0x1000a) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cmdline\x00', 0x240, 0x0) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) write$auto(r0, &(0x7f0000000080)='\\sys kernel/tracing/set_event_notrace_pid\x00', 0x9) 3.999873773s ago: executing program 8 (id=1578): r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r2) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c00038008000c000400060012000100898771f1c19f17790485908286dd0000040002"], 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) 3.236103378s ago: executing program 5 (id=1579): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001580)='/dev/dsp1\x00', 0x0, 0x0) rseq$auto(0xfffffffffffffffd, 0x80000001, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x80000005) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0xa, 0x0) getgroups$auto(0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x40002, 0x0) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) close_range$auto(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x16c) madvise$auto(0x0, 0xffffffffffff0001, 0x15) userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1006, 0x805, 0x7ffffffffffffffc, 0x8011, 0xffffffffffffffff, 0xb4) madvise$auto(0x0, 0x2003ec, 0x14) msync$auto(0x0, 0x2000000005, 0x6) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x42, 0x0) write$auto_mousedev_fops_mousedev(r1, &(0x7f00000000c0)="00642fdb37b35fba2154e23bd03ab19f268db768651c4f6fc2979b5b97b0b4e938b90361c4c96b3d7d39e13016bcf4184d3e9a5322bf3303f7132a884c34471862710a60b49d05f5ca975c37392301b0bc95be145959cd9b119f56e51e5ecc965d", 0xfd55) 1.996417219s ago: executing program 8 (id=1580): mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7f, 0x200000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x18, 0x17) futex_requeue$auto(0x0, 0x80, 0x2, 0x101) fsmount$auto(0xffffffffffffffff, 0x81, 0xc185) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x12, r2, 0x8000) ioperm$auto(0x4, 0x4, 0x6) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, 0x0, 0x55) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x600007, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 0s ago: executing program 5 (id=1581): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x20009, 0x1c, 0xeb1, r0, 0x8002) ioctl$auto(0x3, 0x40084d06, 0x38) memfd_create$auto(&(0x7f0000000000)='%$\xae\x00', 0x2) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x0, 0x7352, 0x40, 0x200000000065f, 0x401ffde, 0x7, 0x3, 0x2, 0x89, 0x3eb, 0x5, 0x2, 0x3000, 0xd, 0x6, 0x7, 0x80, 0x4, 0x0, 0x7, 0x1ffb, 0x203, 0x400, 0x84, [0x1, 0x0, 0x0, 0x100, 0x2000000000000000, 0x2000, 0xfffffffffffffffd, 0xa, 0x70604ce7, 0x0, 0xfffffffffffffffd, 0x80000000, 0x3, 0x1, 0x4, 0x4, 0x800, 0xfffffffffffffffd, 0x200000000000, 0x0, 0xbfffffffefffffff, 0xffffffff80000000, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x400000000005b8, 0x8000c, 0x3fffffffff, 0x8, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x800000000000a, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x5, 0x6, 0x0, 0xfffff]}, 0x1fe, 0xd) msgctl$auto(0x9, 0x3, &(0x7f0000000180)={{0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffa9b, 0x2, 0x4, 0x4}, 0x0, 0x0, 0x8000, 0x4, 0x5, 0x0, 0xa, 0x4, 0xd, 0x5}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x5, 0x10, 0x9, 0x63, 0x0, 0xee01, 0x0, 0x0, 0x40000000000f, 0x6, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103}) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0xff}, 0x5, 0x0, 0xfff, 0x5}, 0x803}, 0xfffffff9, 0x10, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0xc0189436, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 83.164560][ T5821] cgroup: Unknown subsys name 'net' [ 83.318086][ T5821] cgroup: Unknown subsys name 'cpuset' [ 83.326556][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.032059][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.034338][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.043570][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.053022][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.061953][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.063681][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.078064][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.078436][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.093089][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.103742][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.112817][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.119968][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.120813][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.130207][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.136011][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.143125][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.150033][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.156228][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.164162][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.170005][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.176748][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.195607][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.231814][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.255037][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.263170][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.645227][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 87.656973][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 87.715213][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 87.763441][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 87.857937][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.866439][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.877386][ T5835] bridge_slave_0: entered allmulticast mode [ 87.884611][ T5835] bridge_slave_0: entered promiscuous mode [ 87.893057][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.900180][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.908169][ T5830] bridge_slave_0: entered allmulticast mode [ 87.915019][ T5830] bridge_slave_0: entered promiscuous mode [ 87.957331][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.964635][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.971785][ T5835] bridge_slave_1: entered allmulticast mode [ 87.979778][ T5835] bridge_slave_1: entered promiscuous mode [ 87.987315][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.994656][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.001864][ T5830] bridge_slave_1: entered allmulticast mode [ 88.009451][ T5830] bridge_slave_1: entered promiscuous mode [ 88.075794][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.083330][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.090509][ T5831] bridge_slave_0: entered allmulticast mode [ 88.097823][ T5831] bridge_slave_0: entered promiscuous mode [ 88.115795][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.135608][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.144992][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.153117][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.160303][ T5831] bridge_slave_1: entered allmulticast mode [ 88.167267][ T5831] bridge_slave_1: entered promiscuous mode [ 88.174715][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.181828][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.189713][ T5837] bridge_slave_0: entered allmulticast mode [ 88.197394][ T5837] bridge_slave_0: entered promiscuous mode [ 88.205726][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.212929][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.220122][ T5837] bridge_slave_1: entered allmulticast mode [ 88.227146][ T5837] bridge_slave_1: entered promiscuous mode [ 88.236081][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.256066][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.321010][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.334272][ T5835] team0: Port device team_slave_0 added [ 88.349963][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.363803][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.375302][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.394975][ T5835] team0: Port device team_slave_1 added [ 88.413044][ T5830] team0: Port device team_slave_0 added [ 88.457070][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.464255][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.490391][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.505458][ T5830] team0: Port device team_slave_1 added [ 88.511808][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.518945][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.545307][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.559613][ T5837] team0: Port device team_slave_0 added [ 88.568727][ T5831] team0: Port device team_slave_0 added [ 88.597960][ T5837] team0: Port device team_slave_1 added [ 88.607742][ T5831] team0: Port device team_slave_1 added [ 88.650369][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.657451][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.684063][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.697337][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.705211][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.731657][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.782940][ T5835] hsr_slave_0: entered promiscuous mode [ 88.789683][ T5835] hsr_slave_1: entered promiscuous mode [ 88.798114][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.805469][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.831778][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.843800][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.850868][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.877083][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.890186][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.897447][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.923694][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.936388][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.943735][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.970291][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.056996][ T5830] hsr_slave_0: entered promiscuous mode [ 89.063577][ T5830] hsr_slave_1: entered promiscuous mode [ 89.070167][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.078543][ T5830] Cannot create hsr debugfs directory [ 89.136262][ T5831] hsr_slave_0: entered promiscuous mode [ 89.145005][ T5831] hsr_slave_1: entered promiscuous mode [ 89.151185][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.159092][ T5831] Cannot create hsr debugfs directory [ 89.184126][ T5837] hsr_slave_0: entered promiscuous mode [ 89.190546][ T5837] hsr_slave_1: entered promiscuous mode [ 89.197996][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.206546][ T5837] Cannot create hsr debugfs directory [ 89.263596][ T5842] Bluetooth: hci1: command tx timeout [ 89.263618][ T5834] Bluetooth: hci0: command tx timeout [ 89.264108][ T5838] Bluetooth: hci2: command tx timeout [ 89.353384][ T5838] Bluetooth: hci3: command tx timeout [ 89.497890][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.514588][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.526989][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.547298][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.590803][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.615272][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.629191][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.653212][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.696220][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.708324][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.733744][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.746506][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.812380][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.823435][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.856842][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.868497][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.968324][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.986968][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.044712][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.065408][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.081081][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.088555][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.111798][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.118985][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.134193][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.157032][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.164293][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.177924][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.185100][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.250792][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.287981][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.295177][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.325222][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.334548][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.357350][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.364548][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.406743][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.434185][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.441346][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.492244][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.500050][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.551443][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.567888][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.818147][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.867452][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.951268][ T5830] veth0_vlan: entered promiscuous mode [ 90.995876][ T5835] veth0_vlan: entered promiscuous mode [ 91.011999][ T5830] veth1_vlan: entered promiscuous mode [ 91.031825][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.054158][ T5835] veth1_vlan: entered promiscuous mode [ 91.077510][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.113013][ T5830] veth0_macvtap: entered promiscuous mode [ 91.157412][ T5830] veth1_macvtap: entered promiscuous mode [ 91.175477][ T5835] veth0_macvtap: entered promiscuous mode [ 91.204980][ T5837] veth0_vlan: entered promiscuous mode [ 91.212160][ T5835] veth1_macvtap: entered promiscuous mode [ 91.224857][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.246145][ T5837] veth1_vlan: entered promiscuous mode [ 91.262281][ T5831] veth0_vlan: entered promiscuous mode [ 91.273730][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.290005][ T5831] veth1_vlan: entered promiscuous mode [ 91.301554][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.311014][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.321506][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.330341][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.345091][ T5838] Bluetooth: hci1: command tx timeout [ 91.352809][ T5838] Bluetooth: hci2: command tx timeout [ 91.357953][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.358242][ T5838] Bluetooth: hci0: command tx timeout [ 91.376243][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.388103][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.398552][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.409088][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.421380][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.429012][ T5838] Bluetooth: hci3: command tx timeout [ 91.463682][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.473036][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.481762][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.491239][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.561355][ T5831] veth0_macvtap: entered promiscuous mode [ 91.575193][ T5831] veth1_macvtap: entered promiscuous mode [ 91.602713][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.606379][ T5837] veth0_macvtap: entered promiscuous mode [ 91.610699][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.629193][ T5837] veth1_macvtap: entered promiscuous mode [ 91.673046][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.683800][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.694256][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.707575][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.719614][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.769584][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.781094][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.791365][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.802432][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.814897][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.849000][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.849954][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.867799][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.867914][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.887307][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.892584][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.897716][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.915915][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.926035][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.937085][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.948251][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.960110][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.969056][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.977886][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.988116][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.024992][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.035740][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.046454][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.057457][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.068837][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.079482][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.091108][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.120339][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.144664][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.156454][ T909] cfg80211: failed to load regulatory.db [ 92.176868][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.191722][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.201229][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.221718][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.236180][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.626084][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.712479][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.793424][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.813372][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.954737][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.955518][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.978009][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.978508][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.048407][ T5904] process 'syz.1.5' launched './file0' with NULL argv: empty string added [ 93.426192][ T5842] Bluetooth: hci2: command tx timeout [ 93.431699][ T5842] Bluetooth: hci1: command tx timeout [ 93.438423][ T5838] Bluetooth: hci0: command tx timeout [ 93.486138][ T5914] bridge0: port 3(team0) entered blocking state [ 93.504038][ T5834] Bluetooth: hci3: command tx timeout [ 93.599116][ T5914] bridge0: port 3(team0) entered disabled state [ 93.666383][ T5914] team0: entered allmulticast mode [ 93.708957][ T5914] team_slave_0: entered allmulticast mode [ 93.752798][ T5914] team_slave_1: entered allmulticast mode [ 93.760496][ T5914] team0: entered promiscuous mode [ 93.765770][ T5914] team_slave_0: entered promiscuous mode [ 93.771692][ T5914] team_slave_1: entered promiscuous mode [ 93.780107][ T5914] bridge0: port 3(team0) entered blocking state [ 93.786739][ T5914] bridge0: port 3(team0) entered forwarding state [ 94.577218][ T5930] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.503066][ T5834] Bluetooth: hci0: command tx timeout [ 95.509019][ T5834] Bluetooth: hci1: command tx timeout [ 95.515909][ T5834] Bluetooth: hci2: command tx timeout [ 95.528430][ T5938] nvme_fabrics: missing parameter 'transport=%s' [ 95.545425][ T5938] nvme_fabrics: missing parameter 'nqn=%s' [ 95.582527][ T5838] Bluetooth: hci3: command tx timeout [ 96.042564][ T5941] Zero length message leads to an empty skb [ 96.106033][ T5939] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.164646][ T5939] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.227219][ T5939] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.278588][ T5939] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.307375][ T5939] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.384047][ T5939] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.421913][ T5939] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.447632][ T5939] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.485008][ T5939] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.523624][ T5939] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.547555][ T5939] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.604641][ T5939] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.144002][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.303718][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.465010][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.550136][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.273249][ T5988] Invalid ELF header magic: != ELF [ 99.830096][ T5996] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.223871][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.382582][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.543613][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.624903][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.301329][ T6012] Invalid ELF header magic: != ELF [ 102.302542][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.473342][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.623353][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.702488][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.558889][ T6076] IPVS: length: 11322 != 8 [ 109.491727][ T29] audit: type=1400 audit(1736795858.498:2): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6116 comm="syz.2.51" [ 110.067287][ T5838] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 111.146940][ T6145] Invalid ELF header magic: != ELF [ 111.728310][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.58'. [ 113.981059][ T6183] MTRR 1 not used [ 116.506690][ T6245] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.982821][ T6252] Invalid ELF header magic: != ELF [ 118.983412][ T6283] Invalid ELF header magic: != ELF [ 119.929244][ T6288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.81'. [ 121.304081][ T6323] netlink: 334 bytes leftover after parsing attributes in process `syz.2.89'. [ 121.421520][ T6320] netlink: 334 bytes leftover after parsing attributes in process `syz.2.89'. [ 121.469559][ T6320] netlink: 334 bytes leftover after parsing attributes in process `syz.2.89'. [ 121.492687][ T6320] netlink: 334 bytes leftover after parsing attributes in process `syz.2.89'. [ 121.533571][ T6320] netlink: 334 bytes leftover after parsing attributes in process `syz.2.89'. [ 121.551370][ T6320] netlink: 334 bytes leftover after parsing attributes in process `syz.2.89'. [ 121.563378][ T6320] netlink: 334 bytes leftover after parsing attributes in process `syz.2.89'. [ 121.587757][ T6320] netlink: 334 bytes leftover after parsing attributes in process `syz.2.89'. [ 121.661978][ T6320] netlink: 334 bytes leftover after parsing attributes in process `syz.2.89'. [ 126.453051][ T6412] __nla_validate_parse: 58 callbacks suppressed [ 126.453079][ T6412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.108'. [ 126.891772][ T6412] geneve1: entered allmulticast mode [ 128.512836][ T6417] sctp: failed to load transform for md5: -4 [ 129.602429][ T6450] syz.0.113 uses obsolete (PF_INET,SOCK_PACKET) [ 131.296785][ T6489] Process accounting resumed [ 131.307497][ T6492] netlink: 342 bytes leftover after parsing attributes in process `syz.1.126'. [ 131.633188][ T6499] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 131.641645][ T6499] netlink: 330 bytes leftover after parsing attributes in process `syz.1.128'. [ 131.724055][ T6499] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 131.731779][ T6499] netlink: 330 bytes leftover after parsing attributes in process `syz.1.128'. [ 131.768674][ T6499] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 131.803299][ T6499] netlink: 330 bytes leftover after parsing attributes in process `syz.1.128'. [ 131.839644][ T6499] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 131.862240][ T6507] netlink: 338 bytes leftover after parsing attributes in process `syz.3.130'. [ 131.872600][ T6499] netlink: 330 bytes leftover after parsing attributes in process `syz.1.128'. [ 131.881837][ T6499] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 131.909218][ T6499] netlink: 330 bytes leftover after parsing attributes in process `syz.1.128'. [ 131.934931][ T6506] netlink: 346 bytes leftover after parsing attributes in process `syz.0.129'. [ 131.997718][ T6499] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 132.017818][ T6499] netlink: 330 bytes leftover after parsing attributes in process `syz.1.128'. [ 132.042933][ T6499] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 132.077683][ T6499] netlink: 330 bytes leftover after parsing attributes in process `syz.1.128'. [ 132.102664][ T6499] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 132.132580][ T6499] netlink: 330 bytes leftover after parsing attributes in process `syz.1.128'. [ 132.160236][ T6499] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 132.182783][ T6499] netlink: 'syz.1.128': attribute type 4 has an invalid length. syzkaller syzkaller login: [ 137.003027][ T6579] kexec: Could not allocate control_code_buffer [ 137.284147][ T6611] __nla_validate_parse: 26 callbacks suppressed [ 137.284174][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 137.443697][ T6616] netlink: 342 bytes leftover after parsing attributes in process `syz.3.155'. [ 137.914849][ T6626] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 138.133663][ T6630] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 138.229779][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.243133][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.242344][ T6707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.175'. [ 141.273726][ T6707] nbd: couldn't find device at index 33904 [ 142.205252][ T6734] netlink: 330 bytes leftover after parsing attributes in process `syz.0.180'. [ 142.237860][ T6734] validate_nla: 23 callbacks suppressed [ 142.237886][ T6734] netlink: 'syz.0.180': attribute type 4 has an invalid length. [ 143.081756][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.181'. [ 143.106745][ T6736] veth1_macvtap: entered allmulticast mode [ 143.896081][ T6785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.191'. [ 143.932572][ T6785] bridge_slave_1: left allmulticast mode [ 143.938309][ T6785] bridge_slave_1: left promiscuous mode [ 143.963977][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.067915][ T6785] bridge_slave_0: left allmulticast mode [ 144.073835][ T6785] bridge_slave_0: left promiscuous mode [ 144.079636][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.232722][ T6901] sctp: [Deprecated]: syz.1.217 (pid 6901) Use of int in maxseg socket option. [ 149.232722][ T6901] Use struct sctp_assoc_value instead [ 150.073006][ T6915] netlink: 'syz.1.223': attribute type 4 has an invalid length. [ 150.080743][ T6915] netlink: 110 bytes leftover after parsing attributes in process `syz.1.223'.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          [ 518.574344][T12430] ptrace attach of "./syz-executor exec"[12120] was attempted by "./syz-executor exec"[12430] [ 518.852273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 519.204780][T12404] Process accounting paused [ 519.617762][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1375'. [ 529.172479][T12578] could not allocate digest TFM handle [ 529.383549][T12594] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1396'. [ 530.120661][T12601] Invalid ELF header magic: != ELF [ 535.392166][T12680] netlink: 244 bytes leftover after parsing attributes in process `syz.9.1407'. [ 537.271969][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1412'. [ 537.862884][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1414'. [ 537.938900][T12707] netdevsim netdevsim8 netdevsim2: entered allmulticast mode [ 539.950462][T12726] FAULT_INJECTION: forcing a failure. [ 539.950462][T12726] name failslab, interval 1, probability 0, space 0, times 0 [ 540.053950][T12726] CPU: 1 UID: 0 PID: 12726 Comm: syz.8.1418 Not tainted 6.13.0-rc7-syzkaller #0 [ 540.062164][T12726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 540.071259][T12726] Call Trace: [ 540.074252][T12726] [ 540.076935][T12726] dump_stack_lvl+0x16c/0x1f0 [ 540.081208][T12726] should_fail_ex+0x497/0x5b0 [ 540.085485][T12726] ? fs_reclaim_acquire+0xae/0x150 [ 540.090152][T12726] should_failslab+0xc2/0x120 [ 540.094427][T12726] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 540.099329][T12726] ? vma_merge_new_range+0x3f0/0xb70 [ 540.104150][T12726] ? vm_area_alloc+0x1f/0x1c0 [ 540.108427][T12726] vm_area_alloc+0x1f/0x1c0 [ 540.112553][T12726] __mmap_region+0x1091/0x2760 [ 540.116927][T12726] ? __pfx___mmap_region+0x10/0x10 [ 540.121591][T12726] ? hlock_class+0x4e/0x130 [ 540.125705][T12726] ? mark_lock+0xb5/0xc60 [ 540.129748][T12726] ? cap_mmap_addr+0x53/0x320 [ 540.134027][T12726] mmap_region+0x127/0x320 [ 540.138086][T12726] do_mmap+0xa09/0x1050 [ 540.141893][T12726] vm_mmap_pgoff+0x1ba/0x360 [ 540.146097][T12726] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 540.150766][T12726] ? __x64_sys_futex+0x1e1/0x4c0 [ 540.155277][T12726] ? __x64_sys_futex+0x1ea/0x4c0 [ 540.159794][T12726] ksys_mmap_pgoff+0x7d/0x5c0 [ 540.164063][T12726] ? rcu_is_watching+0x12/0xc0 [ 540.168415][T12726] __x64_sys_mmap+0x125/0x190 [ 540.172682][T12726] do_syscall_64+0xcd/0x250 [ 540.176803][T12726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.182181][T12726] RIP: 0033:0x7fc9aa585d29 [ 540.186204][T12726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.203904][T12726] RSP: 002b:00007fc9a83f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 540.211537][T12726] RAX: ffffffffffffffda RBX: 00007fc9aa775fa0 RCX: 00007fc9aa585d29 [ 540.218755][T12726] RDX: 000000003ff57697 RSI: 0000000000000009 RDI: 0000000000000000 [ 540.225971][T12726] RBP: 00007fc9aa601b08 R08: 0000000000000002 R09: 8000000000008000 [ 540.233201][T12726] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 540.240416][T12726] R13: 0000000000000000 R14: 00007fc9aa775fa0 R15: 00007ffeeff02298 [ 540.247653][T12726] [ 547.185987][T12794] Process accounting resumed [ 547.533246][T12796] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 547.541854][T12796] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 556.077921][T12900] Process accounting resumed [ 557.410244][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 560.866305][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1462'. [ 564.960356][T13028] Invalid ELF header magic: != ELF [ 572.372493][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1482'. [ 578.495510][T13173] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1493'. [ 585.003490][T13237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1506'. [ 587.941562][T13263] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1509'. [ 588.289715][T13263] lo: entered promiscuous mode [ 588.299893][T13263] lo: entered allmulticast mode [ 595.137861][T13316] Invalid ELF header magic: != ELF [ 595.985474][T11808] Bluetooth: hci2: command 0x0406 tx timeout [ 596.412426][T13326] Process accounting resumed [ 610.391103][T13453] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1534'. [ 611.344030][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 614.277180][T13490] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 615.007526][T13513] Invalid ELF header magic: != ELF [ 615.422893][T13496] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1542'. [ 615.497187][T13496] lo: entered promiscuous mode [ 615.501558][T13496] lo: entered allmulticast mode [ 618.564702][T13556] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE yru#Ryy*"$l-}$tyBz [ 620.741669][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1556'. [ 620.961171][T13588] can0: slcan on ptm0. [ 625.656426][T13592] can0 (unregistered): slcan off ptm0. [ 636.723498][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 636.733813][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 636.741206][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 636.750594][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 636.758304][ T5838] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 636.765411][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 638.782389][ T5838] Bluetooth: hci5: command tx timeout [ 639.296512][T13714] chnl_net:caif_netlink_parms(): no params data found [ 640.362814][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1578'. [ 640.915775][ T5838] Bluetooth: hci5: command tx timeout [ 641.565123][T13714] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.571687][T13714] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.612491][T13714] bridge_slave_0: entered allmulticast mode [ 641.641276][T13714] bridge_slave_0: entered promiscuous mode [ 641.702396][T13714] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.741367][T13714] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.782783][T13714] bridge_slave_1: entered allmulticast mode [ 641.811745][T13714] bridge_slave_1: entered promiscuous mode [ 642.679566][T13593] ------------[ cut here ]------------ [ 642.685044][T13593] WARNING: CPU: 0 PID: 13593 at mm/page_alloc.c:4729 __alloc_pages_noprof+0xeff/0x25b0 [ 642.693923][T13593] Modules linked in: [ 642.697479][T13593] CPU: 0 UID: 0 PID: 13593 Comm: syz.3.1555 Not tainted 6.13.0-rc7-syzkaller #0 [ 642.705817][T13593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 642.715253][T13593] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 642.720799][T13593] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 34 80 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 5f 9c 0c 00 8b 14 24 e9 [ 642.738858][T13593] RSP: 0018:ffffc9000ddf7918 EFLAGS: 00010246 [ 642.744549][T13593] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 642.751785][T13593] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040d40 [ 642.759348][T13593] RBP: 0000000000000000 R08: 0000000000000006 R09: 00000000003fffff [ 642.766906][T13593] R10: 00000000003fffff R11: 0000000000000004 R12: 000000000000000b [ 642.774255][T13593] R13: 0000000000040d40 R14: 1ffff92001bbef37 R15: 00000000003fffff [ 642.781573][T13593] FS: 00007faed9cfb6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 642.789828][T13593] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.795882][T13593] CR2: 00007f30bf1d0dd8 CR3: 000000003a090000 CR4: 00000000003526f0 [ 642.803314][T13593] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 642.810629][T13593] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 642.818306][T13593] Call Trace: [ 642.821302][T13593] [ 642.824206][T13593] ? __warn+0xea/0x3c0 [ 642.827963][T13593] ? __alloc_pages_noprof+0xeff/0x25b0 [ 642.833039][T13593] ? report_bug+0x3c0/0x580 [ 642.837172][T13593] ? handle_bug+0x54/0xa0 [ 642.841140][T13593] ? exc_invalid_op+0x17/0x50 [ 642.845492][T13593] ? asm_exc_invalid_op+0x1a/0x20 [ 642.850106][T13593] ? __alloc_pages_noprof+0xeff/0x25b0 [ 642.855154][T13593] ? __pfx_mark_lock+0x10/0x10 [ 642.859668][T13593] ? __pfx___schedule+0x10/0x10 [ 642.864308][T13593] ? hlock_class+0x4e/0x130 [ 642.868455][T13593] ? __lock_acquire+0x15a9/0x3c40 [ 642.873211][T13593] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 642.878470][T13593] ? lockdep_hardirqs_on+0x7c/0x110 [ 642.883301][T13593] ? find_held_lock+0x2d/0x110 [ 642.887665][T13593] ___kmalloc_large_node+0x84/0x1b0 [ 642.892476][T13593] __kmalloc_large_node_noprof+0x1c/0x70 [ 642.897621][T13593] __kmalloc_noprof.cold+0xc/0x63 [ 642.902326][T13593] ? __might_fault+0xe3/0x190 [ 642.906623][T13593] ? tomoyo_write_control+0x267/0x13d0 [ 642.911621][T13593] tomoyo_write_control+0x267/0x13d0 [ 642.916547][T13593] ? rcu_is_watching+0x12/0xc0 [ 642.921221][T13593] ? __pfx_tomoyo_write_control+0x10/0x10 [ 642.926714][T13593] ? ksys_write+0x12b/0x250 [ 642.930853][T13593] ? __pfx_tomoyo_write+0x10/0x10 [ 642.935500][T13593] vfs_write+0x24c/0x1150 [ 642.939474][T13593] ? __pfx___mutex_lock+0x10/0x10 [ 642.942303][ T5838] Bluetooth: hci5: command tx timeout [ 642.944141][T13593] ? __pfx_vfs_write+0x10/0x10 [ 642.953417][T13593] ? __fget_files+0x206/0x3a0 [ 642.953566][T13774] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1581'. [ 642.957691][T13593] ksys_write+0x12b/0x250 [ 642.970285][T13593] ? __pfx_ksys_write+0x10/0x10 [ 642.974829][T13593] do_syscall_64+0xcd/0x250 [ 642.978960][T13593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.984439][T13593] RIP: 0033:0x7faed8f85d29 [ 642.988478][T13593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.006322][T13593] RSP: 002b:00007faed9cfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 643.014044][T13593] RAX: ffffffffffffffda RBX: 00007faed9176080 RCX: 00007faed8f85d29 [ 643.021493][T13593] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 643.028986][T13593] RBP: 00007faed9001b08 R08: 0000000000000000 R09: 0000000000000000 [ 643.036461][T13593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.043761][T13593] R13: 0000000000000000 R14: 00007faed9176080 R15: 00007ffcb0a0ae68 [ 643.051043][T13593] [ 643.053853][T13593] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 643.060456][T13593] CPU: 0 UID: 0 PID: 13593 Comm: syz.3.1555 Not tainted 6.13.0-rc7-syzkaller #0 [ 643.068632][T13593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 643.077737][T13593] Call Trace: [ 643.080814][T13593] [ 643.083497][T13593] dump_stack_lvl+0x3d/0x1f0 [ 643.087703][T13593] panic+0x71d/0x800 [ 643.091282][T13593] ? __pfx_panic+0x10/0x10 [ 643.095333][T13593] ? show_trace_log_lvl+0x29d/0x3d0 [ 643.100087][T13593] ? __alloc_pages_noprof+0xeff/0x25b0 [ 643.105069][T13593] check_panic_on_warn+0xab/0xb0 [ 643.109580][T13593] __warn+0xf6/0x3c0 [ 643.113240][T13593] ? __alloc_pages_noprof+0xeff/0x25b0 [ 643.118231][T13593] report_bug+0x3c0/0x580 [ 643.122198][T13593] handle_bug+0x54/0xa0 [ 643.126017][T13593] exc_invalid_op+0x17/0x50 [ 643.130220][T13593] asm_exc_invalid_op+0x1a/0x20 [ 643.134649][T13593] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 643.140200][T13593] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 34 80 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 5f 9c 0c 00 8b 14 24 e9 [ 643.157904][T13593] RSP: 0018:ffffc9000ddf7918 EFLAGS: 00010246 [ 643.163428][T13593] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 643.170682][T13593] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040d40 [ 643.177911][T13593] RBP: 0000000000000000 R08: 0000000000000006 R09: 00000000003fffff [ 643.185126][T13593] R10: 00000000003fffff R11: 0000000000000004 R12: 000000000000000b [ 643.192339][T13593] R13: 0000000000040d40 R14: 1ffff92001bbef37 R15: 00000000003fffff [ 643.199579][T13593] ? __pfx_mark_lock+0x10/0x10 [ 643.203926][T13593] ? __pfx___schedule+0x10/0x10 [ 643.208340][T13593] ? hlock_class+0x4e/0x130 [ 643.212440][T13593] ? __lock_acquire+0x15a9/0x3c40 [ 643.217008][T13593] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 643.222242][T13593] ? lockdep_hardirqs_on+0x7c/0x110 [ 643.227010][T13593] ? find_held_lock+0x2d/0x110 [ 643.231349][T13593] ___kmalloc_large_node+0x84/0x1b0 [ 643.236070][T13593] __kmalloc_large_node_noprof+0x1c/0x70 [ 643.241182][T13593] __kmalloc_noprof.cold+0xc/0x63 [ 643.245750][T13593] ? __might_fault+0xe3/0x190 [ 643.250010][T13593] ? tomoyo_write_control+0x267/0x13d0 [ 643.254975][T13593] tomoyo_write_control+0x267/0x13d0 [ 643.259793][T13593] ? rcu_is_watching+0x12/0xc0 [ 643.264124][T13593] ? __pfx_tomoyo_write_control+0x10/0x10 [ 643.269320][T13593] ? ksys_write+0x12b/0x250 [ 643.273421][T13593] ? __pfx_tomoyo_write+0x10/0x10 [ 643.278386][T13593] vfs_write+0x24c/0x1150 [ 643.282335][T13593] ? __pfx___mutex_lock+0x10/0x10 [ 643.286902][T13593] ? __pfx_vfs_write+0x10/0x10 [ 643.291238][T13593] ? __fget_files+0x206/0x3a0 [ 643.295656][T13593] ksys_write+0x12b/0x250 [ 643.299592][T13593] ? __pfx_ksys_write+0x10/0x10 [ 643.304017][T13593] do_syscall_64+0xcd/0x250 [ 643.308121][T13593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.313477][T13593] RIP: 0033:0x7faed8f85d29 [ 643.317482][T13593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.335167][T13593] RSP: 002b:00007faed9cfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 643.342778][T13593] RAX: ffffffffffffffda RBX: 00007faed9176080 RCX: 00007faed8f85d29 [ 643.349986][T13593] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 643.357190][T13593] RBP: 00007faed9001b08 R08: 0000000000000000 R09: 0000000000000000 [ 643.364392][T13593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.371595][T13593] R13: 0000000000000000 R14: 00007faed9176080 R15: 00007ffcb0a0ae68 [ 643.378815][T13593] [ 643.381905][T13593] Kernel Offset: disabled [ 643.385877][T13593] Rebooting in 86400 seconds..