last executing test programs: 13m10.137919708s ago: executing program 32 (id=2661): mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x41, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) write$auto_tracing_mark_fops_trace(r0, &(0x7f0000001680)="a0ec9495ccb7189d7f434f7f6a0f3ffb0ea84a4f1d0c60a278354fed24518bcf0cb7dfba14ceab779b7d0402b7fdec77ef0e9d378dd7aea54d350b9782c0a8968423eb9d8e8531a5b1cf41847d107d985674f0b9be5d4ad59e25a672c8adb1f82ebd4d19c911135e229f2f8fa922faf1fba706dc294097d7429f9f3edca44dc604d1dd7efd951f9a07a77f85e0f5eb62b2e423ea5a5869cc68a375eb4a5e724494da8a29690a56769736c174efe65d5e595789580364dadf83d97867b88a516c1c405249419abbcd926ef43386bd65f5d43af661", 0xd4) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = socket(0xa, 0x2, 0x9000300) sendfile$auto(0x1, r1, 0x0, 0x8fb5) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b76, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x8, 0x8, 0xeb1, 0xffffffffffffffff, 0xa800000000000000) r2 = syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) msgctl$auto_MSG_STAT_ANY(0x4, 0xd, &(0x7f00000001c0)={{0x1, 0xee00, 0x0, 0x7, 0xce42, 0x8, 0x8000}, &(0x7f0000000040)=0x34, &(0x7f0000000080)=0x7, 0x3, 0x6, 0x3, 0xb6c8, 0x1, 0x10, 0x472, 0x9, @inferred=0xffffffffffffffff, @raw=0x7}) shmctl$auto_IPC_SET(0xa18, 0x1, &(0x7f00000014c0)={{0x4, 0x0, 0xee00, 0x9e, 0x3, 0x8, 0x8}, 0x6, 0x8, 0x1c0f, 0x7fffffffffffffff, @raw=0x40, @raw=0x14000000, 0x0, 0x0, &(0x7f0000000240)="cf2e297e61625757fe7926f948ce86f4af20620019074f9de1153a8cf589c5abcdeb2228a0d7abdedb4ceec48e9e206c177f548de903db17ce7ce25b1076e89722bd2533c05c18e7c96f81c21b8672a0a6cbe3b69224cb786497835fd3cce4d7131d4e4b38269093c88d683568244c658a3d475411a792260d4599377c0a388efcb88754e5989ce4f577b70cd72c1b5b9a3a9305f4ea3ff8aa5d1f9492433819391a7d65a5e6ae", &(0x7f00000004c0)="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"}) r5 = fcntl$getown(r0, 0x9) msgctl$auto_MSG_STAT(0x2, 0xb, &(0x7f00000015c0)={{0x8, r3, r4, 0x7e94, 0x4, 0x6, 0x1}, &(0x7f0000001540)=0xb, &(0x7f0000001580)=0x8, 0x10, 0x1, 0x7, 0x36b, 0x5, 0xfff, 0x8001, 0x6, @inferred, @inferred=r5}) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00003000000096db60a61c283f29"], 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000804) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r7 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) pwrite64$auto(r7, &(0x7f0000000340)='\v\f_U\xe0w\xbf\xe3\xb8\x92\xac.X_|\xc8R\x99!\xd2\xfb\xfe\xa7\xe4&#sn\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\x9c\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'a\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd3\xe9\xc31\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87\x18\xe6,\xad_\xfe~M\x80X\x1ak7g\xff\xc8', 0x52, 0x522c) r8 = pipe2$auto(0x0, 0x80) fcntl$auto(r8, 0x8, 0xffffffff80000000) ioctl$auto_SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000001640)="70d30acd3e692cce00d9d42abd553a0c9a37c760a5e23897138f4c5c6affbf639606db2763dcb9ea4cbf3c02a2d244d76b626b474bf608000000000000000000") write$auto(r7, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001680)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x8) fcntl$auto(0x0, 0x408, 0x100000) 5m13.243175191s ago: executing program 4 (id=4153): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x2, 0x4) (rerun: 64) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/uid_map\x00', 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x2, 0xc) (rerun: 32) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf25010000000600020001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) (async) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyzd\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRES32=r3, @ANYRESDEC=r2], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) (async, rerun: 64) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, 0x0, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async, rerun: 64) ioperm$auto(0x2, 0x7fc, 0x200000) (async, rerun: 64) ioperm$auto(0x80, 0x1180, 0x0) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async, rerun: 64) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) (rerun: 64) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x8, 0x0) 5m12.154811987s ago: executing program 4 (id=4157): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) setpriority$auto(0x2, 0x0, 0x80000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a2003000004000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010026dbdf25060000000400018004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48080) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x400c000}, 0x8041) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) msgctl$auto_MSG_STAT(0x8001, 0xb, &(0x7f0000001600)={{0x4, 0xee01, 0x0, 0x3, 0xb, 0x3, 0xcd8e}, &(0x7f0000000280)=0xf8, &(0x7f00000002c0), 0x8, 0x356, 0x3, 0x800000000000000, 0x81, 0x3, 0xffff, 0x1000, @raw=0x389}) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) prctl$auto(0x4430, 0x1, 0x4, 0x400000005, 0x400000000007) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) connect$auto(0x3, 0x0, 0x54) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) pwrite64$auto(r0, &(0x7f0000000340)='\v\f_U\xe0w\xbf\xe3\xb8\x92\xac.X_|\xc8R\x99!\xd2\xfb\xfe\xa7\xe4&#sn\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\x9c\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'a\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd3\xe9\xc31\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87\x18\xe6,\xad_\xfe~M\x80X\x1ak7g\xff\xc8', 0x52, 0x522c) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40, 0x0) socket(0x2, 0x3, 0xa) 5m11.498397176s ago: executing program 4 (id=4161): mmap$auto(0x0, 0x5, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x183040, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x2, 0x3, 0x6) socket(0x11, 0xa, 0x1) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) (async) open(&(0x7f00000002c0)='./file0\x00', 0x161342, 0x36) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) poll$auto(&(0x7f0000000200)={r2, 0x1, 0xa}, 0x25, 0x109) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, 0x0) setsockopt$auto(0xffffffffffffffff, 0x5, 0x20, 0x0, 0x80000) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/virtual/workqueue/blkcg_punt_bio/affinity_strict\x00', 0x1e1880, 0x0) (async) msgget$auto(0x0, 0x5) (async) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000000), r0) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) msgctl$auto(0x0, 0x0, 0x0) (async) socket(0x10, 0x2, 0xc) io_uring_setup$auto(0x1, 0x0) pipe$auto(0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(r4, 0xc040564a, r3) 5m11.104752918s ago: executing program 4 (id=4162): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, r0, [0x5], {0xd74c, 0x10000, 0x3ff, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0x2, 0x1, 0x6, 0x7, 0x1, 0x40, 0x176c7, 0x1, 0x100000005}}) r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r1, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0x15, 0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f0000000180)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca"}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(r3, 0x8, 0x0) 5m9.394130521s ago: executing program 4 (id=4166): r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x800, 0xfffffffffffff000, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) (async) process_madvise$auto_MADV_PAGEOUT(r1, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b42", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 64) select$auto(0xd, 0x0, &(0x7f00000001c0)={[0x8, 0x200000000006, 0x8000000007, 0x8000, 0x0, 0x80000008, 0x5, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffdfef8, 0x4]}, 0x0, &(0x7f0000000240)={0x1, 0x20401}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/ns_last_pid\x00', 0x88642, 0x0) (rerun: 32) read$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) set_mempolicy$auto(0x6, 0x0, 0x9) (async) prctl$auto(0x3e, 0x1, 0x0, 0xaa7, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xe01, 0x0) r3 = setfsgid$auto(0x9) setresgid$auto(0xffffffffffffffff, r3, r3) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0xc0843, 0x0) read$auto(r4, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) (async, rerun: 32) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) (rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 5m8.372564274s ago: executing program 4 (id=4174): unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) writev$auto(0x3, 0x0, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181d40, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r1 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd12/queue/atomic_write_unit_min_bytes\x00', 0x80800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/93, 0x5d) read$auto(r2, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001) close_range$auto(0xffffffffffffffff, r0, 0xfffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) gettimeofday$auto(0x0, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x7ff, 0x3, 0x101, 0x0) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 4m53.308351664s ago: executing program 33 (id=4174): unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) writev$auto(0x3, 0x0, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181d40, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r1 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd12/queue/atomic_write_unit_min_bytes\x00', 0x80800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/93, 0x5d) read$auto(r2, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001) close_range$auto(0xffffffffffffffff, r0, 0xfffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) gettimeofday$auto(0x0, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x7ff, 0x3, 0x101, 0x0) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 2m43.555986927s ago: executing program 2 (id=4716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x24, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) 2m43.319613714s ago: executing program 2 (id=4717): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, r0, [0x5], {0xd74c, 0x10000, 0x3ff, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0x2, 0x1, 0x6, 0x7, 0x1, 0x40, 0x176c7, 0x1, 0x100000005}}) r2 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r2, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0x15, 0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f0000000180)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca0a"}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r1) sendmsg$auto_NL80211_CMD_STOP_AP(r3, &(0x7f0000001840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001800)={&(0x7f0000001880)={0x22f4, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x100}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc1}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TID_CONFIG={0x22c0, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x3f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x8}]}, {0x225c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x40}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x115c, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x1004, 0x3, "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"}, @NL80211_TXRATE_LEGACY={0xc, 0x1, "bfdd2114655c309f"}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, "ee1096307e3f6e10ab321805d9722306ae63f342acaa0f57832c"}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, "de8277c13fb17c798a4f4f8d3d817ac38c3783426e4d3ce79cb3ceff21eddf"}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}, @NL80211_TXRATE_HT={0x50, 0x2, "a9ab02eac845a65eb72555fc04c1df2959bedf30fd0f74467d65c4b19f7c8d9d83b4eee20434a64addde8de4b04e0456fd1ed6d669ca4380181aac6d331da74b277112ac026692f4e79d47d4"}, @NL80211_TXRATE_HE={0x91, 0x5, "06cfa7cf1860a161310c511140e6313a1ead7451ffad6451f47a9be4692fafd464e08ea29e5b8b1890ccc432307f8343f5983596f64a6a6f9678d4005a75a94d7fcd9c3e10803234d0d7c97b610c7e2261fbd394b3b13badc63c02162dc649acde9c4e4b5c1546ddbbeda96676bae73e493351ec8baa17a54d3d36d7117ab6afe585ddacb934249088f828a100"}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c8, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HE={0x9e, 0x5, "536585f2b2ed6a8ca2fb07452650d88f581f4eaa401a5b4e27009309337cd34e2a262827f664f56e72ad66f14ffbd43dd050e8b713902d27f6d3695bae473755f771962a1f0fa8f6b6d938ed5cbea377e5966bdb0c58ac7c565b5495588b45257dfbae95d8acf62d1f473f6ac85e517ee8b29c3a68891a075db83c53eaca39971f24a826db9fe77bb4b9616c703a64bc954532a30077f24e551e"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}, @NL80211_TXRATE_VHT={0x1004, 0x3, "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"}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xc}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x10}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1000}]}]}]}, 0x22f4}, 0x1, 0x0, 0x0, 0x10}, 0x81) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) prctl$auto(0x2f, 0x3, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) 2m42.275984152s ago: executing program 2 (id=4719): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x28, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x20000040) read$auto(0x3, 0x0, 0x8080) unshare$auto(0x40000080) socket(0x2c, 0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) getsockopt$auto_SO_DOMAIN(r0, 0xc, 0x27, &(0x7f0000000240)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00', &(0x7f0000000340)) pread64$auto(r1, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) umask$auto(0x7) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r4, 0x542f, 0x0) ioctl$auto(0x3, 0x5521, 0x1) sendfile$auto(r3, r3, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/loadavg\x00', 0x2000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x10000040eb2, 0x402, 0x300000000000) get_mempolicy$auto(0x0, 0x0, 0xfffffffffffffffe, 0x99d6, 0x3) setsockopt$auto(0x3, 0x1, 0x2d, 0x0, 0x8) 2m40.802002134s ago: executing program 2 (id=4725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x44, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80000000}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x1e, 0x124, 0x0, 0x1, [@generic="054e5cbdb60be017398d944e10490a56f2e6", @typed={0x8, 0x54, 0x0, 0x0, @fd}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) 2m40.734306189s ago: executing program 1 (id=4728): sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0100090000000000000057dcdc8a29df715c"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x80) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) unshare$auto(0x40000080) prctl$auto(0x8, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x28000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x28000000008012, r1, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x6, 0x2, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x3ffffd, 0x9, 0x11, 0xdd, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x549206, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r2, 0x5459, &(0x7f0000000040)) ioctl$auto(0x3, 0x40605346, 0x38) write$auto(0x3, 0x0, 0x3) mmap$auto(0x9, 0x2020009, 0x3, 0x6b1, 0xfffffffffffffffa, 0x73da9e9) r3 = prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x0, 0x5, 0x5) madvise$auto(0x200000, 0xffffffffffff0009, 0x800003) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) ioctl$auto_TIOCGDEV2(r3, 0x80045432, &(0x7f00000000c0)=0x2) 2m40.631392858s ago: executing program 2 (id=4729): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, r0, [0x5], {0xd74c, 0x10000, 0x3ff, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0x2, 0x1, 0x6, 0x7, 0x1, 0x40, 0x176c7, 0x1, 0x100000005}}) r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r1, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0x15, 0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x0, 0x0) read$auto_ecryptfs_miscdev_fops_miscdev(r3, 0x0, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f0000000180)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca0a"}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) 2m38.244026121s ago: executing program 2 (id=4732): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a03, 0x0) write$auto(r0, 0x0, 0x1000000007e) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xffffffffffffffff, 0x2020008, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x28, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x20) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/veth0_to_bridge/base_reachable_time\x00', 0x202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) mmap$auto(0xfffffffffffffffc, 0x8, 0x62a6, 0x9b72, 0x2, 0x8000) r3 = socket(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r6) sendmsg$auto_NFSD_CMD_LISTENER_SET(r6, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000000080)=ANY=[@ANYBLOB="14e0c2c41a0a96bb3f24c943c559f3898667e44b1b5e63b5bc56e3703ff6e1ebece1014552474e3996d81a91850613e00962e41fa38f4ed2367168a3471da0e32b329a4c515136c8ae0500000049f0fffdb72856", @ANYRES16=r7, @ANYBLOB="000322bd7000f9dbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x200088c0) r8 = getpid() ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={"f2c95643bdbc95a7acd7e1bf0c10177d0de872fa70c8a7b69b88ee50baddec22", 0x4, 0x8, 0x4, 0x101, 0x6, r8}) sendmsg$auto_NFSD_CMD_LISTENER_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf2506000000d4e55d54736d092ba5ef397dbe1c913cce5d9a9ad6b7c4f1cd0b"], 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400fb00", @ANYRES16=0x0, @ANYRES64=r9, @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES8=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x8055) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x208a01, 0x0) 2m38.182160472s ago: executing program 1 (id=4733): mmap$auto(0x7, 0x2000a, 0x4000000000df, 0xeb4, 0x6, 0x8000) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1d, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x7f, 0x0, 0x0) 2m38.02676979s ago: executing program 1 (id=4734): r0 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40081) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001800)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r3 = wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0x7, 0x80000001, &(0x7f0000000280)={{0x2, 0x7}, {0x9, 0x400}, 0x10000, 0x7, 0x100000001, 0x2, 0x80, 0xfffffffffffff801, 0x6, 0x1, 0x100000000, 0x9, 0x8, 0x8, 0x4, 0x1}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f000000a240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f000000a200)={&(0x7f000000a280)={0xd24, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_HINT={0xe, 0xc8, "9f62528f1003312e23cf"}, @NL80211_ATTR_MLO_LINKS={0xcf8, 0x138, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7d, 0xbe, "c4794f65f44c8e66cca81318e0445ccba06e59312255cf4423b95e59d61d2984c850e3a8f148775cc96e461cd7f7198e64286587e58146b5274901347c21ead666ead611ce44a7d9c2db49157e870edaa731520352b3619f524ff7a40a3aa3f46ed4a55cf0c484d332acc5b41da71210c808f3f3c8d90e1988"}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x5}]}, {0x274, 0x0, 0x0, 0x1, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "c34ca1"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e23}, @NL80211_ATTR_EMA_RNR_ELEMS={0x24b, 0x145, 0x0, 0x1, [@typed={0x4, 0xb4}, @generic="3c144559e4f50bf47f371eba39b5cefe53a708056cd1104bb25ae398e53ba78d2664017bbaeca743d5528f58dd55f97f7ae71b223fe0ebbbb568d014fc68dc06d1b470565077406e5ab29248142a7a9077c5e0f11f05f98a02c44eec9f69bf66dd580a816902409a5357f6", @nested={0xd9, 0x11, 0x0, 0x1, [@nested={0x4, 0xba}, @nested={0x4, 0x14f}, @typed={0x8, 0x84, 0x0, 0x0, @pid=r3}, @generic="ac7e80680ddb3a21dd756140fa8209a2a96365f1dfbddd7cb88cd534f215de15030e8804325d9baee25d93e49b7cbd941c28da25d4004e2b0742d72e394ebe855f6e4aefebac12c0c0b308ce596419b2fd4ac4d196911b7d3c2eaebeb96e3e642eab5d60fd0ac66b65fc7aefde80f557d3a49b0e5fe57ae5ca95391a7e46cf6b49a83c752baba6762dc306c9a034b61b8e36274913b576cb4f2aae994e55dbb94f753f1ea5750ee63b40e1d95956e26f8cddfba936ef95c35d014d9523910d46a621420de4"]}, @nested={0xf9, 0x56, 0x0, 0x1, [@generic="9866f83c82e08983d2cb7e0d6ed417d314fc1fe2814ea914a99341da903942f0556c93c74a856d52509e3eadf871a9ad79769832ba7a967be5bbddb7dedd6df4", @generic="013e7a9a8fe36d6e20ed476aab76a16bd702534d8f4bba1ec75a2a3923e0ad18db7cd2e08b685fa646305b379b9233a341", @nested={0x4, 0x2e}, @nested={0x4, 0x84}, @typed={0x8, 0xcc, 0x0, 0x0, @pid}, @typed={0x64, 0x24, 0x0, 0x0, @binary="6101edd5190539fb373c5da5a452317d5ae684147d0a0f8f69add74b52c3a42c3cac4149b492d957a0083b14a9dd0b5266f0bda9e31af4aa3965ed5906b0721c7c1f2a62103d40148849e5d3e2bf4c6326e8e335cfb99c866b1b5d8154b567ac"}, @nested={0x4, 0xb9}, @nested={0x4, 0x98}, @nested={0x4, 0x2e}, @nested={0x4, 0x105}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, {0x3b0, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xca}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_IE_ASSOC_RESP={0x399, 0x80, "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"}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x10}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "5cb5034c024abde6661081a869e4515d2108eac2058412849b27"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, "869527164f3966c8c3"}, @NL80211_ATTR_IE_PROBE_RESP={0x24e, 0x7f, "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"}]}, {0x3b8, 0x0, 0x0, 0x1, [@NL80211_ATTR_HT_CAPABILITY={0x3ab, 0x1f, "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"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}]}, 0xd24}, 0x1, 0x0, 0x0, 0x800d808}, 0x20040871) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) 2m37.866623147s ago: executing program 1 (id=4736): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)="2dfc", 0x2) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_VHOST_SET_FEATURES2(r3, 0x4008af00, &(0x7f0000000040)=0x3) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) write$auto(r4, 0x0, 0x6) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x3, 0xc4cc, 0x7fff, 0x3a, r0, 0x8000) fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) r6 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x80001, 0x0) writev$auto(r6, &(0x7f0000000340)={0x0, 0x2}, 0x7) mremap$auto(0x200000000000, 0xfffffffffffffbff, 0x4, 0x0, 0x11fffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC2\x00', 0xe0082, 0x0) 2m36.24521895s ago: executing program 1 (id=4741): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') rename$auto(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='}[,&*}\x00') bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, r1, [0x5], {0xd74c, 0x10000, 0x3ff, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0x2, 0x1, 0x6, 0x7, 0x1, 0x40, 0x176c7, 0x1, 0x100000005}}) r2 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r2, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0x15, 0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) setsockopt$auto_SO_RESERVE_MEM(r0, 0x7e71b6b8, 0x49, &(0x7f0000000040)=',+\x00', 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f0000000180)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca0a"}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 2m35.214599121s ago: executing program 1 (id=4743): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/card1/pcm1c/sub0/status\x00', 0x8282, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r5 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r3) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r6, 0x0, 0x8, 0x0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r3, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="08060000", @ANYRES16=r5, @ANYBLOB="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"/1538], 0x608}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) readahead$auto(0xffffffffffffffff, 0x2, 0x10001) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), r3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3) 2m23.131000394s ago: executing program 34 (id=4732): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a03, 0x0) write$auto(r0, 0x0, 0x1000000007e) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xffffffffffffffff, 0x2020008, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x28, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x20) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/veth0_to_bridge/base_reachable_time\x00', 0x202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) mmap$auto(0xfffffffffffffffc, 0x8, 0x62a6, 0x9b72, 0x2, 0x8000) r3 = socket(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r6) sendmsg$auto_NFSD_CMD_LISTENER_SET(r6, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000000080)=ANY=[@ANYBLOB="14e0c2c41a0a96bb3f24c943c559f3898667e44b1b5e63b5bc56e3703ff6e1ebece1014552474e3996d81a91850613e00962e41fa38f4ed2367168a3471da0e32b329a4c515136c8ae0500000049f0fffdb72856", @ANYRES16=r7, @ANYBLOB="000322bd7000f9dbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x200088c0) r8 = getpid() ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={"f2c95643bdbc95a7acd7e1bf0c10177d0de872fa70c8a7b69b88ee50baddec22", 0x4, 0x8, 0x4, 0x101, 0x6, r8}) sendmsg$auto_NFSD_CMD_LISTENER_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf2506000000d4e55d54736d092ba5ef397dbe1c913cce5d9a9ad6b7c4f1cd0b"], 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400fb00", @ANYRES16=0x0, @ANYRES64=r9, @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES8=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x8055) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x208a01, 0x0) 2m19.342756993s ago: executing program 35 (id=4743): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/card1/pcm1c/sub0/status\x00', 0x8282, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r5 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r3) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r6, 0x0, 0x8, 0x0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r3, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="08060000", @ANYRES16=r5, @ANYBLOB="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"/1538], 0x608}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) readahead$auto(0xffffffffffffffff, 0x2, 0x10001) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), r3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3) 1m50.67348531s ago: executing program 7 (id=4877): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/kernel/msg_next_id\x00', 0x181100, 0x0) gettid() alarm$auto(0x0) fanotify_init$auto(0x200, 0x1) sigaltstack$auto(&(0x7f0000000200)={&(0x7f0000000140)="3a6ce4f35f2fb1173e2fae1b9567d7f70f73f616b259f139636adc97786fe06bc7b9d6f9a4914d83fa59eb01cef22cebf532d3fe4ac2c96845cdbb9213fee558b3ee0d1fd3d1ac10b235ad94a928794a5e2715044233dc2e6102a77855621682daee0eff002bd578e8014f04", 0x1, 0x4}, &(0x7f00000002c0)={&(0x7f0000000240)="3136fbcb407ad3314339c70c6cf8927e6f24eec2d9ed163ffa1769334ea07f09108b382bd59d0d9f40a1c7969d47cdf9f55dd7d31f2c3ff2d1be84148024ab7e748c0ca91272a66afe6eb0", 0x1, 0x8}) fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0) close_range$auto(0x0, 0xfffff004, 0x2) 1m50.506199381s ago: executing program 7 (id=4878): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6c) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40081) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001800)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f000000a240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f000000a200)={&(0x7f000000a280)={0xd24, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_HINT={0xe, 0xc8, "9f62528f1003312e23cf"}, @NL80211_ATTR_MLO_LINKS={0xcf8, 0x138, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7d, 0xbe, "c4794f65f44c8e66cca81318e0445ccba06e59312255cf4423b95e59d61d2984c850e3a8f148775cc96e461cd7f7198e64286587e58146b5274901347c21ead666ead611ce44a7d9c2db49157e870edaa731520352b3619f524ff7a40a3aa3f46ed4a55cf0c484d332acc5b41da71210c808f3f3c8d90e1988"}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x5}]}, {0x274, 0x0, 0x0, 0x1, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "c34ca1"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e23}, @NL80211_ATTR_EMA_RNR_ELEMS={0x24b, 0x145, 0x0, 0x1, [@typed={0x4, 0xb4}, @generic="3c144559e4f50bf47f371eba39b5cefe53a708056cd1104bb25ae398e53ba78d2664017bbaeca743d5528f58dd55f97f7ae71b223fe0ebbbb568d014fc68dc06d1b470565077406e5ab29248142a7a9077c5e0f11f05f98a02c44eec9f69bf66dd580a816902409a5357f6", @nested={0xd9, 0x11, 0x0, 0x1, [@nested={0x4, 0xba}, @nested={0x4, 0x14f}, @typed={0x8, 0x84, 0x0, 0x0, @pid}, @generic="ac7e80680ddb3a21dd756140fa8209a2a96365f1dfbddd7cb88cd534f215de15030e8804325d9baee25d93e49b7cbd941c28da25d4004e2b0742d72e394ebe855f6e4aefebac12c0c0b308ce596419b2fd4ac4d196911b7d3c2eaebeb96e3e642eab5d60fd0ac66b65fc7aefde80f557d3a49b0e5fe57ae5ca95391a7e46cf6b49a83c752baba6762dc306c9a034b61b8e36274913b576cb4f2aae994e55dbb94f753f1ea5750ee63b40e1d95956e26f8cddfba936ef95c35d014d9523910d46a621420de4"]}, @nested={0xf9, 0x56, 0x0, 0x1, [@generic="9866f83c82e08983d2cb7e0d6ed417d314fc1fe2814ea914a99341da903942f0556c93c74a856d52509e3eadf871a9ad79769832ba7a967be5bbddb7dedd6df4", @generic="013e7a9a8fe36d6e20ed476aab76a16bd702534d8f4bba1ec75a2a3923e0ad18db7cd2e08b685fa646305b379b9233a341", @nested={0x4, 0x2e}, @nested={0x4, 0x84}, @typed={0x8, 0xcc, 0x0, 0x0, @pid}, @typed={0x64, 0x24, 0x0, 0x0, @binary="6101edd5190539fb373c5da5a452317d5ae684147d0a0f8f69add74b52c3a42c3cac4149b492d957a0083b14a9dd0b5266f0bda9e31af4aa3965ed5906b0721c7c1f2a62103d40148849e5d3e2bf4c6326e8e335cfb99c866b1b5d8154b567ac"}, @nested={0x4, 0xb9}, @nested={0x4, 0x98}, @nested={0x4, 0x2e}, @nested={0x4, 0x105}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, {0x3b0, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xca}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_IE_ASSOC_RESP={0x399, 0x80, "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"}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x10}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "5cb5034c024abde6661081a869e4515d2108eac2058412849b27"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, "869527164f3966c8c3"}, @NL80211_ATTR_IE_PROBE_RESP={0x24e, 0x7f, "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"}]}, {0x3b8, 0x0, 0x0, 0x1, [@NL80211_ATTR_HT_CAPABILITY={0x3ab, 0x1f, "7ff11f0c3b1123384b043893db0d231f7290b71348db1bea456c0066b63c7cd6988389a49e6fcfc8ea4ecd0e97f31788344dfa7c6601fa317cc5e54c16e989360ca495ed7a10f97d7db655a9f6bc5d0f036f83118565162b480c3c9600852963e9c64965fdaca4791824b6e868ab73ee4586f146fa9e96f54936816a8c6b4b835c62f8ea42352ba8c9fdbbf64fdd4a62f1711dadb64e8e272ef5c5c570ad28c42c618437d4f10ff35cacfdb3a6f4a0d10e4053cdce258c6b6b80686a35da791ab3a7ee6bbe122cc9738e37524b68cbaf9130134f509cee53eb44ac89b8ada06a0ece02db2b7adc3cec074d26bd14c0481151edd46195c71ac259c1ec0b931e58373b378b606565d1349491d10f1927c2e7880ee8952a00026777edeec3cbc0d8ab0511fbf342843b724f33abc57979db899f5eb296e981ff2860330e45e81fa10ee937983f72c34525f6f0d1a35fb4c34078e1352a5c5f21481ae95d63c660356cef5d38df6eb05efb7db91b1f77e56fe1454dff32c1f412c8389ad604c8ceca674c60f9ccd76fc06e5032f4223db9442dec15cc31409b52dbc41666a87c728817fa2dd037524e5cbc0d34157df1db2c425e2719566a8da64281e35e3e18e75a1d5087211c65d612ef88b130dc1a8324cfac51a27bf7ff125a1249de52551c7c3df7e3da37ec56e3258cdf021b999862e3824c672ff53d1c4e10895a9825c170eda4f87a3cdcd3c0d403caec5a8c69e3b001db23391c35ac2ea54924d52708b69daace046658f8df5f673e4f04f0fa941ff698c7688dd7cc8400c3c1d04079ca03587edb439cb5c0ff6c2cbd98552857f0b44a52251b45d86ddbb39ed646d734b560851d464e94aa2680adc56a86e5d3c52402a614fb58f5cbfbe370589c4e7ef26beaec6f018ade60964731c91b50031861c9c7fac708ec86549c48ddab74c6e8c3da90dd2abd1908316d0d23058b75f79b0bb2364e7d9769f9a3349ba755c4f28cc324c5fae3a6caf9694b09b1062de00f9782c0b25b204971f23d9c279de087c89693d7a79fc910150899bb9cb80dee5ba49a28c61384d8eb5150b0445ec4c367b920593fe89ac84bc3304f39f7d0b04171c69fc8473e413d6d00c6d3a61c8a9e6c993665e5a83a66f7958da0d79ae7b0fa1fa055abe3230bf1f7fda55b086222d1c34245c9c3d3d12781d690888b1cf02cdf700ab7781ac1593850b7ad6092283faab78bed796cffadc2b7fe08bfbcc3481a474750fc22136e71902b5f91d9d61ff6e89836ca44fea7a9e9d277d71d511e81d5f000b23e94a48c1ae8bd5eec4ff90839be0c"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}]}, 0xd24}, 0x1, 0x0, 0x0, 0x800d808}, 0x20040871) write$auto(0x3, 0x0, 0x100000000) 1m49.780042174s ago: executing program 7 (id=4882): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, r0, [0x5], {0xd74c, 0x10000, 0x3ff, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0x2, 0x1, 0x6, 0x7, 0x1, 0x40, 0x176c7, 0x1, 0x100000005}}) r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r1, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev4\x00', 0x0, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0x15, 0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f0000000180)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca0a"}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x3, 0x5, 0x4, 0x15f4da0e, 0xb, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x4, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(r2, 0x0, 0x9a6, 0x7000000) mlockall$auto(0x7) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x2, 0x810004, 0x5, 0x1f, 0x3, 0xd4d) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) 1m48.336121844s ago: executing program 7 (id=4889): openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x6c000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x17f440, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x600401, 0x0) socket(0xa, 0x80803, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) ioctl$auto(r0, 0x401c5504, r0) clock_gettime$auto(0x6, 0x0) select$auto(0x7ff, &(0x7f0000000080)={[0x4, 0xfffffffffffffffd, 0x36a6f960, 0x3, 0x6, 0x6, 0x6, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x76]}, 0x0, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) msgctl$auto(0x7fffffff, 0x72, &(0x7f0000000180)={{0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x3, 0x5d, 0xfff}, &(0x7f0000000000)=0x3, &(0x7f0000000100)=0x6, 0x101, 0xfffffffffffffffa, 0x1, 0x10000, 0xc9c, 0x9, 0x5, 0x1000, @inferred=0xffffffffffffffff, @raw=0x211467ae}) mbind$auto(0x6, 0x3, 0xa9, &(0x7f0000000000)=0x8, 0x8000, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) r1 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}}, 0x41) 1m44.574466272s ago: executing program 7 (id=4908): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x6a0d82, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x4001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0x2b, 0x1, 0x1) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0232890300"}, 0x6c) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cec2\x00', 0x88140, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0x2, &(0x7f0000000380)="cd643f7d5de97917220e226dc76001af80ac060d7757f411004bfc2e7bc398df3813a961af527f38f214c28e57805bf3b1070147f6faf903f594e86cafe607231c64f7044a9a04a34712826678b5ea81ff5dd792279f310b7249bdaac71a7e") lseek$auto(r2, 0x8000000000000003, 0xfffffff8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0x6, &(0x7f0000000400)="09dc5afc7177db290b50bdad0302a33bb52221c8ee45dfd89b79a5eea8f34a3e5a4cfbaff041c25046549d30c76825e71ec4993374297864a73af8a2d58face08c1e4b1f83d83f3d239770c7cc9e58ae3eca529d29393602dcd601118ccff5ffcd0e1899c215fcb49a") bpf$auto(0x18, &(0x7f00000002c0)=@bpf_attr_0={0x0, 0x10, 0x1, 0x8, 0x8, 0xffffffffffffffff, 0x400, "0000128ba564613b9d1100", 0x0, 0xffffffffffffffff, 0x400, 0x400, 0xff, 0x64}, 0x9) chdir$auto(&(0x7f0000000480)='}[,&*}\x00') r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110) lseek$auto(r4, 0x1, 0x0) r5 = socket(0x2, 0x1, 0x106) setsockopt$auto(r5, 0x3, 0xd, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0b00, 0x0) getpid() 1m44.396986004s ago: executing program 7 (id=4909): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, r0, [0x5], {0xd74c, 0x10000, 0x3ff, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0x2, 0x1, 0x6, 0x7, 0x1, 0x40, 0x176c7, 0x1, 0x100000005}}) r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r1, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0x15, 0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x7f, &(0x7f0000000180)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca0a"}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) 1m43.339583062s ago: executing program 0 (id=4915): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, r0, [0x5], {0xd74c, 0x10000, 0x3ff, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0x2, 0x1, 0x6, 0x7, 0x1, 0x40, 0x176c7, 0x1, 0x100000005}}) r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r1, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0x15, 0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f00000002c0)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8bf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19b6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca0a998f12c83b3b2a81319c1c1a3054800922a7fdd2e7c3d4406c430b6925e5f49c4bbc278f13e8f92d7eb1c42b7ca76ba0fef21709e1d2329aa6874655dc391540e55bd8227087c2ff2e3c5f76471d32f907d55bd7bd9371c0f34c17fc331769e7d1367270dceba8ca2987858f3dbf9d97bd5342ec82f2775398e29449c269e9e4d6949c3afa5f9e1545810d18"}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x814) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) close_range$auto(r3, 0x8, 0x0) 1m41.829877263s ago: executing program 0 (id=4921): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x6) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) ioctl$auto_TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) r5 = socket(0xa, 0x1, 0x3ad2dd5) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x22001, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r8, 0x1, 0x70bd28, 0x25dfdbb9}, 0x14}, 0x1, 0x0, 0x0, 0xcc5}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'pimreg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'xfrm0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x108, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff7}]}, @ETHTOOL_A_COALESCE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_COALESCE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8c8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_COALESCE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3ff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_COALESCE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_COALESCE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x93a}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fff}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40805}, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) 1m40.743209757s ago: executing program 0 (id=4924): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6c) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40081) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001800)={0x18, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f000000a240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f000000a200)={&(0x7f000000a280)={0xd24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_HINT={0xe, 0xc8, "9f62528f1003312e23cf"}, @NL80211_ATTR_MLO_LINKS={0xcf8, 0x138, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7d, 0xbe, "c4794f65f44c8e66cca81318e0445ccba06e59312255cf4423b95e59d61d2984c850e3a8f148775cc96e461cd7f7198e64286587e58146b5274901347c21ead666ead611ce44a7d9c2db49157e870edaa731520352b3619f524ff7a40a3aa3f46ed4a55cf0c484d332acc5b41da71210c808f3f3c8d90e1988"}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x5}]}, {0x274, 0x0, 0x0, 0x1, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "c34ca1"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e23}, @NL80211_ATTR_EMA_RNR_ELEMS={0x24b, 0x145, 0x0, 0x1, [@typed={0x4, 0xb4}, @generic="3c144559e4f50bf47f371eba39b5cefe53a708056cd1104bb25ae398e53ba78d2664017bbaeca743d5528f58dd55f97f7ae71b223fe0ebbbb568d014fc68dc06d1b470565077406e5ab29248142a7a9077c5e0f11f05f98a02c44eec9f69bf66dd580a816902409a5357f6", @nested={0xd9, 0x11, 0x0, 0x1, [@nested={0x4, 0xba}, @nested={0x4, 0x14f}, @typed={0x8, 0x84, 0x0, 0x0, @pid}, @generic="ac7e80680ddb3a21dd756140fa8209a2a96365f1dfbddd7cb88cd534f215de15030e8804325d9baee25d93e49b7cbd941c28da25d4004e2b0742d72e394ebe855f6e4aefebac12c0c0b308ce596419b2fd4ac4d196911b7d3c2eaebeb96e3e642eab5d60fd0ac66b65fc7aefde80f557d3a49b0e5fe57ae5ca95391a7e46cf6b49a83c752baba6762dc306c9a034b61b8e36274913b576cb4f2aae994e55dbb94f753f1ea5750ee63b40e1d95956e26f8cddfba936ef95c35d014d9523910d46a621420de4"]}, @nested={0xf9, 0x56, 0x0, 0x1, [@generic="9866f83c82e08983d2cb7e0d6ed417d314fc1fe2814ea914a99341da903942f0556c93c74a856d52509e3eadf871a9ad79769832ba7a967be5bbddb7dedd6df4", @generic="013e7a9a8fe36d6e20ed476aab76a16bd702534d8f4bba1ec75a2a3923e0ad18db7cd2e08b685fa646305b379b9233a341", @nested={0x4, 0x2e}, @nested={0x4, 0x84}, @typed={0x8, 0xcc, 0x0, 0x0, @pid}, @typed={0x64, 0x24, 0x0, 0x0, @binary="6101edd5190539fb373c5da5a452317d5ae684147d0a0f8f69add74b52c3a42c3cac4149b492d957a0083b14a9dd0b5266f0bda9e31af4aa3965ed5906b0721c7c1f2a62103d40148849e5d3e2bf4c6326e8e335cfb99c866b1b5d8154b567ac"}, @nested={0x4, 0xb9}, @nested={0x4, 0x98}, @nested={0x4, 0x2e}, @nested={0x4, 0x105}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, {0x3b0, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xca}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_IE_ASSOC_RESP={0x399, 0x80, "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"}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x10}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "5cb5034c024abde6661081a869e4515d2108eac2058412849b27"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, "869527164f3966c8c3"}, @NL80211_ATTR_IE_PROBE_RESP={0x24e, 0x7f, "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"}]}, {0x3b8, 0x0, 0x0, 0x1, [@NL80211_ATTR_HT_CAPABILITY={0x3ab, 0x1f, "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"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}]}, 0xd24}, 0x1, 0x0, 0x0, 0x800d808}, 0x20040871) write$auto(0x3, 0x0, 0x100000000) 1m39.764776795s ago: executing program 0 (id=4931): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x8, 0x2, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r1, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0x15, 0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(r0, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f0000000180)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca0a"}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r3 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mounts\x00', 0x101080, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x27) mmap$auto(0x8000000000000001, 0x475b, 0xfffffffffffffff8, 0x9b74, r3, 0x28000) ioctl$auto(0x3, 0xf29a, 0xffffffffffffffff) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) pread64$auto(r5, 0x0, 0x100000, 0x7fff) ioctl$auto(r4, 0x4b47, r4) 1m39.257434818s ago: executing program 0 (id=4935): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x14) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNAPSHOT_UNFREEZE(r2, 0x3302, 0x0) socket(0xf, 0x3, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m38.297982529s ago: executing program 0 (id=4939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x24, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x8, 0x124, 0x0, 0x1, [@generic="054e5cbd"]}]}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) (fail_nth: 2) 1m29.204361768s ago: executing program 36 (id=4909): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, r0, [0x5], {0xd74c, 0x10000, 0x3ff, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0x2, 0x1, 0x6, 0x7, 0x1, 0x40, 0x176c7, 0x1, 0x100000005}}) r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r1, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0x15, 0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x7f, &(0x7f0000000180)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca0a"}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) 1m22.992139946s ago: executing program 37 (id=4939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x24, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x8, 0x124, 0x0, 0x1, [@generic="054e5cbd"]}]}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) (fail_nth: 2) 1m19.404477464s ago: executing program 8 (id=4984): openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x80002, 0x0) unshare$auto(0x40000080) setpriority$auto(0x2, 0x0, 0x80000) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x104, 0x3) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/event0\x00', 0x68000, 0x0) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000001100)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_net_dm(0x0, r1) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="56cbe560", @ANYRES16=r2, @ANYBLOB="01002bbd7000f9dbdf250100000006000200010000000c000f00ff7f000000000000080009000800000008000a000800000014001f000000000000000000000000000000000014002000"/90], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) shmctl$auto_SHM_INFO(0x2, 0xe, &(0x7f00000003c0)={{0x800, 0xee00, 0x0, 0x109, 0x6, 0xffffff01, 0xe7}, 0x0, 0x1ff, 0xe, 0x100000000, @raw=0x6, @raw=0xbd, 0x6, 0x0, &(0x7f00000002c0)="19ba58a49ac9c53bc2581ff17209dc5e45b5336d778d0d573ca0e21b2ce7cab8bfb7e5c9e178052ddaea788fb9d215b51dd48c862bb35ef57c31b2bae95ef3f0c5f28ea1f73a158a701743f35c54495b757f1c70ccfacc02c32f820941febbb48ae6c46819a92979ae25015df7bbc2979bfa40489294fca8dd0b812dca331f50a9a3388edd3f4c3dbb7bef92c874b87161ab9d5593224cfa0cb0e3dbeeb3cc9e515e099b5e11b185d830db1c17014d3b419d2eca59", &(0x7f0000000380)="b3e4263271dfdb0e63d6f582ab40f57fb19671ff678e360839073df8457e6fca2d17162ec74c57eca406d07bbc69f98621f6e4"}) msgctl$auto_IPC_INFO(0x6, 0x3, &(0x7f00000004c0)={{0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x4, 0x6e, 0x6}, &(0x7f0000000440)=0xdf, &(0x7f0000000480)=0x2, 0x3a, 0x8001, 0x1, 0x5, 0x54f36024, 0x200, 0x8, 0x0, @raw=0xfc, @inferred=0xffffffffffffffff}) r5 = getegid() fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, r5) keyctl$auto(0x2, r3, r4, r5, 0x30a53fee) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, 0x0, 0x20802, 0x0) prctl$auto(0x4420, 0x1, 0x4, 0x400000005, 0x400000000007) 1m17.925312196s ago: executing program 8 (id=4989): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) socket(0x2, 0x5, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) socket(0x2c, 0x80003, 0x0) r1 = epoll_create$auto(0x1) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m17.688742948s ago: executing program 8 (id=4990): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x6) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) ioctl$auto_TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) r5 = socket(0xa, 0x1, 0x3ad2dd5) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x22001, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$auto_BATADV_CMD_SET_MESH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbb9}, 0x14}, 0x1, 0x0, 0x0, 0xcc5}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'pimreg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'xfrm0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x108, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff7}]}, @ETHTOOL_A_COALESCE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_COALESCE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8c8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_COALESCE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3ff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_COALESCE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_COALESCE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x93a}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fff}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40805}, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) 1m16.491628185s ago: executing program 8 (id=4993): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6c) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40081) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001800)={0x18, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f000000a240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f000000a200)={&(0x7f000000a280)={0xd24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_HINT={0xe, 0xc8, "9f62528f1003312e23cf"}, @NL80211_ATTR_MLO_LINKS={0xcf8, 0x138, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7d, 0xbe, "c4794f65f44c8e66cca81318e0445ccba06e59312255cf4423b95e59d61d2984c850e3a8f148775cc96e461cd7f7198e64286587e58146b5274901347c21ead666ead611ce44a7d9c2db49157e870edaa731520352b3619f524ff7a40a3aa3f46ed4a55cf0c484d332acc5b41da71210c808f3f3c8d90e1988"}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x5}]}, {0x274, 0x0, 0x0, 0x1, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "c34ca1"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e23}, @NL80211_ATTR_EMA_RNR_ELEMS={0x24b, 0x145, 0x0, 0x1, [@typed={0x4, 0xb4}, @generic="3c144559e4f50bf47f371eba39b5cefe53a708056cd1104bb25ae398e53ba78d2664017bbaeca743d5528f58dd55f97f7ae71b223fe0ebbbb568d014fc68dc06d1b470565077406e5ab29248142a7a9077c5e0f11f05f98a02c44eec9f69bf66dd580a816902409a5357f6", @nested={0xd9, 0x11, 0x0, 0x1, [@nested={0x4, 0xba}, @nested={0x4, 0x14f}, @typed={0x8, 0x84, 0x0, 0x0, @pid}, @generic="ac7e80680ddb3a21dd756140fa8209a2a96365f1dfbddd7cb88cd534f215de15030e8804325d9baee25d93e49b7cbd941c28da25d4004e2b0742d72e394ebe855f6e4aefebac12c0c0b308ce596419b2fd4ac4d196911b7d3c2eaebeb96e3e642eab5d60fd0ac66b65fc7aefde80f557d3a49b0e5fe57ae5ca95391a7e46cf6b49a83c752baba6762dc306c9a034b61b8e36274913b576cb4f2aae994e55dbb94f753f1ea5750ee63b40e1d95956e26f8cddfba936ef95c35d014d9523910d46a621420de4"]}, @nested={0xf9, 0x56, 0x0, 0x1, [@generic="9866f83c82e08983d2cb7e0d6ed417d314fc1fe2814ea914a99341da903942f0556c93c74a856d52509e3eadf871a9ad79769832ba7a967be5bbddb7dedd6df4", @generic="013e7a9a8fe36d6e20ed476aab76a16bd702534d8f4bba1ec75a2a3923e0ad18db7cd2e08b685fa646305b379b9233a341", @nested={0x4, 0x2e}, @nested={0x4, 0x84}, @typed={0x8, 0xcc, 0x0, 0x0, @pid}, @typed={0x64, 0x24, 0x0, 0x0, @binary="6101edd5190539fb373c5da5a452317d5ae684147d0a0f8f69add74b52c3a42c3cac4149b492d957a0083b14a9dd0b5266f0bda9e31af4aa3965ed5906b0721c7c1f2a62103d40148849e5d3e2bf4c6326e8e335cfb99c866b1b5d8154b567ac"}, @nested={0x4, 0xb9}, @nested={0x4, 0x98}, @nested={0x4, 0x2e}, @nested={0x4, 0x105}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, {0x3b0, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xca}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_IE_ASSOC_RESP={0x399, 0x80, "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"}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x10}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "5cb5034c024abde6661081a869e4515d2108eac2058412849b27"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, "869527164f3966c8c3"}, @NL80211_ATTR_IE_PROBE_RESP={0x24e, 0x7f, "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"}]}, {0x3b8, 0x0, 0x0, 0x1, [@NL80211_ATTR_HT_CAPABILITY={0x3ab, 0x1f, "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"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}]}, 0xd24}, 0x1, 0x0, 0x0, 0x800d808}, 0x20040871) write$auto(0x3, 0x0, 0x100000000) 1m15.460651048s ago: executing program 8 (id=4996): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) mmap$auto(0x8000000000, 0x800004020009, 0xdf, 0x1a, 0xffffffffffffffff, 0x3) mremap$auto(0x4000, 0xb8, 0x13fd0, 0x3, 0x7) unshare$auto(0x40000080) read$auto_ipsec_dbg_fops_ipsec(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000f40)={0x14, r1, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mprotect$auto(0x0, 0x8000000000000001, 0x8) 1m14.512393439s ago: executing program 8 (id=4998): socket(0x2c, 0x3, 0x0) mbind$auto(0x4, 0x20009456, 0x100002001, 0x0, 0x1, 0xa) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x3) mmap$auto(0x0, 0x5, 0x2, 0x18, r0, 0x300000000004) r1 = socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x485, 0x0, &(0x7f0000000040)=0x4) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x89f2, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb3, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "0037ff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000500)=@link_create={@map_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x4e4, 0x0, 0x1, 0x4}}, 0x92) 59.228146944s ago: executing program 38 (id=4998): socket(0x2c, 0x3, 0x0) mbind$auto(0x4, 0x20009456, 0x100002001, 0x0, 0x1, 0xa) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x3) mmap$auto(0x0, 0x5, 0x2, 0x18, r0, 0x300000000004) r1 = socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x485, 0x0, &(0x7f0000000040)=0x4) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x89f2, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb3, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "0037ff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000500)=@link_create={@map_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x4e4, 0x0, 0x1, 0x4}}, 0x92) 28.416019661s ago: executing program 5 (id=5137): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1bff, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x7}, 0x35b, 0x5) bpf$auto(0x1, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x8000, 0xf9c, 0x466, 0x9, 0x3, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0x9f) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x0, 0x0) epoll_create$auto(0x3671) io_uring_setup$auto(0x1d48, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) connect$auto(0x3, &(0x7f00000000c0), 0x55) write$auto(0x3, 0x0, 0x800) 27.209950158s ago: executing program 5 (id=5144): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) getsockopt$auto(0x100000006, 0x0, 0x16, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x446be6e8, 0x16, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = eventfd$auto(0x4) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000000), r0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) prctl$auto(0x5, 0x2, 0x7fffffffefff, 0x0, 0x0) ioctl$auto(r2, 0x4004af07, r1) ioctl$auto_BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000001c0)="c9afeb24bfea7f787b7aa474937ba1e0ab0eb5d02d7f51b2bb5b63f6d8e95a987cf7edf5f2843d641ea4fc972ab7829b094e65331df0") r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r0) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/snd/pcmC1D1p\x00', 0x200, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f0000000840)={0x7, 0x1000, 0x8, 0x1, 0x4, 0x3, 0x1, 0x10001, 0x5, 0xffff473f, 0x80000000, 0x4, 0x10001, 0x854, 0x64, 0x3ff, 0x0, 0x4, "547d8f774e7ab98e3ccdbad1e13745f260aa6a6264428625532ee28234827d36031da9ab"}) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1109cfcde5bc6fb1285f021a806cd4e48b35", @ANYRES16=r3, @ANYBLOB="000125bd7000fedbdf250b000000d400000091401036f36babfc88de1de42f41820e754f8b87872ad9c4eaba75f0d8a727244e9d145804fb029a173193608f34e8810d1beb6125da489f6dad14b0af7e72a1a6cf09ff6accb30af6951fc43b06cbf4b467e0a4c48236b6b6b97bbfdba12135794077e22c7abbe60411c9ee42f7ed6dfd33cf5b69e3a2c0332c04aacf6397106b02134555c73bb1d6ae0f02e895a76f89343565b48fa641884859ce2798b0aa3737c12373f5cf9dbb605bd0b3f476ba9df763ed7deb5179aea36bd072b1102679fffb2a4fe9abcb51d56c7f57808436"], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x48040) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x90141, 0x0) unshare$auto(0x40000080) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) read$auto_proc_loginuid_operations_base(r0, &(0x7f0000000140)=""/72, 0x48) sendmsg$auto_TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="00050000a5339a0000d26cdeaaab54b4adf4e546f1d139251dbe97f5f4de38695ae6e326b8c602000000f546", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x568}}, 0x4000001) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000040), 0x7111}, 0x8) write$auto_proc_page_owner_threshold_(r5, &(0x7f0000000140), 0x0) 25.721006299s ago: executing program 5 (id=5149): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, r1, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) socket(0x2c, 0x80003, 0x0) r2 = epoll_create$auto(0x1) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 25.592222423s ago: executing program 6 (id=5150): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/kernel/msg_next_id\x00', 0x181100, 0x0) gettid() alarm$auto(0x0) fanotify_init$auto(0x200, 0x1) sigaltstack$auto(&(0x7f0000000200)={&(0x7f0000000140), 0x1, 0x4}, &(0x7f00000002c0)={&(0x7f0000000240)="3136fbcb407ad3314339c70c6cf8927e6f24eec2d9ed163ffa1769334ea07f09108b382bd59d0d9f40a1c7969d47cdf9f55dd7d31f2c3ff2d1be84148024ab7e748c", 0x1, 0x8}) fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0) close_range$auto(0x0, 0xfffff004, 0x2) 25.391925903s ago: executing program 6 (id=5151): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0xd, 0xc, 0x0, 0x1, [@nested={0x4, 0x1}, @generic="2573b8bb93"]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f25790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 25.207482817s ago: executing program 5 (id=5152): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) futex$auto(0x0, 0x7, 0x9, 0x0, 0x0, 0x80000001) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0x1, 0x0, 0x0, 0x5, 0x8003) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) mmap$auto(0x0, 0x8, 0x9, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="000127bd7000fedbdf2506000000ec3dcc0f2ea6e3c1d705719d4617ddd6aecc5385e61f58a3c47a8802f27790b71ec8ab16b828f4a93502f02d661ea1fca92b8d7ef3630e2587a5e4c47c7cd58552e81c6c69de23be883b0af261f2330b22131ccdf092072ab581e41b8da64e5b199b2abf092b112dbbbea608f5a726c6760189cf6d2129ad9cc10e6c2d5b6a9b382234b459c370d1cbe377b4a4fe041183966aecf87f7f687e5ecb0e1dcfc7178c74a572251cccbe195a66305f84df3f57afc0d6c10b94f6626d528d3957b38126"], 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0xd0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/snd_usb_audio/parameters/quirk_flags\x00', 0x121102, 0x0) write$auto(r3, &(0x7f0000000040)='\\\x00', 0x2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x5, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x100c0, 0x0) madvise$auto(0x0, 0x7fffffffffff7fff, 0x40000005) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r0, @ANYBLOB="08002dbd7000fddbdf250e000000050012004000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x7, 0x0, 0x7, 0x10, r3, 0x7fffffffffffffff) r5 = prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000000500)=""/186, 0xba) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) 25.088882543s ago: executing program 6 (id=5154): connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)=ANY=[@ANYBLOB="1b0026bd7000fedbdf250300000004000800b8050380b4051580ad056a80fd0334804414b5e71c19189994849c8e33c5654a3199fb7003ac61790d6d0448ce3d0b7ae5ac4d1f24f5d4f82cf2040bd92f23a5c83a6f55e52d64de0f1cc05f5a41ddc09a1263e198b47ac1491d05665a3f8238172afc29e794dad7d13c2b1e9fcce756921c36bb9b7042b98c98e13e00f12faaa70b4266df23aea8dcc1c452da69a65f279e8b166395ec66f4c3987797a769c34e5193053bd83a5b61572013930205aa44a04ec1e78f81317d0083b9bd619d3db78613b14ede4ba8a3493b6a01f8d236acfe23fafd4fa9748bb13be53daf879e59143adfcb415525af562b4b7f22a198b1808c86e16821077e6a7a95ba8cd77abd7836db47e7887b9e4264415d8a0ac36c50942cead62bc7a8d30c79077dbbbea4c5b7422b8af6755a895ae2ada5ddeba90e5b137c2138b1081cde8847e101c2de0dbe60051c08f4d7674cb4f6f35cd001303d15466168eb815516b96a8bc1558ade0712ed50026ce2a6fa5c218234acc1b773c5f47b56f26c25cdc17aecddf93ebcb11144b0b6deaac44e48351ecfca7d295006b30226b45bb62b16cac492c646d612c3ff1a26142ed3ac69b966a6bc9c6eedb181a40989bbf3177ca3ad72a1b9d3d3939516e46fa308660163f10fd0c06f660291689bf754c6fd3d06a8a59913cc4e5097869aa17eb19340cf97ea5ba7fbea4bff5fac84e100e1b436c067e02d4f5a2f14e28f00a8904172dc9c64f4549d84f32a15b662399c339fcf5acaef3f51f6e99aa593fad035bded218acfc89bb20709371bd55a0231c9aa97f47f46c7fecfb6e158fa64a8e864b3c97a42b70d0c837847e27e8a75dcc999e2f88b14a950f05b1f353c5b49b63c53c966edc733423845f7812e4dd35b830d9d4de48a291edd1aa8d8543d69b6d6e1209cfac38a5c0dbb77716ea1084b55a587513161feba49f9f8bd1895f51fc296299414584ac7ca40896334e8fe8806c62395c43fba657ca9b9e41fc2d07ece47aded33ba82008ab87a4aad8fae146d37fd0d0dc6bce96955078db8b39ef4392244c9aca8e115cb0689426582f1ef4a5c8aa9cf3c2626a68ef6c63af571647e1d153708f58eed9388f32f2439a30fa9429e73cca3604a098853a955b4bc73d91c20a53aa8d746809ae0f390388275920bb80b893d1e373494ed204a17011946e5580725c66acca186a5daef1f62a3a0211667b61340f5cd252f9625ce24770dc3b9626d51d11be09ee1b2f26bafb61c1ddfda8472ffbd9e1b4c330400e6805ffa51aad319e786f73945c27437b7a059027be01c91d1a6f1fe49544c6630b35888d8afac5b7868940688f46fd583f0425896a764c88b76702ee61a8c1a35d048b4ae377292e02585db23464edb4b7f8585ca0976c55810a00fcc79005d004c2e06758684bb54c2ca30619f76684340c979330c000f00f9ffffffffffffff00000044dacb9d1b274c435e186e51ff674ecaf7eee06caa21052ae13a9ddbfb239e0fb43e92d258159d6cc714ca5c1a87564dee7f7cc13e575970de44ebef72ad01db313f714a5c45499fa6618e2e979670f011f6ed9baa10d8a480e1a1994674c17f4bd919fce260c0bfb0cbb4d22512b741d027f5b1faeb4d63e6a28cdc580444db2655fd777232b251660d3efad585c92df2956745a8e37958ccc7705c72843dcbbec0c3402a5f6f70099a1c5f623a222de24ebe133e9f001a935f4aa98b7ce62c9b45b0de1fe17ba6303eaa18932fdae810383101c64cb9208ed11faffe178a729eca1573f91a18e12405003d0000000000080029800400dc80aa0035004e0c741586e057357438d9b8c9d574c020c5d046f1ca09985b9b7a205db65e26e7c357937314260ab705924fe243c20805aab6f66a1fd2f93d8c698343b50ad0cd0a6314515cff76ef54658c"], 0x5e8}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef) 24.696586265s ago: executing program 6 (id=5156): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/clockevents/broadcast/current_device\x00', 0x181400, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/clockevents/broadcast/current_device\x00', 0x181400, 0x0) futex$auto(&(0x7f0000000040)=0x1, 0x5, 0x10001, 0x0, &(0x7f0000000140)=0x3, 0x6fffffff) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0) write$auto(0x3, 0x0, 0x200000100082) r2 = openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000005f40)='/sys/kernel/debug/clk/clk_dump\x00', 0x8800, 0x0) pread64$auto(r2, 0x0, 0x13, 0x4) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r1, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYBLOB="2bb22bbd70", @ANYRES32=0x0, @ANYBLOB="47f22acf9310318f1a2b6298cdc500f2c6544ce39b9cc6c37107b4f8269dfcbc343565f33ba808206482de5c7bc83fdf721946ab0c5bcc0511324cb2359886c0e2c5cf6f5609a26e04038c2e2127eb78fd45b3f0487fc58872f06d7f63ae9613da8d2226d5104173b6e4"], 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_tgids\x00', 0x101002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) open(&(0x7f0000001bc0)='./file0\x00', 0x4142, 0x1) (async) r5 = open(&(0x7f0000001bc0)='./file0\x00', 0x4142, 0x1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) mmap$auto(0x20000000000, 0x7ff, 0xffb, 0x8000000008011, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty57\x00', 0x40741, 0x0) ioctl$auto(0x3, 0x402c542d, r6) (async) ioctl$auto(0x3, 0x402c542d, r6) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) pread64$auto(r0, 0x0, 0x7, 0xd3f3) (async) pread64$auto(r0, 0x0, 0x7, 0xd3f3) syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000000c0), r5) (async) r7 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0xf8, r7, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14}, @WGDEVICE_A_PUBLIC_KEY={0x4a, 0x4, "3efdeb4b4cdff2cb1223c79c6e77c346ccfa86ee5ee5d7f2179895c6b41275f92faf34270edbe69050a9292b2dfde411e42bc02683828a4b970a78452ba693b0796c3e5485fc"}, @WGDEVICE_A_PRIVATE_KEY={0x65, 0x3, "520a7cacb3c4f8c94d34def91938e30b188ed0d824831a2298e900d93165b993456fa9737eae29fbee43dc78e35c303f4b96b2899799ede1726b9baf2ef31706bd8026565eebce75f24d91e8fe4f474c841b3d667cce94999f4cb48ccdb3517e25"}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'pim6reg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x4c000) 24.340840131s ago: executing program 6 (id=5157): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000040), r2) 23.484919707s ago: executing program 5 (id=5159): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) (async) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) (async) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x7ff) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x6) fcntl$auto_F_OFD_SETLK(r0, 0x25, 0x101) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) (async) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') capset$auto(0x0, 0x0) unshare$auto(0x40000080) (async) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 23.327196399s ago: executing program 6 (id=5160): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/kernel/msg_next_id\x00', 0x181100, 0x0) gettid() alarm$auto(0x0) fanotify_init$auto(0x200, 0x1) sigaltstack$auto(&(0x7f0000000200)={&(0x7f0000000140), 0x1, 0x4}, &(0x7f00000002c0)={&(0x7f0000000240)="3136fbcb407ad3314339c70c6cf8927e6f24eec2d9ed163ffa1769334ea07f09108b382bd59d0d9f40a1c7969d47cdf9f55dd7d31f2c3ff2d1be84148024ab7e748c", 0x1, 0x8}) fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0) close_range$auto(0x0, 0xfffff004, 0x2) 23.036338763s ago: executing program 5 (id=5162): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) pread64$auto(r0, 0x0, 0xe, 0x100000000007) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x7fff, 0x400008, 0xe3, 0x9b7e, r1, 0x8000) r2 = io_uring_setup$auto(0x406, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x27) clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb7, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x3, 0x0, 0x7, 0x6, 0x8, {0x0, 0x5}, 0xfffffffffffffff8, 0x3, 0x5, 0x7fffffff, 0x0, 0x16, 0x1, 0xaac, 0x1, 0x2, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)={0x38, r5, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r7 = pidfd_open$auto(0x1, 0x0) setns(r7, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x10, 0x800, 0x84) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x5b3e01, 0x0) r8 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(r3, 0x10000000084, 0x2, 0x0, 0x7) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 8.18281565s ago: executing program 39 (id=5160): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/kernel/msg_next_id\x00', 0x181100, 0x0) gettid() alarm$auto(0x0) fanotify_init$auto(0x200, 0x1) sigaltstack$auto(&(0x7f0000000200)={&(0x7f0000000140), 0x1, 0x4}, &(0x7f00000002c0)={&(0x7f0000000240)="3136fbcb407ad3314339c70c6cf8927e6f24eec2d9ed163ffa1769334ea07f09108b382bd59d0d9f40a1c7969d47cdf9f55dd7d31f2c3ff2d1be84148024ab7e748c", 0x1, 0x8}) fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0) close_range$auto(0x0, 0xfffff004, 0x2) 7.580147434s ago: executing program 40 (id=5162): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) pread64$auto(r0, 0x0, 0xe, 0x100000000007) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x7fff, 0x400008, 0xe3, 0x9b7e, r1, 0x8000) r2 = io_uring_setup$auto(0x406, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x27) clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb7, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x3, 0x0, 0x7, 0x6, 0x8, {0x0, 0x5}, 0xfffffffffffffff8, 0x3, 0x5, 0x7fffffff, 0x0, 0x16, 0x1, 0xaac, 0x1, 0x2, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)={0x38, r5, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r7 = pidfd_open$auto(0x1, 0x0) setns(r7, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x10, 0x800, 0x84) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x5b3e01, 0x0) r8 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(r3, 0x10000000084, 0x2, 0x0, 0x7) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 5.022038204s ago: executing program 3 (id=5207): mmap$auto(0x0, 0x20009, 0x4000000000db, 0x19, 0x401, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x8004) socket(0x2, 0x3, 0xa) mmap$auto(0x546, 0x0, 0x6, 0x2000000eb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4040004) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x203, 0x7, 0x0, 0x1, 0xfffffffffffffffc, 0x9, 0x15d4da07, 0x6, 0xc, 0x64, 0x80000022, 0x1000, 0xb, 0x7fffffffffffffff, 0x100000001, 0x5]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7fc, 0x3, 0xff, 0x200fffd, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20c03, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x400000000000000, 0x9, 0x0, 0x9b72, 0x2, 0x8000) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0) ioctl$auto_RTC_PIE_ON(r1, 0x7005, 0x0) prctl$auto(0x21, 0x3fd, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x440, 0x57e) fcntl$auto_F_ADD_SEALS(r4, 0x410, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000006a40), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r4, &(0x7f0000000cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000840)={0x410, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NCSI_ATTR_DATA={0x11f, 0x5, "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"}, @NCSI_ATTR_PACKAGE_LIST={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @pid}]}, @NCSI_ATTR_PACKAGE_LIST={0x29c, 0x2, 0x0, 0x1, [@generic="d7a36b370884d86458f37eaebfeb385de70d6d0ad053333a80fd7027e23c7fdf008436f57d6c9a5f6926072120ec75e230403a06093f5c061c7aa03caea3f248651e9f05edb7ab74b2644a5d6d2fe79e7ea77993136f4065477250fd9054a5ae6cd7df2b11fa64ab6f6b35bbbba3a5fc1dc6d430b0f7428ddee22094172dbefa3d1bab6b02372d6ba3b4e3b547b7a09b38cd9653265065846798f1d755302028b698da113c08bb524302a79a060a0bc07f8fbf2106564ed825e210f81d788c0803386d30031a9a7279c8f785f07c61eaeb4d92d72296155dd582c43dbf7064201e877ede4451", @nested={0x13b, 0x69, 0x0, 0x1, [@generic="4d9c993a55f64fb953b98581ebaaf49783c8a27681f45e29d9c7254b3741ba889a25ceb5238bfcca85c0549229d09107d5f9888595b6b8627754b8673c2409f24ab512c1c8de24678d95f65b9ac7b92cb05a62c392045498dc75d0a21048f272e898a81f17a8d47b17fda1d270fd7dea8e1a", @typed={0x16, 0x104, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @typed={0x8, 0x163, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="b4cdad558db8073b3b1c48309a3004206799233684c9ff2f600c9c89524325ca28", @typed={0x8, 0xd3, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x71, 0x7c, 0x0, 0x0, @binary="dd592c53dd99c9f5dcfa3dda8df8a5fdd35b9e16efd594bdc853dcd55f57da66b1f30715f6f7ec8a7683adf276890fde89cc425ffccac166ce8e47d34d8ffa01bcf80223281cb5f7c00d13768c6d1ff309c0bf6ead0120a6bd6acae076ab934563fa79237aa1686ae86c9cb816"}, @typed={0x8, 0xb, 0x0, 0x0, @uid}]}, @generic="d60fc0b2d436c1510c29b0707f9429e5095b2cfe79b37f42668a4cd6cc9f4067605a0c39a2f3098c41c9bcab3f5dbbb8d26f7a77789ee5a72072e84bf7193a105c33a17241d2cc4a3cee1093d248992285d48597", @generic="b063fb018610c891edfe946b4777", @typed={0x8, 0xba, 0x0, 0x0, @fd}, @typed={0x8, 0x10f, 0x0, 0x0, @pid}, @typed={0x4, 0xa9}]}, @NCSI_ATTR_CHANNEL_MASK={0x8}, @NCSI_ATTR_IFINDEX={0x8}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1ff}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x3}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x8}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x4}]}, 0x410}}, 0x4000000) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r5, &(0x7f00000071c0)={0x0, 0x0, &(0x7f0000007180)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20004000) 4.038521208s ago: executing program 9 (id=5209): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) (async) process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b4241ee46870ca4b468af9c39ee2011", 0x3}, 0x1, 0x15, 0x5) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) (async) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) (async) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0xffffffffffffffff, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) (async) openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x20281, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7, 0x1, 0x2f06, 0xc98c20c, 0x3b, 0x93f, 0x1fee5, 0x3, 0x200006, 0x2, 0x202, 0x5, 0x8008, 0x4, 0xb0, 0x9, 0x1, 0x3, 0x8, 0x4, 0x10, 0xb65, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, [0x1, 0x7fffff7f, 0xe60, 0xfffffffffffffffe, 0x9, 0x0, 0x2d26, 0x9, 0x0, 0x0, 0x9, 0x4, 0x8f0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff, 0x10, 0x4, 0x2000000000000000, 0xd, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff9]}, 0x1fe, 0x82) (async) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000440)={"3767d960c2ffe59a8907676695102661eced7832e713b94c2b182e464daf47de", 0x9, 0x1, 0x6, 0x37, 0xcf, 0xffffffffffffffff}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) (async) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) setreuid$auto(0x4, 0x8) 3.615159395s ago: executing program 3 (id=5210): mmap$auto(0x0, 0x20000003fffff, 0x10001, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a2) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb3, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\x96r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x00\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\x00'/525, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x7fff, 0x3ff, 0x9) unshare$auto(0x1000) mmap$auto(0x2, 0x168400800, 0x3, 0xeb1, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.964300098s ago: executing program 9 (id=5211): unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) (async) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x104, 0x3) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x68000, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x68000, 0x0) fsmount$auto(r0, 0x6, 0x200) (async) fsmount$auto(r0, 0x6, 0x200) mmap$auto(0x8000000000000000, 0x2020009, 0x1, 0x3fc, r0, 0x3) socket(0x15, 0x5, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x1000, 0xfffffffffffffffc, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x8) io_uring_setup$auto(0xfffffffb, 0x0) (async) io_uring_setup$auto(0xfffffffb, 0x0) readv$auto(0x3, &(0x7f0000001100)={0x0, 0xffff}, 0x1) (async) readv$auto(0x3, &(0x7f0000001100)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0xc090) syz_genetlink_get_family_id$auto_smc_pnetid(0xfffffffffffffffc, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1c\x00', 0x800, 0x0) setsockopt$auto_SO_REUSEADDR(r3, 0x7, 0x2, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x1) unshare$auto(0x8000000000000000) syz_genetlink_get_family_id$auto_net_dm(0x0, 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x1, 0x0) prctl$auto(0x4420, 0x1, 0x4, 0x400000005, 0x400000000007) 2.823135785s ago: executing program 3 (id=5212): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x1) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)="2303", 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) io_setup$auto(0xffff, &(0x7f0000000580)) (async) io_setup$auto(0xffff, &(0x7f0000000580)) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/auxv\x00', 0x22a82, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) listen$auto(0xffffffffffffffff, 0x9) (async) listen$auto(0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) (async) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8200, 0x6, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) prctl$auto(0x4e, 0x1, r2, 0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) lsm_list_modules$auto(0x0, 0x0, 0x0) modify_ldt$auto(0x11, 0x0, 0x10) accept$auto(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(0xffffffffffffffff, 0x0, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x1) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/0000:00:02.0/name\x00', 0x0, 0x0) (async) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/0000:00:02.0/name\x00', 0x0, 0x0) 2.386252047s ago: executing program 3 (id=5213): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x1c, &(0x7f0000000040)=@link_update={r0, @new_prog_fd, 0x2c}, 0x92) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00'}) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), r1) sendmsg$auto_IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc840) r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r4, &(0x7f0000000180)="b953e6ca6360e45b4fd8ecccc52782d28ddb740407f4571929f3c0f5962cf000e2d2cac4c602", 0x26) 2.283713258s ago: executing program 3 (id=5214): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x6) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) ioctl$auto_TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) r5 = socket(0xa, 0x1, 0x3ad2dd5) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x22001, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbb9}, 0x14}, 0x1, 0x0, 0x0, 0xcc5}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'pimreg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x108, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff7}]}, @ETHTOOL_A_COALESCE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_COALESCE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8c8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_COALESCE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3ff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_COALESCE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_COALESCE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x93a}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fff}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40805}, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) 1.976318197s ago: executing program 9 (id=5215): mmap$auto(0x0, 0x3, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff) setresgid$auto(0x9, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm1p/sub3/status\x00', 0x84300, 0x0) shmctl$auto_SHM_STAT(0x1, 0xd, &(0x7f0000000480)={{0x6, 0xee01, 0xee01, 0x3, 0x6, 0x9, 0x7f}, 0x2, 0x2, 0xac3, 0x6, @raw=0xbd6, @inferred, 0x7fff, 0x0, &(0x7f00000002c0)="e6003a445340333567694f6d93a7cd6093c302bf6041d87c4cd8290a4beb218b7e2f140bd0006e162a5b223b77dfb868b9bb435fb864998d27ba504084c72b56d6e2f37acea1996375bb15b0b5cda655a0e07fb8e9a36302d66982052ff7b58238c490700e9dc4be2ab1095a19a0fcd502dd2acc9edbbaa42aa98c6d19ff3becd341586ced120de3d7273fa788832089b3444500b8b38ca10f0511832e097a09bf0c45148c569c2a274f475380d10c513bb0f59452b79d72597b6c55faaac56bc84dd51cb0674086c2a53d7a0718fd6509e2afdc54d867920e9f23", &(0x7f0000000500)="24c08eed165166f6a33e23a8bec0769e6de276b2bc7925194d39eb00e9e9adafe9133671ffaf1fdd61ba9cf898649938cb75f1a726a8a6d10aae137a78c340f4d5c8482584278b7889fcc0b1a0d9d891956d6b3cfcf9445a651df0b0df6d612b0e6504021d6fdaf046f19ac62fe8edeebaa4da457e31ede34842715235f159546a718c9d77361bd5b7daadbfed45a493a57cdcac4b6986b01eb609"}) setresgid$auto(0x0, 0x0, r2) (async) setresgid$auto(0x0, 0x0, r2) pread64$auto(r1, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) r3 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x840, 0x10, 0x2}, 0x18) setsockopt$auto(0xffffffffffffffff, 0x401, 0x21, 0x0, 0x39d6c94c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0xb) (async) write$auto(r4, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0xb) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) 1.533499618s ago: executing program 3 (id=5216): rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000040)={0x8, 0xc, 0x1, 0x1, 0x7, 0xffffffffffffffff}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYRESDEC=r0, @ANYBLOB="08005200280234aafd1aca0e", @ANYRES32=0x9, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x8c0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x7cb100, 0xa) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x7, 0xf3, 0xb3, @raw=0x5}}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/022/001\x00', 0x20882, 0x0) r3 = socket(0x1e, 0x805, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r4 = socket(0x9, 0x1, 0x100) ftruncate$auto(r4, 0x3) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, 0xffffffffffffffff, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) connect$auto(r3, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) 1.008373718s ago: executing program 9 (id=5217): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x0, 0x5, 0x0) (async, rerun: 32) socketpair$auto(0x21, 0x5, 0xffff8000, 0x0) (async, rerun: 32) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x4605, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop12\x00', 0x585a40, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) 780.564529ms ago: executing program 9 (id=5218): socket(0xf, 0x3, 0x73) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xa01, 0x10) readlinkat$auto(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='}z#\\^\x1c[\\*\x00', 0xc) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty9\x00', 0x402000, 0x0) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) 0s ago: executing program 9 (id=5219): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) (async, rerun: 64) r0 = bpf$auto(0xfffffffe, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xe7, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242395, 0x7ff, 0x8, 0x8, 0x10002, 0x1, 0x81, 0x68198}, 0x6f2) (rerun: 64) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) (async) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0xd815, 0x4, 0x10001, 0x3, 0x3, r1, [0x7ff, 0x1000, 0x8], {0x6, 0x1000, 0x5, 0x1, 0x404, 0x3, 0x3fdc, 0x26c, 0x1000000000e8}, {0x2, 0x2, 0x9, 0x20, 0x101, 0x10, 0x1, 0xa, 0x3}}) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) (async, rerun: 32) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), r0) (async, rerun: 32) setsockopt$auto_SO_SELECT_ERR_QUEUE(r2, 0x0, 0x2d, &(0x7f0000000380)='802.15.4 MAC\x00', 0xffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0xa, 0x80000, 0x0) (async, rerun: 32) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc40, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101000, 0x0) (async) socket(0x2, 0x5, 0x0) socket(0xa, 0x80803, 0x6) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x3f}, 0x9) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (rerun: 32) kernel console output (not intermixed with test programs): 4: comm syz.2.4254: iget: checksum invalid [ 1440.088119][T28804] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1440.185991][T28804] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4254: iget: checksum invalid [ 1440.264814][T28804] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1440.316890][T28804] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4254: iget: checksum invalid [ 1440.389704][T28804] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1440.414075][ T5294] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1440.426989][T28804] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4254: iget: checksum invalid [ 1440.552758][T28804] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1440.686772][T28804] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1440.790103][T28551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.806309][T28804] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1441.800806][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1442.121324][ T5294] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1442.207543][T28551] veth0_vlan: entered promiscuous mode [ 1442.366898][T28551] veth1_vlan: entered promiscuous mode [ 1442.492814][T28551] veth0_macvtap: entered promiscuous mode [ 1442.548718][T28551] veth1_macvtap: entered promiscuous mode [ 1442.630095][T28551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1442.699042][T28551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1442.770206][T28448] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.810051][T28448] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.856246][T28448] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.898355][T28448] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.229948][T28445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.229997][T28445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.326193][T28444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.326211][T28444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.881003][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1444.609670][T28887] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1445.960715][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1448.042647][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1450.120878][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1451.053988][T28968] Process accounting paused [ 1451.652158][T28999] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4285'. [ 1452.200679][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1454.179617][T29032] Process accounting paused [ 1454.280678][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1456.360657][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1456.645198][T29108] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 1456.794530][T29108] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1456.885091][T29108] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 1456.990026][T29108] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1457.093873][T29108] page dumped because: unmovable page [ 1457.167220][T29108] page_owner info is not present (never set?) [ 1458.440642][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1459.286960][T29172] synth uevent: /devices/platform/vivid.0/cec22: unknown uevent action string [ 1459.460391][T29172] cec cec22: uevent: failed to send synthetic uevent: -22 [ 1460.520867][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1461.162635][T29213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4319'. [ 1461.310126][T29216] netlink: 178 bytes leftover after parsing attributes in process `syz.2.4319'. [ 1462.600724][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1464.680800][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1464.839087][T29273] netlink: 'syz.1.4330': attribute type 11 has an invalid length. [ 1465.573840][T29294] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4335'. [ 1465.628730][T29294] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1466.760966][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1468.841134][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1468.966211][T29384] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0e02a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 1468.982016][T29384] Call Trace: [ 1468.985292][T29384] [ 1468.988210][T29384] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 1468.994897][T29384] mce_cpu_restart+0xd5/0x1f0 [ 1468.999565][T29384] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1469.004840][T29384] smp_call_function_many_cond+0x13d4/0x1700 [ 1469.010817][T29384] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1469.016087][T29384] ? mark_held_locks+0x40/0x70 [ 1469.020841][T29384] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1469.026639][T29384] ? lockdep_hardirqs_on+0x78/0x100 [ 1469.031849][T29384] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1469.037646][T29384] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1469.043965][T29384] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 1469.049943][T29384] ? __timer_delete_sync+0x151/0x1c0 [ 1469.055220][T29384] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1469.060491][T29384] on_each_cpu_cond_mask+0x40/0x90 [ 1469.065607][T29384] set_bank+0x240/0x3a0 [ 1469.069746][T29384] ? __pfx_set_bank+0x10/0x10 [ 1469.074425][T29384] ? find_held_lock+0x2b/0x80 [ 1469.079091][T29384] ? sysfs_file_kobj+0xe4/0x290 [ 1469.083939][T29384] ? sysfs_file_kobj+0xe4/0x290 [ 1469.088783][T29384] ? __pfx_set_bank+0x10/0x10 [ 1469.093443][T29384] dev_attr_store+0x58/0x80 [ 1469.097934][T29384] ? __pfx_dev_attr_store+0x10/0x10 [ 1469.103119][T29384] sysfs_kf_write+0xf2/0x150 [ 1469.107704][T29384] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1469.112976][T29384] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1469.118171][T29384] vfs_write+0x6ac/0x1070 [ 1469.122492][T29384] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1469.128301][T29384] ? __pfx_vfs_write+0x10/0x10 [ 1469.133063][T29384] ksys_write+0x12a/0x250 [ 1469.137378][T29384] ? __pfx_ksys_write+0x10/0x10 [ 1469.142216][T29384] ? rcu_is_watching+0x12/0xc0 [ 1469.146965][T29384] do_syscall_64+0x115/0x840 [ 1469.151545][T29384] ? clear_bhb_loop+0x40/0x90 [ 1469.156212][T29384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.162090][T29384] RIP: 0033:0x7f2def19ce59 [ 1469.166498][T29384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1469.186090][T29384] RSP: 002b:00007f2deff95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1469.194524][T29384] RAX: ffffffffffffffda RBX: 00007f2def416180 RCX: 00007f2def19ce59 [ 1469.202480][T29384] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000007 [ 1469.210437][T29384] RBP: 00007f2def232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1469.218388][T29384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1469.226340][T29384] R13: 00007f2def416218 R14: 00007f2def416180 R15: 00007fffb170de08 [ 1469.234307][T29384] [ 1470.920849][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1471.614163][T29408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4355'. [ 1472.838094][T29467] FAULT_INJECTION: forcing a failure. [ 1472.838094][T29467] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.912206][T29467] CPU: 0 UID: 0 PID: 29467 Comm: syz.2.4363 Tainted: G L syzkaller #0 PREEMPT(full) [ 1472.912234][T29467] Tainted: [L]=SOFTLOCKUP [ 1472.912240][T29467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1472.912249][T29467] Call Trace: [ 1472.912256][T29467] [ 1472.912272][T29467] dump_stack_lvl+0x100/0x190 [ 1472.912297][T29467] should_fail_ex.cold+0x5/0xa [ 1472.912318][T29467] should_failslab+0xc2/0x120 [ 1472.912339][T29467] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1472.912355][T29467] ? register_pidns_sysctls+0x48/0x1c0 [ 1472.912379][T29467] ? rcu_is_watching+0x12/0xc0 [ 1472.912402][T29467] kmemdup_noprof+0x29/0x60 [ 1472.912419][T29467] register_pidns_sysctls+0x48/0x1c0 [ 1472.912442][T29467] ? __ns_common_init+0x299/0x4b0 [ 1472.912463][T29467] copy_pid_ns+0x680/0x10a0 [ 1472.912488][T29467] ? __pfx_copy_pid_ns+0x10/0x10 [ 1472.912511][T29467] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1472.912534][T29467] ? create_new_namespaces+0x30/0xac0 [ 1472.912556][T29467] create_new_namespaces+0x2aa/0xac0 [ 1472.912578][T29467] unshare_nsproxy_namespaces+0xf2/0x220 [ 1472.912598][T29467] ksys_unshare+0x438/0xab0 [ 1472.912620][T29467] ? __pfx_ksys_unshare+0x10/0x10 [ 1472.912639][T29467] ? xfd_validate_state+0x129/0x190 [ 1472.912654][T29467] ? ksys_write+0x1ac/0x250 [ 1472.912676][T29467] __x64_sys_unshare+0x31/0x40 [ 1472.912697][T29467] do_syscall_64+0x115/0x840 [ 1472.912718][T29467] ? clear_bhb_loop+0x40/0x90 [ 1472.912736][T29467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.912751][T29467] RIP: 0033:0x7f2def19ce59 [ 1472.912765][T29467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1472.912780][T29467] RSP: 002b:00007f2deffd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1472.912796][T29467] RAX: ffffffffffffffda RBX: 00007f2def415fa0 RCX: 00007f2def19ce59 [ 1472.912807][T29467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1472.912816][T29467] RBP: 00007f2def232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1472.912826][T29467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1472.912835][T29467] R13: 00007f2def416038 R14: 00007f2def415fa0 R15: 00007fffb170de08 [ 1472.912855][T29467] [ 1473.420080][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1475.481344][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1476.527259][T29498] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4369'. [ 1477.438717][T29538] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4378'. [ 1477.510571][T29538] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1477.562047][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1479.539444][T29601] FAULT_INJECTION: forcing a failure. [ 1479.539444][T29601] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.581247][T29601] CPU: 0 UID: 0 PID: 29601 Comm: syz.0.4387 Tainted: G L syzkaller #0 PREEMPT(full) [ 1479.581275][T29601] Tainted: [L]=SOFTLOCKUP [ 1479.581281][T29601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1479.581291][T29601] Call Trace: [ 1479.581297][T29601] [ 1479.581304][T29601] dump_stack_lvl+0x100/0x190 [ 1479.581326][T29601] should_fail_ex.cold+0x5/0xa [ 1479.581346][T29601] ? __register_sysctl_table+0xbe4/0x1650 [ 1479.581365][T29601] should_failslab+0xc2/0x120 [ 1479.581383][T29601] __kmalloc_noprof+0xe0/0x850 [ 1479.581402][T29601] __register_sysctl_table+0xbe4/0x1650 [ 1479.581425][T29601] ? __pfx___register_sysctl_table+0x10/0x10 [ 1479.581454][T29601] ? rcu_is_watching+0x1/0xc0 [ 1479.581474][T29601] ? __asan_memcpy+0x3c/0x60 [ 1479.581499][T29601] register_pidns_sysctls+0x11d/0x1c0 [ 1479.581522][T29601] ? __ns_common_init+0x299/0x4b0 [ 1479.581544][T29601] copy_pid_ns+0x680/0x10a0 [ 1479.581568][T29601] ? __pfx_copy_pid_ns+0x10/0x10 [ 1479.581591][T29601] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1479.581614][T29601] ? create_new_namespaces+0x30/0xac0 [ 1479.581636][T29601] create_new_namespaces+0x2aa/0xac0 [ 1479.581665][T29601] unshare_nsproxy_namespaces+0xf2/0x220 [ 1479.581686][T29601] ksys_unshare+0x438/0xab0 [ 1479.581709][T29601] ? __pfx_ksys_unshare+0x10/0x10 [ 1479.581729][T29601] ? xfd_validate_state+0x129/0x190 [ 1479.581744][T29601] ? ksys_write+0x1ac/0x250 [ 1479.581767][T29601] __x64_sys_unshare+0x31/0x40 [ 1479.581788][T29601] do_syscall_64+0x115/0x840 [ 1479.581808][T29601] ? clear_bhb_loop+0x40/0x90 [ 1479.581827][T29601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.581843][T29601] RIP: 0033:0x7f395059ce59 [ 1479.581858][T29601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1479.581873][T29601] RSP: 002b:00007f3951525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1479.581888][T29601] RAX: ffffffffffffffda RBX: 00007f3950815fa0 RCX: 00007f395059ce59 [ 1479.581899][T29601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1479.581909][T29601] RBP: 00007f3950632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1479.581919][T29601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1479.581928][T29601] R13: 00007f3950816038 R14: 00007f3950815fa0 R15: 00007ffd31c5ded8 [ 1479.581948][T29601] [ 1479.581956][T29601] sysctl could not get directory: /kernel -12 [ 1479.849265][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1479.915987][T29576] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4384'. [ 1480.675909][T29610] netlink: 25 bytes leftover after parsing attributes in process `syz.5.4389'. [ 1480.747404][T29612] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1481.115424][T29623] NFSD: Failed to start, no listeners configured. [ 1481.880658][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1482.847096][T29620] Process accounting resumed [ 1483.688115][ T29] audit: type=1800 audit(4294967419.660:40): pid=29679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4402" name="lu_gp_id" dev="configfs" ino=157442 res=0 errno=0 [ 1483.961208][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1484.410991][T29694] vcan0: tx drop: invalid da for name 0x000000000000003f [ 1484.582069][T29693] Process accounting resumed [ 1484.602169][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.613093][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.605232][T29719] futex_wake_op: syz.1.4409 tries to shift op by -2048; fix this program [ 1485.652148][T29719] futex_wake_op: syz.1.4409 tries to shift op by -2048; fix this program [ 1485.686639][T29719] 0x000000000001-0x000000020000 : "" [ 1485.718967][T29719] ftl_cs: FTL header corrupt! [ 1486.040887][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1488.121460][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1488.636060][T21348] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 1489.742551][T29807] [U] 0="/ [ 1489.796818][T29807] [U] [ 1489.813404][T29807] [U] EeQ@ [ 1490.213527][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1490.438103][T29805] [U]  [ 1490.680014][T29833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4428'. [ 1490.718438][T21348] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 1490.998111][T29844] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1491.054294][ T29] audit: type=1804 audit(4294967427.020:41): pid=29849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4430" name="/newroot/511/file0" dev="tmpfs" ino=2692 res=1 errno=0 [ 1491.149440][T29844] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1491.149548][T29844] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1491.149584][T29844] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1491.149674][T29844] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1491.149713][T29844] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1491.209296][T29844] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1491.833819][T29872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4434'. [ 1491.995373][T29879] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4436'. [ 1493.001301][T16185] Bluetooth: hci4: command 0x0406 tx timeout [ 1493.160936][T21348] Bluetooth: hci2: command 0x0406 tx timeout [ 1493.167074][T25710] Bluetooth: hci1: command 0x0406 tx timeout [ 1493.173337][T16185] Bluetooth: hci0: command 0x0c1a tx timeout [ 1494.162064][T29920] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4453: iget: checksum invalid [ 1494.186239][T29920] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1494.250186][T29920] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4453: iget: checksum invalid [ 1494.323184][T29920] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1494.400598][T29920] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4453: iget: checksum invalid [ 1494.490118][T29920] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1494.536142][T29920] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4453: iget: checksum invalid [ 1494.617668][T29920] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1494.646474][T29934] FAULT_INJECTION: forcing a failure. [ 1494.646474][T29934] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.671766][T29920] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1494.708459][T29934] CPU: 0 UID: 0 PID: 29934 Comm: syz.5.4447 Tainted: G L syzkaller #0 PREEMPT(full) [ 1494.708484][T29934] Tainted: [L]=SOFTLOCKUP [ 1494.708490][T29934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1494.708499][T29934] Call Trace: [ 1494.708505][T29934] [ 1494.708511][T29934] dump_stack_lvl+0x100/0x190 [ 1494.708537][T29934] should_fail_ex.cold+0x5/0xa [ 1494.708557][T29934] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1494.708581][T29934] should_failslab+0xc2/0x120 [ 1494.708599][T29934] __kmalloc_noprof+0xe0/0x850 [ 1494.708612][T29934] ? kfree+0x1dd/0x6c0 [ 1494.708635][T29934] tomoyo_realpath_from_path+0xb6/0x690 [ 1494.708675][T29934] tomoyo_path_number_perm+0x23c/0x580 [ 1494.708693][T29934] ? tomoyo_path_number_perm+0x22e/0x580 [ 1494.708712][T29934] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1494.708749][T29934] ? find_held_lock+0x2b/0x80 [ 1494.708767][T29934] ? __fget_files+0x215/0x3d0 [ 1494.708784][T29934] ? hook_file_ioctl_common+0x149/0x410 [ 1494.708803][T29934] ? __fget_files+0x215/0x3d0 [ 1494.708823][T29934] ? __fget_files+0x21f/0x3d0 [ 1494.708844][T29934] security_file_ioctl+0xd3/0x230 [ 1494.708863][T29934] __x64_sys_ioctl+0xb7/0x210 [ 1494.708880][T29934] do_syscall_64+0x115/0x840 [ 1494.708901][T29934] ? clear_bhb_loop+0x40/0x90 [ 1494.708920][T29934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.708936][T29934] RIP: 0033:0x7fe00a79ce59 [ 1494.708948][T29934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1494.708963][T29934] RSP: 002b:00007fe00b5d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1494.708978][T29934] RAX: ffffffffffffffda RBX: 00007fe00aa15fa0 RCX: 00007fe00a79ce59 [ 1494.708988][T29934] RDX: 0000000000000000 RSI: 000000000000540a RDI: 0000000000000003 [ 1494.708997][T29934] RBP: 00007fe00b5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.709006][T29934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.709015][T29934] R13: 00007fe00aa16038 R14: 00007fe00aa15fa0 R15: 00007ffd93b29988 [ 1494.709034][T29934] [ 1494.709040][T29934] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1494.927119][T29920] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1495.310990][T16185] Bluetooth: hci0: command 0x0c1a tx timeout [ 1495.317209][T16185] Bluetooth: hci2: command 0x0406 tx timeout [ 1495.324716][T16185] Bluetooth: hci1: command 0x0406 tx timeout [ 1497.374043][T29968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4457'. [ 1497.401787][T16185] Bluetooth: hci0: command 0x0c1a tx timeout [ 1497.408188][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1497.619983][T29978] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.4460: iget: checksum invalid [ 1497.698392][T29978] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1497.770340][T29978] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.4460: iget: checksum invalid [ 1497.823366][T29978] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1497.837683][T29981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4461'. [ 1497.868574][T29978] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.4460: iget: checksum invalid [ 1497.932345][T29978] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1497.979515][T29978] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.4460: iget: checksum invalid [ 1498.028187][T29978] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1498.075940][T29978] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1498.119373][T29978] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1499.481800][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1500.262919][T30037] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4472: iget: checksum invalid [ 1500.358588][T30037] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1500.436621][T30037] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4472: iget: checksum invalid [ 1500.506202][T30037] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1500.578514][T30037] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4472: iget: checksum invalid [ 1500.639375][T30037] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1500.718107][T30037] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4472: iget: checksum invalid [ 1500.808263][T30037] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1500.882871][T30037] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1500.958079][T30037] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1501.491360][T30073] [U] 0="/ [ 1501.511312][T30073] [U] [ 1501.527088][T30073] [U] EeQ@ [ 1501.560899][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1501.582733][T30071] [U]  [ 1501.945026][T30085] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1502.191489][T30094] FAULT_INJECTION: forcing a failure. [ 1502.191489][T30094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.191518][T30094] CPU: 0 UID: 0 PID: 30094 Comm: syz.5.4479 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.191540][T30094] Tainted: [L]=SOFTLOCKUP [ 1502.191545][T30094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1502.191554][T30094] Call Trace: [ 1502.191560][T30094] [ 1502.191566][T30094] dump_stack_lvl+0x100/0x190 [ 1502.191585][T30094] should_fail_ex.cold+0x5/0xa [ 1502.191605][T30094] _copy_from_user+0x2e/0xd0 [ 1502.191628][T30094] copy_msghdr_from_user+0x9f/0x4f0 [ 1502.191651][T30094] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1502.191675][T30094] ? __pfx__kstrtoull+0x10/0x10 [ 1502.191693][T30094] ___sys_sendmsg+0x106/0x1e0 [ 1502.191715][T30094] ? __pfx____sys_sendmsg+0x10/0x10 [ 1502.191743][T30094] ? find_held_lock+0x2b/0x80 [ 1502.191777][T30094] __sys_sendmmsg+0x205/0x430 [ 1502.191794][T30094] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1502.191816][T30094] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1502.191846][T30094] ? fput+0x79/0x100 [ 1502.191866][T30094] ? ksys_write+0x1ac/0x250 [ 1502.191883][T30094] ? __pfx_ksys_write+0x10/0x10 [ 1502.191903][T30094] __x64_sys_sendmmsg+0x9c/0x100 [ 1502.191918][T30094] ? lockdep_hardirqs_on+0x78/0x100 [ 1502.191939][T30094] do_syscall_64+0x115/0x840 [ 1502.191958][T30094] ? clear_bhb_loop+0x40/0x90 [ 1502.191977][T30094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.191992][T30094] RIP: 0033:0x7fe00a79ce59 [ 1502.192005][T30094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1502.192019][T30094] RSP: 002b:00007fe00b574028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1502.192034][T30094] RAX: ffffffffffffffda RBX: 00007fe00aa16270 RCX: 00007fe00a79ce59 [ 1502.192044][T30094] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1502.192052][T30094] RBP: 00007fe00b574090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.192061][T30094] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.192070][T30094] R13: 00007fe00aa16308 R14: 00007fe00aa16270 R15: 00007ffd93b29988 [ 1502.192091][T30094] [ 1503.641934][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1504.384674][T30139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4490'. [ 1504.530720][T30142] [U] 0="/ [ 1504.566325][T30142] [U] [ 1504.570977][T30140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4491'. [ 1504.597446][T30142] [U] EeQ@ [ 1504.864807][T30141] [U]  [ 1505.721176][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1506.457165][T30186] ceph: Failed to parse sending metrics switch value 'P^' [ 1506.721447][T30190] ceph: Failed to parse sending metrics switch value '' [ 1507.265953][T30202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4503'. [ 1507.800746][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1509.880927][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1510.406668][T30264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4514'. [ 1510.871933][T30296] FAULT_INJECTION: forcing a failure. [ 1510.871933][T30296] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.961866][T30296] CPU: 0 UID: 0 PID: 30296 Comm: syz.0.4517 Tainted: G L syzkaller #0 PREEMPT(full) [ 1510.961892][T30296] Tainted: [L]=SOFTLOCKUP [ 1510.961898][T30296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1510.961907][T30296] Call Trace: [ 1510.961913][T30296] [ 1510.961919][T30296] dump_stack_lvl+0x100/0x190 [ 1510.961941][T30296] should_fail_ex.cold+0x5/0xa [ 1510.961960][T30296] should_failslab+0xc2/0x120 [ 1510.961979][T30296] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1510.962004][T30296] ? do_getname+0x35/0x390 [ 1510.962025][T30296] ? find_held_lock+0x2b/0x80 [ 1510.962043][T30296] ? ksys_write+0x190/0x250 [ 1510.962063][T30296] do_getname+0x35/0x390 [ 1510.962085][T30296] do_sys_openat2+0xc5/0x1e0 [ 1510.962108][T30296] ? __pfx_do_sys_openat2+0x10/0x10 [ 1510.962130][T30296] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1510.962157][T30296] ? __fget_files+0x21f/0x3d0 [ 1510.962178][T30296] __x64_sys_openat+0x12d/0x210 [ 1510.962201][T30296] ? __pfx___x64_sys_openat+0x10/0x10 [ 1510.962223][T30296] ? ksys_write+0x1ac/0x250 [ 1510.962242][T30296] ? rcu_is_watching+0x12/0xc0 [ 1510.962262][T30296] do_syscall_64+0x115/0x840 [ 1510.962282][T30296] ? clear_bhb_loop+0x40/0x90 [ 1510.962301][T30296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.962316][T30296] RIP: 0033:0x7f395059ce59 [ 1510.962329][T30296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1510.962343][T30296] RSP: 002b:00007f3951504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1510.962358][T30296] RAX: ffffffffffffffda RBX: 00007f3950816090 RCX: 00007f395059ce59 [ 1510.962368][T30296] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1510.962377][T30296] RBP: 00007f3951504090 R08: 0000000000000000 R09: 0000000000000000 [ 1510.962386][T30296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1510.962395][T30296] R13: 00007f3950816128 R14: 00007f3950816090 R15: 00007ffd31c5ded8 [ 1510.962414][T30296] [ 1512.456656][T30324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4525'. [ 1514.005421][T30359] FAULT_INJECTION: forcing a failure. [ 1514.005421][T30359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1514.023064][T30339] Process accounting paused [ 1514.069081][T30359] CPU: 0 UID: 0 PID: 30359 Comm: syz.5.4531 Tainted: G L syzkaller #0 PREEMPT(full) [ 1514.069107][T30359] Tainted: [L]=SOFTLOCKUP [ 1514.069112][T30359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1514.069122][T30359] Call Trace: [ 1514.069127][T30359] [ 1514.069134][T30359] dump_stack_lvl+0x100/0x190 [ 1514.069155][T30359] should_fail_ex.cold+0x5/0xa [ 1514.069175][T30359] strncpy_from_user+0x3b/0x2d0 [ 1514.069200][T30359] do_getname+0x78/0x390 [ 1514.069225][T30359] do_sys_openat2+0xc5/0x1e0 [ 1514.069248][T30359] ? __pfx_do_sys_openat2+0x10/0x10 [ 1514.069269][T30359] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1514.069295][T30359] ? __fget_files+0x21f/0x3d0 [ 1514.069317][T30359] __x64_sys_openat+0x12d/0x210 [ 1514.069340][T30359] ? __pfx___x64_sys_openat+0x10/0x10 [ 1514.069361][T30359] ? ksys_write+0x1ac/0x250 [ 1514.069381][T30359] ? rcu_is_watching+0x12/0xc0 [ 1514.069404][T30359] do_syscall_64+0x115/0x840 [ 1514.069424][T30359] ? clear_bhb_loop+0x40/0x90 [ 1514.069442][T30359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.069458][T30359] RIP: 0033:0x7fe00a79ce59 [ 1514.069471][T30359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1514.069486][T30359] RSP: 002b:00007fe00b5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1514.069501][T30359] RAX: ffffffffffffffda RBX: 00007fe00aa16090 RCX: 00007fe00a79ce59 [ 1514.069511][T30359] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1514.069520][T30359] RBP: 00007fe00b5b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.069530][T30359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.069538][T30359] R13: 00007fe00aa16128 R14: 00007fe00aa16090 R15: 00007ffd93b29988 [ 1514.069558][T30359] [ 1514.713811][T30368] random: crng reseeded on system resumption [ 1515.331433][T30366] Process accounting paused [ 1516.533926][T30414] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4546'. [ 1516.811186][T30416] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4547'. [ 1518.310709][T30463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4556'. [ 1519.598718][T30492] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4562'. [ 1519.615370][ T29] audit: type=1800 audit(4294967455.570:42): pid=30491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4562" name="version" dev="configfs" ino=161546 res=0 errno=0 [ 1519.667229][T30491] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4562'. [ 1520.442573][T30511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4566'. [ 1522.344408][T30548] overlayfs: missing 'lowerdir' [ 1522.991085][T30566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4578'. [ 1524.514507][T30602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4585'. [ 1525.336830][ T29] audit: type=1804 audit(4294967461.310:43): pid=30630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4592" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=37 res=1 errno=0 [ 1525.375371][T30630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4592'. [ 1526.835895][T30679] random: crng reseeded on system resumption [ 1526.995718][T30681] hub 1-0:1.0: USB hub found [ 1527.074381][T30681] hub 1-0:1.0: 1 port detected [ 1527.334967][T30651] kexec: Could not allocate control_code_buffer [ 1527.662370][T30691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4604'. [ 1528.292131][T21348] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1528.432928][T30699] FAULT_INJECTION: forcing a failure. [ 1528.432928][T30699] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.497942][T30705] can: request_module (can-proto-3) failed. [ 1528.513294][T30699] CPU: 0 UID: 0 PID: 30699 Comm: syz.5.4605 Tainted: G L syzkaller #0 PREEMPT(full) [ 1528.513320][T30699] Tainted: [L]=SOFTLOCKUP [ 1528.513326][T30699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1528.513335][T30699] Call Trace: [ 1528.513340][T30699] [ 1528.513346][T30699] dump_stack_lvl+0x100/0x190 [ 1528.513367][T30699] should_fail_ex.cold+0x5/0xa [ 1528.513387][T30699] should_failslab+0xc2/0x120 [ 1528.513405][T30699] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1528.513432][T30699] ? taskstats_exit+0x67b/0xc10 [ 1528.513452][T30699] ? rcu_is_watching+0x12/0xc0 [ 1528.513473][T30699] taskstats_exit+0x67b/0xc10 [ 1528.513492][T30699] ? __pfx_acct_update_integrals+0x10/0x10 [ 1528.513514][T30699] ? __pfx_taskstats_exit+0x10/0x10 [ 1528.513534][T30699] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1528.513553][T30699] ? exit_signals+0x395/0xaf0 [ 1528.513573][T30699] do_exit+0x65c/0x2af0 [ 1528.513594][T30699] ? core_sys_select+0x358/0xbb0 [ 1528.513615][T30699] ? __pfx_do_exit+0x10/0x10 [ 1528.513643][T30699] ? do_raw_spin_lock+0x128/0x260 [ 1528.513660][T30699] ? find_held_lock+0x2b/0x80 [ 1528.513678][T30699] ? get_signal+0x7e5/0x2210 [ 1528.513697][T30699] do_group_exit+0xd5/0x2a0 [ 1528.513720][T30699] get_signal+0x20ff/0x2210 [ 1528.513745][T30699] ? __pfx_get_signal+0x10/0x10 [ 1528.513768][T30699] arch_do_signal_or_restart+0x91/0x7a0 [ 1528.513791][T30699] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1528.513820][T30699] ? rcu_is_watching+0x12/0xc0 [ 1528.513839][T30699] exit_to_user_mode_loop+0x98/0x670 [ 1528.513862][T30699] ? rcu_is_watching+0x12/0xc0 [ 1528.513880][T30699] do_syscall_64+0x652/0x840 [ 1528.513901][T30699] ? clear_bhb_loop+0x40/0x90 [ 1528.513919][T30699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.513935][T30699] RIP: 0033:0x7fe00a79ce59 [ 1528.513948][T30699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1528.513962][T30699] RSP: 002b:00007fe00b595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1528.513978][T30699] RAX: fffffffffffffdfe RBX: 00007fe00aa16180 RCX: 00007fe00a79ce59 [ 1528.513988][T30699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1528.513997][T30699] RBP: 00007fe00b595090 R08: 0000000000000000 R09: 0000000000000000 [ 1528.514006][T30699] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1528.514015][T30699] R13: 00007fe00aa16218 R14: 00007fe00aa16180 R15: 00007ffd93b29988 [ 1528.514035][T30699] [ 1530.135614][T30745] FAULT_INJECTION: forcing a failure. [ 1530.135614][T30745] name failslab, interval 1, probability 0, space 0, times 0 [ 1530.215167][T30745] CPU: 0 UID: 0 PID: 30745 Comm: syz.2.4614 Tainted: G L syzkaller #0 PREEMPT(full) [ 1530.215194][T30745] Tainted: [L]=SOFTLOCKUP [ 1530.215200][T30745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1530.215210][T30745] Call Trace: [ 1530.215217][T30745] [ 1530.215223][T30745] dump_stack_lvl+0x100/0x190 [ 1530.215245][T30745] should_fail_ex.cold+0x5/0xa [ 1530.215266][T30745] should_failslab+0xc2/0x120 [ 1530.215286][T30745] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1530.215308][T30745] ? __kernfs_new_node+0xd2/0x9f0 [ 1530.215330][T30745] __kernfs_new_node+0xd2/0x9f0 [ 1530.215349][T30745] ? __pfx___kernfs_new_node+0x10/0x10 [ 1530.215371][T30745] ? find_held_lock+0x2b/0x80 [ 1530.215388][T30745] ? kernfs_root+0xee/0x2a0 [ 1530.215404][T30745] ? kernfs_root+0xee/0x2a0 [ 1530.215424][T30745] kernfs_new_node+0x11b/0x1a0 [ 1530.215446][T30745] __kernfs_create_file+0x53/0x350 [ 1530.215471][T30745] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1530.215491][T30745] sysfs_merge_group+0x194/0x340 [ 1530.215507][T30745] ? kernfs_add_one+0x214/0x850 [ 1530.215526][T30745] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1530.215543][T30745] ? bus_add_device+0x368/0x6b0 [ 1530.215565][T30745] ? __pfx_bus_add_device+0x10/0x10 [ 1530.215584][T30745] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1530.215607][T30745] dpm_sysfs_add+0x237/0x280 [ 1530.215713][T30745] device_add+0x9ef/0x1950 [ 1530.215733][T30745] ? __pfx_device_add+0x10/0x10 [ 1530.215759][T30745] nfc_register_device+0x41/0x3e0 [ 1530.215817][T30745] nci_register_device+0x7f1/0xb80 [ 1530.215836][T30745] ? __pfx_nci_register_device+0x10/0x10 [ 1530.215857][T30745] ? lockdep_init_map_type+0x5c/0x250 [ 1530.215884][T30745] virtual_ncidev_open+0x141/0x220 [ 1530.215902][T30745] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1530.215918][T30745] misc_open+0x26d/0x450 [ 1530.215934][T30745] ? __pfx_misc_open+0x10/0x10 [ 1530.215949][T30745] chrdev_open+0x234/0x6a0 [ 1530.215968][T30745] ? __pfx_apparmor_file_open+0x10/0x10 [ 1530.215986][T30745] ? __pfx_chrdev_open+0x10/0x10 [ 1530.216006][T30745] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1530.216039][T30745] do_dentry_open+0x6ab/0x14d0 [ 1530.216058][T30745] ? __pfx_chrdev_open+0x10/0x10 [ 1530.216082][T30745] vfs_open+0x82/0x3f0 [ 1530.216107][T30745] path_openat+0x208c/0x31a0 [ 1530.216133][T30745] ? __pfx_path_openat+0x10/0x10 [ 1530.216159][T30745] do_file_open+0x20e/0x430 [ 1530.216179][T30745] ? __pfx_do_file_open+0x10/0x10 [ 1530.216212][T30745] ? alloc_fd+0x476/0x790 [ 1530.216232][T30745] ? do_getname+0x191/0x390 [ 1530.216255][T30745] do_sys_openat2+0x10d/0x1e0 [ 1530.216278][T30745] ? __pfx_do_sys_openat2+0x10/0x10 [ 1530.216307][T30745] __x64_sys_openat+0x12d/0x210 [ 1530.216330][T30745] ? __pfx___x64_sys_openat+0x10/0x10 [ 1530.216356][T30745] ? rcu_is_watching+0x12/0xc0 [ 1530.216376][T30745] do_syscall_64+0x115/0x840 [ 1530.216397][T30745] ? clear_bhb_loop+0x40/0x90 [ 1530.216415][T30745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1530.216431][T30745] RIP: 0033:0x7f2def19ce59 [ 1530.216445][T30745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1530.216460][T30745] RSP: 002b:00007f2deffd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1530.216475][T30745] RAX: ffffffffffffffda RBX: 00007f2def415fa0 RCX: 00007f2def19ce59 [ 1530.216486][T30745] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1530.216497][T30745] RBP: 00007f2def232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1530.216507][T30745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1530.216516][T30745] R13: 00007f2def416038 R14: 00007f2def415fa0 R15: 00007fffb170de08 [ 1530.216536][T30745] [ 1530.786019][T30751] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4614'. [ 1530.986982][T16185] Bluetooth: hci1: command 0x0406 tx timeout [ 1533.084873][T21348] Bluetooth: hci1: command 0x0406 tx timeout [ 1533.603207][T30818] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.0.524289), cmd(5) [ 1537.657870][T16185] block nbd0: Receive control failed (result -32) [ 1539.066718][T30941] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4650'. [ 1542.298521][T31011] FAULT_INJECTION: forcing a failure. [ 1542.298521][T31011] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.442219][T31011] CPU: 0 UID: 0 PID: 31011 Comm: syz.5.4662 Tainted: G L syzkaller #0 PREEMPT(full) [ 1542.442253][T31011] Tainted: [L]=SOFTLOCKUP [ 1542.442259][T31011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1542.442272][T31011] Call Trace: [ 1542.442278][T31011] [ 1542.442284][T31011] dump_stack_lvl+0x100/0x190 [ 1542.442305][T31011] should_fail_ex.cold+0x5/0xa [ 1542.442324][T31011] should_failslab+0xc2/0x120 [ 1542.442344][T31011] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1542.442368][T31011] ? taskstats_exit+0x67b/0xc10 [ 1542.442388][T31011] ? rcu_is_watching+0x12/0xc0 [ 1542.442408][T31011] taskstats_exit+0x67b/0xc10 [ 1542.442428][T31011] ? __pfx_acct_update_integrals+0x10/0x10 [ 1542.442449][T31011] ? __pfx_taskstats_exit+0x10/0x10 [ 1542.442470][T31011] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1542.442489][T31011] ? exit_signals+0x395/0xaf0 [ 1542.442509][T31011] do_exit+0x65c/0x2af0 [ 1542.442530][T31011] ? core_sys_select+0x358/0xbb0 [ 1542.442550][T31011] ? __pfx_do_exit+0x10/0x10 [ 1542.442572][T31011] ? do_raw_spin_lock+0x128/0x260 [ 1542.442588][T31011] ? find_held_lock+0x2b/0x80 [ 1542.442606][T31011] ? get_signal+0x7e5/0x2210 [ 1542.442625][T31011] do_group_exit+0xd5/0x2a0 [ 1542.442649][T31011] get_signal+0x20ff/0x2210 [ 1542.442674][T31011] ? __pfx_get_signal+0x10/0x10 [ 1542.442697][T31011] arch_do_signal_or_restart+0x91/0x7a0 [ 1542.442721][T31011] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1542.442749][T31011] ? rcu_is_watching+0x12/0xc0 [ 1542.442769][T31011] exit_to_user_mode_loop+0x98/0x670 [ 1542.442792][T31011] ? rcu_is_watching+0x12/0xc0 [ 1542.442811][T31011] do_syscall_64+0x652/0x840 [ 1542.442832][T31011] ? clear_bhb_loop+0x40/0x90 [ 1542.442850][T31011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.442866][T31011] RIP: 0033:0x7fe00a79ce59 [ 1542.442880][T31011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.442895][T31011] RSP: 002b:00007fe00b595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1542.442910][T31011] RAX: fffffffffffffdfe RBX: 00007fe00aa16180 RCX: 00007fe00a79ce59 [ 1542.442920][T31011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1542.442929][T31011] RBP: 00007fe00b595090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.442938][T31011] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1542.442947][T31011] R13: 00007fe00aa16218 R14: 00007fe00aa16180 R15: 00007ffd93b29988 [ 1542.442966][T31011] [ 1545.283696][T31054] FAULT_INJECTION: forcing a failure. [ 1545.283696][T31054] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.355420][T31054] CPU: 0 UID: 0 PID: 31054 Comm: syz.0.4673 Tainted: G L syzkaller #0 PREEMPT(full) [ 1545.355447][T31054] Tainted: [L]=SOFTLOCKUP [ 1545.355452][T31054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1545.355461][T31054] Call Trace: [ 1545.355467][T31054] [ 1545.355474][T31054] dump_stack_lvl+0x100/0x190 [ 1545.355495][T31054] should_fail_ex.cold+0x5/0xa [ 1545.355514][T31054] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1545.355544][T31054] should_failslab+0xc2/0x120 [ 1545.355562][T31054] __kmalloc_noprof+0xe0/0x850 [ 1545.355575][T31054] ? kfree+0x1dd/0x6c0 [ 1545.355599][T31054] tomoyo_realpath_from_path+0xb6/0x690 [ 1545.355624][T31054] tomoyo_path_number_perm+0x23c/0x580 [ 1545.355642][T31054] ? tomoyo_path_number_perm+0x22e/0x580 [ 1545.355662][T31054] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1545.355699][T31054] ? find_held_lock+0x2b/0x80 [ 1545.355717][T31054] ? __fget_files+0x215/0x3d0 [ 1545.355734][T31054] ? hook_file_ioctl_common+0x149/0x410 [ 1545.355752][T31054] ? __fget_files+0x215/0x3d0 [ 1545.355773][T31054] ? __fget_files+0x21f/0x3d0 [ 1545.355793][T31054] security_file_ioctl+0xd3/0x230 [ 1545.355812][T31054] __x64_sys_ioctl+0xb7/0x210 [ 1545.355829][T31054] do_syscall_64+0x115/0x840 [ 1545.355851][T31054] ? clear_bhb_loop+0x40/0x90 [ 1545.355869][T31054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.355885][T31054] RIP: 0033:0x7f395059ce59 [ 1545.355898][T31054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.355913][T31054] RSP: 002b:00007f3951525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1545.355928][T31054] RAX: ffffffffffffffda RBX: 00007f3950815fa0 RCX: 00007f395059ce59 [ 1545.355938][T31054] RDX: 0000200000000000 RSI: 00000000c008551a RDI: 0000000000000003 [ 1545.355947][T31054] RBP: 00007f3951525090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.355956][T31054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.355971][T31054] R13: 00007f3950816038 R14: 00007f3950815fa0 R15: 00007ffd31c5ded8 [ 1545.355991][T31054] [ 1545.355998][T31054] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1546.041888][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.049705][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.187815][T31056] Process accounting resumed [ 1546.276912][T31061] Process accounting resumed [ 1546.503777][T31082] ubi: mtd0 is already attached to ubi1 [ 1546.781000][T16185] block nbd1: Receive control failed (result -32) [ 1549.140328][T31150] FAULT_INJECTION: forcing a failure. [ 1549.140328][T31150] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.365834][T31150] CPU: 0 UID: 0 PID: 31150 Comm: syz.0.4689 Tainted: G L syzkaller #0 PREEMPT(full) [ 1549.365861][T31150] Tainted: [L]=SOFTLOCKUP [ 1549.365868][T31150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1549.365877][T31150] Call Trace: [ 1549.365884][T31150] [ 1549.365890][T31150] dump_stack_lvl+0x100/0x190 [ 1549.365912][T31150] should_fail_ex.cold+0x5/0xa [ 1549.365933][T31150] should_failslab+0xc2/0x120 [ 1549.365952][T31150] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1549.365977][T31150] ? __d_alloc+0x34/0xa40 [ 1549.366001][T31150] __d_alloc+0x34/0xa40 [ 1549.366024][T31150] d_alloc+0x4a/0x1e0 [ 1549.366044][T31150] lookup_one_qstr_excl+0x171/0x250 [ 1549.366069][T31150] start_dirop+0x59/0xb0 [ 1549.366087][T31150] simple_start_creating+0xf9/0x110 [ 1549.366106][T31150] ? __pfx_simple_start_creating+0x10/0x10 [ 1549.366124][T31150] ? mntput+0x70/0xa0 [ 1549.366140][T31150] ? simple_pin_fs+0xa3/0x190 [ 1549.366157][T31150] debugfs_start_creating.part.0+0x82/0x170 [ 1549.366203][T31150] __debugfs_create_file+0xb3/0x4f0 [ 1549.366222][T31150] debugfs_create_file_full+0x41/0x60 [ 1549.366241][T31150] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1549.366259][T31150] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1549.366290][T31150] ? lockdep_init_map_type+0x5c/0x250 [ 1549.366317][T31150] preinit_net.part.0+0x43b/0x920 [ 1549.366336][T31150] copy_net_ns+0x339/0x7c0 [ 1549.366356][T31150] create_new_namespaces+0x3ea/0xac0 [ 1549.366381][T31150] unshare_nsproxy_namespaces+0xf2/0x220 [ 1549.366402][T31150] ksys_unshare+0x438/0xab0 [ 1549.366424][T31150] ? __pfx_ksys_unshare+0x10/0x10 [ 1549.366443][T31150] ? xfd_validate_state+0x129/0x190 [ 1549.366458][T31150] ? ksys_write+0x1ac/0x250 [ 1549.366480][T31150] __x64_sys_unshare+0x31/0x40 [ 1549.366501][T31150] do_syscall_64+0x115/0x840 [ 1549.366522][T31150] ? clear_bhb_loop+0x40/0x90 [ 1549.366540][T31150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.366556][T31150] RIP: 0033:0x7f395059ce59 [ 1549.366577][T31150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.366593][T31150] RSP: 002b:00007f3951504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1549.366609][T31150] RAX: ffffffffffffffda RBX: 00007f3950816090 RCX: 00007f395059ce59 [ 1549.366620][T31150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1549.366630][T31150] RBP: 00007f3950632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1549.366640][T31150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1549.366650][T31150] R13: 00007f3950816128 R14: 00007f3950816090 R15: 00007ffd31c5ded8 [ 1549.366673][T31150] [ 1551.036032][ T29] audit: type=1800 audit(4294985830.998:44): pid=31176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4690" name="dbroot" dev="configfs" ino=165284 res=0 errno=0 [ 1551.879642][T31185] hub 1-0:1.0: USB hub found [ 1551.896091][T31192] &#$@\]\-: entered promiscuous mode [ 1551.911681][T31185] hub 1-0:1.0: 1 port detected [ 1554.528431][T31252] FAULT_INJECTION: forcing a failure. [ 1554.528431][T31252] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.591524][T31252] CPU: 0 UID: 0 PID: 31252 Comm: syz.2.4707 Tainted: G L syzkaller #0 PREEMPT(full) [ 1554.591552][T31252] Tainted: [L]=SOFTLOCKUP [ 1554.591557][T31252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1554.591568][T31252] Call Trace: [ 1554.591573][T31252] [ 1554.591580][T31252] dump_stack_lvl+0x100/0x190 [ 1554.591602][T31252] should_fail_ex.cold+0x5/0xa [ 1554.591623][T31252] should_failslab+0xc2/0x120 [ 1554.591642][T31252] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1554.591664][T31252] ? newseg+0x26b/0xed0 [ 1554.591688][T31252] newseg+0x26b/0xed0 [ 1554.591711][T31252] ? __pfx_newseg+0x10/0x10 [ 1554.591731][T31252] ? find_held_lock+0x2b/0x80 [ 1554.591750][T31252] ? ipcget+0x8aa/0xf50 [ 1554.591835][T31252] ipcget+0x909/0xf50 [ 1554.591855][T31252] ? do_futex+0x192/0x350 [ 1554.591876][T31252] ? __pfx_ipcget+0x10/0x10 [ 1554.591897][T31252] ? __x64_sys_futex+0x34f/0x4d0 [ 1554.591911][T31252] ? __x64_sys_futex+0x358/0x4d0 [ 1554.591929][T31252] __x64_sys_shmget+0x13b/0x1b0 [ 1554.591950][T31252] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1554.591980][T31252] ? rcu_is_watching+0x12/0xc0 [ 1554.592002][T31252] do_syscall_64+0x115/0x840 [ 1554.592023][T31252] ? clear_bhb_loop+0x40/0x90 [ 1554.592041][T31252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.592057][T31252] RIP: 0033:0x7f2def19ce59 [ 1554.592071][T31252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1554.592086][T31252] RSP: 002b:00007f2deffd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1554.592101][T31252] RAX: ffffffffffffffda RBX: 00007f2def415fa0 RCX: 00007f2def19ce59 [ 1554.592112][T31252] RDX: 0000000000005300 RSI: 0000000000000001 RDI: 00000000000006a2 [ 1554.592121][T31252] RBP: 00007f2def232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1554.592130][T31252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1554.592140][T31252] R13: 00007f2def416038 R14: 00007f2def415fa0 R15: 00007fffb170de08 [ 1554.592160][T31252] [ 1557.461286][ T29] audit: type=1800 audit(4294985837.438:45): pid=31289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4718" name="lu_gp_id" dev="configfs" ino=165992 res=0 errno=0 [ 1562.736671][T21348] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1562.755056][T31382] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1562.764722][T31382] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1562.780583][T31382] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1562.790607][T31382] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1563.897253][T28444] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.209537][T28444] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.346646][T28444] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.840767][T31382] Bluetooth: hci3: command tx timeout [ 1564.866482][T28444] bridge_slave_1: left allmulticast mode [ 1564.886877][T28444] bridge_slave_1: left promiscuous mode [ 1564.909945][T28444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.954488][T28444] bridge_slave_0: left allmulticast mode [ 1564.976609][T28444] bridge_slave_0: left promiscuous mode [ 1564.997238][T28444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.033788][T31421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4745'. [ 1565.386391][T28444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1565.405261][T28444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1565.424002][T28444] bond0 (unregistering): Released all slaves [ 1565.489700][T28444] HfR: left promiscuous mode [ 1565.620128][ T5294] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1565.657936][T28444] &#$@\]\-: left promiscuous mode [ 1565.786208][T31434] sd 0:0:1:0: PR command failed: 1026 [ 1565.802174][T31434] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1565.832154][T31434] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1566.145276][T31378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.145341][T31378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.145481][T31378] bridge_slave_0: entered allmulticast mode [ 1566.146514][T31378] bridge_slave_0: entered promiscuous mode [ 1566.168969][T31378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.169040][T31378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.169153][T31378] bridge_slave_1: entered allmulticast mode [ 1566.170196][T31378] bridge_slave_1: entered promiscuous mode [ 1566.298135][T31378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.305538][T31378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.415635][T31378] team0: Port device team_slave_0 added [ 1566.429094][T31378] team0: Port device team_slave_1 added [ 1566.579728][T31378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.579743][T31378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.579764][T31378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.595070][T28444] hsr_slave_0: left promiscuous mode [ 1566.596182][T28444] hsr_slave_1: left promiscuous mode [ 1566.596611][T28444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1566.596627][T28444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1566.597097][T28444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1566.597111][T28444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1566.643082][T28444] veth1_macvtap: left promiscuous mode [ 1566.643110][T28444] veth0_macvtap: left promiscuous mode [ 1566.643178][T28444] veth1_vlan: left promiscuous mode [ 1566.643216][T28444] veth0_vlan: left promiscuous mode [ 1566.921660][T31382] Bluetooth: hci3: command tx timeout [ 1567.154234][T28444] team0 (unregistering): Port device team_slave_1 removed [ 1567.205278][T31459] FAULT_INJECTION: forcing a failure. [ 1567.205278][T31459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1567.233976][T31459] CPU: 0 UID: 0 PID: 31459 Comm: syz.5.4748 Tainted: G L syzkaller #0 PREEMPT(full) [ 1567.234004][T31459] Tainted: [L]=SOFTLOCKUP [ 1567.234010][T31459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1567.234020][T31459] Call Trace: [ 1567.234026][T31459] [ 1567.234033][T31459] dump_stack_lvl+0x100/0x190 [ 1567.234055][T31459] should_fail_ex.cold+0x5/0xa [ 1567.234076][T31459] strncpy_from_user+0x3b/0x2d0 [ 1567.234101][T31459] do_getname+0x78/0x390 [ 1567.234126][T31459] do_sys_openat2+0xc5/0x1e0 [ 1567.234148][T31459] ? __pfx_do_sys_openat2+0x10/0x10 [ 1567.234177][T31459] __x64_sys_open+0xfe/0x1d0 [ 1567.234200][T31459] ? __pfx___x64_sys_open+0x10/0x10 [ 1567.234225][T31459] ? rcu_is_watching+0x12/0xc0 [ 1567.234252][T31459] do_syscall_64+0x115/0x840 [ 1567.234274][T31459] ? clear_bhb_loop+0x40/0x90 [ 1567.234293][T31459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.234309][T31459] RIP: 0033:0x7fe00a79ce59 [ 1567.234323][T31459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1567.234338][T31459] RSP: 002b:00007fe00b5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1567.234353][T31459] RAX: ffffffffffffffda RBX: 00007fe00aa16090 RCX: 00007fe00a79ce59 [ 1567.234363][T31459] RDX: 0000000000000100 RSI: 0000000000161342 RDI: 0000200000000000 [ 1567.234373][T31459] RBP: 00007fe00a832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1567.234382][T31459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1567.234391][T31459] R13: 00007fe00aa16128 R14: 00007fe00aa16090 R15: 00007ffd93b29988 [ 1567.234410][T31459] [ 1567.449063][T28444] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 1567.471826][T31378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.479838][T31378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.508989][T31378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.525859][ T5294] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1567.695079][T31378] hsr_slave_0: entered promiscuous mode [ 1567.715825][T31378] hsr_slave_1: entered promiscuous mode [ 1567.738131][T31378] debugfs: 'hsr0' already exists in 'hsr' [ 1567.748645][T31378] Cannot create hsr debugfs directory [ 1569.001831][T31382] Bluetooth: hci3: command tx timeout [ 1569.056508][ T5294] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1569.855835][T31378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1569.909953][T31378] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1569.939366][T31378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1569.965388][T31378] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1570.018005][T31378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1570.046108][T31378] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1570.074540][T31378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1570.138287][T31378] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1570.395743][T31378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.487099][T31378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.547442][T28444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.554612][T28444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.647126][T28444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.654293][T28444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1571.081000][T31382] Bluetooth: hci3: command tx timeout [ 1572.097072][T31378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1572.215374][T31378] veth0_vlan: entered promiscuous mode [ 1572.246495][T31378] veth1_vlan: entered promiscuous mode [ 1572.313120][T31378] veth0_macvtap: entered promiscuous mode [ 1572.337324][T31378] veth1_macvtap: entered promiscuous mode [ 1572.377205][T31378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1572.405689][T31378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1572.436968][T28444] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.475247][T28444] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.505675][T28444] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.535126][T28444] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.695278][T28445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.725830][T28445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.776592][T26868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.799103][T26868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1575.397035][ T29] audit: type=1800 audit(4294985855.368:46): pid=31615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4764" name="dbroot" dev="configfs" ino=167921 res=0 errno=0 [ 1575.419910][T31615] db_root: cannot open: /dev/audio1 [ 1575.425743][T31615] db_root: not a directory: /dev/audio1 [ 1575.610129][T31619] nbd: must specify a size in bytes for the device [ 1576.866280][T17702] Process accounting paused [ 1576.896078][T31653] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1577.340333][T16185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1577.364484][T16185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1577.373886][T16185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1577.381944][T16185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1577.391033][T16185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1577.476773][T31666] binder: 31665:31666 ioctl c0046209 ffffffffffffffff returned -22 [ 1578.829982][T31662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.857655][T31662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.875864][T31662] bridge_slave_0: entered allmulticast mode [ 1578.899856][T31662] bridge_slave_0: entered promiscuous mode [ 1578.929192][T31662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.957899][T31662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.981241][T31662] bridge_slave_1: entered allmulticast mode [ 1579.007394][T31662] bridge_slave_1: entered promiscuous mode [ 1579.123319][T31662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1579.175482][T31662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1579.272993][T31662] team0: Port device team_slave_0 added [ 1579.310121][T31662] team0: Port device team_slave_1 added [ 1579.385481][T31662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.410570][T31662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.483303][T16185] Bluetooth: hci1: command tx timeout [ 1579.509534][T31662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.662722][T31662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.723654][T31662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.910304][T31662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1580.181586][T31662] hsr_slave_0: entered promiscuous mode [ 1580.216685][T31662] hsr_slave_1: entered promiscuous mode [ 1580.246874][T31662] debugfs: 'hsr0' already exists in 'hsr' [ 1580.277255][T31662] Cannot create hsr debugfs directory [ 1580.859697][T31720] ceph: Failed to parse sending metrics switch value 'P^' [ 1581.067673][T31382] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1581.084731][T31382] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1581.094589][T31382] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1581.103149][T31382] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1581.114044][T31382] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1581.563859][T31382] Bluetooth: hci1: command tx timeout [ 1581.757549][T31662] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1581.817907][T31662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1581.845406][T31662] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1581.892716][T31662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1581.937487][T31662] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1581.967782][T31662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1582.025241][T31662] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1582.059114][T31662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1582.423386][T31662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.482651][T31662] 8021q: adding VLAN 0 to HW filter on device team0 [ 1582.504809][T28447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.511951][T28447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1582.558817][T28447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.565965][T28447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.697400][T31723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.710909][T31723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.730833][T31723] bridge_slave_0: entered allmulticast mode [ 1582.742756][T31723] bridge_slave_0: entered promiscuous mode [ 1582.763262][T31723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.781267][T31723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.799489][T31723] bridge_slave_1: entered allmulticast mode [ 1582.809341][T31723] bridge_slave_1: entered promiscuous mode [ 1582.879151][T31723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1582.905614][T31723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.974452][T31723] team0: Port device team_slave_0 added [ 1582.994280][T31723] team0: Port device team_slave_1 added [ 1583.051998][T31723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1583.062022][T31723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1583.121364][T31723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1583.147208][T31723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1583.162606][T31382] Bluetooth: hci4: command tx timeout [ 1583.176429][T31723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1583.233541][T31723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1583.262818][T31662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1583.354839][T31723] hsr_slave_0: entered promiscuous mode [ 1583.367760][T31723] hsr_slave_1: entered promiscuous mode [ 1583.374353][T31723] debugfs: 'hsr0' already exists in 'hsr' [ 1583.380096][T31723] Cannot create hsr debugfs directory [ 1583.641823][T31382] Bluetooth: hci1: command tx timeout [ 1583.675788][T31662] veth0_vlan: entered promiscuous mode [ 1583.699960][T31662] veth1_vlan: entered promiscuous mode [ 1583.819953][T31723] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1583.829740][T31723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1583.838937][T31662] veth0_macvtap: entered promiscuous mode [ 1583.846522][T31723] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1583.856293][T31723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1583.867592][T31662] veth1_macvtap: entered promiscuous mode [ 1583.876509][T31723] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1583.886985][T31723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1583.906696][T31723] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1583.917994][T31723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1583.929550][T31662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1583.953756][T31662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1583.977826][T28441] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.013581][T28441] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.130237][T26868] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.177128][T26868] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.216016][T26868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.239311][T26868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.282012][T31723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1584.306432][T28445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.322699][T31723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1584.329359][T28445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.347376][T28441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.354540][T28441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.405072][T28441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.412223][T28441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.241231][T31382] Bluetooth: hci4: command tx timeout [ 1585.722693][T31382] Bluetooth: hci1: command tx timeout [ 1585.798069][T31723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.791703][T31723] veth0_vlan: entered promiscuous mode [ 1586.848829][T31723] veth1_vlan: entered promiscuous mode [ 1586.955743][T31723] veth0_macvtap: entered promiscuous mode [ 1586.988339][T31723] veth1_macvtap: entered promiscuous mode [ 1587.035927][T31723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1587.062383][T31723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1587.088975][T26868] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.089356][T26868] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.089453][T26868] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.089551][T26868] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.321554][T31382] Bluetooth: hci4: command tx timeout [ 1587.408585][T28444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.408604][T28444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.565638][T28444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.565657][T28444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.977321][T31838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4797'. [ 1589.027183][T31858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4800'. [ 1589.346966][T31862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4801'. [ 1589.403042][T31382] Bluetooth: hci4: command tx timeout [ 1590.865863][T31895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4811'. [ 1593.027572][T31939] ubi: mtd0 is already attached to ubi1 [ 1593.320207][T31946] blktrace: Concurrent blktraces are not allowed on loop2 [ 1594.385405][T31955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4822'. [ 1594.836794][T31961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4824'. [ 1594.936151][T31962] vivid-007: ================= START STATUS ================= [ 1595.043716][T31962] vivid-007: Enable Output Cropping: true grabbed [ 1595.180194][T31962] vivid-007: Enable Output Composing: true grabbed [ 1595.386187][T31962] vivid-007: Enable Output Scaler: true grabbed [ 1595.612982][T31962] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 1595.823636][T31962] vivid-007: Transmit Mode: HDMI grabbed [ 1595.945770][T31962] vivid-007: Hotplug Present: 0x00000000 [ 1596.075451][T31962] vivid-007: RxSense Present: 0x00000000 [ 1596.196261][T31962] vivid-007: EDID Present: 0x00000000 [ 1596.293198][T31962] vivid-007: ================== END STATUS ================== [ 1596.779856][T31965] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1597.071361][T31995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4830'. [ 1597.111059][T31997] FAULT_INJECTION: forcing a failure. [ 1597.111059][T31997] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.268560][T31997] CPU: 0 UID: 0 PID: 31997 Comm: syz.6.4831 Tainted: G L syzkaller #0 PREEMPT(full) [ 1597.268587][T31997] Tainted: [L]=SOFTLOCKUP [ 1597.268593][T31997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1597.268602][T31997] Call Trace: [ 1597.268608][T31997] [ 1597.268614][T31997] dump_stack_lvl+0x100/0x190 [ 1597.268638][T31997] should_fail_ex.cold+0x5/0xa [ 1597.268658][T31997] should_failslab+0xc2/0x120 [ 1597.268679][T31997] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1597.268701][T31997] ? sctp_endpoint_new+0xfc/0xb20 [ 1597.268726][T31997] ? __debug_object_init+0x2de/0x3d0 [ 1597.268751][T31997] sctp_endpoint_new+0xfc/0xb20 [ 1597.268769][T31997] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 1597.268786][T31997] ? lockdep_init_map_type+0x5c/0x250 [ 1597.268811][T31997] ? lockdep_init_map_type+0x5c/0x250 [ 1597.268834][T31997] ? lockdep_init_map_type+0x5c/0x250 [ 1597.268861][T31997] sctp_init_sock+0xe2b/0x1300 [ 1597.268876][T31997] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 1597.268892][T31997] sctp_v6_init_sock+0x16/0x70 [ 1597.268907][T31997] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 1597.268922][T31997] inet6_create+0xb21/0x12b0 [ 1597.268945][T31997] ? inet6_create+0x7f/0x12b0 [ 1597.268965][T31997] __sock_create+0x339/0x860 [ 1597.268990][T31997] __sys_socket+0x14d/0x260 [ 1597.269011][T31997] ? __pfx___sys_socket+0x10/0x10 [ 1597.269031][T31997] ? ksys_write+0x1ac/0x250 [ 1597.269054][T31997] __x64_sys_socket+0x72/0xb0 [ 1597.269073][T31997] ? lockdep_hardirqs_on+0x78/0x100 [ 1597.269095][T31997] do_syscall_64+0x115/0x840 [ 1597.269115][T31997] ? clear_bhb_loop+0x40/0x90 [ 1597.269134][T31997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.269150][T31997] RIP: 0033:0x7fd5af39ce59 [ 1597.269164][T31997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.269179][T31997] RSP: 002b:00007fd5b02f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1597.269194][T31997] RAX: ffffffffffffffda RBX: 00007fd5af616090 RCX: 00007fd5af39ce59 [ 1597.269204][T31997] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 1597.269213][T31997] RBP: 00007fd5af432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1597.269223][T31997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1597.269231][T31997] R13: 00007fd5af616128 R14: 00007fd5af616090 R15: 00007fff8ed4a4d8 [ 1597.269251][T31997] [ 1598.889281][T32014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4834'. [ 1600.439216][T32038] random: crng reseeded on system resumption [ 1600.946264][T32042] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.4839: iget: checksum invalid [ 1601.122037][T32042] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1601.325640][T32042] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.4839: iget: checksum invalid [ 1601.387307][T31382] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1601.489123][T32042] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1601.556383][T16185] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1601.617788][T32042] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.4839: iget: checksum invalid [ 1601.741753][T32042] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1601.792381][T32042] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.4839: iget: checksum invalid [ 1601.917503][T32042] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1602.124074][T32042] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1602.124113][T32042] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1603.255301][T32088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4854'. [ 1603.481346][T31382] Bluetooth: hci4: command 0x2016 tx timeout [ 1604.968778][T32112] zswap: compressor 000 not available [ 1604.987994][T32121] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1605.566531][T16185] Bluetooth: hci4: command 0x2016 tx timeout [ 1607.483206][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.493069][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.505793][T32225] syz.5.4884 (32225): /proc/32224/oom_adj is deprecated, please use /proc/32224/oom_score_adj instead. [ 1611.991423][T32260] openvswitch: netlink: IP tunnel dst address not specified [ 1613.797015][T32297] netlink: 350 bytes leftover after parsing attributes in process `syz.6.4899'. [ 1614.122653][T32303] vivid-007: ================= START STATUS ================= [ 1614.141189][T32303] vivid-007: Enable Output Cropping: true grabbed [ 1614.155222][T32303] vivid-007: Enable Output Composing: true grabbed [ 1614.182774][T32303] vivid-007: Enable Output Scaler: true grabbed [ 1614.223202][T32303] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 1614.258196][T32303] vivid-007: Transmit Mode: HDMI grabbed [ 1614.281003][T32303] vivid-007: Hotplug Present: 0x00000000 [ 1614.308158][T32303] vivid-007: RxSense Present: 0x00000000 [ 1614.337281][T32303] vivid-007: EDID Present: 0x00000000 [ 1614.361942][T32303] vivid-007: ================== END STATUS ================== [ 1614.946925][T32327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4904'. [ 1615.240581][T31382] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1618.272642][T32388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4921'. [ 1619.169913][T32393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4922'. [ 1619.889631][T32426] vivid-007: ================= START STATUS ================= [ 1619.912868][T32426] vivid-007: Enable Output Cropping: true grabbed [ 1619.926746][T32426] vivid-007: Enable Output Composing: true grabbed [ 1619.954133][T32426] vivid-007: Enable Output Scaler: true grabbed [ 1620.005397][T32426] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 1620.042949][T32426] vivid-007: Transmit Mode: HDMI grabbed [ 1620.073620][T32426] vivid-007: Hotplug Present: 0x00000000 [ 1620.106314][T32426] vivid-007: RxSense Present: 0x00000000 [ 1620.134858][T32426] vivid-007: EDID Present: 0x00000000 [ 1620.158786][T32426] vivid-007: ================== END STATUS ================== [ 1622.216470][T32462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4941'. [ 1624.566385][T32493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1624.586113][T32493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1624.609541][T32493] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1624.622445][T32493] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1624.638656][T32493] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1624.649537][T32493] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1624.670644][T32493] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1624.686843][T32493] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1624.701034][T32493] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1624.714860][T32493] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1624.735031][T32493] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1624.749888][T32493] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1625.245032][T32494] Process accounting resumed [ 1625.325762][T32506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4950'. [ 1626.126203][T32516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4961'. [ 1626.449982][T31382] Bluetooth: hci2: command 0x0406 tx timeout [ 1626.680887][T31382] Bluetooth: hci1: command 0x0c1a tx timeout [ 1626.686972][T16185] Bluetooth: hci3: command 0x0c1a tx timeout [ 1626.694713][T25710] Bluetooth: hci0: command 0x0c1a tx timeout [ 1626.760718][T16185] Bluetooth: hci4: command 0x2016 tx timeout [ 1627.392105][T32541] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4956'. [ 1628.030016][T32552] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4957'. [ 1628.058660][T32552] macvlan0: entered promiscuous mode [ 1628.070981][T32552] macvlan0: entered allmulticast mode [ 1628.079758][T32552] veth1_vlan: entered allmulticast mode [ 1628.338139][T32559] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1628.383774][T32559] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1628.412500][T32559] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1628.425310][T32559] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1628.437871][T32559] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1628.453935][T32559] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1629.661130][T32594] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4965'. [ 1630.120702][T16185] Bluetooth: hci2: command 0x0406 tx timeout [ 1630.441039][T16185] Bluetooth: hci1: command 0x0c1a tx timeout [ 1630.447207][T31382] Bluetooth: hci3: command 0x0c1a tx timeout [ 1630.453388][T25710] Bluetooth: hci0: command 0x0c1a tx timeout [ 1630.522089][T16185] Bluetooth: hci4: command 0x2016 tx timeout [ 1631.036096][T25710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1631.054989][T25710] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1631.067124][T25710] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1631.079492][T25710] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1631.092844][T25710] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1632.065833][T32618] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4969'. [ 1632.100000][T32618] macvlan0: entered promiscuous mode [ 1632.113000][T32618] macvlan0: entered allmulticast mode [ 1632.123210][T32618] veth1_vlan: entered allmulticast mode [ 1632.201034][T25710] Bluetooth: hci2: command 0x0406 tx timeout [ 1632.520663][T16185] Bluetooth: hci3: command 0x0c1a tx timeout [ 1632.526764][T25710] Bluetooth: hci1: command 0x0c1a tx timeout [ 1632.600824][T25710] Bluetooth: hci4: command 0x2016 tx timeout [ 1632.655456][T32609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.678149][T32609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.703743][T32609] bridge_slave_0: entered allmulticast mode [ 1632.728640][T32609] bridge_slave_0: entered promiscuous mode [ 1632.756560][T32609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.779624][T32609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.809915][T32609] bridge_slave_1: entered allmulticast mode [ 1632.846903][T32609] bridge_slave_1: entered promiscuous mode [ 1632.955244][T32609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.007700][T32609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1633.118064][T32609] team0: Port device team_slave_0 added [ 1633.145352][T32609] team0: Port device team_slave_1 added [ 1633.163818][T25710] Bluetooth: hci5: command tx timeout [ 1633.262672][T32609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1633.288019][T32609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1633.376368][T32609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1633.432373][T32609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1633.448715][T32609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1633.511796][T32609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1633.838183][T32609] hsr_slave_0: entered promiscuous mode [ 1633.860244][T32609] hsr_slave_1: entered promiscuous mode [ 1633.888779][T32609] debugfs: 'hsr0' already exists in 'hsr' [ 1633.895969][T32656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4974'. [ 1633.928154][T32609] Cannot create hsr debugfs directory [ 1635.097702][T32663] zswap: compressor 000 not available [ 1635.240715][T25710] Bluetooth: hci5: command tx timeout [ 1635.254160][T32609] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1635.280106][T32609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1635.312676][T32609] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1635.344124][T32609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1635.393857][T32609] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1635.436358][T32609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1635.471229][T32609] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1635.490978][T32609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1635.735452][T32609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1635.754853][T32609] 8021q: adding VLAN 0 to HW filter on device team0 [ 1635.768074][T28442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.775244][T28442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1635.824802][T28442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.831988][T28442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1636.685890][T32687] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1636.749509][T32609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1637.320955][T25710] Bluetooth: hci5: command tx timeout [ 1637.371864][T16185] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1637.389834][T16185] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1637.398137][T16185] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1637.409765][T16185] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1637.428456][T16185] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1637.701578][T32609] veth0_vlan: entered promiscuous mode [ 1637.783234][T32609] veth1_vlan: entered promiscuous mode [ 1638.054866][T32609] veth0_macvtap: entered promiscuous mode [ 1638.109371][T32609] veth1_macvtap: entered promiscuous mode [ 1638.211427][T32609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1638.279946][T32609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1638.337703][T32412] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.391251][T32412] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.456405][T32412] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.515262][T32412] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.938690][T28441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1638.975740][T28441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.099184][T28441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.125754][T28441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.402716][T25710] Bluetooth: hci5: command tx timeout [ 1639.481943][T25710] Bluetooth: hci6: command tx timeout [ 1639.771418][T32714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.799048][T32714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.838790][T32714] bridge_slave_0: entered allmulticast mode [ 1639.874542][T32714] bridge_slave_0: entered promiscuous mode [ 1639.941742][T32714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.971140][T32714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.997602][T32714] bridge_slave_1: entered allmulticast mode [ 1640.023861][T32714] bridge_slave_1: entered promiscuous mode [ 1640.252473][T32714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1640.330941][T32714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.533374][T32714] team0: Port device team_slave_0 added [ 1640.569250][T32714] team0: Port device team_slave_1 added [ 1640.602994][T16185] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1640.743177][T32714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.789301][T32714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.966506][T32714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1641.131108][T32714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1641.167240][T32714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.285986][T32714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.561804][T16185] Bluetooth: hci6: command tx timeout [ 1641.642811][T32714] hsr_slave_0: entered promiscuous mode [ 1641.671245][T32714] hsr_slave_1: entered promiscuous mode [ 1641.690601][T32714] debugfs: 'hsr0' already exists in 'hsr' [ 1641.711639][T32714] Cannot create hsr debugfs directory [ 1642.349617][ T307] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4990'. [ 1642.918972][T32714] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1642.984783][T32714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1643.078517][T32714] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1643.160895][T32714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1643.196639][T32714] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1643.236818][T32714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1643.275181][T32714] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1643.324575][T32714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1643.628866][ T310] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1643.641062][T16185] Bluetooth: hci6: command tx timeout [ 1643.783939][ T334] FAULT_INJECTION: forcing a failure. [ 1643.783939][ T334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1643.824753][ T334] CPU: 0 UID: 0 PID: 334 Comm: syz.6.4994 Tainted: G L syzkaller #0 PREEMPT(full) [ 1643.824778][ T334] Tainted: [L]=SOFTLOCKUP [ 1643.824784][ T334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1643.824793][ T334] Call Trace: [ 1643.824799][ T334] [ 1643.824805][ T334] dump_stack_lvl+0x100/0x190 [ 1643.824826][ T334] should_fail_ex.cold+0x5/0xa [ 1643.824846][ T334] _copy_from_user+0x2e/0xd0 [ 1643.824869][ T334] copy_msghdr_from_user+0x9f/0x4f0 [ 1643.824892][ T334] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1643.824921][ T334] ___sys_sendmsg+0x106/0x1e0 [ 1643.824943][ T334] ? __pfx____sys_sendmsg+0x10/0x10 [ 1643.824985][ T334] __sys_sendmsg+0x170/0x220 [ 1643.825001][ T334] ? __pfx___sys_sendmsg+0x10/0x10 [ 1643.825024][ T334] ? rcu_is_watching+0x12/0xc0 [ 1643.825044][ T334] do_syscall_64+0x115/0x840 [ 1643.825067][ T334] ? clear_bhb_loop+0x40/0x90 [ 1643.825086][ T334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.825101][ T334] RIP: 0033:0x7fd5af39ce59 [ 1643.825115][ T334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1643.825135][ T334] RSP: 002b:00007fd5b0316028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1643.825150][ T334] RAX: ffffffffffffffda RBX: 00007fd5af615fa0 RCX: 00007fd5af39ce59 [ 1643.825160][ T334] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1643.825169][ T334] RBP: 00007fd5b0316090 R08: 0000000000000000 R09: 0000000000000000 [ 1643.825178][ T334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1643.825187][ T334] R13: 00007fd5af616038 R14: 00007fd5af615fa0 R15: 00007fff8ed4a4d8 [ 1643.825206][ T334] [ 1644.274409][T32714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1644.292604][T32714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1644.312874][T21230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.320052][T21230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1644.334164][T21230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.341339][T21230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1645.721575][T16185] Bluetooth: hci6: command tx timeout [ 1645.958705][T32714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1646.448434][T32714] veth0_vlan: entered promiscuous mode [ 1646.503201][T32714] veth1_vlan: entered promiscuous mode [ 1646.612525][T32714] veth0_macvtap: entered promiscuous mode [ 1646.628924][ T387] FAULT_INJECTION: forcing a failure. [ 1646.628924][ T387] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.663349][T32714] veth1_macvtap: entered promiscuous mode [ 1646.698655][ T387] CPU: 0 UID: 0 PID: 387 Comm: syz.5.5003 Tainted: G L syzkaller #0 PREEMPT(full) [ 1646.698681][ T387] Tainted: [L]=SOFTLOCKUP [ 1646.698686][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1646.698696][ T387] Call Trace: [ 1646.698702][ T387] [ 1646.698708][ T387] dump_stack_lvl+0x100/0x190 [ 1646.698729][ T387] should_fail_ex.cold+0x5/0xa [ 1646.698749][ T387] should_failslab+0xc2/0x120 [ 1646.698768][ T387] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1646.698793][ T387] ? __alloc_skb+0x140/0x710 [ 1646.698814][ T387] ? __alloc_skb+0x5b7/0x710 [ 1646.698830][ T387] __alloc_skb+0x140/0x710 [ 1646.698842][ T387] ? __alloc_skb+0x5b7/0x710 [ 1646.698855][ T387] ? __pfx___alloc_skb+0x10/0x10 [ 1646.698869][ T387] ? __pfx___might_resched+0x10/0x10 [ 1646.698886][ T387] ? __lock_acquire+0x4a5/0x2630 [ 1646.698912][ T387] netlink_alloc_large_skb+0x69/0x150 [ 1646.698935][ T387] netlink_sendmsg+0x680/0xda0 [ 1646.698957][ T387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1646.698976][ T387] ? __import_iovec+0x1d2/0x640 [ 1646.699000][ T387] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1646.699020][ T387] ____sys_sendmsg+0x9e1/0xb70 [ 1646.699039][ T387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1646.699061][ T387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1646.699088][ T387] ___sys_sendmsg+0x190/0x1e0 [ 1646.699110][ T387] ? __pfx____sys_sendmsg+0x10/0x10 [ 1646.699151][ T387] __sys_sendmsg+0x170/0x220 [ 1646.699168][ T387] ? __pfx___sys_sendmsg+0x10/0x10 [ 1646.699190][ T387] ? rcu_is_watching+0x12/0xc0 [ 1646.699210][ T387] do_syscall_64+0x115/0x840 [ 1646.699230][ T387] ? clear_bhb_loop+0x40/0x90 [ 1646.699249][ T387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.699265][ T387] RIP: 0033:0x7fe00a79ce59 [ 1646.699278][ T387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1646.699292][ T387] RSP: 002b:00007fe00b5d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1646.699308][ T387] RAX: ffffffffffffffda RBX: 00007fe00aa15fa0 RCX: 00007fe00a79ce59 [ 1646.699318][ T387] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1646.699327][ T387] RBP: 00007fe00b5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1646.699336][ T387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.699345][ T387] R13: 00007fe00aa16038 R14: 00007fe00aa15fa0 R15: 00007ffd93b29988 [ 1646.699364][ T387] [ 1646.950050][T32714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1646.959924][T32714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1647.018557][ T390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5005'. [ 1647.189773][T28442] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.199048][T28442] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.208145][T28442] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.303681][T28442] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.445026][T28442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1647.453821][T28442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1647.559579][T32411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1647.575936][T32411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1648.372209][ T416] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5011'. [ 1649.728946][ T428] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5013'. [ 1649.939736][ T442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5015'. [ 1651.557568][ T474] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5020'. [ 1651.608639][ T472] netlink: 13 bytes leftover after parsing attributes in process `syz.9.5020'. [ 1652.854404][ T500] netlink: 330 bytes leftover after parsing attributes in process `syz.9.5026'. [ 1652.898661][ T500] mac80211_hwsim hwsim375 : renamed from wlan0 (while UP) Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 1653.525510][ T515] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1653.624389][ T511] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5028'. [ 1653.936885][ T519] netlink: 330 bytes leftover after parsing attributes in process `syz.5.5030'. [ 1654.035810][ T525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5030'. [ 1655.353588][ T543] Process accounting paused [ 1655.926104][ T553] zswap: compressor 000 not available [ 1655.984811][ T570] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1656.354687][ T555] zswap: compressor 000 not available [ 1656.530722][ T562] FAULT_INJECTION: forcing a failure. [ 1656.530722][ T562] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1656.577461][ T562] CPU: 0 UID: 0 PID: 562 Comm: syz.5.5038 Tainted: G L syzkaller #0 PREEMPT(full) [ 1656.577488][ T562] Tainted: [L]=SOFTLOCKUP [ 1656.577493][ T562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1656.577503][ T562] Call Trace: [ 1656.577509][ T562] [ 1656.577515][ T562] dump_stack_lvl+0x100/0x190 [ 1656.577536][ T562] should_fail_ex.cold+0x5/0xa [ 1656.577556][ T562] get_futex_key+0xf78/0x1510 [ 1656.577583][ T562] ? __pfx_get_futex_key+0x10/0x10 [ 1656.577606][ T562] ? lock_acquire+0x1b1/0x370 [ 1656.577635][ T562] futex_wake+0xea/0x530 [ 1656.577655][ T562] ? __pfx_futex_wake+0x10/0x10 [ 1656.577673][ T562] ? exit_mm_release+0x19/0x30 [ 1656.577700][ T562] do_futex+0x32b/0x350 [ 1656.577716][ T562] ? __pfx_do_futex+0x10/0x10 [ 1656.577730][ T562] ? __might_fault+0xc5/0x140 [ 1656.577757][ T562] mm_release+0x24a/0x2f0 [ 1656.577776][ T562] do_exit+0x707/0x2af0 [ 1656.577808][ T562] ? __pfx_do_exit+0x10/0x10 [ 1656.577830][ T562] ? do_raw_spin_lock+0x128/0x260 [ 1656.577846][ T562] ? find_held_lock+0x2b/0x80 [ 1656.577863][ T562] ? get_signal+0x7e5/0x2210 [ 1656.577884][ T562] do_group_exit+0xd5/0x2a0 [ 1656.577907][ T562] get_signal+0x20ff/0x2210 [ 1656.577930][ T562] ? kill_rules+0x6a0/0x6c0 [ 1656.577947][ T562] ? __pfx_get_signal+0x10/0x10 [ 1656.577967][ T562] ? do_futex+0x192/0x350 [ 1656.577984][ T562] arch_do_signal_or_restart+0x91/0x7a0 [ 1656.578006][ T562] ? rcu_is_watching+0x12/0xc0 [ 1656.578023][ T562] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1656.578052][ T562] ? rcu_is_watching+0x12/0xc0 [ 1656.578071][ T562] exit_to_user_mode_loop+0x98/0x670 [ 1656.578094][ T562] ? rcu_is_watching+0x12/0xc0 [ 1656.578113][ T562] do_syscall_64+0x652/0x840 [ 1656.578134][ T562] ? clear_bhb_loop+0x40/0x90 [ 1656.578153][ T562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.578168][ T562] RIP: 0033:0x7fe00a79ce59 [ 1656.578182][ T562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1656.578197][ T562] RSP: 002b:00007fe00b5d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1656.578212][ T562] RAX: fffffffffffffe00 RBX: 00007fe00aa15fa8 RCX: 00007fe00a79ce59 [ 1656.578222][ T562] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe00aa15fa8 [ 1656.578231][ T562] RBP: 00007fe00aa15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1656.578243][ T562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1656.578252][ T562] R13: 00007fe00aa16038 R14: 00007ffd93b298a0 R15: 00007ffd93b29988 [ 1656.578271][ T562] [ 1657.484850][ T579] zswap: compressor 000 not available [ 1657.533879][ T588] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1659.656696][T16185] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 1659.674724][T16185] Bluetooth: hci6: Invalid handle: 0x3a4a > 0x0eff [ 1659.847045][T31561] Process accounting resumed [ 1660.188483][ T604] Process accounting resumed [ 1661.431720][T25710] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1661.453982][T25710] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1661.471229][T25710] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1661.479864][T25710] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1661.490838][T25710] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1662.410378][ T656] zswap: compressor 000 not available [ 1663.561093][T25710] Bluetooth: hci7: command tx timeout [ 1663.747630][ T690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5058'. [ 1664.156786][ T644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.191863][ T644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.215675][ T644] bridge_slave_0: entered allmulticast mode [ 1664.237964][ T644] bridge_slave_0: entered promiscuous mode [ 1664.266485][ T644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.290606][ T644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.332202][ T644] bridge_slave_1: entered allmulticast mode [ 1664.378592][ T644] bridge_slave_1: entered promiscuous mode [ 1664.577430][ T644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.748271][ T705] zswap: compressor 000 not available [ 1664.766562][ T644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1664.825021][ T713] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1665.146506][ T644] team0: Port device team_slave_0 added [ 1665.188809][ T644] team0: Port device team_slave_1 added [ 1665.640660][T25710] Bluetooth: hci7: command tx timeout [ 1665.710863][ T644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1665.750182][ T644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1665.875758][ T644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1665.940004][ T644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1665.977255][ T644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1666.113209][ T644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1666.369981][ T644] hsr_slave_0: entered promiscuous mode [ 1666.398371][ T644] hsr_slave_1: entered promiscuous mode [ 1666.433761][ T644] debugfs: 'hsr0' already exists in 'hsr' [ 1666.480102][ T644] Cannot create hsr debugfs directory [ 1667.053616][ T735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5067'. [ 1667.363748][ T729] zswap: compressor 000 not available [ 1667.721496][T25710] Bluetooth: hci7: command tx timeout [ 1668.926238][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.935967][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.800815][T25710] Bluetooth: hci7: command tx timeout [ 1670.656373][ T644] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1670.706249][ T644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1670.748150][ T644] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1670.801530][ T644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1670.849226][ T644] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1670.922839][ T644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1671.127972][ T644] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1671.193362][ T644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1671.334174][ T833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5078'. [ 1672.900184][ T644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1673.032820][ T644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1673.116391][T21230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.123594][T21230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1673.233128][T21230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.240292][T21230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1674.704775][ T907] mtrr: base(0x1000000) is not aligned on a size(0x0000) boundary [ 1675.162333][ T917] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 1675.363919][ T644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1675.675506][ T644] veth0_vlan: entered promiscuous mode [ 1675.763059][ T644] veth1_vlan: entered promiscuous mode [ 1676.147579][ T644] veth0_macvtap: entered promiscuous mode [ 1676.207851][ T644] veth1_macvtap: entered promiscuous mode [ 1676.310105][ T644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.350166][ T950] zswap: compressor 000 not available [ 1676.380955][ T644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1676.668917][T32410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.737976][T32410] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.838186][T32410] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.908275][T32411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.576662][T28442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.642578][T28442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1678.027654][T32412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1678.098773][T32412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.607220][ T1057] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1680.828868][ T1057] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5104'. [ 1682.835476][ T1114] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1682.894235][ T1107] program syz.6.5109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1683.079695][ T29] audit: type=1800 audit(4294985963.048:47): pid=1121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5111" name="dbroot" dev="configfs" ino=181298 res=0 errno=0 [ 1684.159366][ T1139] TCP: TCP_TX_DELAY enabled [ 1685.161119][ T1158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5117'. [ 1686.119505][ T1157] Process accounting resumed [ 1686.380611][ T1183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5120'. [ 1686.392276][ T1182] FAULT_INJECTION: forcing a failure. [ 1686.392276][ T1182] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.453159][ T1182] CPU: 0 UID: 0 PID: 1182 Comm: syz.6.5121 Tainted: G L syzkaller #0 PREEMPT(full) [ 1686.453187][ T1182] Tainted: [L]=SOFTLOCKUP [ 1686.453193][ T1182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1686.453203][ T1182] Call Trace: [ 1686.453209][ T1182] [ 1686.453216][ T1182] dump_stack_lvl+0x100/0x190 [ 1686.453239][ T1182] should_fail_ex.cold+0x5/0xa [ 1686.453260][ T1182] should_failslab+0xc2/0x120 [ 1686.453279][ T1182] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1686.453301][ T1182] ? vidtv_psi_eit_event_init+0xe1/0x400 [ 1686.453427][ T1182] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 1686.453448][ T1182] vidtv_psi_eit_event_init+0xe1/0x400 [ 1686.453471][ T1182] ? __pfx_vidtv_psi_eit_event_init+0x10/0x10 [ 1686.453499][ T1182] ? vidtv_psi_desc_clone+0x358/0x5d0 [ 1686.453521][ T1182] vidtv_channel_si_init+0x845/0x18f0 [ 1686.453549][ T1182] vidtv_mux_init+0x526/0xbf0 [ 1686.453573][ T1182] vidtv_start_feed+0x34e/0x500 [ 1686.453591][ T1182] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1686.453608][ T1182] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1686.453635][ T1182] dmx_section_feed_start_filtering+0x3a8/0x660 [ 1686.453661][ T1182] dvb_dmxdev_filter_start+0x767/0xdd0 [ 1686.453684][ T1182] dvb_demux_do_ioctl+0xe64/0x1200 [ 1686.453706][ T1182] dvb_usercopy+0x167/0x340 [ 1686.453770][ T1182] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1686.453788][ T1182] ? __pfx_dvb_usercopy+0x10/0x10 [ 1686.453820][ T1182] ? __fget_files+0x21f/0x3d0 [ 1686.453843][ T1182] dvb_demux_ioctl+0x29/0x40 [ 1686.453857][ T1182] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1686.453872][ T1182] __x64_sys_ioctl+0x18e/0x210 [ 1686.453897][ T1182] do_syscall_64+0x115/0x840 [ 1686.453918][ T1182] ? clear_bhb_loop+0x40/0x90 [ 1686.453938][ T1182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.453955][ T1182] RIP: 0033:0x7fd5af39ce59 [ 1686.453970][ T1182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1686.453986][ T1182] RSP: 002b:00007fd5b0316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1686.454002][ T1182] RAX: ffffffffffffffda RBX: 00007fd5af615fa0 RCX: 00007fd5af39ce59 [ 1686.454013][ T1182] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 1686.454023][ T1182] RBP: 00007fd5af432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1686.454033][ T1182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1686.454042][ T1182] R13: 00007fd5af616038 R14: 00007fd5af615fa0 R15: 00007fff8ed4a4d8 [ 1686.454063][ T1182] [ 1689.626488][ T1243] FAULT_INJECTION: forcing a failure. [ 1689.626488][ T1243] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.710147][ T1243] CPU: 0 UID: 0 PID: 1243 Comm: syz.9.5132 Tainted: G L syzkaller #0 PREEMPT(full) [ 1689.710174][ T1243] Tainted: [L]=SOFTLOCKUP [ 1689.710180][ T1243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1689.710189][ T1243] Call Trace: [ 1689.710195][ T1243] [ 1689.710202][ T1243] dump_stack_lvl+0x100/0x190 [ 1689.710224][ T1243] should_fail_ex.cold+0x5/0xa [ 1689.710245][ T1243] should_failslab+0xc2/0x120 [ 1689.710265][ T1243] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1689.710282][ T1243] ? vidtv_psi_short_event_desc_init+0x1bf/0x5f0 [ 1689.710307][ T1243] kstrdup+0x51/0xe0 [ 1689.710324][ T1243] vidtv_psi_short_event_desc_init+0x1bf/0x5f0 [ 1689.710347][ T1243] vidtv_psi_desc_clone+0x33f/0x5d0 [ 1689.710369][ T1243] vidtv_channel_si_init+0x76c/0x18f0 [ 1689.710400][ T1243] vidtv_mux_init+0x526/0xbf0 [ 1689.710425][ T1243] vidtv_start_feed+0x34e/0x500 [ 1689.710442][ T1243] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1689.710460][ T1243] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1689.710487][ T1243] dmx_section_feed_start_filtering+0x3a8/0x660 [ 1689.710520][ T1243] dvb_dmxdev_filter_start+0x767/0xdd0 [ 1689.710543][ T1243] dvb_demux_do_ioctl+0xe64/0x1200 [ 1689.710566][ T1243] dvb_usercopy+0x167/0x340 [ 1689.710589][ T1243] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1689.710607][ T1243] ? __pfx_dvb_usercopy+0x10/0x10 [ 1689.710636][ T1243] ? __fget_files+0x21f/0x3d0 [ 1689.710658][ T1243] dvb_demux_ioctl+0x29/0x40 [ 1689.710672][ T1243] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1689.710686][ T1243] __x64_sys_ioctl+0x18e/0x210 [ 1689.710703][ T1243] do_syscall_64+0x115/0x840 [ 1689.710724][ T1243] ? clear_bhb_loop+0x40/0x90 [ 1689.710744][ T1243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.710760][ T1243] RIP: 0033:0x7f6dc4f9ce59 [ 1689.710774][ T1243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1689.710789][ T1243] RSP: 002b:00007f6dc5de3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1689.710805][ T1243] RAX: ffffffffffffffda RBX: 00007f6dc5215fa0 RCX: 00007f6dc4f9ce59 [ 1689.710816][ T1243] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 1689.710825][ T1243] RBP: 00007f6dc5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1689.710834][ T1243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1689.710843][ T1243] R13: 00007f6dc5216038 R14: 00007f6dc5215fa0 R15: 00007ffc831cd758 [ 1689.710864][ T1243] [ 1690.837192][ T1270] futex_wake_op: syz.5.5134 tries to shift op by -2048; fix this program [ 1690.932573][ T1270] futex_wake_op: syz.5.5134 tries to shift op by -2048; fix this program [ 1691.504981][ T1243] Process accounting paused [ 1691.816105][ T1287] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1692.679666][ T1312] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1693.991473][ T1334] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5147'. [ 1694.045584][ T1334] ipvlan1: entered promiscuous mode [ 1694.074377][ T1334] ipvlan1: entered allmulticast mode [ 1694.112412][ T1334] veth0_vlan: entered allmulticast mode [ 1694.152839][ T1309] kexec: Could not allocate control_code_buffer [ 1694.711876][ T1349] netlink: Conntrack attr has 5 unknown bytes [ 1695.883735][ T1352] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[28551] was attempted by ""[1352] [ 1698.264943][ T29] audit: type=1800 audit(4294985978.238:48): pid=1408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5164" name="dbroot" dev="configfs" ino=182751 res=0 errno=0 [ 1699.502302][ T1425] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.5165: iget: checksum invalid [ 1699.563195][ T1425] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1699.620234][ T1425] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.5165: iget: checksum invalid [ 1699.693462][ T1425] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1699.725461][ T1425] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.5165: iget: checksum invalid [ 1699.753160][ T1425] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1699.777095][ T1425] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.5165: iget: checksum invalid [ 1699.807455][ T1425] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1699.831839][ T1425] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1699.854349][ T1425] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1700.333557][ T1442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5168'. [ 1700.699306][ T1446] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5169'. [ 1702.167524][ T1463] FAULT_INJECTION: forcing a failure. [ 1702.167524][ T1463] name failslab, interval 1, probability 0, space 0, times 0 [ 1702.227561][ T1463] CPU: 0 UID: 0 PID: 1463 Comm: syz.3.5173 Tainted: G L syzkaller #0 PREEMPT(full) [ 1702.227589][ T1463] Tainted: [L]=SOFTLOCKUP [ 1702.227595][ T1463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1702.227605][ T1463] Call Trace: [ 1702.227611][ T1463] [ 1702.227617][ T1463] dump_stack_lvl+0x100/0x190 [ 1702.227639][ T1463] should_fail_ex.cold+0x5/0xa [ 1702.227659][ T1463] should_failslab+0xc2/0x120 [ 1702.227678][ T1463] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1702.227702][ T1463] ? security_file_alloc+0x34/0x2c0 [ 1702.227722][ T1463] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1702.227743][ T1463] security_file_alloc+0x34/0x2c0 [ 1702.227763][ T1463] init_file+0x95/0x480 [ 1702.227784][ T1463] alloc_empty_file+0x79/0x1c0 [ 1702.227806][ T1463] alloc_file_pseudo+0x13a/0x230 [ 1702.227829][ T1463] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1702.227851][ T1463] ? pidfs_register_pid+0x70/0x1b0 [ 1702.227872][ T1463] sock_alloc_file+0x50/0x210 [ 1702.227890][ T1463] __sys_socketpair+0x321/0x5b0 [ 1702.227912][ T1463] ? __pfx___sys_socketpair+0x10/0x10 [ 1702.227933][ T1463] ? xfd_validate_state+0x129/0x190 [ 1702.227956][ T1463] __x64_sys_socketpair+0x96/0x100 [ 1702.227977][ T1463] ? lockdep_hardirqs_on+0x78/0x100 [ 1702.228016][ T1463] do_syscall_64+0x115/0x840 [ 1702.228037][ T1463] ? clear_bhb_loop+0x40/0x90 [ 1702.228056][ T1463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.228073][ T1463] RIP: 0033:0x7fa383f9ce59 [ 1702.228087][ T1463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.228102][ T1463] RSP: 002b:00007fa384e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1702.228118][ T1463] RAX: ffffffffffffffda RBX: 00007fa384215fa0 RCX: 00007fa383f9ce59 [ 1702.228128][ T1463] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 1702.228137][ T1463] RBP: 00007fa384032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1702.228146][ T1463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1702.228156][ T1463] R13: 00007fa384216038 R14: 00007fa384215fa0 R15: 00007ffea170e688 [ 1702.228176][ T1463] [ 1702.947165][ T1469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5175'. [ 1704.036272][ T1471] [U]  [ 1705.527716][ T1498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.903981][ T29] audit: type=1800 audit(4294985986.878:49): pid=1529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5185" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1708.220242][ T1540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5188'. [ 1708.363930][ T1536] zswap: compressor 000 not available [ 1708.434897][ T1548] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1709.186952][ T1557] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.9.5190: iget: checksum invalid [ 1709.198948][ T1557] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1709.211447][ T1557] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.9.5190: iget: checksum invalid [ 1709.226870][ T1557] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1709.265290][ T1557] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.9.5190: iget: checksum invalid [ 1709.293945][ T1557] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1709.311670][ T1557] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.9.5190: iget: checksum invalid [ 1709.330174][ T1557] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1709.340018][ T1557] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1709.353881][ T1557] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1711.648715][ T1585] zswap: compressor 000 not available [ 1711.703316][ T1591] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1712.196953][T16185] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1712.219152][T16185] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1712.228695][T16185] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1712.241633][T16185] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1712.254150][T16185] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1712.868364][T25710] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1712.886024][T25710] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1712.897179][T25710] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1712.914102][T25710] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1712.937107][T25710] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1714.364919][T25710] Bluetooth: hci8: command tx timeout [ 1715.010966][T25710] Bluetooth: hci9: command tx timeout [ 1715.540686][ T1597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.568534][ T1597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.586357][ T1597] bridge_slave_0: entered allmulticast mode [ 1715.617119][ T1597] bridge_slave_0: entered promiscuous mode [ 1715.663476][ T1597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.697687][ T1597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.736201][ T1597] bridge_slave_1: entered allmulticast mode [ 1715.766005][ T1597] bridge_slave_1: entered promiscuous mode [ 1715.949634][ T1605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.984946][ T1605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.012255][ T1605] bridge_slave_0: entered allmulticast mode [ 1716.047835][ T1605] bridge_slave_0: entered promiscuous mode [ 1716.082655][ T1597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1716.135358][ T1605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.161806][ T1605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.186822][ T1605] bridge_slave_1: entered allmulticast mode [ 1716.216535][ T1605] bridge_slave_1: entered promiscuous mode [ 1716.242409][ T1597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1716.389685][ T1605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1716.430282][ T1597] team0: Port device team_slave_0 added [ 1716.440830][T16185] Bluetooth: hci8: command tx timeout [ 1716.464461][ T1605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1716.533379][ T1597] team0: Port device team_slave_1 added [ 1716.617703][ T1605] team0: Port device team_slave_0 added [ 1716.646688][ T1605] team0: Port device team_slave_1 added [ 1716.663330][ T1597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1716.670790][ T1597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1716.707260][ T1597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1716.749708][ T1605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1716.757078][ T1605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1716.785321][ T1605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1716.797062][ T1597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1716.807157][ T1597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1716.845194][ T1597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1716.877495][ T1605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1716.893607][ T1605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1716.974006][ T1605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1717.080539][T16185] Bluetooth: hci9: command tx timeout [ 1717.195343][ T1695] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1717.250275][ T1597] hsr_slave_0: entered promiscuous mode [ 1717.276867][ T1597] hsr_slave_1: entered promiscuous mode [ 1717.312656][ T1597] debugfs: 'hsr0' already exists in 'hsr' [ 1717.326663][ T1597] Cannot create hsr debugfs directory [ 1717.426805][ T1605] hsr_slave_0: entered promiscuous mode [ 1717.446194][ T1605] hsr_slave_1: entered promiscuous mode [ 1717.457738][ T1605] debugfs: 'hsr0' already exists in 'hsr' [ 1717.464267][ T1605] Cannot create hsr debugfs directory [ 1717.719653][ T1705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5214'. [ 1718.522879][T16185] Bluetooth: hci8: command tx timeout [ 1718.693626][ T1605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1718.716411][ T1605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1718.729879][ T1605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1718.756529][ T1605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1718.808475][ T1605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1718.832842][ T1605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1719.161858][T16185] Bluetooth: hci9: command tx timeout [ 1719.714457][ T1605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1719.759789][ T1605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1720.125825][ T30] INFO: task syz-executor:19350 blocked for more than 143 seconds. [ 1720.139465][ T30] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1720.166634][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1720.220866][ T30] task:syz-executor state:D stack:24056 pid:19350 tgid:19350 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1720.284536][ T30] Call Trace: [ 1720.306475][ T30] [ 1720.318405][ T30] __schedule+0x1295/0x67a0 [ 1720.339547][ T30] ? __pfx___schedule+0x10/0x10 [ 1720.358666][ T30] ? find_held_lock+0x2b/0x80 [ 1720.379664][ T30] ? schedule+0x2bf/0x390 [ 1720.406248][ T30] schedule+0xdd/0x390 [ 1720.423306][ T30] schedule_preempt_disabled+0x13/0x30 [ 1720.449040][ T30] __mutex_lock+0xced/0x1b10 [ 1720.468577][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1720.490193][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1720.519606][ T30] ? net_generic+0xea/0x2a0 [ 1720.542972][ T30] ? net_generic+0xea/0x2a0 [ 1720.563990][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1720.585725][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 1720.601022][T16185] Bluetooth: hci8: command tx timeout [ 1720.622982][ T30] nfsd_umount+0x3b/0x60 [ 1720.642488][ T30] deactivate_locked_super+0xc1/0x1b0 [ 1720.664966][ T30] deactivate_super+0xe7/0x110 [ 1720.687019][ T30] cleanup_mnt+0x21f/0x450 [ 1720.705264][ T30] task_work_run+0x150/0x240 [ 1720.737653][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1720.788550][ T30] ? rcu_is_watching+0x12/0xc0 [ 1720.838275][ T30] exit_to_user_mode_loop+0x157/0x670 [ 1720.866627][ T30] ? rcu_is_watching+0x12/0xc0 [ 1720.901927][ T30] do_syscall_64+0x652/0x840 [ 1720.910864][ T30] ? clear_bhb_loop+0x40/0x90 [ 1720.931361][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.957254][ T30] RIP: 0033:0x7f3e8779e097 [ 1720.963494][ T30] RSP: 002b:00007ffd40787c88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1720.982838][ T30] RAX: 0000000000000000 RBX: 00007f3e878321ca RCX: 00007f3e8779e097 [ 1721.001214][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd40787d40 [ 1721.017706][ T30] RBP: 00007ffd40787d40 R08: 00007ffd40788d40 R09: 00000000ffffffff [ 1721.035593][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd40788dd0 [ 1721.044018][ T30] R13: 00007f3e878321ca R14: 000000000017dfdf R15: 00007ffd40788e10 [ 1721.052669][ T30] [ 1721.135296][ T30] [ 1721.135296][ T30] Showing all locks held in the system: [ 1721.154125][ T30] 1 lock held by khungtaskd/30: [ 1721.167192][ T30] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1721.190499][ T30] 1 lock held by dhcpcd/5294: [ 1721.200553][ T30] #0: ffffffff90606620 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x1b4/0x320 [ 1721.225805][ T30] 2 locks held by getty/14459: [ 1721.240565][T16185] Bluetooth: hci9: command tx timeout [ 1721.250641][ T30] #0: ffff8880380900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1721.270464][ T30] #1: ffffc90003b952e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1721.297427][ T30] 2 locks held by syz-executor/19350: [ 1721.310554][ T30] #0: ffff888059d6c0d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1721.335915][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1721.360534][ T30] 2 locks held by syz.2.4732/31360: [ 1721.367285][ T30] #0: ffffffff906b4a88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1721.386079][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 1721.399188][ T30] 2 locks held by syz-executor/31378: [ 1721.409644][ T30] #0: ffff8880429cc0d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1721.420192][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1721.433055][ T30] 2 locks held by syz-executor/31662: [ 1721.438449][ T30] #0: ffff88807e0120d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1721.453536][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1721.463758][ T30] 2 locks held by syz-executor/31723: [ 1721.469138][ T30] #0: ffff88802763e0d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1721.479814][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1721.490270][ T30] 4 locks held by kworker/u10:32/32409: [ 1721.496373][ T30] #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1721.506976][ T30] #1: ffffc90004fafd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1721.517486][ T30] #2: ffffffff905ed8c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1721.529580][ T30] #3: ffffffff90606620 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1721.538951][ T30] 3 locks held by kworker/u10:33/32410: [ 1721.545384][ T30] #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1721.559254][ T30] #1: ffffc90004ff7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1721.575150][ T30] #2: ffffffff90606620 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1721.584477][ T30] 3 locks held by kworker/u10:35/32412: [ 1721.590030][ T30] #0: ffff888033dbf940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1721.602406][ T30] #1: ffffc90005037d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1721.614826][ T30] #2: ffffffff90606620 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 1721.624867][ T30] 2 locks held by syz-executor/32609: [ 1721.633346][ T30] #0: ffff88807ed840d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1721.646413][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1721.656895][ T30] 2 locks held by syz.5.5162/1399: [ 1721.664201][ T30] #0: ffff888057ca20d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1721.674871][ T30] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1721.688718][ T30] 9 locks held by syz-executor/1597: [ 1721.694784][ T30] #0: ffff8880358da410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1721.704042][ T30] #1: ffff88807e97d080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1721.714293][ T30] #2: ffff888026e9fd28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1721.725863][ T30] #3: ffffffff8fb87a00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1721.739130][ T30] #4: ffff888046a8f128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1721.749974][ T30] #5: ffff888046a8e258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 1721.760286][ T30] #6: ffffffff90606620 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x19e/0x970 [ 1721.772207][ T30] #7: ffff888037484dc8 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xd49/0x24f0 [ 1721.784664][ T30] #8: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1721.798947][ T30] 1 lock held by syz-executor/1605: [ 1721.807870][ T30] #0: ffffffff90606620 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x49c/0x1bb0 [ 1721.817610][ T30] 2 locks held by syz.3.5216/1716: [ 1721.824830][ T30] #0: ffffffff905ed8c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1721.836914][ T30] #1: ffffffff90606620 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x120 [ 1721.847014][ T30] 2 locks held by syz.9.5219/1748: [ 1721.852409][ T30] #0: ffff888079aecea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1721.862273][ T30] #1: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1721.889863][ T30] [ 1721.897282][ T30] ============================================= [ 1721.897282][ T30] [ 1721.946856][ T30] NMI backtrace for cpu 0 [ 1721.946873][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1721.946894][ T30] Tainted: [L]=SOFTLOCKUP [ 1721.946899][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1721.946909][ T30] Call Trace: [ 1721.946914][ T30] [ 1721.946920][ T30] dump_stack_lvl+0x100/0x190 [ 1721.946943][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1721.946961][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1721.946978][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1721.946998][ T30] sys_info+0x141/0x190 [ 1721.947013][ T30] watchdog+0xcb1/0x1030 [ 1721.947037][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1721.947058][ T30] ? __pfx_watchdog+0x10/0x10 [ 1721.947079][ T30] ? __kthread_parkme+0x18c/0x230 [ 1721.947100][ T30] ? kthread+0x13a/0x450 [ 1721.947121][ T30] ? __pfx_watchdog+0x10/0x10 [ 1721.947139][ T30] kthread+0x370/0x450 [ 1721.947160][ T30] ? __pfx_kthread+0x10/0x10 [ 1721.947182][ T30] ret_from_fork+0x72b/0xd50 [ 1721.947199][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1721.947216][ T30] ? __switch_to+0x800/0x1100 [ 1721.947236][ T30] ? __switch_to_asm+0x39/0x70 [ 1721.947254][ T30] ? __pfx_kthread+0x10/0x10 [ 1721.947277][ T30] ret_from_fork_asm+0x1a/0x30 [ 1721.947307][ T30] [ 1722.274923][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1722.281802][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1722.292463][ T30] Tainted: [L]=SOFTLOCKUP [ 1722.296769][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1722.306806][ T30] Call Trace: [ 1722.310074][ T30] [ 1722.312990][ T30] dump_stack_lvl+0x100/0x190 [ 1722.317659][ T30] vpanic+0x552/0x970 [ 1722.321629][ T30] ? __pfx_vpanic+0x10/0x10 [ 1722.326116][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1722.332259][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1722.338403][ T30] panic+0xd1/0xe0 [ 1722.342113][ T30] ? __pfx_panic+0x10/0x10 [ 1722.346514][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1722.352676][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1722.358815][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1722.364952][ T30] ? watchdog.cold+0x1ec/0x234 [ 1722.369701][ T30] ? watchdog+0xcc1/0x1030 [ 1722.374115][ T30] watchdog.cold+0x1fd/0x234 [ 1722.378693][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1722.384493][ T30] ? __pfx_watchdog+0x10/0x10 [ 1722.389161][ T30] ? __kthread_parkme+0x18c/0x230 [ 1722.394174][ T30] ? kthread+0x13a/0x450 [ 1722.398405][ T30] ? __pfx_watchdog+0x10/0x10 [ 1722.403072][ T30] kthread+0x370/0x450 [ 1722.407134][ T30] ? __pfx_kthread+0x10/0x10 [ 1722.411716][ T30] ret_from_fork+0x72b/0xd50 [ 1722.416298][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1722.421415][ T30] ? __switch_to+0x800/0x1100 [ 1722.426082][ T30] ? __switch_to_asm+0x39/0x70 [ 1722.430836][ T30] ? __pfx_kthread+0x10/0x10 [ 1722.435422][ T30] ret_from_fork_asm+0x1a/0x30 [ 1722.440184][ T30] [ 1722.443294][ T30] Kernel Offset: disabled [ 1722.447618][ T30] Rebooting in 86400 seconds..