last executing test programs: 2m15.135254399s ago: executing program 32 (id=3339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0xf4, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) 2m15.083781984s ago: executing program 33 (id=3338): r0 = clone$auto(0x4, 0x72d2, 0x0, 0x0, 0x4) getpriority$auto_PRIO_PGRP(0x1, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x9, 0x56bb, {[0x2c81, 0x3]}, 0x10001, 0x8, 0x8, [0x6, 0x3, 0x6, 0x9]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x106) 2m12.087789065s ago: executing program 34 (id=3349): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0x3, 0x9) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_11={0xf, 0x800000009, 0x10001, 0x1, 0x5, 0x300, 0xe6ae}, 0x6f3) close_range$auto(0x2, r1, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x9, 0x56bb, {[0x2c81, 0x3]}, 0x10001, 0x8, 0x8, [0x6, 0x3, 0x6, 0x9]}) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, r3, 0x936355e497c8b7e5, 0x70bd25, 0x25dddbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_TCP_DATA_SPLIT={0x5, 0xb, 0x4f}]}, 0x38}, 0x1, 0x0, 0x0, 0x44090}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) epoll_create$auto(0x3e) unshare$auto(0x40000080) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x0, 0xbd1a1717121636e7, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040090}, 0x80c4) 2m11.073516031s ago: executing program 35 (id=3350): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0x3, 0x9) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_11={0xf, 0x800000009, 0x10001, 0x1, 0x5, 0x300, 0xe6ae}, 0x6f3) close_range$auto(0x2, r1, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x9, 0x56bb, {[0x2c81, 0x3]}, 0x10001, 0x8, 0x8, [0x6, 0x3, 0x6, 0x9]}) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, r3, 0x936355e497c8b7e5, 0x70bd25, 0x25dddbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_TCP_DATA_SPLIT={0x5, 0xb, 0x4f}]}, 0x38}, 0x1, 0x0, 0x0, 0x44090}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) epoll_create$auto(0x3e) unshare$auto(0x40000080) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x0, 0xbd1a1717121636e7, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040090}, 0x80c4) 2m1.528387919s ago: executing program 7 (id=3363): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) shutdown$auto(r0, 0x3) 2m0.301592226s ago: executing program 7 (id=3365): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, 0x68) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'geneve1\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x1c, r4, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r6}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) r9 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/psched\x00', 0x40102, 0x0) pread64$auto(r9, 0x0, 0x100000001, 0x100) read$auto(r8, 0x0, 0x1ff) r10 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r10, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-subdev5\x00', 0x704581, 0x0) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4, 0x0) 1m59.635479909s ago: executing program 7 (id=3366): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getrandom$auto(0x0, 0x6000002, 0x3) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0) ioctl$auto(0x3, 0x40106f52, r1) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x24801, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc084) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0x88) socket(0x2, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video4\x00', 0xa200, 0x0) socket(0x10, 0x2, 0xc) 1m58.80908232s ago: executing program 7 (id=3368): mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000b00), r1) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') sendmsg$auto_GTP_CMD_ECHOREQ(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8}, @GTPA_MS_ADDRESS={0x8}, @GTPA_VERSION={0x8, 0x2, 0xd}, @GTPA_LINK={0x8, 0x1, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x80) sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macvtap0\x00'}) 1m57.560350015s ago: executing program 7 (id=3372): r0 = clone$auto(0x4, 0x72d2, 0x0, 0x0, 0x4) getpriority$auto_PRIO_PGRP(0x1, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x9, 0x56bb, {[0x2c81, 0x3]}, 0x10001, 0x8, 0x8, [0x6, 0x3, 0x6, 0x9]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xd000}, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x106) 1m57.130342947s ago: executing program 7 (id=3373): r0 = clone$auto(0x4, 0x72d2, 0x0, 0x0, 0x4) getpriority$auto_PRIO_PGRP(0x1, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x9, 0x56bb, {[0x2c81, 0x3]}, 0x10001, 0x8, 0x8, [0x6, 0x3, 0x6, 0x9]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x106) 1m55.8868554s ago: executing program 36 (id=3351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x70b527, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x48800}, 0x20000000) 1m55.545946872s ago: executing program 6 (id=3378): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0xd, 0x7fffffff, 0xffffffffffffffff, [0x0, 0x2000000], {0x6, 0x6, 0x3, 0x29f, 0xfe, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x2000008, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x9, 0x100000000}}) mmap$auto(0x0, 0x4, 0xffb, 0x8000000008011, 0x3, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xf, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000001c0), r2) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socket(0x2b, 0x1, 0x1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r5 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r5, r5, 0x0) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video25\x00', 0x42af82, 0x0) ioctl$auto(r6, 0xc0585611, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/ieee80211/phy18/statistics/dot11RTSFailureCount\x00', 0x40, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r8, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0008001800018000"/22], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmsg$auto_OVS_METER_CMD_FEATURES(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYRESDEC=r1], 0x18}}, 0x20008000) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r9 = socket(0xa, 0x5, 0x84) getsockopt$auto(r9, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) r10 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r9, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00002dbd7000fddbdf2508000000ae1e5586e5485024fed57e4808a495df4f72194e02d4d0f02b7c90978cb729956f574f66946156d31576473b77ad4856ae0ada16f28c28fdf80d46c0609e7d0b6534ea9e435d0953db5c00"/101], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20040005) fanotify_init$auto(0x65, 0x2) 1m55.049556105s ago: executing program 6 (id=3379): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$auto_RNDCLEARPOOL(r1, 0x5206, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f00000001c0)) 1m54.824613292s ago: executing program 6 (id=3380): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d7) unshare$auto(0x20000080) mmap$auto(0x2, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x18c) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001680)={{r0, &(0x7f00000004c0)="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", 0x8, &(0x7f00000014c0), 0x4, 0x0, &(0x7f0000000080)=0x1}, {[0x9, 0x1, 0xe, 0xfffffffd]}, 0x0, 0x3, &(0x7f0000001640)="6cf3e856fb09659fd3bf5e0d35863e18e72dbdc6a34d8593492f930a5a6423c74c6d54d0ee236819e2c76181fb95afc33cb3e13d4b7b703dc72ea3"}) socket(0xa, 0x3, 0x3a) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) socket(0x1e, 0x4, 0x0) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c2, 0x2081, 0x3f, 0x7ffc, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x0, 0x5, 0x8, 0x3004, 0x9, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x7, 0x1ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0x5, 0x2, [0x7249, 0xa9f, 0x0, 0x1ff, 0x100000001, 0xda18, 0x2, 0x0, 0x0, 0x1, 0xffffffff, 0x1000000, 0xfffc, 0x40000000000, 0x0, 0x400000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x0, 0x2, 0xfff, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x401, 0xfffffffffffffffc, 0x400000000000002, 0xfffffffffffffffc, 0x3, 0x1, 0x6, 0x7, 0x4]}, 0x1fe, 0x8) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m54.455461662s ago: executing program 6 (id=3382): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0xa, 0x1) bpf$auto(0x0, 0x0, 0x10) move_pages$auto(0x0, 0x5, 0x0, &(0x7f00000003c0)=0x1, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) r1 = socket(0x2, 0x801, 0x106) setsockopt$auto(r1, 0x6, 0x19, 0x0, 0x9) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34048854}, 0x200408c4) close_range$auto(0x2, 0x8, 0x0) 1m54.164657976s ago: executing program 6 (id=3384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) r2 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)=0x8) waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0xffff, 0x413, 0x0, @_sigsys={&(0x7f0000000080), 0x0, 0x3ff}}}, 0x7fff, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabb) mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x9, 0x0) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xe) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x1, 0x0, 0x80000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) getsockopt$auto(r2, 0x84, 0xa, &(0x7f0000000240)='\xc8\xfdV%\r\x80\\\xf7\\\x00\x0eU\xa7\x1a\x04J\xbb\xb3\xcb$=\xdd\xf3\x9a\x98\xf2\xde\x1e{\n\xb5=\xff\x01&\xcbk\xec\xe0P\xdb9\xb5]\xb2E^78\xfd~\x80\x89?\x80\xe2`\xa9M\xf1dJ\xf4TB\xd9\x89ta\x1e \x15C\tgBd\x0ew\x05\xc7j\xc9-\x82\xabie%\x96zl\x1f\xf6\x90\x90\xefr\xd0p\xb6\xb4sx\x91\\\xc1\x12?\xd3\xedF\x9e^O\x1f\x14b\xa9G\xe1\xa7\xb2\xaa1\x0f\xafX\x1c]\xb1\x84\x83\xa5\xdc\xe4\xa7\"\xd2H>\xc0\xb7A\x01\xaa\bu-p(\xb3M*B\xe7)\xc7b$\x8fI', &(0x7f0000000040)=0x1002) sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000dc5cafab32b3dafd6ed4f72b4152cb3d143380c05af6129c3a2a3c24e621fa2b9ff01d47c089c05988e0a4581743968f13f74247e0f29812fbc07f1c1632f475dc96128e514e838b769f9202c629bac8c7b04113f0bed780dc827a2c9b998cb6644984077cd465a13b6246b36a5fbd8332c177169f48c3a50de4cf448465e06c3b621c44a5", @ANYRES16=r1, @ANYBLOB="010027b57100fedbdf250300000004000a8008000800", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m53.173125639s ago: executing program 6 (id=3386): r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_cancel$auto(0x1, &(0x7f0000000080)={0x6, 0x2, 0x73de, 0x6, 0xf, r0, 0x5f, 0x100, 0x9, 0x0, 0x9, r0}, &(0x7f00000000c0)={0x0, 0x100, 0x4, 0xd1a7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="e9ff2abd7008fcdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x200048d0) socket(0x29, 0x2, 0x0) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 1m47.029421856s ago: executing program 8 (id=3406): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0) mmap$auto(0xfffffffffffffff5, 0xffffffdffffffffb, 0x100000000000, 0x15, 0x2, 0x6) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0xc, 0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x60142, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./cgroup\x00') open(&(0x7f0000000040)='./file0\x00', 0x1e9e02, 0x40) mincore$auto(0x80000000001, 0x2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe6q\xf9\xa6u\x8eZ\x00\xf8*C]\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5\xec\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8) \x15\xce\xd8\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xba\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4', 0x9) kexec_load$auto(0x7ceb, 0x5, &(0x7f00000000c0)={@buf=&(0x7f0000000200), 0x0, 0x800, 0xfffffffffeffffff}, 0xfc) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) sysfs$auto(0x9, 0x100000000000030, 0x40) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socketpair$auto(0x1, 0x20000a, 0x6, 0x0) ioctl$auto(r1, 0x89f2, r1) 1m46.454291859s ago: executing program 8 (id=3408): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto_F_GETSIG(r0, 0xb, 0x100) chmod$auto(&(0x7f00000000c0)='./file0/file0\x00', 0x401) mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0x2a}, 0xff) prctl$auto(0x3e, 0x4, 0x0, 0x3, 0xe4e) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0xa, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x40000000000007, 0x2, 0x280, @raw, @raw=0x5, 0x803, 0x0, &(0x7f0000000140)="4666de59e4f41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db4102", &(0x7f0000000240)}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/virt_boundary_mask\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000003c0)=""/251, 0xfb) close_range$auto(0x2, 0x8, 0x0) socket(0x3, 0x80002, 0x73) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socket(0xa, 0x1, 0x84) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(0xffffffffffffffff, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0x4) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000004c0)="e3188176b96f56170e647ad5b75e3e9d5b25824af2509ae55ed5ee191ee9257ac48ac1e8c7ca249fdb72092d4d6cb4b85c6e5e63af6e6386605a2acad0c973ffc78036fb03e7317159be64a299df97910013248ab5d114aa9179182bc486b00af747556837f9ef96271ce9d8c9987a0c8f56", 0x72) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @multicast1}, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d18073", 0x3) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x902, 0x0) 1m46.01887014s ago: executing program 5 (id=3410): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100b02, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x2000000000000, 0x2, 0x3, 0x20012, r0, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f00000010c0)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x2) read$auto_proc_sessionid_operations_base(0xffffffffffffffff, &(0x7f00000000c0)=""/4073, 0xfe9) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11\x89\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') unshare$auto(0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) prctl$auto_PR_SCHED_CORE_GET(0x476, 0x0, 0x0, 0x5, 0x7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) 1m45.835821023s ago: executing program 5 (id=3411): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async, rerun: 32) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0xa000, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130026bd7000ffffffff0200000008000300", @ANYRES32=r3, @ANYBLOB="08000c01"], 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x20040894) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) write$auto(r4, &(0x7f0000000040)='\x00', 0xca7) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4085, 0xff5) (async) socket(0x2, 0x2, 0x0) r5 = socket(0x2, 0x3, 0xff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv6/conf/veth1_to_team/accept_ra_min_lft\x00', 0x82200, 0x0) (async) setsockopt$auto(r5, 0xff, 0x1, 0x0, 0x7) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(r2, &(0x7f0000001140)=@phonet={0x23, 0x5, 0x1, 0x3e}, 0x5) (async, rerun: 32) r6 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (rerun: 32) read$auto_proc_coredump_filter_operations_base(0xffffffffffffffff, &(0x7f0000000000)=""/85, 0x55) (async) statx$auto(r6, 0x0, 0x401006, 0x4015, 0x0) (async, rerun: 32) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) (async, rerun: 32) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9, 0x7400000) 1m45.690139082s ago: executing program 5 (id=3412): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) bpf$auto(0x2, &(0x7f0000000480)=@bpf_attr_11={0x10001, 0x2545, 0xc, 0x8, 0x0, 0x1, 0xca}, 0x1) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999", @inferred=0xffffffffffffffff}) ppoll$auto(&(0x7f0000000100)={r2, 0x88, 0x4}, 0x1, 0x0, 0x0, 0x8) ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0xa) 1m45.515009548s ago: executing program 8 (id=3413): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) ioctl$auto_SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) msync$auto(0x6, 0x8, 0x800000) bpf$auto(0xa, 0x0, 0xff) 1m45.354729041s ago: executing program 8 (id=3414): unshare$auto(0x40000080) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/mcfilter6\x00', 0x121000, 0x0) pread64$auto(r0, 0x0, 0x8, 0xffff) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f00000006c0), 0x20040, 0x0) readv$auto(r1, &(0x7f00000007c0)={0x0, 0x5}, 0x5) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x80800, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x4cb00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(r0, 0x8, 0x0) unshare$auto(0x40000080) bind$auto(0x3, 0x0, 0xb) socket(0x1d, 0x2, 0x7) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) 1m44.851097055s ago: executing program 5 (id=3415): unshare$auto(0x40000080) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/mcfilter6\x00', 0x121000, 0x0) pread64$auto(r0, 0x0, 0x8, 0xffff) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f00000006c0), 0x20040, 0x0) readv$auto(r1, &(0x7f00000007c0)={0x0, 0x5}, 0x5) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x4cb00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(r0, 0x8, 0x0) unshare$auto(0x40000080) bind$auto(0x3, 0x0, 0xb) socket(0x1d, 0x2, 0x7) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) 1m44.42088972s ago: executing program 8 (id=3416): keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x40006, 0x4, 0x17, 0x7, 0x8028000) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) keyctl$auto(0xffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)=@bpf_attr_11={0x10000, 0x6, 0x6f, 0x8, 0x874, 0x3, 0x3, r0}, 0x4) r3 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='./cgroup.cpu/cgroup.procs\x00', 0x4, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95) close_range$auto(0x2, r3, 0x0) acct$auto(0x0) socket(0x2, 0x80000, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) 1m43.9533639s ago: executing program 5 (id=3417): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80000, 0x0) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000580)='\x04>\x01\x01\x00\x00\x00\x00\x01T\x9eQ\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc7\xa1\x90s\x1d\xfe\x04\b\xacO\x99\x96\xbdf\x05z4~I<@B\x1d]\xbabB\xdc\xff\x03\x00\x00\x00\x00\x00\x00\xa5\xd86\x14\xe5\xfa\x88XCu\x17\xd0\xc58\xa9\xcc\x03I\xff\x13]\xe0\x10\x83hN\x04\xaf\xa8\xfe;$\x81\xb5\'?\xbc\x82\xf6-\xe0\x97\xbe\xba(\xf3\xf4h\x85\xfb\x97\xcd\xb9JS\xf3a\x01\xca\xdb\xb6\xf5\x96\x04\x00\x00\x00\x00\x00\x00\x92\xfc\xe4\xd7\xf4\xaeU\xae\x1aB\xee\xfeTL\xfa\x17Y\xacz\xda\xd4\x9d\xecX@\x1e\x1e\xd2\xc1^\x1d\x80\x10\xca=F\xeb(\x16\xa0B\x1e\xfb\xaa\x87RVdVc:\xb0\x9e\x05\x10\xe1YLP\xe0\xa0\x1d\x8b\x13U\x16\xd9\xde\x8d\xd61\xaef\x9aZ\xecyb\xa4<\x11K\x8dG*\xbb\x06\xb7\x80\xe4\xf8eS\xf4\xd0\x96\x7f\xeaK\xff}O:\x15x\x11\xc1\v\xffW\xeb\xf6\x7f\xd6\xcc\xc8\x99\x92\x8b\x9cg\xf7#\xc8\x0e\x98\xe4\x83\xd0;?\x00\x00\x00\x00\x00\xca_\x05\")7\xdb\xff];oI,\\Y\xd6eL\x90\rb\xe5\xf4\x116O\xd1\x92C\n\x14\xac\x95\xf4m\x92\xb2\xe0\x89O\fdO\x86\x96r\xaa\xcf,\x90\xb0\xcds\x85\xbc\xbc)(\xaa_\x0f\xa6\x8e\x17\x88\xb0\x1c\x15\xbc)\xcc\xcb\xf6\x91\x11\xa9\xe7\xc9 H\xcel\xe9\xcdm/H\x83gJ%I\xd1 q\x92f\xd8f\xa8\x1b\xd7\x1c\x8aMeP\xc1\xfb\xfd\x85\x86\xc4r\xe4!\x06?\x12\xb0:\x88\\)d+\xfa`.\x8e\x8e\x1b\xba1\x13\x10\xd9n\xea0\x11\xc1l\xb10K\r\x13C#tj', 0x7) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) 1m43.612671503s ago: executing program 5 (id=3418): r0 = clone$auto(0x4, 0x72d2, 0x0, 0x0, 0x4) getpriority$auto_PRIO_PGRP(0x1, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x9, 0x56bb, {[0x2c81, 0x3]}, 0x10001, 0x8, 0x8, [0x6, 0x3, 0x6, 0x9]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x106) 1m43.344096611s ago: executing program 8 (id=3419): r0 = clone$auto(0x4, 0x72d2, 0x0, 0x0, 0x4) getpriority$auto_PRIO_PGRP(0x1, r0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x4) r1 = io_uring_setup$auto(0x4e61, 0x0) close_range$auto(r1, 0x8, 0x0) socketpair$auto(0x1000000, 0x10001, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, r1, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r4, 0x0, 0x400000000006) shutdown$auto(0x200000003, 0x2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0xa, 0x36f, 0x7, 0xe155, {[0x2c81, 0x7]}, 0x10001, 0x8, 0x8, [0x20000006, 0x3, 0x40000006, 0x9]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) sendmsg$auto_OVS_DP_CMD_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m42.054339853s ago: executing program 37 (id=3373): r0 = clone$auto(0x4, 0x72d2, 0x0, 0x0, 0x4) getpriority$auto_PRIO_PGRP(0x1, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x9, 0x56bb, {[0x2c81, 0x3]}, 0x10001, 0x8, 0x8, [0x6, 0x3, 0x6, 0x9]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x106) 1m38.08423246s ago: executing program 38 (id=3386): r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_cancel$auto(0x1, &(0x7f0000000080)={0x6, 0x2, 0x73de, 0x6, 0xf, r0, 0x5f, 0x100, 0x9, 0x0, 0x9, r0}, &(0x7f00000000c0)={0x0, 0x100, 0x4, 0xd1a7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="e9ff2abd7008fcdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x200048d0) socket(0x29, 0x2, 0x0) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 1m28.552533778s ago: executing program 39 (id=3418): r0 = clone$auto(0x4, 0x72d2, 0x0, 0x0, 0x4) getpriority$auto_PRIO_PGRP(0x1, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x9, 0x56bb, {[0x2c81, 0x3]}, 0x10001, 0x8, 0x8, [0x6, 0x3, 0x6, 0x9]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x106) 1m28.031749301s ago: executing program 40 (id=3419): r0 = clone$auto(0x4, 0x72d2, 0x0, 0x0, 0x4) getpriority$auto_PRIO_PGRP(0x1, r0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x4) r1 = io_uring_setup$auto(0x4e61, 0x0) close_range$auto(r1, 0x8, 0x0) socketpair$auto(0x1000000, 0x10001, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, r1, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r4, 0x0, 0x400000000006) shutdown$auto(0x200000003, 0x2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0xa, 0x36f, 0x7, 0xe155, {[0x2c81, 0x7]}, 0x10001, 0x8, 0x8, [0x20000006, 0x3, 0x40000006, 0x9]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) sendmsg$auto_OVS_DP_CMD_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m9.795361689s ago: executing program 3 (id=3528): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x15000000, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) 1m9.245278565s ago: executing program 3 (id=3531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}, 0x1, 0x500, 0x0, 0x4}, 0x0) 1m9.069214923s ago: executing program 3 (id=3532): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)=@bpf_attr_7={@map_id, 0xffffff01, 0x2, r0}, 0x4) r1 = socket(0x3, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) r3 = socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x17}}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d04, 0x400, 0x718c1257}]}) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000000400)={{r0, &(0x7f00000002c0)="50719e4a81b71f0129c3f4b57a83c1f50b6667fa98d7e9162c66fa67261ca9e88e96a20f4e8bff8c5e04fcaa10d08a606796d5f75794b5f5e685dbdf20e941b76ae1cff58241f41763231c9a7bd7d3bf5d1e6fc20dfe4aedb70628d70b772482e8b06251b91aaa1d5c34417b39a519369b549ddedd375042415b9630db08e1cc6cf72def110bd1254e1a2e911754a3acd0e3fa27684985d9e8a9e10ffefefa55ef41868cd1377cf5faca775e6042a013d4fb5b2005dce3abf18b8f8a43d6", 0x42, &(0x7f0000000040)="3180aaaaa94cf79b8619dee62ca67c887bb2824716e41b6aabd754de5714fe5f33f5a810cc4840243f1efc028a93e17af269cbfbadeb", 0x1, &(0x7f00000000c0)="188c867ef753d8229bc314fc70da4f46733b67864481d9bf", &(0x7f0000000100)=0x1c}, 0x7, &(0x7f00000003c0)={0x1, 0xd, &(0x7f0000001200)="d54b63b73f32e74aa6e99bec3528820bf9c46c3f0e5c2ddc25a79206c927d57b35d30ca85001d69e4b47a7a8e3e532c7506a08c563c8fe5d6c46dce142a330747c297e96514b71f3b305eed2b357d0e8403c93412bf778959546641f14e5ed40c326a2c6c517936f770d727fc80bd5143206b0dcc20b1259736b7181a65744928e02278cafb292c5bf7a99ba865e98b1982087ed85883c7d4ddc5aefd2006c04d1e5c7d21fb7db7b977b55fc70ba351b138709a206f91222c39d4eb92134af5adbb6b7ae422b03bc5bb580a0f956cdf27189a2257c4e084e7281275b7ae6bd2db24efda687597d902ed7d9e8b42070b409f59eedd59bf5969dad7b6d1471aa1622cd26a85e7c93875f9f9c5db21ad8f9c9fa4b84af523c25d588e4e66d8b0c4eafe2fd38c4203bee2bfeaf39807be526edd31e8d607002ff613ffc212ba5da3d2eb864a19c4ddf2ac367ae03feec8cbe0b1f38cc2251d8cff7afb0ffa33eb8377e1633ead6e1ec5e1b71268508569c5722931c2407ba2ff79393a8ee579bcb3232a2c8bedb0df8ca5f9c437df9cbd92d42f154e1a65ad0eff901f5d3609f94330536ff6524d5ca7ed9e40c36f7b4ccd8fbfed4d9def1dd2995c60c6c50136605ff0daf72eb8bd2fbcca5ac4db81c8a9f9c624389e5be20fe86d314e0e39969a1eecdaaa80160f9f9da010b6b321b6a83547a347dddb9da283ad723d1843b394e9b369c1a75504e78ddb39297d8c048fff579e1250892723c982be8dc82f138d4fc548d2cfea2bc072182734aed3ba67b66c86e84b6bc731410c7c2c336f155346c600f8614a4f2dcbf4cddf56f9162a47dfe5d201240fba08d28df4e9e8a8e610a6ed778ff099b7eb8929be5272549b2fbeb55424703be1206ad78efadded1d22b2e3c6d25dd587a3e3a3b8cd389631c9c3a672c87da6a65103c7e86212a405656c187a52d174d83f4e8d4a92a3087d57099772a5c9d6b60c53d04211be4f490ff9dc59af0716154370846d5782627990bafea727efee545673e2753a4fdae18a1c3eef23c7784e0781f8d9a3f7b4b01c275bb2f303edd47d535f1de6b9e1f3b691c4d5334b83572a390d3948bb9564cd6a5d8a214887311152c6db3cb871a24b6ad2724500b4ecdf218cbe1334fe4aa5e9f790a7b06f02e8949deed30ab6858c9636ff5de344ca1ebeaaf76e3a6a55f2a0a4de521093b8f893abaf1661aa88571a4a6bb9da6c85b3f2a8692687683585c55f287ca3c2f70069d7909713373f994f823196383f1e911b5e7f86b9304bea649bc9ddd28ddbaba3a5b6731aec791d401db047966042eccbf3f7c72ade94b768f8da9f605e64532a4e877e8e36805eba4844d0c48fc87d1ecc30d77b83c16241bc2cc542069f4e8dff69d7144585a3bd46ec57f77c845e2aabb201e7e2af109f5a5954c0c667ee16ef3ee39d4af5137c1dadf05fbbdb62ce26be89238771b3a3df52b4511e2cb39b0fd24a8f2bf55598517c42ee68340b7c27925d05626b787f9370de2710ad5a006f9af7b9cf0d27808477a6a7500cb2f95b410099b2fbdd3fde14cafb85c87790fbb34b21df54195c725c336708118431bd192b2af199efe53c9ae4d0fe2608627070883a14a80ace982f129864450f37ae7664517afd9c1027ddad5d69702b1d3791deac1c8711fb5cfd041cf049c069730caf99452448f3121ee4575079257ac0dde06010ef3b94d078db391849fd8ce8a0f9c319563f040e6cc51ca5b023449dc70ec498a67456188e8a9ad9ba72e246cc927d460f595a300f5a0eadcd9816030dd4b5fd480b2919ad2ac9a8f5b67b5181e1fc1a91feaafec367c715b82f4310386cd87c877b9ffd8e69da6661ad37f86764ad08ccb0544f795c2132cea7ede151d227f6ec87b76eb7384675183f52ea1382ac79eb248333778b947bcd601207320af28d798da20511605e42a00184ca447ed0869cbe66e6a394caa829745b0cf9d1accd4cf4c26771aba9cdcd57952093a57684ca91f25f3fdf81ab5ce99d1681812ae70783d30f85b0e227883ed60495cc38f20f27b6c9bf1d97d5f8ed6c08997e5a119c3e835edbe940dd046bddd3e76548a596a48acd4d2cae2028b3d51d7fb43102a295c145a494f42b36cb81c424704f10730b101fe6610876855e2898b9e78ee6535f771a8795ca518a998c1dca38a34aa4a0f403b91d893e0c2ff4f2d000187c695c36efdf87f78f82d6fb73e7b3f0a9eed927bcb2c06069a4efac91df7baa32ac89f730a770c8b590e953aff349c4d7078bd200c387febe532f1e81ddb0cd918d67423133d7376fee9b86c090658274411d6d04b9727e7af64b115714c39ad5ec351fe329820cfea3959bed6a0f341845cc98333598bc4717ddb720184d7483bc4b167a05e72f8e5e4634ee271b4416c43761e7ca8146aaaf293a995fc7ab9d1b5baa130d2625b95a2aaa8533b47fe401816b2e43bcd776d576ec4e5c2189f0a0654cb9dfd590f32f50625b81c12f2eaec2cdaee3020e645653f31392c09cc6226e681d2403615236eed12548432ca32f566185fedef63376f56a6a0e3a49927639817ceee235d33b8908a5ec93297eab7d5aa3a4ec2db7b2d764b282ac4c971e34e1b6475daa1aec972669345cc1a98bf6ba069aa61e964da6fc5174a9370cd230958f2b8d30f474de80a063c9cb5f90285605a90aecef9f21abcf3d78d219efd10aeb6e83d8e0182e3378bbb1cc67864084994f5ac4dba69186fdcf91f6209ffd3b4f6b8c1dd4766ac7daa2c4c75fb84f8e9df5aa52fcee605d76e919a8bd94664c835818c3e6ac23f37f08304e484b72324db7c7ce5f2db537a466d081bce8c3f8ecc9ed7aa4ce7a977ff3d2b64482a2c48c895180eddccc76e3dcacb836b271c2535fc53996a32c6898efdbc29bede938173abbd95a4fa2f76aa39264c8e1b2b54d7f4fabfaaf54c951df46dfe0470106ce999d025e9700a6885a2d95dc147cc30f4899076473349b9932c1cccfa23e44d8274fc42f79052fd040b33324f90311419c64f7a93fd9c4b68a27e3ebadd6445e9cb4cb3d1479c150b07c3634bbc718258d909a7fc68aa593832e12b0e3179dcdbbdefd8dcfb4c012f465f478e17d812c1a180055c4fa417a4784690dac61fdfed76a4a610394fca59b605644c6fa70c2752d0a31887530eddc6b9de9cb017af605c693ca31cd8b0832a3063a8d6b656bdfc4c661e4c992a1a3aaf8c78980f72e7586349282859abfcd6866729fa91cca63b8efdf3411aa9e0f10c37c7e24698cd4967fd8bfddb5b8508b68edf797fc453d50753384ea283b2f1386664a5cd0f8fa56b681619b9325836947804593bad6a42a8031bef95c3859895c349ed21bb601470d5db866483e69cf97ef3e0a4b68db88a20b1e4a3a78237d66627b6a89001092986e9e9a43c2f0d3ba6a252f432330c28806c62d1fbdf3e9fae1b2166acd01ab584d573b3d384fcfc520e5d4cdd52b55f9da14f62e046fc60f806fab742bc238be5e0cb14bb6137e814b3e41f1297c186ecf4f8435506f66cff67d2d0019cd621c996334447e66be757dcad5ece989deb6bbf8654646c9ff0a8c8b01f4a4b694906d036bb7624399cb88c4b4d062ba935aab0d5a603d7484c81eb22e471264c6a5de4f819883b7a7de67d2bab7b1a5a88d2c0ca34cbde8aec3b46039d5b41d0bafa2e8cc8e8f1bb0c07f3a3339aae6650b84fc091b96f839bdda330a10443825086cfe25ed38e501b00eb661357b7b3aeda08a110f281a3c6b85c876217624a4e2e1ae15b4de1a8836581520a8085fcc8d47b367fc2319c0b4017b2bfddcc043212f176ca569db99b60f6e8515a366191fcb81e2c4600a0c9f675f3aace524ff8572ef44d66ec7a2eb088370ed1080b9d1ee37d177d5ee075a3f2182a08dde4745833900e4f5dca5ab8bbd85528dba57d1d32408c7c79c796f6885589398c8776c7670c8883aacbe77ec0a0c2e0ebcc6fa555744e5fee6bc9777fab2a3a7dd05045e3ff9fffbaddad99f1922e0bc3f7f082e43707f74ff459199695db0bd883962bee987ab7f50eee9411fc595a578d36d946c7b6e222a048849f03161bf211b078e1a96b8d90f6ebc4d735fd483fd18043c8e98b3ec59a87e2e332ffe1a01fb139d8e3fc96fb3831a531dc4bb5ed6a9d867dbd640e3f190fe80a4f619925f165dfed3569d7f8c515109953602a1f74074d0186394fee327de54e17a3b26fa6376c831ca213e3f91ebcd61aaa3787dd6fa93bd29bcf9ec2e0556630c810db3292870887b9468a9a8618f6e64b5e150664e0ba048cee8dfc7876d922842643902a5290e5131079761aa553d533dcefeb241717c9eccf800bc3ed7878e27e0476b250716a30b097d77f7d5c9ebec2fb03bc443e2755a6f527dc146bc293cae1e5c187b6297eed62364b35c7f46373a9c3ef56b242fce657e5b6b6443147a5c4a0940710013ddb1bbf58d4d0ec0a42c428bb604e87ad43d6dd77d6e6bba62494a92e653ce171c6b84280050e8ead193c29f171040cafdb20e77477a9ce378c85a864cc1345a655c94b21038c3ee90f0075a9b5a07eefd95b93a3b9403a57a3ad70fbd7305f5ac8a00a33684c616f5b651d813f0d940f24b6a9b17b4338320d82d50b898a96207d78212762a771b04d0ca3060ebe874aebe396da9dcab6c4176247195557845a29a7295c6f5e2a7dba87d48ce271bd2c13b1426c9099fea3852be742530b6430d849aebb4b258749ea89a19595cd88e88e900d7b719586a79ca6705befd44d77b27050df98ecc0eb6f705e03f3c742a6f8b4f82dd48b502eeffb1f8b56623bc6a7b23f647757071233723346e97b5e602c46e537d780fa278712146e9f60ed8667218376696915c76a1c852c139c43d8c0bb115c179ae99a869dd255e0097fc4a5e90f7c857303288e1abc82aa93c928c9f511d0c006a25adc21b0ee8a5e0c0c7fcf46587aee3e8397742db4c3c0bc9e1f6227ed169b4b43107a165759230a2a0a5ce74fe2578fee2078205c8846efa45f96880932b2090ad63e7183f443275f42b1f9a673f02ae0e48c6a951adc91d4495c250fab8701dcec61bf4110ff14d00f0dcfff43aa44362a629a917e25a734ce9a2a03227bee97241d1c289d1d87ce732817257258e0e4bca30b5015f4603c04afe9c6b8ba71e62eff9ab194d9db531f6fce9e81a9be2d1edb2036a31f4e0a46b2752cddef3a8516a92484b754ab0ff704c66293763ebc238bcf59adc7b5947c8ffd97e22bfddfa850dd0ce33c1b313af70647230cfe5d434a8c29082306661c8ba0c5c1b7baa8ed2faec393acd1a444884ee6a0ad10e51f05dc113c120b4fe35c471d3f3695621841a392f0a532835762e32dfba549657f396c885b66d3e54af2d15ef8b08e1c74c9dcec6fceec446eaab88b95709c190b4be82623733300bad654b2e7ae48cd8d548741c67a37597453908e5b0cf65d420ae3ff4ea40e3887b9be4b437cdd51b8006e241c154524adefc28dab932c3ca4c8232ae6256772b10903b5ef281cf74704bc61a89a4e8ae32e0b5824e3372c6e038c7c235205ef0462dc5f377f4c4458061e734207502754f56dc0526438250fb83fb951403d3a9f047f37f7191eda6393e7bf2dfb3e6704cd6f9584a2176c4f0753d1d425e314e63325dad2743bed5862d5e38b43e9ae185bef171dc8caed1b2176983ff20cfeeb29bf26669bd498f834747c712a99737066d3b08654fe007e9d6db62f347df33e69befac7e43fcf03528f4c91da2b78ce5a6e57d2fcd9", &(0x7f0000000380)="314b878039f6b53a7f7b799138cb793abc390000000002821857bcb440a729a75006d759613d2259ce00"/54, 0xf5, 0xffffff74}}) fcntl$auto_F_GETOWN_EX(r7, 0x10, 0xdf5c) dup$auto(r3) accept$auto(r1, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) 1m8.440831256s ago: executing program 3 (id=3536): pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0x4200000000000005) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x7f, 0x0, 0x0) bind$auto(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @local}, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r1 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r1, 0x8000) r2 = setfsgid$auto(0x0) setresgid$auto(r2, 0x0, r2) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0xee, 0xffffffffffffffff, r1, r2, 0x3) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0xc) 1m7.840711082s ago: executing program 3 (id=3537): socket(0x10, 0x2, 0x0) r0 = prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) newfstatat$auto(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket(0x2, 0x3, 0xa) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = geteuid() shmctl$auto_IPC_INFO(0x0, 0x3, &(0x7f0000000240)={{0x100, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, 0xfffffff8, 0x7fff}, 0x4d5219c1, 0xffffffffffffffff, 0xf, 0x6, @raw=0x800, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000140)="6bfd5841dd6dbef57acc2fdcb18976f0a4fada7b9822c5c2baec2e57a8d6b0585549498276911ed4001d60dfa3bae6db5daf14e71f40819e946a309de1b627814f7af5f02f9029aa41077d15c767e8671c689eaa222cf3392841", &(0x7f0000000200)="813ba2b1d3927d144bd32484843eeaf34994a418d944f8031388e8b977ba44a1f929bffb0992c1300e88a5b6f8825920a680c16fb8c507f9864a579f448dd5f8"}) sendmsg$auto_OVS_VPORT_CMD_SET(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8060000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="040018800400db8008000c007f00000169b1c59495f45319ce3b890bde66f7483acba06554a45a3ee352499fb07d26d995437339513be49b4919dd63d9aade672041cc358d98e989442cbd73636a0865c12cd9bd0f96993a8b104a6152665562befdc346dceeb9ab88046c022897879f51712733c3083b38da69e51e9a2b5152ddb0fccc3c3d02099c9bf448ac00765e1a496b2f34a849f6bb907df80b123e83586bf14a790c52a84033a29fc64194850d6501d8ff778d1cab5d44029f38d7728fee17f8a250be005a12bab97e489f45fc9c034103"], 0x6e8}, 0x1, 0x0, 0x0, 0x40040}, 0x4004) msgctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000000b80)={{0x101, r4, r5, 0xa, 0x6f61, 0xffffffff, 0x9}, &(0x7f00000000c0)=0x5, &(0x7f0000000b40)=0x5, 0x7fff, 0xac, 0x6440, 0xfffffffffffff801, 0xffffffffffffffbc, 0x5, 0x2, 0x8, @inferred=r6, @raw=0x9}) setresuid$auto(r4, 0x8, r7) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') socket(0x2, 0xa, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) ioctl$auto(0x1, 0x890b, 0x8) inotify_init1$auto(0x3000000000000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x2c, 0x940, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x1fe, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r8 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m7.286738837s ago: executing program 3 (id=3539): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xf) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001380)='/dev/sequencer2\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x1, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x28b40, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x5, 0x0) socket(0xa, 0x2, 0x3a) ioctl$auto_IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) remap_file_pages$auto(0x6, 0x19, 0x2fe, 0x5, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) tgkill$auto(0x0, 0x0, 0x11) readv$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) bpf$auto(0x3, 0x0, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) 51.972919833s ago: executing program 41 (id=3539): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xf) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001380)='/dev/sequencer2\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x1, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x28b40, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x5, 0x0) socket(0xa, 0x2, 0x3a) ioctl$auto_IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) remap_file_pages$auto(0x6, 0x19, 0x2fe, 0x5, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) tgkill$auto(0x0, 0x0, 0x11) readv$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) bpf$auto(0x3, 0x0, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000) 46.540320713s ago: executing program 1 (id=3628): socket(0x2, 0x2, 0x88) (async) r0 = socket(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x26, 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7ffff7ffefff}, 0x8000000000000001) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7ffff7ffefff}, 0x8000000000000001) io_uring_enter$auto(r0, 0xffff, 0x4, 0x4, &(0x7f0000000200)="eec7bb66c8b80cff63f6e3e3522818e4b38178dc89d5a76a5207cb337c9f24ca783c311d00fcd74ab129b543492054ded61b81640fae5d4f77e5dc806dfe703bd30b83a30c957eeb34908f96b8e91e9eb1887b6e7dd2ab53de5b07744644e154561a680515d334d52357d1f6033d54eb047bac7e68067090023185d77911545a7323dd0acd09bfa14158bf6eccdb29369b903474493121965a1151095ac0c6350b68fbfd185a7bb75380e04342642a9394a3f80b83a91c830d50b59126b073c9cce921fd7607b63ee673480052bd8205cf86", 0x101) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r1, 0xae03, 0xdb) (async) ioctl$auto_KVM_CHECK_EXTENSION(r1, 0xae03, 0xdb) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg/1:0:0:0\x00', 0x0, 0x0) (async) r2 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg/1:0:0:0\x00', 0x0, 0x0) ioctl$auto_SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000300)="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") (async) ioctl$auto_SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000300)="9527fe7ffcee0e620c0106829935f92565d6af94bf688cc448da901f84929f480c44ff2f63f525f7f137ed0fd50ae71fdd366c73a7d131e3b924308c758ee895735151b5972e56e7b703cf0fa77fbfa8348cca64a6004938e3aaf96cab8e0ed3987f59420f7eaee74be666fce2a6b80c02e2b0332ff1a7c1810f616d80b323347f141c559a78b110cf2bdf0b8a23bbf78bb0c9e6b9f7699a1c76aeaed02809b6c832e9ed9137258bfc87fc96193f2df1eb6320182801b1a321ae2cdebfbcea0d2970ef1a0a311dbf43f9eca8db80960cf99dfefe69a899b1f6c5aa82a4cd5bbd37fdcbad5af34df7cbd28d43edfe02c7b86b865413bf0112ebe9b087bc935c4f1afeba49f34ce30b080cea909b4d4f5c2772117468bfcad374fb2e41a598ffa77be632f5ad72fd34e86761ea513fc64e869590e45b313a1d43b5718f8b8e5d0816aa1d4e390ea900fef4f59d912a5b529421ecb6738b7bf38cab295bf5cad97a8b31f8b188b0a11cb89bc0b7f9e17aa3cb5751480acae4769f58e5c9f2c58a0b351bc664b4a8ce31972879b4754ce6a0d4a3df9491cc95b20da776913540670517e08fa0023b5c784879c62593aca876b4396dbdf814da32207b733026a9d5e6da0a01d1a0a4702f75cd010a3ac73131510ac546357236339378cf0f00ac779a4a4d89027a162602b86656acb329a4d5ce8c583fd037fe1a008a73ce9bac6dcfa2e2a222e447334a430d800b980d9db710e134c6b1ee49fc6584c33d117b9092c15206a61761cb4e7d917f3c915a2a2658efb0fedecf6f733b9fa6485d9a3f190b099a606b82cd5d85a23d810332a2f8ff3fe849676d9d35a49660c39b40a4f17992a1e8a582ee87f5932ec390efef3f513ac6b71a1574eaf748ba4549992a87e7cb86b53e30c1d6ae8d67bbd4d9e56741a18e6d35e68b8755c8b5ee425de15af1265977c2e8b34db5dcb61d10f5e89b91e24435a04b743f2341e672b4a28041f60e7c7d3ba7fc2619877755d7dfb6d7c88b3d31c34866f13ed63a82be5efcb1466d605fbee683065e73845933bba3034b133342fae4b14278661527d4bcdf6d08b879e977f6c2fba1fc208c0dc89e5932c3facb2496eb55f870eb3fc8831bc62800fb3ef7cfae8df5512d9fbea8888930c051704eb012c1142713230aed176124249c0af22bc63b45c9e293466061f884915dad1f6c94b9463529f9145f82bcf7b989dc954b78a6418f27fc10eb9dcb648b0609a87055638223d5d35b8f966b25842f732a17495d5159330b8510e7b01c78afe1e7784d058c1f1cf24a32e2fc115fefc77cdfe78a7b4a6647199eaf757cddddcd023ddb3ff9df37abe7e97073cd8994cde642682cdbe3f9df532f454b9847568748201e9b7eff516a1b61eaebf28feff2d99179fd1ab88bafcea4fed1552502f22b549890add404b9999bc0bbe3dab3357e575df9bb3f8ca9d47c3394a6757572fe5228e376142d4736e2ae786334959a6f94c66023fa7b2607fab56cd1ed4631b12e024105c4612d4c3642d3d7b9c3cb8775b2cb286bd3c64caec2e6ee7c636c41f045c6c5b8977d40b32f04da27b342f553b6d8c6c640c207b117939d2b7f3bcadf47de2b05cc3877a17e5f1e6a311e6b74bed2f40260672e86b6ee5ad6820e429a8a85fcf7a190a5c529f2bab7d81b64b5d5d2a7c9a12025ec2ae13cfaa857351a148b20dc0d0188bd8f28081dc6824ff0c5d1d227a2c89bd728c1ae9341aee25b2c5f75952943787eb72d171ffc95b709f7cc28e5ba254401c82c8c80fc25d86419cec6cfa7cd0cb0ffeff8ae9cc4dadfa24e6d63f114ae8136529e28105481f296803ba2b1414b54be29a223f3b11afa78426aee6a0426ecba7603a16558e2d68505375d7c398504abfbda314c0517343460b4891e95e9ef398de70bfcbeb038b82b323d92a8832c1bca9e6766db6304ece7c3e545a546de0c61c7d5f2d8d9e0a9af48b206094523783f93996a770a796c3d3058a58be0002bae206fdb80cf7d35d3f907266a5445e8da12f7e0753909d5d04edf8ae8f007bdae841864f887f86e1b07d1c3b57fa8a8219bc5d63ea2aec1561a47d81eed2589f4b30f276ef2a45348f5a7fbfe5732424e45de076cc52bb87db8a8a1ae545f2fd4a6c701e30d040f83ec45d8045726fdda8b7c487904bfef95182c16c06cbc267bcdd57b9e02b61e9c2da50fd9fe1ef504dc32f5f696e91e71643581057191a05670f9aa3bd23896f741bb58866511d7ac05f3943fe95bd4a0bdc20d4bde84d60020dc24785ab0c5e235b942b830a9ab1d689a407a150d32746bbee76625b6c0c24014da642e8ce763fcf02d7b88f45770965c70626c9f40ccaac3d90e03fa904a2cdaca1ba50cbb71029186f1c222d30268e33b62f581495e3ecdce7319172cd657766422667fcf9a89e65dcb9c200b98d6385a594b3ed135e14893cb67973c464d1a00a11de98cec5ce77f50bf6b85a75ee52d92e3b177484a550f29840e209d24c8ec4a0750b1b5745a3947737e52e98b7ee26599e2d6b74d8d65fef0820839d534d37e94184b0f72262e9e7efbe42e989357ca8fc887f1c4d06dabb026e0a3971de1d752c34994078d79fa8328bfb7766d8e6145c904bfddfce19d872e3d642d02186da4032a9a6f658f1afbdd74ceaebca1ff57fcfe324627cdf13967fc494678efc26cac8e6e161d0032bbe3df63e534c6f45fa6ce525167f55468426b5a12fbb45339f2a4772926fc5e12aef66a7c79e0e250da6d70fb20276fe1fcb0ba0d64a2eb9aadad7b9cd075519f35e2cb3dbd52c72652679380ce8ba3a9a881d26dc9103439f4ee19e7e851d9efe0d6d0dfb7920a1a8927bc4501736051ea19a5173a65fc101984715071bf636f6de93395053e2553dc200094ff42294e312cd601ef76695e07fede881143e5a799a4a3feab72762c556f66574b451bc407ef983dc0024a6fe3107c99bfcfc5ddf37525819f8aa6030a40023da83ccd59b2fc657e77519c65544cf005b50039c48409c9e0767c1d2d939843c78625fbd6225841a32a5ba4b576982bd75600cb0f2f6bd87b3b6f86ab8b1df3a3972371c45b394f5c8f6f982cf69e0f0daaed5b653fef714ea63b9eae0d9262393772dbe2e8ae1647a0f13a9215bda3293ed858198c1918554edfb7f9cd21193983379b0860f723df182180540db56484ae4a14970019182ede2b7cd37ac098ddc0f654d47f2a02aaaad33717d6fb294ecbf2358324ed8289529c5a7e5977c33e1ee4d97b9b4340aafa27a4a52377a9e6f1cade4959c9030e5b49c2a82f3ce0271cdcaa7de3dff1beff4d8f60b842cb4ed79b05864aaf4e7d6a53e5fbe72b5bd2a8e854d3fe9199ee6ee991f7b4c0b45c76efaf4bab9c88e460dcea7f3c0b9a7e6bb4f1bbccbedefdb4f4103678a30a69f525a4f7bb50f1d4faf5eb6c3d675cfc4501b0f2f0d203f55c13c149f42025811c91a79a8313afbdebf1b46230b67b0bef47748aa3a41c746714dfa1d9a802c7c9516eb857b75dd3e99f4937904703caf72f12bf15d5609145104b63883b37363ab6f27ee7c3dd57a60c8127225f07cb7902b356035b2c14e331646e78f2eabfda1f0803cae9a67c8b8c23128546f649753ad43233dffae62b3e37082cd41394b470830e5d6781fdfcc14df70cb6f87872957387cb2c37cc1e9083b6964924c878f5cb8a53b3bea9500a6818877487ccc237edf0a0f0c689e36763fe80587bcc920c58c1bc31269f2c943c6e18b454b49ea03de078829d775aca3bf27d1b94abc1515b8b6070bd8a6f2a2165a5dffa55af11eaace7548eb2d74565ce7dba011ccb0adea4671554a2800316cc89f65dcdbde9eb5a97e992270e875708af21bb310c280bf9936c8593f0844173391c6f88edc5289011985a882f8d55bfd0bc1f59cbc33f412aed519b01cbbbd7817cdecf59ab7a4db737206dc63f3878c5326db1b9d568f34574aad34f81e07201db2c2131b502f1b2e131476ec61e39cf28703422ce53604b4c3449c5e3380429450e96cb5078e4058147991f7c165bac703ba6c3862c74a1e35a15f89b63fd772e26e5bfcdc94bb5565e687d88213e13b0c352bff8ba11dd227a18253de5bd7643979ab06b87f304fcdc20c6d13960e6c29b467e7cea97aa7b90f9c01d726a2e5e42b0886bce3e6a522ebcd7ff8ad9a7702ed1f1b497345b36d2f905bd404cfad88ca9051fdddd350104c38b11fbcb8c3e53d3bd6c3597f61fcdf303f9069314499f27e5fee4d8b7716a398800baba16448664ae91bde4e1026d557e1afa93272db8645a7bb52f142de3aeaec215b0f7a6fdfb610046fe6167f40b5e7aa1692e403e5cf92d5f0c9762e811e72f23b91a03a3f5739f6d59a910b41ae6b7fdaf81d2f36763348d6836acdd79591146c140617c484cbdce60a8e3d8eda5a0a338bbb43cb5a976dd30cfcdf83e465d09dcef61ee0004c8d094355bd2e9f5a19aa6840afa388d932aeef1d809a6575d45119289d74c0b3479e55a85f9d8e214c84617de3b0edbf204b6c3e248ae8944d309b45227baa554f621f129fc7ec63f17124e2f3cf008dea4382521bfb56069bcc1a476a51eb65de09a0e5ca03157c8801380e1f2f174fb4dad19939628bd3eeb83aea9f461784189444875fbd964a9655f99119a3576983da5386fb5449ae3e9774d2949836f39201d4568d063b2c58f9ea75474bae54d5bdde7f38e0393b683508ae9714a850427f2781cf5d89628a25cd5898b90bb9b307ef20398e4a83c77ce6ba02bbe2aa375b8558747df4515e9c83d1e30d6f4c70b8697c8519f2cdd18686b2865f58a116923a579a047bf27cf0bb81b821fb507b9827566a240af14da6acff43e1c06e0f4763a2521cf898f626f56a120a39c84187f66a21f1855f86f75b75285ff950866a59a1ef7404aed414a38da37e6876f9fab774f927906e87d2bc21181fce8c3f0825a9f3ae5f3452632053c1155893d50e596eb7d6702912866d61c27716e5e92f829aa8d574530a91ae2f1597ccd477ff3967631d3d8ef820dd0c8e28be90dcd99db0b68ba02db30e450dad34ea34c16551e492b5b75ad901bddfb2832271ae451fcb5e692fc9949989a2a1157496adddf64e3567dd950e2b9a15cee3922787f11815f5916fea3cf9ffb2405863adfd28ae63836f6a15ac6e06e3a1a92d73ac66dee8bd4af1ace4747a9a9855e23ea1e01858d8b8777e2e0ea0e5b11f6bf226163922a8189f8adc35b3dc25ca25094492a22189f7be1d051a2d0d3ea6d606ae4c1623f8fc4b9f8312a29f3082e7572383672925c3e9d53c931ac26db3cae5803d4074a39871aa18f0235bc4a0e9013b1e15b634592433857b9bcdc881c8a0323ab6b90c35f7bcad73f44112a0363731456da7159169b18395e6c09abffd0c368711d93f5f712f001d03c0db8eb6a8e45f2bb9bc0c823be9dd45af5f989ab83e725b1be7a8324f5c111fcd0ec9c2d74c8fee593dda4d1e81df8428f8b8998d2af255460bcbb263fb07cca3b9164d2601db88036a4f4fae81b1dc845a774bf5afc17f2b69ce8bb31f96e35e3f4ffdf3218ad607c8f67659e1fd2311af40b634add961e7b6621af193fb6739aebcc91efa153662b0e2ac5707b2ffc69808645c64c9fb26af7e590ca988ec101a9de346cf07b89b3debca2d2619c538ee99240df95ddb013d91c656d5e824c2e46904468da793baa8ae99bf50b5ef774d851ef8489ec077d33cf22a5a8ae5adc7f24a0a382894d8aa91858eb3f8e92ca10bf0bca18ae74d1b1") openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/trace\x00', 0x705040, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) setsockopt$auto_SO_PROTOCOL(r3, 0x7, 0x26, &(0x7f0000000100)='/dev/kvm\x00', 0x0) (async) setsockopt$auto_SO_PROTOCOL(r3, 0x7, 0x26, &(0x7f0000000100)='/dev/kvm\x00', 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xffd8) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) 46.287614719s ago: executing program 1 (id=3629): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x6600, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x388f, 0x0, 0x0) 46.084526407s ago: executing program 1 (id=3631): openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, r0, 0x80) r1 = prctl$auto_PR_SCHED_CORE_GET(0x0, 0x0, r0, 0x7fffffffffffffff, 0x8) acct$auto(&(0x7f0000000200)='/dev/virtual_nci\x00') openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x1000, 0x6, 0x1, 0xffffffff, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x4, 0x8998d5c, 0x8000100, 0x7fff, 0x8000105, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x1, 0x52, 0x8, 0x47302, 0x3d, 0x8, 0x7, 0x8001}}) read$auto(r2, 0x0, 0x1) openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy15/hwflags\x00', 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) mmap$auto(0x0, 0x3, 0x58, 0x12, r1, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x208840, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xdd, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0xce, 0xe3, 0xe}]}) 45.664468061s ago: executing program 1 (id=3632): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) socket(0x2b, 0x1, 0x0) (async) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x90001, 0x0) fdatasync$auto(r2) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) (async) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f0, 0x17) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) (async) ioctl$auto_SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000480)) 45.315834722s ago: executing program 1 (id=3633): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';') pselect6$auto(0x9, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r3, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="11072cb57000fedbdf25130000000c000980080002"], 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) 42.292682646s ago: executing program 1 (id=3640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28070000ca9798a092c935eba1bbbfeafa9bf321148c863cb828440f1cfe7db944f5bb62a063705760c9ae31e0094dccf178b651c003a2aa0e0dfff1d270cdc9ea1f072bebe6137a0def36f93fad13f2e8faa3b1bc802e5f69ab6dd681ea76686b90d4bd5da5cf1fdd51cc8e1e757d0242220791a32f4fc65dceb1587fea8258125493b632e9571d3db3338e2512f473b8a233c6f6db9096de1e66680614595f80f1275b3e4d39d646a387e07f37d2246a648738ebbbffff26e46bf404f172af786837d4b6518cae1fe741cb378ae7c90d5d4506ae098b9fbed28129ffcce2d2cc6cc0efcdfe2ed226cba900"/250, @ANYRES16=r1, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRES32=r2, @ANYBLOB="0c002e010010000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc004) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) r3 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/dormant_links\x00', 0x8040, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/ip6tnl0/threaded\x00', 0x103b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x8080000001) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000280)="b4dc694efa1149efce5bd03c592600a75e6cc91e39f5aebeed", 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x119003, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) r5 = socket(0x10, 0x3, 0xb) bind$auto(r5, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0x64) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) r6 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x6, 0x5, 0x6, 0x7, 0x400b, r6, [], {0x6, 0x6, 0x7, 0x29a, 0x8, 0x80, 0xa, 0x6, 0x4}, {0x100, 0xfffffffd, 0x40101, 0x85, 0x2, 0x24, 0x8000, 0x8, 0x3}}) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r7, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x0, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) 27.164175324s ago: executing program 42 (id=3640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28070000ca9798a092c935eba1bbbfeafa9bf321148c863cb828440f1cfe7db944f5bb62a063705760c9ae31e0094dccf178b651c003a2aa0e0dfff1d270cdc9ea1f072bebe6137a0def36f93fad13f2e8faa3b1bc802e5f69ab6dd681ea76686b90d4bd5da5cf1fdd51cc8e1e757d0242220791a32f4fc65dceb1587fea8258125493b632e9571d3db3338e2512f473b8a233c6f6db9096de1e66680614595f80f1275b3e4d39d646a387e07f37d2246a648738ebbbffff26e46bf404f172af786837d4b6518cae1fe741cb378ae7c90d5d4506ae098b9fbed28129ffcce2d2cc6cc0efcdfe2ed226cba900"/250, @ANYRES16=r1, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRES32=r2, @ANYBLOB="0c002e010010000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc004) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) r3 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/dormant_links\x00', 0x8040, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/ip6tnl0/threaded\x00', 0x103b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x8080000001) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000280)="b4dc694efa1149efce5bd03c592600a75e6cc91e39f5aebeed", 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x119003, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) r5 = socket(0x10, 0x3, 0xb) bind$auto(r5, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0x64) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) r6 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x6, 0x5, 0x6, 0x7, 0x400b, r6, [], {0x6, 0x6, 0x7, 0x29a, 0x8, 0x80, 0xa, 0x6, 0x4}, {0x100, 0xfffffffd, 0x40101, 0x85, 0x2, 0x24, 0x8000, 0x8, 0x3}}) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r7, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x0, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) 8.322586238s ago: executing program 9 (id=3757): arch_prctl$auto_ARCH_GET_XCOMP_PERM(0x1022, 0xa8) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0x14, 0xffffffffffffffff, 0x8003) madvise$auto(0x0, 0xffffffffffff0405, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x3) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x2000001e, 0x1000, 0x8000000000000000, 0x0) recvmmsg$auto(r4, &(0x7f0000000300)={{0x0, 0x6, &(0x7f0000000280)={0x0, 0x1ff}, 0xc, &(0x7f00000001c0), 0xc, 0xa}, 0x5a57}, 0xd, 0x5, 0x0) 7.175476385s ago: executing program 4 (id=3762): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) setresuid$auto(r1, r2, 0x0) setfsuid$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40891}, 0x4) madvise$auto(0x1, 0xf, 0x19) r3 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000340), 0xc4040, 0x0) r4 = setfsuid$auto(0xee00) setreuid$auto(r4, 0x0) r5 = getpgid(0x0) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @uid=r1}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@nested={0x28, 0x65, 0x0, 0x1, [@generic="15f38c0d49d4ee4803ec0fb1", @nested={0x4, 0xd}, @typed={0x8, 0x9b, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x67}]}, @typed={0x8, 0x12, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x95, 0x0, 0x0, @pid=r5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x1) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x6801, 0x0) mmap$auto(0x2, 0x202, 0xe1, 0xeb1, 0x401, 0x4000000000000003) r6 = prctl$auto(0x200003b, 0x200000200800000, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r7 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x400000b74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r7, &(0x7f00000024c0)=""/4112, 0x1010) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.2/usb13/power/wakeup_max_time_ms\x00', 0xc8206, 0x0) recvmmsg$auto(r6, &(0x7f0000000240)={{&(0x7f0000000180)="43b56ab4808611db5e1857cd1faa949f995fb8fd214fbff072070a8b62db69504544c3f5777df65995669b6b61883dd13c0bf6cee13052ff995619ba", 0x3, &(0x7f00000001c0)={&(0x7f0000000480)="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", 0xe20c}, 0x168, &(0x7f0000000200)="fda06ea5e23c4c", 0x10, 0x10000}, 0x3}, 0x4, 0x7, &(0x7f0000000280)={0xa, 0x7}) mmap$auto(0x0, 0x5, 0x10001, 0x40eb1, 0x401, 0x3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x73) 7.135638585s ago: executing program 9 (id=3763): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0xfcffffff, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) 6.692474051s ago: executing program 0 (id=3765): mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd) mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, 0x400, 0x8000) socket(0x2, 0x5, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x1, 0xfffffeff) r2 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) pread64$auto(r2, 0x0, 0x2, 0x3) prctl$auto(0x3d, 0x1, 0x0, 0xfffffffffffffffd, 0xfffffffdfffffffc) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x1000000009, r0, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) writev$auto(0xffffffffffffffff, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) 6.526820529s ago: executing program 9 (id=3766): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/nvme/parameters/io_queue_depth\x00', 0x20001, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r2) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x2, 0x4) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto(r0, 0x89f2, 0x24) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r6, 0x0, 0x1ff) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x710d}, 0x8) write$auto(r5, 0x0, 0x8003f) 6.284160685s ago: executing program 9 (id=3767): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x400000000009b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pwrite64$auto(0xc8, 0x0, 0x11, 0x2) setpgid$auto(r0, r0) 5.791093362s ago: executing program 0 (id=3768): io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0xd, 0x7fffffff, 0xffffffffffffffff, [0x0, 0x2000000], {0x6, 0x6, 0x3, 0x29f, 0xfe, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x2000008, 0x1, 0x52, 0x5, 0x3, 0x40, 0x76c5, 0x9, 0x100000000}}) mmap$auto(0x0, 0x4, 0xffb, 0x8000000008011, 0x3, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto_PR_SCHED_CORE_GET(0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8) prctl$auto(0x1000, 0x6, 0x0, 0x3, 0xfffffffffffffffe) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_settime$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000001c0), r1) io_submit$auto(0x2, 0x0, &(0x7f0000000040)=&(0x7f0000000000)={0x7fff, 0xb, 0x80008, 0x3, 0x4, 0x3b, 0x2, 0x2, 0x1002, 0x0, 0x7}) writev$auto(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/ieee80211/phy18/statistics/dot11RTSFailureCount\x00', 0x40, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r4, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmsg$auto_OVS_METER_CMD_FEATURES(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYRESDEC=r0], 0x18}, 0x1, 0x0, 0x0, 0x8881}, 0x20008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000000280)=ANY=[@ANYBLOB="3dc000892b938ac022b5c1cdb685cfd8be2c1a24534f061d94b8cb65f5ce976b43163b2a31c80cde038b86ad343272208276", @ANYRES16=r6, @ANYBLOB="35092cbd7000ffdbdf250a0000000800048004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) fanotify_init$auto(0x65, 0x2) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2002, 0x0) read$auto(0x3, 0x0, 0x80) 5.411348664s ago: executing program 9 (id=3770): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80000000f4ffffff, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';') pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0x4, 0x9, 0x6, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 4.938886061s ago: executing program 4 (id=3771): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) 4.701147365s ago: executing program 2 (id=3772): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0xfa9d, 0x5, &(0x7f0000000280)=0xfb, 0x400, 0x3) set_mempolicy_home_node$auto(0x0, 0x10001, 0x10000000, 0x0) 4.692743543s ago: executing program 4 (id=3773): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d7) unshare$auto(0x20000080) mmap$auto(0x2, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x18c) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001680)={{r0, &(0x7f00000004c0)="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", 0x8, &(0x7f00000014c0), 0x4, &(0x7f00000015c0)="c7f5dee8a1f01c579c5e98cd66bcbe019f389f6c6a2e80ce037150dd9601870de27815634a34206713078bdcf967aa26d9067e72a1c3b469c84a56244c22ab83210a81ccc8c4af2780e15c6b0f3d00944b6d30ab1262512dce0336fd9dcbb8faa207e9a57be8", &(0x7f0000000080)=0x1}, {[0x9, 0x1, 0xe, 0xfffffffd]}, 0x0, 0x3, &(0x7f0000001640)="6cf3e856fb09659fd3bf5e0d35863e18e72dbdc6a34d8593492f93"}) socket(0xa, 0x3, 0x3a) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) socket(0x1e, 0x4, 0x0) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c2, 0x2081, 0x3f, 0x7ffc, 0x1ffde, 0x8001, 0x2, 0x4, 0x9, 0x0, 0x5, 0x8, 0x3004, 0x9, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x7, 0x1ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0x5, 0x2, [0x7249, 0xa9f, 0x0, 0x1ff, 0x100000001, 0xda18, 0x2, 0x0, 0x0, 0x1, 0xffffffff, 0x1000000, 0xfffc, 0x40000000000, 0x0, 0x400000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x0, 0x2, 0xfff, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x401, 0xfffffffffffffffc, 0x400000000000002, 0xfffffffffffffffc, 0x3, 0x1, 0x6, 0x7, 0x4]}, 0x1fe, 0x8) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 4.438051345s ago: executing program 4 (id=3774): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) mmap$auto(0x9, 0x1ff, 0x4, 0x4000000000014, r1, 0xceb) socket(0xa, 0x3, 0x40000073) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x668401, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dmmidi2\x00', 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8800, 0x0) cachestat$auto(r2, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700003f00"}, 0x1c) 4.34716689s ago: executing program 2 (id=3775): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x1048, r4, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @fd}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x101c, 0x3, 0x0, 0x1, [@generic="45167eab3bed37f707641200007240faae86ada13ca8aa30", @generic="156e8582b5d971b7c8ea9f7358ba002fe4a4098f863958bc4bb878296de239f6121744f3d53f7f8bd7cd58b7bde427ceb080fb6e6649513522a0828ab0ebb333b1d7a3e7a5c55969a954c82f9bc305b98445030a6f031d39ec216adeb1a27f67ddd8d532dd065c0c86f5b4cb2a0735253894289a91b1cb6a6ec1dfa4a23b0fe054cb5befc1b69371606fecfb00fade361ac34892dee50761a1091fcd12acf561d943c93a46bc4eddacdc91c156b4ef15f785f1c1ccce8f260349c08fd8e37ca42e2ef5fff7a9549e904c884595943ba9d2bb4cb86ab17e6f321b81e3b2c3cd21d942623532d1f6a5fe2e3b2236ec6e70a899ed956440cd2b36727066a67f3c8de04903170894c1e19f2770a70a33ad4079ce7c1a8c0b80078ed60e4d5039f6bc67369960445f6c1ad2bd1bb7c3a346b0b54424dbd9126eeb7a968c0f1d1f563ded17ff3a9daa1e408355856a8c39f421f1b9394f6fa5737bc3520e0f5f04bd82b90ae2b98264bdfa40215aa8fbebcff062c37d2556c50a65b61c0260e2e274e66ee1dbee0a9779fc977287dd8bf24aacf1f42cb8fe939acac8072af52a98abfd7cb6659c8e34057b0ad55a43c2c30ccca28ff90c94eb6aaedb805c1b5c93c0da6497b15469d41838447e9ea24fd0110b7954e694bb5c6848573de8034de0c65df91919d14e42903f552850ee90b8266d33cd77c6fd3ea529b7457bae2f72bd5768e2d9e4e619574a1ab7e0800a37e810e3b2e7c2c62bb63f126ff76c750ec3bdb2e7a07993aa8ea4e708be8e8145404bfc13db878a605fe6d3298c1000156a269b74953d21f0911a2768cd84168231563e5f57f9e92358c07d2cffb5cb98dc0a8f763bee29e05d3c6563c567ca5f34a227c39969f2da2108b3b84bc78b34e2e208a6b75365d650e2330ed4bf4509b024666a4f42385ccd9b9d1afd37c93f25fc8395dcd17d57fc431f9136c5b92f5130427fc0d59fac6df29d74b30be5422ae9a578c2d613f0f8f1a38f4b862292b8f96e8d324206343f86fa232341de5eb065d7d544a84a4fcdc9b84438e8fd2c16e02141acf7b656a4314974f5639b861affb0fc08bd824b1b52054906d2621f88b5dc5aa4a6b2763f5a94da46b96486dc173fd9b2de6b1ac9478b9ab48c01b0b79579ff9f0b2b1119c1c068ec71514e67198d5e480d5881055e150f4cc3fc6f8512c0890afa7dee1bc78c97ce7404530f12a04277608eab05f7e7edd30ae978d955d80b91c8faaae8eb1273b016a0c01c9cd8c023dec85ff5f3c6ce700e6bd1e597262d829166d3c2ca78bf1ef2de9b479e3b65a5edec569c50f022858a71bd6017b5bce54b77f1d3bf952ea096ca77b20b3b253843395da7ae13f71daef6b5338dad239d199b1d56ae0da6f02d68967827da4a7b3cda7f31d7f98201ae33290ba25a038d433be41995d0e23a6381a92a929786dd3a2bbcd1ae06a4b7b826a752bc8faa099ca9ecfaf7d26264636523f9ed4c8eae0d7acbaf83d9337d96897592556c256d6e3ad4632184749d016dc70db1af92d1ee4dbc516fe910577c2977bb9ae70525464cfdaabda391bd7b36bac6eef59a6df013d539357f6d18d8abec63f3c488043d8b44ea1767de5a4918ac358b3d79852473894ecff4d101315be10b19b0b347ad3e2846c81d53de7124d5f8810cbc6aa381f8ede9324644357410f286fe935f8e1044171a7df0d850224ec7f08ef1ab0e2cd42e38235b956bf5ff19daced58e2b1d5b665a665ebfa8e3d8973b33647602efeb0089bde265353719bbdf922a8db498a71bcef1f7b9cbee59258e3736d50a9a3828392607a8f393d3da6d11585b7de699ae6f23baaf9dfb5190f73551801d8da2de9e861de887f61e1c687a7ed1b542ba51a9a7fc745cf43ada692ab1cdb8bd089d1b65bc5d9b2e84a72ef35b8a8844f2ed9be4df73f20243766c97efc3a7926750b007aa631f9bbe6fa34899402067522fcd0fc5267c5f8804a2cc77666f57548b75b11b6b5bf9d042af8add84b1358d4b0f38e0425380c3fb9978f9c19f2f44865bd86916dbe1aae8b80a16b6e8929cbf7a8101bb4888832392c875f4ed39163cfe0750fac1c8fba4a0fc1fb9a6b814bf40acd371362b129bf29bf2b3578b124e2c29d76d2a7ac870be69b6f6dcd6b1b67849dbd444d17eb8f64437177a0b35f80cf177812b894f70da4b1c814cfc6df8be67c79d736b46de16924a9b95da8e47c1674069a6522ede3d1ad36a1c3be350eb44764b511e6e46f6b3f6bbab3473914b2ca9aba785ffdc346cb8f4099dd69d6efe9f20de4558163eb5d096b54416a0f43f9c989a9955000617a18c6d948d5f22126b0ec94395abbc32f7a6bbeb16d608018d5bb0f1f1dd70c839e5a144bb760fe94f1dd8220781f1415bcbd26d86fc3520905d6bcb3b5de29f9d3f0d9dda0229ec95e54d95a898dd527807c9bdcbd23fe899da6735eb77e71acdb27f32232da3dd6199136efe87e11a82432c3007e4b411ae05cd17372c4ba6e2a0f27fd1db6c80084991ff72497d7ad35977d4c49be9bf8d104954c305b68aa4c627bf224f75fccac7a379503fffccf72bad202aa61b1afd3293728520adeb2176b8f140e8ae2026e84c7fea6a12a291d659083b6d0eceaaac826bd94dd82141aa545250428342e5749a00aa8e146b42c38f41c510c476a693b3b220c52896114e7c4ff285c4aeee3993ec2a4c365797be190f722be540fbf304e85ffd263a03ace9753dc07d0575e950eacc5a082195f2a2a9e1d6dccc46eb4b5dc936744dcbe310c45b21e014938360af42a8f5d26245d275ee8a09d450b5800b054be17792986f1bec99e2040f163aef398d435e813d0ad4bd99dfbf49bc93e3b0ae11bf9e3379b97b171d945402859112d1a5446882cf37062cb3d597e42a3ce82a549430bceb14943e1deb7ad698cd7756cd2c7e91ff3efb2157c6f78b909f1df13c1e859de4c2e06b53ef8c335ea60d77bb9f9f7801cb406d12868e506214f0a8d3c8996dad0bbeb4b7e9a2ee7e0123d0921038bbb58a4a5c34fac411fde97185d931ec8ebffd3a83778c1419fef99136577331a7280b97b3ec0417958cc1ca686709c1b4f9fd605e705c8c4d11722e56b11cf5aee15c0788ec27b01d6e50c701c7c0159f8f794750d47bec2530a37408eb45e38127266550607cad2e1db5af48bf965ecfda5fd4109d75e219f815b7c17dd81e4e8386f2f59b6f60bf082bcda9557d442381c64acd832fdc21df9b64a2ef6d8a70a100b5b037adf2bfcdc1eff57042847620a9392f1949bbe479d2d4c67dcc9bf979b7e7d327b7c6e20b84445f719adffec4236b9fffb9600bfa8f26ff0bbe61b2ceeca6947c01f55a4a96d3591e9e3f92f8d3a6acee1bcf2050d55e6d22a722114271a7a87344faeb434206da5a36d6607ad8d9bf59fec2688b4e297051d15d9aafeaa3559d75bea88c831a3e2178eaea9869f345d413ed6314762bdd0bf8e01bbc356a6e2d1b090eb8eac00777f2c74a00319f8bcbd29b4a1e18dedc6c0a84a5e154890cc67b0fa0d750689c9efd9360d11aac29fe4fb5401a4702e59f575578df4d8bba519868e6015813ddfb818407c3c04670fa1058b1aad486d5caeb6fe6cd639c269aca1a287fa8d1d8efbb519b34fd2196c5cb31526f106ae4c7d38857eb0e34420369ff3bf07e1eb63d0f650a156651c9d836cd00d1441288bef3d7e9d281bd4b5e4876f4eeaa3d37beaaf2db6b4903c429d1047beb5d67789e87210fc9feff5a8285fff95c3800b20152630e25d7b0c494ee1a92b8bb98d406d9c8d69e76f93186518a5307a840658ed76f425c9055f74529a81d4e9afbd5dec0f1ecb5d8d706cb62635078041effa6a4668d277be92157cf0a8710dcba5218afad7dd44b8ed48590e49934909eb80d599843a21bd70198da950e9a6887c010d0a4bc6b68cd992d16e44102e5b06aef610c4f753facfc16dde5795830aec5faf12f6664cb493397ab2ec60172d64d96e08bff5f15b371a286ef4bcbf3b1bd1dd33d79c2994d821272fa4e081e582a7b25a263b7c01fd1b7e582f851a7409c8e5b5de991075cec3939f5d52c9eed6806031759af1c4f407a3b6a558f534d2da5491a93db21fa3b721b91d13cda52d8bb23fd41b8022d18a43d6979cb31fe7d7e9d4cddc60daad77b5ad02516fd1b0a6fe5d78cfa0a15f8eae65c84e22da84b24f0893d2e0324d2f93a83f3b322f31a741d52e9bf5c85c5229a83b325d67141a6c8b5a8fecf245d6651bb4ec917b61589ef102855ae0be7d248f86fe85d00ef8a6bf3482d4671757657822191b4a7a839fbbb3d255faea2ac1a7af9b82dc2bb62d07dc884e0add91820ec9e64193825b7c23c30970456150633f64ddfe04e42581a856c53e92179ecb127c79c348f50bbb1330e936ec24cd2c8b314960a04f882d19d81b0437a706920cb845065853c1d136221aad87856fd92ea9faab274b85376e9e4bc4c43e90a9463e9fe612c3ce9f7e44f91fdb8c006a36d00e1a7bf19ab437ae950ec453181a3795af8eae73c8de3a8624317d7830d495ba16a2885dafe46cfaa0eb755744061da4b2e206566f616ccf58732c74ea3fdb56f501b9a92a1952c1ce7bfb6074b2194dfec258873930ad6db80ae94b84b81e4740a62ebbdef51c6ae9f4edf91385c9b001828c38fc6f9ad50d9833db69f1e74d1bb8d8a85692ae87115fd667a05106bf2fdd62d6860c95da5446d0105a922a7fc7a1f6c51d5653f107b25d8dca5ebcc2add7d995c9bf15e27882beab95481bfc13023f4a0215f6d9e776108f063b70ab5f94674f45a8e2013c15d3f914d4f9a24b5ff2a802e4c79c7edf30b0f022b58eb1180000b99df7549f96fbde670fae02edcaf1f4a0f2670a7e9df80cb3300f1751f3ad13b3f4ea631a96fbefd17049ccb0138867597ebcd396a9f0310bc031f874058918bdd15a07fc75df8d0afaab66a9e7b4d0bb010aaa717816d396934cff24aa3f455b59ed6e51f15d85a45b49b6010eba20710e0e79de92a8610121ca7fb71256d5aa2c7dec0b8b447ca7895e17d2ec174e7805036db54fd5536f1231228f3afa7fea3bc13a8cd9bc2881488c390c96f17d33116725c7468ca6857647071133134f540e58e94be860daa249e5ab488dd6d23c78f398c6ef9a16010d7a35176d7cb2d9cdc9d93fe2503b40bddb0c2e3bc01d7c4d756a4f36f3657b13aedfe3eed25e1426a7d10cb43081242f97838cc60c358261e4bc8331be9a99897c27c636cffdafb43350315ab2b5293e71587802333540cddd0577424e0281de388ec308774a488fa0d7711e2f601a2a6a2c93ab410e401c7fa5ccb0a4703651293b5cccab8360295603ba4cf4274ddd734b19909bd9f98308726d264465afebf0f934af72730ebb8432bb4c0ae93596ebd1124f6006ba17271ec780e29872b52e1109d94276afd4c45bd0e1b4cf933a69262438d424994d0d8fa6783a30da9a968b0b651e2abdd08f1f20a082016e93cd97bd3feee244706942de39e174607bf9e73dc4b6d341c74df120fabb0407f85a85fdf005d3557844db390649f09c476d0ae99102562a1217d9a12f575e07a5936681eaa3ffa47817af836a31faefd0f2455b665bc5f498446d3f41dd43d2b5859f29f570c213a69e2ac651e9c8e0a9e9c0fcdf5178de22df191b4b4b62e77b8083eeb5a07a2f102c1fa6a1df2f92cfb92b44a3abfaac37610f4cc89f1b7fd45417065eb14c85d723c491a249a7575ce4d54eb6b45fdee3f62319690615e5e9a8a11cbd16dbf1b"]}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x1048}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r5, 0x5101, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/cards\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f00000000c0)=""/147, 0x93) mmap$auto(0x0, 0x8, 0x2, 0x7fffffff, 0xffffffffffffffff, 0x10c) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.129981044s ago: executing program 0 (id=3776): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x6c4643, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xd6) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x0, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x20, 0xc, 0x1001, 0x8, 0x101, 0xe, &(0x7f0000000180)}) 3.92001085s ago: executing program 0 (id=3777): mmap$auto(0x100000000, 0x2000d, 0x1, 0xeb1, 0xffffffffffffffff, 0x100000000) sysfs$auto(0x2, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) semget$auto(0x0, 0x13c, 0x1ff) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x9, 0x0, 0x800000000005, 0x7ffffffd}, 0x8}, 0x4, 0x1, 0x0) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0) socket(0x28, 0x801, 0x0) mmap$auto(0x3fa1, 0x400408, 0x1, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000200)={0x6, 0x4, 0x5, 0x6, 0xffffffffffffff00, 0x7fffffffffffffff, 0xcc, 0x4, 0x9, 0x100000000, 0xe, 0xd}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) rseq$auto(&(0x7f0000000280)={0xe, 0x401, 0xffffffffffffffff, 0x6, 0x1, 0x2, "9e14af3af7d950cb36f988aa4e8ffb6dbd91714d32068e37c90e12f4f6036cbda5564b62088eca8cbfeb2b4cd62112"}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x100000004) close_range$auto(0x2, 0x8, 0x0) semctl$auto_GETNCNT(0x0, 0x7, 0xe, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x301000, 0x0) r2 = socket(0x22, 0x3, 0x0) bind$auto(r2, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, 0x5) ioctl$auto(r1, 0x40104d01, r1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 3.553332944s ago: executing program 9 (id=3778): r0 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000180)=@link_detach={0xffffffffffffffff}, 0x3) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x88d0}, 0x24000040) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_sco_debugfs_fops_(r3, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.868535055s ago: executing program 0 (id=3779): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xfffffffd, 0x9, 0x3, 0x13, 0x4, 0x5, 0x3, 0x800000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x3, 0xb414, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff], "c4cbb7ab40a4d6220aa6d6ea4305f533c9e9bee6fcfc61722ccb678e0e2cba7194bc385b26d84c96723400de3b5aacff44f65a10b6c36a9a55945d88270da0f18327ed7c66498ace94f97e799732311e069e26edbb6db1b0ddede50878458b27f5e2fb6581"}, 0x202, 0x81) setfsuid$auto(0xee00) sysfs$auto(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) socket(0x2, 0x1, 0x106) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) socket(0x18, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0xca400, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r2, 0x0) unshare$auto(0x40000080) readahead$auto(r2, 0x2, 0x10001) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xffffffffffffffff, 0x8000) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/kvm/irq_exits\x00', 0xaa042, 0x0) 2.831339842s ago: executing program 4 (id=3780): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) madvise$auto(0x0, 0x400053, 0x9) 2.342843461s ago: executing program 2 (id=3781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, r1, 0x800, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.151054282s ago: executing program 2 (id=3782): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) rmdir$auto(&(0x7f0000004840)='.\x00') io_uring_setup$auto(0xa, &(0x7f0000000080)={0x7fffffff, 0x5, 0xc000, 0x6, 0x7, 0x108, 0xffffffffffffffff, [0x0, 0xffffffff], {0x9, 0x6, 0x1000000f, 0x29f, 0x9, 0x80, 0x101, 0x6, 0x10000}, {0x5, 0x1, 0x21bb800, 0x5, 0x6f, 0x2, 0xfffe, 0x5, 0x100002000}}) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r0, 0x15, 0x0, 0x8) 2.048721788s ago: executing program 4 (id=3783): r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r1, 0x1, 0x803a, r1, 0x0) r2 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/cec/cec24/status\x00', 0x2, 0x0) read$auto(r2, &(0x7f00000000c0)='/dev/i2c-0\x00', 0xf) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r3 = clone$auto(0x7, 0x1, 0x0, 0x0, 0xe) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0xc581f5a0], {0x46f0, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x4000001, 0x52, 0x5, 0x1, 0x1780b0b4, 0x106, 0x8, 0x100000000}}) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) madvise$auto(0x110c230000, 0x1, 0xd) process_vm_readv$auto(r3, &(0x7f0000000140)={&(0x7f0000000100)="522ba46d7b4ebae3fc309f40397390bac3fac556925fe75acdff2fd8d868958391f62db4d02a2b19bc1adf9ca081d7e5dd4f354f4aad721a", 0x3}, 0x7, &(0x7f0000000340)={&(0x7f0000000240)="29e9d6f0cdfa972a79811fc86b5ef4a99814d2bd6ab9286fa25554f27dd893e5a319e73140e33ce75e4c46945ad7bf3efb6790ca12c4f2f608fbdfcf52e284ffada34d2f6defb88946a8cdb25ff627597f0b882d946ce4052195059b681fdb3624a14a06fdb4f68f4e876e75fe66b4a69c75953386fc0d05e9c6c5e7a5774cdb0cb892d28175bc59c88e66e2b71b53522f13abfe8f1449aa30d4cb06d5e324549553ac2a57640c639efcba7051", 0x9df3}, 0xfa, 0x1) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/178, 0xb2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r4, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="11072cb57000fedbdf25130000000c000980080002"], 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) 1.877408732s ago: executing program 2 (id=3784): r0 = epoll_create$auto(0x7) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) read$auto_i2cdev_fops_i2c_dev(r1, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x10, 0x6) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x11, 0x3, 0xfffff958) r3 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) r4 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fremovexattr$auto(r4, 0x0) truncate$auto(0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x40) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x4, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c0d0}, 0xc000) sendmsg$auto_NFSD_CMD_VERSION_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000240), r2) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00\xd6I\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xa8\xd3D\xd6O\xffmU\x03\xbcK\x86\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x8e\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x00\x00\x00\x00\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioprio_set$auto(0x81b, 0xff, 0xffffffff) 304.972225ms ago: executing program 2 (id=3785): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x183, 0x0) bpf$auto(0x16, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/batman_adv/parameters/routing_algo\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x2001) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mmap$auto(0x8, 0x4020008, 0x9, 0x40000eb0, 0x401, 0x10000000008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x5, 0x21, 0x4909b6f5, 0x401, 0x7, 0x3, 0x9, 0x6, 0x3, 0x4, 0x5, 0xb4, 0x9, 0x208, 0x10003, 0x80, 0x80000000003, 0x80, 0xa, 0x22000, 0x204, 0x7, 0x84, 0x0, 0x9, 0xfffbffff, 0x0, 0x0, [0x17f2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e4, 0x1f, 0x0, 0x2, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000000000000000]}, 0x3, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0xffff8000, 0x280009, 0xb, 0x8000000008011, r2, 0xffcf9e2f7e7f0000) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77eeb07c, 0x0) 0s ago: executing program 0 (id=3786): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, 0x0, 0x2) ioctl$auto_FS_IOC_FSGETXATTR(r0, 0x801c581f, 0xa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/err_count\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/56, 0x38) getrlimit$auto(0x3, 0x0) fdatasync$auto(r0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop4\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) r3 = socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000e10003800800c200", @ANYRES32=0x0, @ANYBLOB="a115c2924b0e740338b86be40a87669b85a07e0330f1c26342f79c322964f11111d8a6a6faeb3785695edf0953f08d53af67672a0b1ed80d3f6c460f7f596f9c1e275e3f6a7d3b1552ade8e39ef8678e9e4b4ced8fb9a038a842781c9fc47021e99509e27a6adbf0591fc7352810c2ba6557564bba6696d09c1eb7f2baf1d7c93e9fb6738297f3a1ba0d3aa1d570a059e3fe322228dec394b11c7d82fd95951ab15892f213f5d47a3ffdedeaf813cfc737e7e824a4b82a5d5a54c4b04b0400110008002e00"], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) madvise$auto(0x3f000000, 0x2000000080000001, 0x3) r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r5, 0xffffffffffdffe00, &(0x7f0000000140)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): s mode [ 786.021698][T16437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.070980][T16437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.226243][T16437] team0: Port device team_slave_0 added [ 786.233465][T16486] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 786.260568][T16437] team0: Port device team_slave_1 added [ 786.369849][T16437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.387628][T16437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.479622][T16437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.525864][T16437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.550779][T16437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.660454][T16437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.841336][T16437] hsr_slave_0: entered promiscuous mode [ 786.868466][T16437] hsr_slave_1: entered promiscuous mode [ 786.891959][T16437] debugfs: 'hsr0' already exists in 'hsr' [ 786.912025][T16437] Cannot create hsr debugfs directory [ 787.459284][T16437] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.481915][T16439] Bluetooth: hci2: command tx timeout [ 787.858877][T16437] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.172046][T16437] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.517605][T16437] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.061159][T16528] tipc: Started in network mode [ 789.066078][T16528] tipc: Node identity ee00, cluster identity 4711 [ 789.233419][T16528] tipc: Node number set to 60928 [ 789.474505][T16437] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 789.523585][T16437] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 789.561722][T16439] Bluetooth: hci2: command tx timeout [ 789.584150][T16437] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 789.678817][T16437] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 790.012638][T16437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.319376][T16437] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.449536][T11371] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.456712][T11371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.516511][T11371] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.523708][T11371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.670346][T16437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 790.884955][T16566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2476'. [ 791.265821][T16574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2478'. [ 791.495979][T16437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.642664][T16439] Bluetooth: hci2: command tx timeout [ 791.731207][T16437] veth0_vlan: entered promiscuous mode [ 791.806964][T16437] veth1_vlan: entered promiscuous mode [ 792.095688][T16437] veth0_macvtap: entered promiscuous mode [ 792.153051][T16437] veth1_macvtap: entered promiscuous mode [ 792.233612][T16437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.285261][T16437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.336399][T16581] blktrace: Concurrent blktraces are not allowed on loop2 [ 792.358747][T11369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.396708][T11369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.440204][T11369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.485674][T11369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.814281][T11371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.863309][T11371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.974436][T11371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.998355][T11371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.471010][T16606] FAULT_INJECTION: forcing a failure. [ 793.471010][T16606] name failslab, interval 1, probability 0, space 0, times 0 [ 793.535044][T16606] CPU: 0 UID: 0 PID: 16606 Comm: syz.0.2448 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.535078][T16606] Tainted: [L]=SOFTLOCKUP [ 793.535085][T16606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 793.535104][T16606] Call Trace: [ 793.535111][T16606] [ 793.535118][T16606] dump_stack_lvl+0x100/0x190 [ 793.535151][T16606] should_fail_ex.cold+0x5/0xa [ 793.535173][T16606] should_failslab+0xc2/0x120 [ 793.535192][T16606] __kmalloc_cache_noprof+0x7a/0x6f0 [ 793.535216][T16606] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 793.535241][T16606] ? get_mem_cgroup_from_mm+0x88/0x600 [ 793.535266][T16606] ? get_mem_cgroup_from_mm+0x132/0x600 [ 793.535295][T16606] __do_sys_fanotify_init+0x5cf/0xe50 [ 793.535325][T16606] do_syscall_64+0x106/0xf80 [ 793.535345][T16606] ? clear_bhb_loop+0x40/0x90 [ 793.535367][T16606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.535387][T16606] RIP: 0033:0x7fb28c59c629 [ 793.535403][T16606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.535420][T16606] RSP: 002b:00007fb28d37b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 793.535439][T16606] RAX: ffffffffffffffda RBX: 00007fb28c815fa0 RCX: 00007fb28c59c629 [ 793.535451][T16606] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 793.535462][T16606] RBP: 00007fb28c632b39 R08: 0000000000000000 R09: 0000000000000000 [ 793.535473][T16606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.535485][T16606] R13: 00007fb28c816038 R14: 00007fb28c815fa0 R15: 00007ffe6f542638 [ 793.535508][T16606] [ 794.907812][T11368] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 794.935086][T11368] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 794.959312][T11368] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 794.967289][T11368] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 794.975586][T11368] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 795.194504][T16622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2486'. [ 795.793582][T16619] chnl_net:caif_netlink_parms(): no params data found [ 796.077366][T16633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2488'. [ 796.213012][T16633] veth0_macvtap: left promiscuous mode [ 796.240226][T16633] macvtap0: entered promiscuous mode [ 796.247565][T16633] macvtap0: entered allmulticast mode [ 796.683915][T13707] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.741706][T16619] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.786623][T16619] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.822984][T16619] bridge_slave_0: entered allmulticast mode [ 796.848174][T16619] bridge_slave_0: entered promiscuous mode [ 796.882378][T16619] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.907900][T16619] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.940347][T16619] bridge_slave_1: entered allmulticast mode [ 796.958773][T16619] bridge_slave_1: entered promiscuous mode [ 797.008899][T11368] Bluetooth: hci0: command tx timeout [ 797.133844][T13707] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.262015][T16619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.382230][T13707] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.419727][T16619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.509634][T13707] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.662196][T16619] team0: Port device team_slave_0 added [ 797.704514][T16619] team0: Port device team_slave_1 added [ 797.916840][T16619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.934132][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.987149][T16619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.036650][T16619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.071366][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.185326][T16619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.815143][T13707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.845002][T16679] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 798.875436][T13707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.942869][T13707] bond0 (unregistering): Released all slaves [ 799.094418][T11368] Bluetooth: hci0: command tx timeout [ 799.110709][T16619] hsr_slave_0: entered promiscuous mode [ 799.162315][T16619] hsr_slave_1: entered promiscuous mode [ 799.225027][T16619] debugfs: 'hsr0' already exists in 'hsr' [ 799.268173][T16619] Cannot create hsr debugfs directory [ 799.276043][T13707] tipc: Left network mode [ 799.552377][T16687] FAULT_INJECTION: forcing a failure. [ 799.552377][T16687] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 799.630750][T16687] CPU: 0 UID: 0 PID: 16687 Comm: syz.0.2496 Tainted: G L syzkaller #0 PREEMPT(full) [ 799.630783][T16687] Tainted: [L]=SOFTLOCKUP [ 799.630791][T16687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 799.630802][T16687] Call Trace: [ 799.630809][T16687] [ 799.630817][T16687] dump_stack_lvl+0x100/0x190 [ 799.630849][T16687] should_fail_ex.cold+0x5/0xa [ 799.630867][T16687] ? prepare_alloc_pages+0x16d/0x5f0 [ 799.630890][T16687] should_fail_alloc_page+0xeb/0x140 [ 799.630911][T16687] prepare_alloc_pages+0x1f0/0x5f0 [ 799.630936][T16687] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 799.630967][T16687] ? pte_offset_map_lock+0x174/0x320 [ 799.630998][T16687] ? find_held_lock+0x2b/0x80 [ 799.631015][T16687] ? find_held_lock+0x2b/0x80 [ 799.631041][T16687] ? finish_fault+0x96d/0x15e0 [ 799.631060][T16687] ? finish_fault+0x96d/0x15e0 [ 799.631083][T16687] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 799.631109][T16687] ? finish_fault+0xa7d/0x15e0 [ 799.631138][T16687] ? folio_unlock+0xf5/0x190 [ 799.631161][T16687] ? do_fault+0x6a4/0x1950 [ 799.631190][T16687] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 799.631222][T16687] ? policy_nodemask+0xed/0x4f0 [ 799.631243][T16687] alloc_pages_mpol+0x1fb/0x550 [ 799.631263][T16687] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 799.631288][T16687] folio_alloc_mpol_noprof+0x36/0x340 [ 799.631312][T16687] shmem_alloc_folio+0x135/0x160 [ 799.631336][T16687] shmem_alloc_and_add_folio+0x371/0xd40 [ 799.631369][T16687] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 799.631398][T16687] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 799.631425][T16687] ? __bpf_trace_sched_util_est_se_tp+0xc0/0xc0 [ 799.631458][T16687] shmem_get_folio_gfp+0x6ab/0x1900 [ 799.631490][T16687] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 799.631524][T16687] shmem_write_begin+0x1a4/0x420 [ 799.631554][T16687] ? __pfx_shmem_write_begin+0x10/0x10 [ 799.631582][T16687] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 799.631607][T16687] generic_perform_write+0x292/0xa40 [ 799.631641][T16687] ? __pfx_generic_perform_write+0x10/0x10 [ 799.631664][T16687] ? __mark_inode_dirty+0x55c/0x1790 [ 799.631691][T16687] ? mnt_put_write_access_file+0x4e/0x100 [ 799.631720][T16687] ? file_update_time_flags+0x373/0x500 [ 799.631745][T16687] shmem_file_write_iter+0x10e/0x140 [ 799.631765][T16687] vfs_write+0x6ac/0x1070 [ 799.631799][T16687] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 799.631820][T16687] ? __pfx_vfs_write+0x10/0x10 [ 799.631865][T16687] ksys_write+0x12a/0x250 [ 799.631892][T16687] ? __pfx_ksys_write+0x10/0x10 [ 799.631927][T16687] do_syscall_64+0x106/0xf80 [ 799.631948][T16687] ? clear_bhb_loop+0x40/0x90 [ 799.631971][T16687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.632010][T16687] RIP: 0033:0x7fb28c59c629 [ 799.632033][T16687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.632052][T16687] RSP: 002b:00007fb28d37b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 799.632071][T16687] RAX: ffffffffffffffda RBX: 00007fb28c815fa0 RCX: 00007fb28c59c629 [ 799.632083][T16687] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000008 [ 799.632095][T16687] RBP: 00007fb28c632b39 R08: 0000000000000000 R09: 0000000000000000 [ 799.632106][T16687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.632117][T16687] R13: 00007fb28c816038 R14: 00007fb28c815fa0 R15: 00007ffe6f542638 [ 799.632142][T16687] [ 800.099354][T16693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2497'. [ 800.876239][T16706] Invalid ELF header magic: != ELF [ 801.167819][T11368] Bluetooth: hci0: command tx timeout [ 801.700654][T16619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 801.825265][T16619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 802.136893][T16619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 802.266116][T13707] hsr_slave_0: left promiscuous mode [ 802.310752][T13707] hsr_slave_1: left promiscuous mode [ 802.381611][T13707] veth1_macvtap: left promiscuous mode [ 802.409399][T13707] veth0_macvtap: left promiscuous mode [ 802.436373][T13707] veth1_vlan: left promiscuous mode [ 802.451086][T11368] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 802.461605][T13707] veth0_vlan: left promiscuous mode [ 803.111773][T13707] team0 (unregistering): Port device team_slave_1 removed [ 803.164637][T13707] team0 (unregistering): Port device team_slave_0 removed [ 803.249148][T11368] Bluetooth: hci0: command tx timeout [ 803.460165][T16619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 803.469655][T11368] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 804.476298][T16619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.604018][T16619] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.714126][T11370] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.721478][T11370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.911587][T11370] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.918807][T11370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.109548][T16775] Invalid ELF header magic: != ELF [ 805.136537][T16619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 805.192976][T16619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 805.987874][T16619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.235452][T16619] veth0_vlan: entered promiscuous mode [ 806.394899][T16619] veth1_vlan: entered promiscuous mode [ 806.793905][T16619] veth0_macvtap: entered promiscuous mode [ 806.841627][T16619] veth1_macvtap: entered promiscuous mode [ 807.016432][T16619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.103908][T16619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.248738][T11372] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.286109][T11372] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.456204][T11372] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.497275][T11372] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.076385][T11369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.120470][T11369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.314181][T11372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.351089][T11372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.671161][T16849] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2522'. [ 808.769836][T16853] netlink: 'syz.1.2523': attribute type 23 has an invalid length. [ 808.817117][T16850] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2522'. [ 808.930220][T16858] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 809.334805][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.341330][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.638243][T16873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2527'. [ 810.232334][T16881] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2530'. [ 810.526209][T16885] Invalid ELF header magic: != ELF [ 811.347633][T16902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2537'. [ 811.988621][T16914] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2540'. [ 812.055332][T16917] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2540'. [ 812.583885][T16913] netlink: 'syz.1.2541': attribute type 23 has an invalid length. [ 812.711421][T16934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2547'. [ 812.754106][T16929] Invalid ELF header magic: != ELF [ 812.937271][T16936] Invalid ELF header magic: != ELF [ 813.414838][T11368] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 813.441340][T11368] Bluetooth: hci4: Unexpected cc 0x7c89 with no status [ 814.434035][T16967] netlink: 'syz.0.2555': attribute type 3 has an invalid length. [ 814.475121][T16965] Invalid ELF header magic: != ELF [ 815.358492][T16981] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2557'. [ 815.395127][T16988] netlink: 29 bytes leftover after parsing attributes in process `syz.0.2559'. [ 815.529469][T16983] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2557'. [ 816.385913][T17012] [U] 0="­/ [ 816.402175][T17012] [U] [ 816.421616][T17012] [U] EÇeÅQ‰Í@’ [ 816.535607][T17012] [U]  [ 817.159411][T17036] Invalid ELF header magic: != ELF [ 818.514576][T17068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'. [ 818.578576][T17070] FAULT_INJECTION: forcing a failure. [ 818.578576][T17070] name failslab, interval 1, probability 0, space 0, times 0 [ 818.665544][T17070] CPU: 0 UID: 0 PID: 17070 Comm: syz.3.2578 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.665578][T17070] Tainted: [L]=SOFTLOCKUP [ 818.665585][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 818.665596][T17070] Call Trace: [ 818.665607][T17070] [ 818.665615][T17070] dump_stack_lvl+0x100/0x190 [ 818.665648][T17070] should_fail_ex.cold+0x5/0xa [ 818.665670][T17070] should_failslab+0xc2/0x120 [ 818.665688][T17070] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 818.665715][T17070] ? ptlock_alloc+0x1f/0x70 [ 818.665743][T17070] ptlock_alloc+0x1f/0x70 [ 818.665766][T17070] pte_alloc_one+0x84/0x3e0 [ 818.665787][T17070] __pte_alloc+0x6d/0x3f0 [ 818.665804][T17070] ? __pfx___pte_alloc+0x10/0x10 [ 818.665821][T17070] ? __pfx___might_resched+0x10/0x10 [ 818.665847][T17070] ? copy_page_range+0x1e9d/0x6570 [ 818.665882][T17070] copy_page_range+0x3e51/0x6570 [ 818.665932][T17070] ? __pfx_copy_page_range+0x10/0x10 [ 818.665964][T17070] ? __pfx___might_resched+0x10/0x10 [ 818.666000][T17070] ? up_write+0x290/0x4f0 [ 818.666028][T17070] dup_mmap+0xd25/0x2180 [ 818.666059][T17070] ? __pfx_dup_mmap+0x10/0x10 [ 818.666078][T17070] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 818.666103][T17070] ? __lock_acquire+0x4a5/0x2630 [ 818.666126][T17070] ? find_held_lock+0x2b/0x80 [ 818.666143][T17070] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 818.666191][T17070] copy_process+0x73d7/0x7a10 [ 818.666224][T17070] ? __pfx_copy_process+0x10/0x10 [ 818.666246][T17070] ? find_held_lock+0x2b/0x80 [ 818.666273][T17070] kernel_clone+0xfc/0x9a0 [ 818.666293][T17070] ? __pfx_futex_wait+0x10/0x10 [ 818.666324][T17070] ? __pfx_kernel_clone+0x10/0x10 [ 818.666359][T17070] __do_sys_clone+0xd9/0x120 [ 818.666381][T17070] ? __pfx___do_sys_clone+0x10/0x10 [ 818.666423][T17070] do_syscall_64+0x106/0xf80 [ 818.666443][T17070] ? clear_bhb_loop+0x40/0x90 [ 818.666466][T17070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.666485][T17070] RIP: 0033:0x7ffb0cd9c629 [ 818.666502][T17070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.666520][T17070] RSP: 002b:00007ffb0dccffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 818.666539][T17070] RAX: ffffffffffffffda RBX: 00007ffb0d015fa0 RCX: 00007ffb0cd9c629 [ 818.666552][T17070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004001011 [ 818.666563][T17070] RBP: 00007ffb0ce32b39 R08: 0000000000000000 R09: 0000000000000000 [ 818.666574][T17070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 818.666585][T17070] R13: 00007ffb0d016038 R14: 00007ffb0d015fa0 R15: 00007ffeca8c50b8 [ 818.666610][T17070] [ 819.549771][T17085] Invalid ELF header magic: != ELF [ 820.335279][T17095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2586'. [ 821.926154][T17138] netlink: 'syz.3.2596': attribute type 23 has an invalid length. [ 822.592521][T17149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2600'. [ 822.655700][T17149] veth0_macvtap: left promiscuous mode [ 822.705135][T17149] macvtap0: entered promiscuous mode [ 822.739845][T17149] macvtap0: entered allmulticast mode [ 826.202407][T17226] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2621'. [ 826.248348][T17224] NFSD: Failed to start, no listeners configured. [ 826.324187][T17229] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2621'. [ 827.113164][T17252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2631'. [ 827.828444][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'. [ 828.274143][T17274] Invalid ELF header magic: != ELF [ 828.494833][T17281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2641'. [ 828.527133][T11368] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 829.958439][T17315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2650'. [ 831.078859][T17340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2656'. [ 831.176814][T17340] veth0_macvtap: left promiscuous mode [ 831.199186][T17340] macvtap0: entered promiscuous mode [ 831.219327][T17340] macvtap0: entered allmulticast mode [ 831.570971][T17352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2659'. [ 831.918918][T17360] vivid-007: ================= START STATUS ================= [ 831.972824][T17360] vivid-007: Generate PTS: true [ 831.980319][T17363] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2664'. [ 832.010810][T17360] vivid-007: Generate SCR: true [ 832.045886][T17360] tpg source WxH: 320x240 (Y'CbCr) [ 832.074440][T17360] tpg field: 1 [ 832.077873][T17360] tpg crop: (0,0)/320x240 [ 832.108513][T17360] tpg compose: (0,0)/320x240 [ 832.135945][T17360] tpg colorspace: 8 [ 832.147050][T17360] tpg transfer function: 0/0 [ 832.161586][T17360] tpg Y'CbCr encoding: 0/0 [ 832.173870][T17360] tpg quantization: 0/0 [ 832.182697][T17360] tpg RGB range: 0/2 [ 832.190947][T17360] vivid-007: ================== END STATUS ================== [ 832.200453][T17371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2667'. [ 834.019032][T17415] futex_wake_op: syz.3.2677 tries to shift op by -2048; fix this program [ 834.087667][T17415] futex_wake_op: syz.3.2677 tries to shift op by -2048; fix this program [ 836.466817][T17445] netlink: 'syz.1.2685': attribute type 23 has an invalid length. [ 836.635889][T17450] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 836.676294][T17450] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 836.713639][T17450] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 836.780028][T17450] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 836.809749][T17450] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 836.925542][T17450] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 836.976804][T17450] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 837.002596][T17450] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 837.076160][T17450] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 837.122644][T17450] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 837.159904][T17450] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 837.191203][T17449] kexec: Could not allocate control_code_buffer [ 837.206409][T17450] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 837.421384][T17467] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 837.593353][T17468] Invalid ELF header magic: != ELF [ 838.150302][T11368] Bluetooth: hci4: command 0x0c1a tx timeout [ 838.720995][T17494] Invalid ELF header magic: != ELF [ 838.788838][T11368] Bluetooth: hci1: command 0x0c1a tx timeout [ 839.035561][T11368] Bluetooth: hci2: command 0x0c1a tx timeout [ 839.187673][T11368] Bluetooth: hci0: command 0x0c1a tx timeout [ 839.833033][T17514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2700'. [ 840.228473][T11368] Bluetooth: hci4: command 0x0c1a tx timeout [ 840.867932][T11368] Bluetooth: hci1: command 0x0c1a tx timeout [ 840.965897][T17533] Invalid ELF header magic: != ELF [ 841.110020][T11368] Bluetooth: hci2: command 0x0c1a tx timeout [ 841.267041][T11368] Bluetooth: hci0: command 0x0c1a tx timeout [ 841.495339][T17544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2708'. [ 841.526341][T17544] bridge_slave_1: left allmulticast mode [ 841.545879][T17544] bridge_slave_1: left promiscuous mode [ 841.570384][T17544] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.605878][T17544] bridge_slave_0: left allmulticast mode [ 841.620520][T17544] bridge_slave_0: left promiscuous mode [ 841.641388][T17544] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.307768][T11368] Bluetooth: hci4: command 0x0c1a tx timeout [ 842.948762][T11368] Bluetooth: hci1: command 0x0c1a tx timeout [ 843.188296][T11368] Bluetooth: hci2: command 0x0c1a tx timeout [ 843.348749][T11368] Bluetooth: hci0: command 0x0c1a tx timeout [ 845.394345][T17620] NFSD: Failed to start, no listeners configured. [ 846.972977][T17650] Invalid ELF header magic: != ELF [ 848.369093][T17673] Invalid ELF header magic: != ELF [ 849.685073][T11368] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 851.009634][T17701] bridge0: port 3(team0) entered blocking state [ 851.235191][T17701] bridge0: port 3(team0) entered disabled state [ 851.241606][T17701] team0: entered allmulticast mode [ 851.332047][T17701] team_slave_0: entered allmulticast mode [ 851.337872][T17701] team_slave_1: entered allmulticast mode [ 851.443787][T17701] team0: entered promiscuous mode [ 851.482222][T17701] team_slave_0: entered promiscuous mode [ 851.557946][T17701] team_slave_1: entered promiscuous mode [ 851.633522][T17701] bridge0: port 3(team0) entered blocking state [ 851.639898][T17701] bridge0: port 3(team0) entered forwarding state [ 852.816388][T17722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2753'. [ 854.410674][T17750] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.2763'. [ 854.734959][T17760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2764'. [ 855.983964][T17782] Invalid ELF header magic: != ELF [ 856.502145][T17797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2773'. [ 856.558595][T17797] veth0_macvtap: left promiscuous mode [ 856.581298][T17797] macvtap0: entered promiscuous mode [ 856.613475][T17797] macvtap0: entered allmulticast mode [ 856.625040][T17776] netlink: 'syz.1.2767': attribute type 23 has an invalid length. [ 857.400705][T17803] netlink: 'syz.3.2775': attribute type 72 has an invalid length. [ 857.445795][T17803] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.2775'. [ 857.584509][T11368] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 857.990471][T17805] futex_wake_op: syz.0.2777 tries to shift op by -2048; fix this program [ 858.480678][T17837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2785'. [ 862.845875][T17912] netlink: 'syz.0.2804': attribute type 23 has an invalid length. [ 863.596336][T17933] Invalid ELF header magic: != ELF [ 863.769096][T17938] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 863.960625][T17943] netlink: 'syz.1.2812': attribute type 22 has an invalid length. [ 864.014359][T17943] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2812'. [ 864.402079][T17954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2814'. [ 864.715518][T17961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2816'. [ 867.186897][T18011] NFSD: Failed to start, no listeners configured. [ 868.670168][T11368] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 869.641793][T18068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2847'. [ 870.300755][T18082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2850'. [ 870.386228][T18068] netlink: 'syz.3.2847': attribute type 23 has an invalid length. [ 870.560044][T18086] Invalid ELF header magic: != ELF [ 870.807222][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.814571][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.834724][T11368] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 871.790605][T18109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2855'. [ 872.368882][T18118] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2857'. [ 872.490578][T18122] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2857'. [ 872.584561][T18124] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2859'. [ 872.753058][T18127] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2859'. [ 876.329545][T18201] tipc: Started in network mode [ 876.350001][T18201] tipc: Node identity ee00, cluster identity 4711 [ 876.399423][T18201] tipc: Node number set to 60928 [ 877.434027][T18219] Invalid ELF header magic: != ELF [ 878.554320][T18243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2890'. [ 879.586941][T18273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2899'. [ 880.014966][T18281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2901'. [ 880.191610][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'. [ 880.854194][T18302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2908'. [ 881.455771][T18308] Invalid ELF header magic: != ELF [ 882.488502][T18326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2914'. [ 883.253111][T18341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2918'. [ 883.641851][T18346] netlink: 'syz.2.2921': attribute type 3 has an invalid length. [ 883.668952][T18346] netlink: 'syz.2.2921': attribute type 9 has an invalid length. [ 883.949690][T18359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2926'. [ 883.967697][T18356] Invalid ELF header magic: != ELF [ 884.020551][T18359] bridge0: entered promiscuous mode [ 884.025818][T18359] bridge0: entered allmulticast mode [ 885.534316][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2935'. [ 886.102250][T18408] Invalid ELF header magic: != ELF [ 887.596290][T18442] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2949'. [ 887.779953][T11368] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 889.898560][T18486] futex_wake_op: syz.2.2961 tries to shift op by -2048; fix this program [ 890.121035][T18486] futex_wake_op: syz.2.2961 tries to shift op by -2048; fix this program [ 890.715754][T18496] Invalid ELF header magic: != ELF [ 891.503405][T18511] netlink: 'syz.0.2967': attribute type 23 has an invalid length. [ 891.749909][T13707] bridge_slave_0: left allmulticast mode [ 891.777014][T13707] bridge_slave_0: left promiscuous mode [ 891.806801][T13707] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.797572][T13707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.827974][T13707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.858686][T13707] bond0 (unregistering): Released all slaves [ 892.981965][T13707] tipc: Left network mode [ 893.839532][T18549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2976'. [ 894.015327][T18552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2977'. [ 894.137855][T13707] hsr_slave_0: left promiscuous mode [ 894.160350][T13707] hsr_slave_1: left promiscuous mode [ 894.190742][T13707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.215014][T18554] Invalid ELF header magic: != ELF [ 894.222563][T13707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.241887][T13707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.271767][T13707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.328384][T13707] veth1_macvtap: left promiscuous mode [ 894.348107][T13707] veth1_vlan: left promiscuous mode [ 894.367208][T13707] veth0_vlan: left promiscuous mode [ 895.602187][T13707] team0 (unregistering): Port device team_slave_1 removed [ 895.656045][T13707] team0 (unregistering): Port device team_slave_0 removed [ 896.279213][T11368] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 898.430187][T18610] Invalid ELF header magic: != ELF [ 899.031922][T18623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3000'. [ 899.311085][T18628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3001'. [ 899.526914][T18633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3002'. [ 900.478545][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 900.684687][T11368] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 901.273637][T18671] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3017'. [ 901.321287][T11368] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 901.529492][T18677] Invalid ELF header magic: != ELF [ 902.509005][T11368] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 902.791736][T18706] NFSD: Failed to start, no listeners configured. [ 903.924690][T11368] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 903.933607][T11368] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 903.944328][T11368] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 903.954141][T11368] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 906.072815][T18782] netlink: 'syz.1.3046': attribute type 3 has an invalid length. [ 906.152191][T18782] netlink: 'syz.1.3046': attribute type 9 has an invalid length. [ 910.561843][T18867] tipc: Started in network mode [ 910.575996][T18867] tipc: Node identity ee00, cluster identity 4711 [ 910.626151][T18867] tipc: Node number set to 60928 [ 911.790899][T18874] nbd: must specify at least one socket [ 912.236312][T18896] netlink: 'syz.0.3076': attribute type 1 has an invalid length. [ 913.941151][T18919] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.3082'. [ 914.526413][T18930] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3084'. [ 914.574632][T18930] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3084'. [ 915.550789][T18940] Invalid ELF header magic: != ELF [ 916.706146][T18911] Invalid ELF header magic: != ELF [ 922.647363][T19045] Invalid ELF header magic: != ELF [ 924.006368][T19071] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3120'. [ 924.408094][T19080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3122'. [ 924.547682][T19082] Invalid ELF header magic: != ELF [ 925.593325][T19095] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.3125'. [ 926.614159][T19102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3128'. [ 927.003780][T19100] HfR: entered promiscuous mode [ 927.071129][T19102] HfR: left promiscuous mode [ 927.465215][T11368] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 927.472920][T11368] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 928.527293][T19119] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3131'. [ 928.727883][T19120] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3131'. [ 928.939781][T19124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3132'. [ 930.902993][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3139'. [ 931.403087][T11368] Bluetooth: hci1: unexpected event 0x20 length: 123 > 7 [ 932.068692][T19179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3145'. [ 932.279605][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.286267][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.610107][T19183] Invalid ELF header magic: != ELF [ 933.924675][T19198] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.3149'. [ 935.638703][T19228] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3158'. [ 936.078677][T19231] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3158'. [ 937.169315][T11368] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 938.412814][T19270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3168'. [ 939.011860][T19272] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.3169'. [ 939.726319][T11368] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 940.327540][T19305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3179'. [ 940.550496][T19305] macsec0: entered promiscuous mode [ 940.558394][T19305] macsec0: entered allmulticast mode [ 940.591014][T19305] veth1_macvtap: entered allmulticast mode [ 940.622092][T19314] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3181'. [ 940.654903][T19315] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3181'. [ 941.116347][T19318] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.3182'. [ 941.309586][T19322] Device name cannot be null; rc = [-22] [ 942.143831][T19333] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.3187'. [ 942.396752][T19346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3190'. [ 943.061648][T19346] netlink: 'syz.3.3190': attribute type 23 has an invalid length. [ 943.837935][T19367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3195'. [ 944.435891][T19380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3199'. [ 944.873659][T19386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3201'. [ 945.513679][T19401] NFSD: Failed to start, no listeners configured. [ 946.650093][T19422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3211'. [ 946.799594][T19425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3212'. [ 946.903775][T19412] Invalid ELF header magic: != ELF [ 947.020034][T19423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3207'. [ 948.691515][T19463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3221'. [ 949.198386][T19474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3225'. [ 950.554227][T19497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3231'. [ 951.421781][T11368] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 952.102972][T19519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3238'. [ 952.543743][T19525] Invalid ELF header magic: != ELF [ 955.608008][T19560] futex_wake_op: syz.3.3248 tries to shift op by -2048; fix this program [ 955.729361][T19560] futex_wake_op: syz.3.3248 tries to shift op by -2048; fix this program [ 957.871346][T19587] can: request_module (can-proto-0) failed. [ 958.431986][T19598] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 958.817961][T19610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3261'. [ 959.228404][T19610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.335178][T19610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.389560][T19610] bond0 (unregistering): Released all slaves [ 959.868751][T19619] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3264'. [ 959.901651][T19621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3265'. [ 960.477249][T18986] syz.0.3097 (18986) used greatest stack depth: 17880 bytes left [ 962.977785][T19671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3274'. [ 963.374385][T19675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3275'. [ 964.343643][T19686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3278'. [ 964.972758][T19699] netlink: 'syz.1.3282': attribute type 1 has an invalid length. [ 965.279766][T19704] netlink: 302 bytes leftover after parsing attributes in process `syz.1.3283'. [ 965.505291][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3284'. [ 966.356758][T19726] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3289'. [ 966.393580][T19727] NFSD: Failed to start, no listeners configured. [ 966.607712][T19728] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3289'. [ 966.639883][T19734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3290'. [ 969.403535][T19789] Invalid ELF header magic: != ELF [ 971.043868][T11368] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 971.413231][T19832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3313'. [ 971.924827][T19842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3317'. [ 972.702339][T19858] tc_dump_action: action bad kind [ 972.955573][T19862] Invalid ELF header magic: != ELF [ 974.468121][T19885] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 974.696792][T11368] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 975.792295][T19917] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3337'. [ 978.079902][T11368] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 991.733160][T16439] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 991.755687][T16439] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 991.764246][T16439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 991.772446][T16439] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 991.781821][T16439] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 991.867307][T16439] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 991.877367][T16439] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 991.885892][T16439] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 991.895169][T16439] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 991.907130][T16439] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 992.159692][T19977] chnl_net:caif_netlink_parms(): no params data found [ 992.247159][T19982] chnl_net:caif_netlink_parms(): no params data found [ 992.318536][T19977] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.325965][T19977] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.333604][T19977] bridge_slave_0: entered allmulticast mode [ 992.340829][T19977] bridge_slave_0: entered promiscuous mode [ 992.369449][T19977] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.377141][T19977] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.384878][T19977] bridge_slave_1: entered allmulticast mode [ 992.392095][T19977] bridge_slave_1: entered promiscuous mode [ 992.430934][T19982] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.438456][T19982] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.446275][T19982] bridge_slave_0: entered allmulticast mode [ 992.453744][T19982] bridge_slave_0: entered promiscuous mode [ 992.479562][T19977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.491864][T19982] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.499868][T19982] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.508384][T19982] bridge_slave_1: entered allmulticast mode [ 992.516641][T19982] bridge_slave_1: entered promiscuous mode [ 992.528365][T19977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.580399][T19982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.592306][T19982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.605999][T19977] team0: Port device team_slave_0 added [ 992.614204][T19977] team0: Port device team_slave_1 added [ 992.662090][T19982] team0: Port device team_slave_0 added [ 992.672440][T19982] team0: Port device team_slave_1 added [ 992.679471][T19977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.687176][T19977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.715480][T19977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.737639][T19977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.746732][T19977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.776049][T19977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.803110][T19982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.810090][T19982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.837690][T19982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.879441][T19982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.887925][T19982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.914692][T19982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.931268][T19977] hsr_slave_0: entered promiscuous mode [ 992.938477][T19977] hsr_slave_1: entered promiscuous mode [ 993.004434][T19982] hsr_slave_0: entered promiscuous mode [ 993.010814][T19982] hsr_slave_1: entered promiscuous mode [ 993.017636][T19982] debugfs: 'hsr0' already exists in 'hsr' [ 993.024783][T19982] Cannot create hsr debugfs directory [ 993.280291][T19977] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 993.318382][T19977] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 993.339843][T19977] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 993.358647][T19977] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 993.398347][T19982] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 993.419626][T19982] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 993.436616][T19982] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 993.456118][T19982] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 993.535158][T19977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.564717][T19977] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.581711][T14913] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.588934][T14913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.618237][T14913] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.625399][T14913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.652561][T19977] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 993.668128][T19977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 993.714094][T19982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.752334][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.760114][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.777972][T19982] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.811496][T11367] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.818700][T11367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.827758][T16439] Bluetooth: hci3: command tx timeout [ 993.856981][T11367] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.864160][T11367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.984344][T16439] Bluetooth: hci5: command tx timeout [ 994.077567][T19977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.286608][T19982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.591600][T19977] veth0_vlan: entered promiscuous mode [ 994.638409][T19977] veth1_vlan: entered promiscuous mode [ 994.737532][T19977] veth0_macvtap: entered promiscuous mode [ 994.777884][T19977] veth1_macvtap: entered promiscuous mode [ 994.837408][T19977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.880852][T19977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 994.909343][T11368] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 994.922333][T11368] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 994.932460][T11368] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 994.941173][T11368] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 994.965388][T11368] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 995.030318][T11367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.072826][T11367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.112250][T19982] veth0_vlan: entered promiscuous mode [ 995.129574][T11367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.178884][T19982] veth1_vlan: entered promiscuous mode [ 995.198246][T11367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.292416][T19982] veth0_macvtap: entered promiscuous mode [ 995.314732][T13707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.322749][T13707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.350052][T19982] veth1_macvtap: entered promiscuous mode [ 995.407375][T13707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.419980][T19982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.431101][T13707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.453637][T19982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.518495][T11367] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.543058][T11367] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.622572][T11367] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.684329][T11367] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.899289][T20030] chnl_net:caif_netlink_parms(): no params data found [ 995.906746][T11368] Bluetooth: hci3: command tx timeout [ 995.943164][T13707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.985380][T16439] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 996.001364][T16439] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 996.010931][T16439] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 996.019380][T16439] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 996.027438][T13707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.035804][T16439] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 996.070453][T16439] Bluetooth: hci5: command tx timeout [ 996.230186][T11367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.239189][T20030] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.247131][T11367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.256419][T20030] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.267785][T20030] bridge_slave_0: entered allmulticast mode [ 996.277979][T20030] bridge_slave_0: entered promiscuous mode [ 996.300899][T20030] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.308908][T20030] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.317184][T20030] bridge_slave_1: entered allmulticast mode [ 996.326630][T20030] bridge_slave_1: entered promiscuous mode [ 996.438307][T20030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.493036][T20030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.579488][T20030] team0: Port device team_slave_0 added [ 996.602123][T20030] team0: Port device team_slave_1 added [ 996.717061][T20030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.730469][T20030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.792860][T20030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.825907][T20030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.833000][T20030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.901165][T20030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.027761][T16439] Bluetooth: hci6: command tx timeout [ 997.066107][T20030] hsr_slave_0: entered promiscuous mode [ 997.086556][T20030] hsr_slave_1: entered promiscuous mode [ 997.101706][T20030] debugfs: 'hsr0' already exists in 'hsr' [ 997.118681][T20030] Cannot create hsr debugfs directory [ 997.180244][T20039] chnl_net:caif_netlink_parms(): no params data found [ 997.617182][T20039] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.644720][T20039] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.667283][T20039] bridge_slave_0: entered allmulticast mode [ 997.687118][T20039] bridge_slave_0: entered promiscuous mode [ 997.739143][T20039] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.775910][T20039] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.807205][T20039] bridge_slave_1: entered allmulticast mode [ 997.833869][T20039] bridge_slave_1: entered promiscuous mode [ 997.997337][T16439] Bluetooth: hci3: command tx timeout [ 998.011010][T20039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.063104][T20039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.073064][T16439] Bluetooth: hci7: command tx timeout [ 998.149034][T16439] Bluetooth: hci5: command tx timeout [ 998.170417][T20030] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 998.222753][T20030] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 998.249004][T20039] team0: Port device team_slave_0 added [ 998.277691][T20039] team0: Port device team_slave_1 added [ 998.301475][T20030] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 998.337211][T20030] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 998.476181][T20060] tipc: Started in network mode [ 998.496206][T20060] tipc: Node identity ee00, cluster identity 4711 [ 998.518088][T20060] tipc: Node number set to 60928 [ 998.565363][T20039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.607932][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.691529][T20039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.723359][T20039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.737045][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.794981][T20039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.932006][T20039] hsr_slave_0: entered promiscuous mode [ 998.948856][T20039] hsr_slave_1: entered promiscuous mode [ 998.965525][T20039] debugfs: 'hsr0' already exists in 'hsr' [ 998.978689][T20039] Cannot create hsr debugfs directory [ 999.107220][T16439] Bluetooth: hci6: command tx timeout [ 999.280769][T20030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.407862][T20030] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.504096][T11367] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.511267][T11367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.550235][T11367] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.557414][T11367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.815430][T20030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 999.892748][T20039] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 999.932207][T20039] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 999.964626][T20039] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 999.998194][T20039] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1000.076400][T16439] Bluetooth: hci3: command tx timeout [ 1000.150934][T16439] Bluetooth: hci7: command tx timeout [ 1000.228197][T16439] Bluetooth: hci5: command tx timeout [ 1000.621394][T20039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.734903][T20039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.794469][T11372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.801684][T11372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.834092][T20030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.864932][T11372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.872114][T11372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.039063][T20039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1001.195688][T16439] Bluetooth: hci6: command tx timeout [ 1001.721921][T20039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.742905][T20030] veth0_vlan: entered promiscuous mode [ 1001.803370][T20030] veth1_vlan: entered promiscuous mode [ 1001.892480][T20030] veth0_macvtap: entered promiscuous mode [ 1001.937107][T20030] veth1_macvtap: entered promiscuous mode [ 1001.991832][T20030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.050643][T20030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.095074][T11372] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.144330][T11372] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.166223][T11372] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.202835][T11372] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.228278][T16439] Bluetooth: hci7: command tx timeout [ 1002.560258][T11621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.596471][T11621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.690290][T20039] veth0_vlan: entered promiscuous mode [ 1002.719778][T14913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.740000][T20039] veth1_vlan: entered promiscuous mode [ 1002.747129][T14913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.828491][T20039] veth0_macvtap: entered promiscuous mode [ 1002.859780][T20039] veth1_macvtap: entered promiscuous mode [ 1002.896506][T20039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.960015][T20039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1003.013647][T11372] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.041155][T11372] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.096759][T11372] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.131353][T11372] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.268166][T16439] Bluetooth: hci6: command tx timeout [ 1003.383389][T11372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.418721][T11372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.520532][T14913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.548539][T14913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.316935][T16439] Bluetooth: hci7: command tx timeout [ 1006.439813][T20157] bond0: invalid ARP target specified [ 1006.489178][T20157] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3365'. [ 1006.531781][T20157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.584909][T20157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.646831][T20157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.672659][T20157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.527589][T20167] random: crng reseeded on system resumption [ 1007.675024][T20168] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1010.024735][T20201] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3374'. [ 1011.185013][T11368] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1011.195299][T11368] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1011.204317][T11368] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1011.215946][T11368] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1011.231658][T11368] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1011.933509][T20219] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3380'. [ 1011.973804][T20209] chnl_net:caif_netlink_parms(): no params data found [ 1012.044360][T20219] veth0_macvtap: left promiscuous mode [ 1012.066924][T20219] macvtap0: entered promiscuous mode [ 1012.075163][T20219] macvtap0: entered allmulticast mode [ 1012.344279][T20209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.361822][T20209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.380692][T20209] bridge_slave_0: entered allmulticast mode [ 1012.400087][T20209] bridge_slave_0: entered promiscuous mode [ 1012.440262][T20209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.467997][T20209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.507037][T20209] bridge_slave_1: entered allmulticast mode [ 1012.532720][T20209] bridge_slave_1: entered promiscuous mode [ 1012.607046][T20230] : Can't lookup blockdev [ 1012.628161][T20209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.668349][T20209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.750966][T20209] team0: Port device team_slave_0 added [ 1012.768886][T20209] team0: Port device team_slave_1 added [ 1012.831429][T20209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.849536][T20209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.912518][T20209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.976720][T20209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.990554][T20209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.054929][T20209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.162528][T20209] hsr_slave_0: entered promiscuous mode [ 1013.177112][T20209] hsr_slave_1: entered promiscuous mode [ 1013.189884][T20209] debugfs: 'hsr0' already exists in 'hsr' [ 1013.202315][T20209] Cannot create hsr debugfs directory [ 1013.274096][T11368] Bluetooth: hci8: command tx timeout [ 1013.654232][T20241] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3385'. [ 1013.791141][T20209] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1013.819596][T20209] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1013.855099][T20209] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1013.901760][T20209] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1014.254185][T20209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.382328][T20209] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.418449][T11372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.425635][T11372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.471690][T11372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.478960][T11372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.922806][T20209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.356704][T11368] Bluetooth: hci8: command tx timeout [ 1015.384932][T20209] veth0_vlan: entered promiscuous mode [ 1015.405494][T20209] veth1_vlan: entered promiscuous mode [ 1015.476487][T20209] veth0_macvtap: entered promiscuous mode [ 1015.498143][T20209] veth1_macvtap: entered promiscuous mode [ 1015.545673][T20209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.577408][T20209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.607731][T11372] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.630787][T11372] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.655885][T11372] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.678832][T11372] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.876400][T13707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.909099][T13707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.966136][T13707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.985154][T13707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.492733][T20274] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3389'. [ 1016.560754][T20274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.600971][T20274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.647831][T20274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.687282][T20274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.002593][T20283] Invalid ELF header magic: != ELF [ 1017.438204][T11368] Bluetooth: hci8: command tx timeout [ 1018.117036][T20300] Invalid ELF header magic: != ELF [ 1018.405271][T20308] FAULT_INJECTION: forcing a failure. [ 1018.405271][T20308] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.437790][T20308] CPU: 0 UID: 0 PID: 20308 Comm: syz.8.3400 Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.437821][T20308] Tainted: [L]=SOFTLOCKUP [ 1018.437828][T20308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1018.437839][T20308] Call Trace: [ 1018.437846][T20308] [ 1018.437854][T20308] dump_stack_lvl+0x100/0x190 [ 1018.437887][T20308] should_fail_ex.cold+0x5/0xa [ 1018.437908][T20308] should_failslab+0xc2/0x120 [ 1018.437927][T20308] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1018.437949][T20308] ? __do_sys_getcwd+0xe5/0x960 [ 1018.437972][T20308] ? do_futex+0x192/0x350 [ 1018.438000][T20308] __do_sys_getcwd+0xe5/0x960 [ 1018.438027][T20308] ? __x64_sys_futex+0x34f/0x4d0 [ 1018.438050][T20308] ? __x64_sys_futex+0x358/0x4d0 [ 1018.438075][T20308] ? __pfx___do_sys_getcwd+0x10/0x10 [ 1018.438100][T20308] ? xfd_validate_state+0x129/0x190 [ 1018.438135][T20308] do_syscall_64+0x106/0xf80 [ 1018.438155][T20308] ? clear_bhb_loop+0x40/0x90 [ 1018.438179][T20308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.438198][T20308] RIP: 0033:0x7fd0bb39c629 [ 1018.438214][T20308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.438232][T20308] RSP: 002b:00007fd0b95f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 1018.438251][T20308] RAX: ffffffffffffffda RBX: 00007fd0bb615fa0 RCX: 00007fd0bb39c629 [ 1018.438263][T20308] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 1018.438274][T20308] RBP: 00007fd0bb432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1018.438285][T20308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.438296][T20308] R13: 00007fd0bb616038 R14: 00007fd0bb615fa0 R15: 00007ffe56c9ced8 [ 1018.438319][T20308] [ 1018.680046][T20313] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 1019.041237][T20318] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3402'. [ 1019.080716][T20316] bond0: invalid ARP target specified [ 1019.100913][T20318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.121528][T20318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.161121][T20318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.187908][T20318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.518266][T11368] Bluetooth: hci8: command tx timeout [ 1019.544760][T20326] .^: entered promiscuous mode [ 1019.994314][T11368] Bluetooth: hci8: unexpected event 0x1d length: 6 > 5 [ 1020.485423][T11368] Bluetooth: hci5: unexpected event 0x1d length: 6 > 5 [ 1022.808463][T11368] Bluetooth: hci5: unexpected subevent 0x01 length: 3 < 18 [ 1024.889516][T16439] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1024.902973][T16439] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1024.911141][T16439] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1024.919069][T16439] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1024.928564][T16439] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1025.397995][T20394] chnl_net:caif_netlink_parms(): no params data found [ 1025.574986][T20394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.582647][T20394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.591156][T20394] bridge_slave_0: entered allmulticast mode [ 1025.598467][T20394] bridge_slave_0: entered promiscuous mode [ 1025.611832][T20394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.619738][T20394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.627181][T20394] bridge_slave_1: entered allmulticast mode [ 1025.635125][T20394] bridge_slave_1: entered promiscuous mode [ 1025.674352][T20394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.686934][T20394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.721060][T20394] team0: Port device team_slave_0 added [ 1025.729546][T20394] team0: Port device team_slave_1 added [ 1025.763488][T20394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.771093][T20394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.800508][T20394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.813495][T20394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.823074][T20394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.851097][T20394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.901678][T20394] hsr_slave_0: entered promiscuous mode [ 1025.908443][T20394] hsr_slave_1: entered promiscuous mode [ 1025.916505][T20394] debugfs: 'hsr0' already exists in 'hsr' [ 1025.923202][T20394] Cannot create hsr debugfs directory [ 1026.112625][T20394] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1026.125516][T20394] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1026.137772][T20394] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1026.148926][T20394] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1026.191867][T20394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.199031][T20394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.206554][T20394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.213687][T20394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.291135][T20394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.307366][T11621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.317069][T11621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.334849][T20394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.349100][T20185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.356364][T20185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.395341][T20185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.402636][T20185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.623608][T20394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.860926][T20394] veth0_vlan: entered promiscuous mode [ 1026.874719][T20394] veth1_vlan: entered promiscuous mode [ 1026.915646][T20394] veth0_macvtap: entered promiscuous mode [ 1026.928359][T20394] veth1_macvtap: entered promiscuous mode [ 1026.947713][T20394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.960919][T16439] Bluetooth: hci9: command tx timeout [ 1026.973784][T20394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.994302][T20185] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.011843][T20185] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.077706][T13707] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.104040][T13707] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.146408][T20185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.162400][T20185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.209072][T11371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.217911][T11371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.393617][T20421] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1028.892962][T11368] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1028.906153][T11368] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1028.914872][T11368] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1028.923086][T11368] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1028.940576][T11368] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1029.042177][T11368] Bluetooth: hci9: command tx timeout [ 1029.230029][T20437] chnl_net:caif_netlink_parms(): no params data found [ 1029.423954][T20437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.447720][T20437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.471883][T20437] bridge_slave_0: entered allmulticast mode [ 1029.489415][T20437] bridge_slave_0: entered promiscuous mode [ 1029.506350][T20437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.526395][T20437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.544581][T20437] bridge_slave_1: entered allmulticast mode [ 1029.575327][T20437] bridge_slave_1: entered promiscuous mode [ 1029.686045][T20437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.713778][T20437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.784684][T20437] team0: Port device team_slave_0 added [ 1029.804790][T20437] team0: Port device team_slave_1 added [ 1029.839159][T20437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.847277][T20437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.881833][T20437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.895132][T20437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.903810][T20437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.933958][T20437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.011127][T20437] hsr_slave_0: entered promiscuous mode [ 1030.029561][T20437] hsr_slave_1: entered promiscuous mode [ 1030.052467][T20437] debugfs: 'hsr0' already exists in 'hsr' [ 1030.074729][T20437] Cannot create hsr debugfs directory [ 1030.393657][T20437] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.442547][T20458] futex_wake_op: syz.9.3431 tries to shift op by -2048; fix this program [ 1030.492945][T20437] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.581169][T20437] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.663056][T20437] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.692684][T20461] netlink: 338 bytes leftover after parsing attributes in process `syz.9.3432'. [ 1030.896293][T20437] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1030.922559][T20437] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1030.940026][T20437] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1030.966115][T20437] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1031.042748][T11368] Bluetooth: hci10: command tx timeout [ 1031.123965][T11368] Bluetooth: hci9: command tx timeout [ 1031.143860][T20437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.191263][T20437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.221380][T11371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.228600][T11371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.267913][T11371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.275083][T11371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.657153][T11368] Bluetooth: hci9: unexpected event 0x1d length: 6 > 5 [ 1031.703891][T20437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.824227][T20437] veth0_vlan: entered promiscuous mode [ 1031.857382][T20437] veth1_vlan: entered promiscuous mode [ 1032.019493][T20437] veth0_macvtap: entered promiscuous mode [ 1032.058174][T20437] veth1_macvtap: entered promiscuous mode [ 1032.126973][T20437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.148424][T20437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.180538][T13707] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.202019][T13707] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.228091][T13707] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.258449][T13707] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.395043][T13707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.443413][T13707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.506298][T20185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.526561][T20185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.701746][T20488] netlink: 346 bytes leftover after parsing attributes in process `syz.9.3435'. [ 1032.773398][T20487] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1033.123851][T11368] Bluetooth: hci10: command tx timeout [ 1033.203678][T11368] Bluetooth: hci9: command tx timeout [ 1034.395392][T11368] Bluetooth: hci10: unexpected event 0x1d length: 6 > 5 [ 1034.780002][ T29] audit: type=1326 audit(1771765541.786:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20519 comm="syz.9.3444" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3e3f9c629 code=0x0 [ 1034.867059][T20523] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1034.867059][T20523] The task syz.9.3444 (20523) triggered the difference, watch for misbehavior. [ 1035.204303][T11368] Bluetooth: hci10: command tx timeout [ 1037.286695][T11368] Bluetooth: hci10: command tx timeout [ 1038.416348][T16439] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1038.427082][T16439] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1038.435933][T16439] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1038.447846][T16439] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1038.465597][T16439] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1039.041148][T16439] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1039.057195][T16439] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1039.065940][T16439] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1039.076884][T16439] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1039.084445][T16439] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1039.119942][T20578] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3457'. [ 1039.183483][T20578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.210495][T20578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.229229][T20578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.246152][T20578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.749363][T20567] chnl_net:caif_netlink_parms(): no params data found [ 1040.004303][T20567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.023496][T20567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.044006][T20567] bridge_slave_0: entered allmulticast mode [ 1040.060631][T20567] bridge_slave_0: entered promiscuous mode [ 1040.083237][T20567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.149724][T20567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.186590][T20567] bridge_slave_1: entered allmulticast mode [ 1040.212219][T20567] bridge_slave_1: entered promiscuous mode [ 1040.249572][T20577] chnl_net:caif_netlink_parms(): no params data found [ 1040.381611][T20567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.461830][T20567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.566974][T16439] Bluetooth: hci11: command tx timeout [ 1040.600298][T20567] team0: Port device team_slave_0 added [ 1040.670981][T20567] team0: Port device team_slave_1 added [ 1040.795613][T20567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.821643][T20567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.880004][T20567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.915751][T20577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.939543][T20577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.958200][T20577] bridge_slave_0: entered allmulticast mode [ 1040.978948][T20577] bridge_slave_0: entered promiscuous mode [ 1040.999228][T20567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.006394][T20567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.078554][T20567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.114995][T20577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.134205][T16439] Bluetooth: hci12: command tx timeout [ 1041.153335][T20577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.166459][T20577] bridge_slave_1: entered allmulticast mode [ 1041.181666][T20577] bridge_slave_1: entered promiscuous mode [ 1041.356254][T20577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.399885][T20577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.581066][T20567] hsr_slave_0: entered promiscuous mode [ 1041.613899][T20567] hsr_slave_1: entered promiscuous mode [ 1041.628301][T20567] debugfs: 'hsr0' already exists in 'hsr' [ 1041.654990][T20567] Cannot create hsr debugfs directory [ 1041.717871][T20577] team0: Port device team_slave_0 added [ 1041.742379][T20621] tipc: Started in network mode [ 1041.783469][T20621] tipc: Node identity ee00, cluster identity 4711 [ 1041.793568][T20621] tipc: Node number set to 60928 [ 1041.814097][T20577] team0: Port device team_slave_1 added [ 1041.911813][T20577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.939695][T20577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.043955][T20577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.112374][T20577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.127413][T20577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.184997][T20577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.313794][T20577] hsr_slave_0: entered promiscuous mode [ 1042.331468][T20577] hsr_slave_1: entered promiscuous mode [ 1042.345866][T20577] debugfs: 'hsr0' already exists in 'hsr' [ 1042.366869][T20577] Cannot create hsr debugfs directory [ 1042.493370][T20631] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3468'. [ 1042.525652][T20631] mac80211_hwsim hwsim64 wlan1: entered promiscuous mode [ 1042.534275][T20631] mac80211_hwsim hwsim64 wlan1: entered allmulticast mode [ 1042.648336][T16439] Bluetooth: hci11: command tx timeout [ 1042.781755][T20567] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.987471][T20567] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.028233][T20638] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3470'. [ 1043.093001][T20567] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.170997][T20567] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.208133][T16439] Bluetooth: hci12: command tx timeout [ 1043.501149][T20648] netlink: Unknown NAT attribute (type=262, max=9) [ 1043.534137][T20567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1043.563780][T20567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1043.611148][T20567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1043.702923][T20577] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.762357][T20567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1043.832134][T20577] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.938912][T20577] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.041897][T20577] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.624785][T20567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.723180][T20567] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.730165][T16439] Bluetooth: hci11: command tx timeout [ 1044.764479][T20577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1044.789131][T11371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.796391][T11371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.834110][T20577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1044.854407][T11371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.861832][T11371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.892627][T20577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1044.937121][T20577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1045.289688][T16439] Bluetooth: hci12: command tx timeout [ 1045.487416][T20577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.658348][T20577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.712351][T20567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.785102][T11367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.792425][T11367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.846321][T11367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.853693][T11367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.279231][T20567] veth0_vlan: entered promiscuous mode [ 1046.326361][T20567] veth1_vlan: entered promiscuous mode [ 1046.485840][T20567] veth0_macvtap: entered promiscuous mode [ 1046.545243][T20567] veth1_macvtap: entered promiscuous mode [ 1046.606838][T20567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.705274][T20567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.810170][T16439] Bluetooth: hci11: command tx timeout [ 1046.830659][T11621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.864947][T11621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.923160][T11621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.978591][T11621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.144040][T20577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.370510][T16439] Bluetooth: hci12: command tx timeout [ 1047.504660][T11372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.564566][T11372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.692406][T20577] veth0_vlan: entered promiscuous mode [ 1047.712642][T11367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.740648][T11367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.780034][T20577] veth1_vlan: entered promiscuous mode [ 1047.971825][T20718] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 1048.165194][T20577] veth0_macvtap: entered promiscuous mode [ 1048.292381][T20577] veth1_macvtap: entered promiscuous mode [ 1048.382694][T20577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1048.449802][T20577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.540103][T11621] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.566408][T11621] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.683880][T11621] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.720446][T11621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.359221][T11621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.386701][T11621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.698860][T20743] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3489'. [ 1049.714782][T11621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.775448][T11621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.044584][T20751] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3492'. [ 1050.798856][T20767] FAULT_INJECTION: forcing a failure. [ 1050.798856][T20767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1050.846899][T20767] CPU: 0 UID: 0 PID: 20767 Comm: syz.0.3497 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.846931][T20767] Tainted: [L]=SOFTLOCKUP [ 1050.846939][T20767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1050.846950][T20767] Call Trace: [ 1050.846958][T20767] [ 1050.846965][T20767] dump_stack_lvl+0x100/0x190 [ 1050.846998][T20767] should_fail_ex.cold+0x5/0xa [ 1050.847020][T20767] _copy_to_iter+0x1f3/0x1720 [ 1050.847051][T20767] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 1050.847083][T20767] ? __pfx__copy_to_iter+0x10/0x10 [ 1050.847110][T20767] ? kasan_quarantine_put+0x104/0x240 [ 1050.847136][T20767] ? lockdep_hardirqs_on+0x78/0x100 [ 1050.847159][T20767] ? __skb_recv_datagram+0x1b2/0x220 [ 1050.847193][T20767] simple_copy_to_iter+0x46/0x90 [ 1050.847221][T20767] __skb_datagram_iter+0x129/0x900 [ 1050.847247][T20767] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1050.847278][T20767] ? skb_recv_datagram+0x88/0xc0 [ 1050.847309][T20767] skb_copy_datagram_iter+0xa1/0x270 [ 1050.847339][T20767] netlink_recvmsg+0x27e/0xa90 [ 1050.847371][T20767] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1050.847392][T20767] ? __fget_files+0x215/0x3d0 [ 1050.847419][T20767] ? __fget_files+0x215/0x3d0 [ 1050.847450][T20767] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1050.847480][T20767] sock_recvmsg+0x1f9/0x250 [ 1050.847506][T20767] __sys_recvfrom+0x200/0x300 [ 1050.847527][T20767] ? __pfx___sys_recvfrom+0x10/0x10 [ 1050.847554][T20767] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1050.847583][T20767] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1050.847628][T20767] __x64_sys_recvfrom+0xe0/0x1c0 [ 1050.847647][T20767] ? do_syscall_64+0x95/0xf80 [ 1050.847666][T20767] ? lockdep_hardirqs_on+0x78/0x100 [ 1050.847686][T20767] do_syscall_64+0x106/0xf80 [ 1050.847704][T20767] ? clear_bhb_loop+0x40/0x90 [ 1050.847727][T20767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.847746][T20767] RIP: 0033:0x7f621755cece [ 1050.847762][T20767] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1050.847780][T20767] RSP: 002b:00007f62183d2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1050.847798][T20767] RAX: ffffffffffffffda RBX: 00007f62183d46c0 RCX: 00007f621755cece [ 1050.847811][T20767] RDX: 0000000000001000 RSI: 00007f62183d3000 RDI: 0000000000000005 [ 1050.847822][T20767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1050.847832][T20767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1050.847848][T20767] R13: 00007f62183d2f58 R14: 00007f62183d3000 R15: 0000000000000000 [ 1050.847872][T20767] [ 1051.965284][T20795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3505'. [ 1052.047396][T20797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3506'. [ 1052.071630][T20795] mac80211_hwsim hwsim66 wlan1: entered promiscuous mode [ 1052.140979][T20795] mac80211_hwsim hwsim66 wlan1: entered allmulticast mode [ 1052.206831][T20797] veth0_macvtap: left promiscuous mode [ 1052.271888][T20797] macvtap0: entered promiscuous mode [ 1052.278563][T20797] macvtap0: entered allmulticast mode [ 1053.551351][T20820] Invalid ELF header magic: != ELF [ 1054.850594][T20840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3516'. [ 1054.907789][T20840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.937047][T20840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.014281][T20840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.047965][T20840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.232171][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.246931][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.685554][T20856] futex_wake_op: syz.3.3518 tries to shift op by -2048; fix this program [ 1055.822251][T20856] futex_wake_op: syz.3.3518 tries to shift op by -2048; fix this program [ 1056.039991][T20868] netlink: 29 bytes leftover after parsing attributes in process `syz.1.3523'. [ 1056.349191][T20870] Invalid ELF header magic: != ELF [ 1057.123694][T20890] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3529'. [ 1058.957433][T20932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3537'. [ 1059.192961][ T29] audit: type=1326 audit(1771765566.184:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20933 comm="syz.9.3538" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3e3f9c629 code=0x0 [ 1059.688479][T20940] FAULT_INJECTION: forcing a failure. [ 1059.688479][T20940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.737701][T20940] CPU: 0 UID: 0 PID: 20940 Comm: syz.0.3540 Tainted: G L syzkaller #0 PREEMPT(full) [ 1059.737734][T20940] Tainted: [L]=SOFTLOCKUP [ 1059.737741][T20940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1059.737752][T20940] Call Trace: [ 1059.737759][T20940] [ 1059.737767][T20940] dump_stack_lvl+0x100/0x190 [ 1059.737798][T20940] should_fail_ex.cold+0x5/0xa [ 1059.737820][T20940] _copy_to_iter+0x1f3/0x1720 [ 1059.737850][T20940] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 1059.737882][T20940] ? __pfx__copy_to_iter+0x10/0x10 [ 1059.737908][T20940] ? kasan_quarantine_put+0x104/0x240 [ 1059.737934][T20940] ? lockdep_hardirqs_on+0x78/0x100 [ 1059.737958][T20940] ? __skb_recv_datagram+0x1b2/0x220 [ 1059.737997][T20940] simple_copy_to_iter+0x46/0x90 [ 1059.738025][T20940] __skb_datagram_iter+0x129/0x900 [ 1059.738052][T20940] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1059.738083][T20940] ? skb_recv_datagram+0x88/0xc0 [ 1059.738121][T20940] skb_copy_datagram_iter+0xa1/0x270 [ 1059.738152][T20940] netlink_recvmsg+0x27e/0xa90 [ 1059.738176][T20940] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1059.738196][T20940] ? __fget_files+0x215/0x3d0 [ 1059.738223][T20940] ? __fget_files+0x215/0x3d0 [ 1059.738254][T20940] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1059.738283][T20940] sock_recvmsg+0x1f9/0x250 [ 1059.738309][T20940] __sys_recvfrom+0x200/0x300 [ 1059.738329][T20940] ? __pfx___sys_recvfrom+0x10/0x10 [ 1059.738355][T20940] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1059.738385][T20940] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1059.738430][T20940] __x64_sys_recvfrom+0xe0/0x1c0 [ 1059.738449][T20940] ? do_syscall_64+0x95/0xf80 [ 1059.738469][T20940] ? lockdep_hardirqs_on+0x78/0x100 [ 1059.738489][T20940] do_syscall_64+0x106/0xf80 [ 1059.738508][T20940] ? clear_bhb_loop+0x40/0x90 [ 1059.738530][T20940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.738549][T20940] RIP: 0033:0x7f621755cece [ 1059.738566][T20940] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1059.738584][T20940] RSP: 002b:00007f62183d2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1059.738602][T20940] RAX: ffffffffffffffda RBX: 00007f62183d46c0 RCX: 00007f621755cece [ 1059.738614][T20940] RDX: 0000000000001000 RSI: 00007f62183d3000 RDI: 0000000000000005 [ 1059.738626][T20940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1059.738637][T20940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1059.738648][T20940] R13: 00007f62183d2f58 R14: 00007f62183d3000 R15: 0000000000000000 [ 1059.738671][T20940] [ 1060.604491][T20960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3547'. [ 1061.231774][ T29] audit: type=1326 audit(1771765568.223:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20974 comm="syz.0.3552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f621759c629 code=0x0 [ 1061.502826][T20982] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3553'. [ 1065.579766][T21041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3569'. [ 1068.017031][T21066] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3575'. [ 1068.097385][T21066] veth0_macvtap: left promiscuous mode [ 1068.118651][T21066] macvtap0: entered promiscuous mode [ 1068.154575][T21066] macvtap0: entered allmulticast mode [ 1068.736783][T21076] Invalid ELF header magic: != ELF [ 1069.355594][T21084] netlink: 342 bytes leftover after parsing attributes in process `syz.9.3581'. [ 1069.574191][T21082] netlink: 'syz.0.3580': attribute type 23 has an invalid length. [ 1069.664014][T21090] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3582'. [ 1069.985615][T21093] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3583'. [ 1070.020114][T21095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3584'. [ 1070.111917][T21095] veth0_macvtap: left promiscuous mode [ 1070.141540][T21095] macvtap0: entered promiscuous mode [ 1070.150660][T21095] macvtap0: entered allmulticast mode [ 1070.298810][T21101] futex_wake_op: syz.1.3585 tries to shift op by -2048; fix this program [ 1070.327430][T21105] zswap: compressor not available [ 1070.484830][T21101] futex_wake_op: syz.1.3585 tries to shift op by -2048; fix this program [ 1071.726231][T21128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3591'. [ 1072.644902][T21138] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3594'. [ 1073.027537][T21146] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3595'. [ 1073.094920][T21146] netlink: 'syz.9.3595': attribute type 14 has an invalid length. [ 1073.117693][T21146] netlink: 330 bytes leftover after parsing attributes in process `syz.9.3595'. [ 1075.302572][T11368] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1075.315355][T11368] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1075.334424][T11368] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1075.348742][T11368] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1075.356919][T11368] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1076.306255][T11368] Bluetooth: hci10: unexpected event 0x1d length: 6 > 5 [ 1076.635594][T21207] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3611'. [ 1076.709446][T21188] chnl_net:caif_netlink_parms(): no params data found [ 1077.135600][T21188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.166916][T21188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.191590][T21188] bridge_slave_0: entered allmulticast mode [ 1077.212984][T21188] bridge_slave_0: entered promiscuous mode [ 1077.286963][T21188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.325292][T21188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.349097][T21188] bridge_slave_1: entered allmulticast mode [ 1077.370389][T21188] bridge_slave_1: entered promiscuous mode [ 1077.465994][T11368] Bluetooth: hci13: command tx timeout [ 1077.558838][T21188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.613648][T21188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.961610][T21188] team0: Port device team_slave_0 added [ 1077.996212][T21188] team0: Port device team_slave_1 added [ 1078.143441][T21188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.176633][T21188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.341794][T21188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.426404][T21188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.463882][T21188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.574506][T21188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.971635][T21188] hsr_slave_0: entered promiscuous mode [ 1078.992690][T21188] hsr_slave_1: entered promiscuous mode [ 1079.015626][T21188] debugfs: 'hsr0' already exists in 'hsr' [ 1079.028410][T21247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3622'. [ 1079.048761][T21188] Cannot create hsr debugfs directory [ 1079.555513][T11368] Bluetooth: hci13: command tx timeout [ 1079.881415][T21188] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.968851][T21260] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3627'. [ 1080.106100][T21188] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.270865][T21188] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.477940][T21188] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.001584][T21188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1081.068706][T21188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1081.143765][T21188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1081.229431][T21188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1081.563098][T21188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.635227][T21188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.646773][T11368] Bluetooth: hci13: command tx timeout [ 1081.720081][T11372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.727289][T11372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.819375][T11372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.826499][T11372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.839255][T21294] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3634'. [ 1081.954972][T21188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1082.016016][T21297] Invalid ELF header magic: != ELF [ 1082.596773][T21188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.781961][T21188] veth0_vlan: entered promiscuous mode [ 1082.834478][T21188] veth1_vlan: entered promiscuous mode [ 1082.936580][T21188] veth0_macvtap: entered promiscuous mode [ 1083.007501][T21188] veth1_macvtap: entered promiscuous mode [ 1083.101518][T21188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.160316][T21188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.253423][T11371] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.276939][T11371] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.380304][T11371] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.413541][T11371] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.709643][T11368] Bluetooth: hci13: command tx timeout [ 1083.802723][T20185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.835713][T20185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.989507][T11621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.997357][T11621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.368575][T21327] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 1085.957235][T21346] netlink: 'syz.0.3644': attribute type 3 has an invalid length. [ 1085.976890][T21346] netlink: 'syz.0.3644': attribute type 9 has an invalid length. [ 1086.043498][T21332] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1086.825183][T21357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3647'. [ 1086.905729][T21357] mac80211_hwsim hwsim71 wlan1: entered promiscuous mode [ 1086.934906][T21357] mac80211_hwsim hwsim71 wlan1: entered allmulticast mode [ 1087.688461][T21323] kexec: Could not allocate control_code_buffer [ 1092.115881][T21411] bond0: invalid ARP target specified [ 1092.449398][T21416] Invalid ELF header magic: != ELF [ 1092.477191][T21418] FAULT_INJECTION: forcing a failure. [ 1092.477191][T21418] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.525839][T21418] CPU: 0 UID: 0 PID: 21418 Comm: syz.2.3659 Tainted: G L syzkaller #0 PREEMPT(full) [ 1092.525870][T21418] Tainted: [L]=SOFTLOCKUP [ 1092.525878][T21418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1092.525889][T21418] Call Trace: [ 1092.525896][T21418] [ 1092.525904][T21418] dump_stack_lvl+0x100/0x190 [ 1092.525936][T21418] should_fail_ex.cold+0x5/0xa [ 1092.525957][T21418] ? fib_default_rule_add+0x4f/0x420 [ 1092.525980][T21418] should_failslab+0xc2/0x120 [ 1092.525998][T21418] __kmalloc_noprof+0xe0/0x850 [ 1092.526030][T21418] fib_default_rule_add+0x4f/0x420 [ 1092.526055][T21418] fib4_rules_init+0x52/0x1c0 [ 1092.526083][T21418] fib_net_init+0x1dc/0x3f0 [ 1092.526103][T21418] ? is_module_address+0x69/0xf0 [ 1092.526127][T21418] ? __pfx_fib_net_init+0x10/0x10 [ 1092.526149][T21418] ? timer_init_key+0x150/0x340 [ 1092.526172][T21418] ? devinet_init_net+0x56c/0x8d0 [ 1092.526200][T21418] ? __pfx_fib_net_init+0x10/0x10 [ 1092.526221][T21418] ops_init+0x1e2/0x5f0 [ 1092.526245][T21418] setup_net+0x118/0x3a0 [ 1092.526267][T21418] ? __pfx_setup_net+0x10/0x10 [ 1092.526287][T21418] ? lockdep_init_map_type+0x5c/0x250 [ 1092.526318][T21418] ? mutex_init_lockep+0x110/0x150 [ 1092.526347][T21418] copy_net_ns+0x46f/0x7c0 [ 1092.526373][T21418] create_new_namespaces+0x3ea/0xac0 [ 1092.526398][T21418] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1092.526420][T21418] ksys_unshare+0x455/0xab0 [ 1092.526444][T21418] ? __pfx_ksys_unshare+0x10/0x10 [ 1092.526476][T21418] __x64_sys_unshare+0x31/0x40 [ 1092.526499][T21418] do_syscall_64+0x106/0xf80 [ 1092.526519][T21418] ? clear_bhb_loop+0x40/0x90 [ 1092.526542][T21418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.526561][T21418] RIP: 0033:0x7fddb0b9c629 [ 1092.526578][T21418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.526596][T21418] RSP: 002b:00007fddaedd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1092.526616][T21418] RAX: ffffffffffffffda RBX: 00007fddb0e16090 RCX: 00007fddb0b9c629 [ 1092.526628][T21418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1092.526639][T21418] RBP: 00007fddb0c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1092.526650][T21418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.526661][T21418] R13: 00007fddb0e16128 R14: 00007fddb0e16090 R15: 00007ffcadbf49e8 [ 1092.526686][T21418] [ 1093.465382][T21424] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3661'. [ 1094.788132][T21430] netlink: 'syz.9.3663': attribute type 23 has an invalid length. [ 1095.361804][T21449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3667'. [ 1095.398783][T21449] veth1_macvtap: left promiscuous mode [ 1096.415330][T21474] ptp ptp0: new virtual clock ptp1 [ 1096.443682][T21474] ptp ptp0: guarantee physical clock free running [ 1096.497746][T21477] ptp ptp0: guarantee physical clock free running [ 1096.718117][T21480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3675'. [ 1096.971956][ T29] audit: type=1326 audit(1771765603.945:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21482 comm="syz.0.3676" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f621759c629 code=0x0 [ 1097.051364][T21484] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1097.441957][ T29] audit: type=1326 audit(1771765604.415:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21487 comm="syz.2.3677" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fddb0b9c629 code=0x0 [ 1097.901626][T21498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3679'. [ 1099.569531][T21519] netlink: zone id is out of range [ 1099.574777][T21519] netlink: zone id is out of range [ 1099.657531][T21519] netlink: 'syz.0.3684': attribute type 1 has an invalid length. [ 1100.187220][T21531] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1100.198066][T21531] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1100.206508][T21531] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1100.217089][T21531] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1100.225620][T21531] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1101.236687][T21530] chnl_net:caif_netlink_parms(): no params data found [ 1101.598977][T21530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.636278][T21530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.675336][T21530] bridge_slave_0: entered allmulticast mode [ 1101.699727][T21530] bridge_slave_0: entered promiscuous mode [ 1101.736876][T21530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.826464][T21530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.844524][T21530] bridge_slave_1: entered allmulticast mode [ 1101.916044][T21530] bridge_slave_1: entered promiscuous mode [ 1101.955856][T21557] tipc: Started in network mode [ 1102.037464][T21557] tipc: Node identity ee00, cluster identity 4711 [ 1102.061881][T21565] futex_wake_op: syz.9.3693 tries to shift op by -2048; fix this program [ 1102.102597][T21565] futex_wake_op: syz.9.3693 tries to shift op by -2048; fix this program [ 1102.126355][T21557] tipc: Node number set to 60928 [ 1102.278578][T21531] Bluetooth: hci11: command tx timeout [ 1102.313993][T21530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.379736][T21530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.560560][T21530] team0: Port device team_slave_0 added [ 1102.591158][T21530] team0: Port device team_slave_1 added [ 1102.737088][T21530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.781499][T21530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.881501][T21530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.947227][T21530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.987369][T21530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.140569][T21530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.317762][T21584] Invalid ELF header magic: != ELF [ 1103.709328][T21530] hsr_slave_0: entered promiscuous mode [ 1103.740058][T21530] hsr_slave_1: entered promiscuous mode [ 1103.768662][T21530] debugfs: 'hsr0' already exists in 'hsr' [ 1103.787044][T21530] Cannot create hsr debugfs directory [ 1104.359910][T21531] Bluetooth: hci11: command tx timeout [ 1104.366971][T21597] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3701'. [ 1104.654523][T21530] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.811988][T21599] bond0: invalid ARP target specified [ 1104.927185][T21530] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.115543][T21530] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.224472][T21530] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.608799][T21530] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1105.652568][T21616] Invalid ELF header magic: != ELF [ 1105.737680][T21530] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1105.854716][T21530] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1105.967349][T21530] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1106.051389][T21624] netlink: 62 bytes leftover after parsing attributes in process `syz.9.3709'. [ 1106.334580][T21530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.418419][T21530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.444247][T21531] Bluetooth: hci11: command tx timeout [ 1106.502956][T11372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.510146][T11372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.541723][T11372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.548920][T11372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.332646][T21652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3714'. [ 1107.521047][T21530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.522003][T21531] Bluetooth: hci11: command tx timeout [ 1108.719969][T21688] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3723'. [ 1108.779313][T21688] bridge0: entered promiscuous mode [ 1108.791568][T21688] bridge0: entered allmulticast mode [ 1109.046621][T21530] veth0_vlan: entered promiscuous mode [ 1109.213593][T21530] veth1_vlan: entered promiscuous mode [ 1109.347245][T21530] veth0_macvtap: entered promiscuous mode [ 1109.404149][T21530] veth1_macvtap: entered promiscuous mode [ 1109.470338][T21530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.523187][T21530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.623102][T13707] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.686893][T13707] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.844876][T13707] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.878579][T13707] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.545467][T11371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.611143][T11371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.768234][T11371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.822167][T11371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.792435][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3728'. [ 1112.335765][T21720] netlink: 2468 bytes leftover after parsing attributes in process `syz.9.3729'. [ 1112.862761][T21734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3734'. [ 1114.266397][T21768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3742'. [ 1114.334504][T21768] mac80211_hwsim hwsim79 wlan1: entered promiscuous mode [ 1114.381884][T21768] mac80211_hwsim hwsim79 wlan1: entered allmulticast mode [ 1116.713189][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.727606][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.413405][ T29] audit: type=1326 audit(1771765625.374:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21823 comm="syz.4.3756" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c2a59c629 code=0x0 [ 1118.846045][T21806] Bluetooth: hci3: command 0x0406 tx timeout [ 1118.852224][T16439] Bluetooth: hci5: command 0x0406 tx timeout [ 1118.858456][T11368] Bluetooth: hci6: command 0x0406 tx timeout [ 1118.864656][T21531] Bluetooth: hci7: command 0x0406 tx timeout [ 1120.182238][T21863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3764'. [ 1120.485808][T21863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.562645][T21863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.677938][T21863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.737527][T21863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.610388][T21886] Invalid ELF header magic: != ELF [ 1122.932624][ T29] audit: type=1326 audit(1771765629.892:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.0.3777" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f621759c629 code=0x0 [ 1124.164844][T21928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3780'. [ 1124.222379][T21928] ipvlan0: entered promiscuous mode [ 1124.228057][T21928] ipvlan0: entered allmulticast mode [ 1124.324568][T21928] veth0_vlan: entered allmulticast mode [ 1125.119363][T21941] FAULT_INJECTION: forcing a failure. [ 1125.119363][T21941] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1125.202757][T21941] CPU: 0 UID: 0 PID: 21941 Comm: syz.2.3784 Tainted: G L syzkaller #0 PREEMPT(full) [ 1125.202791][T21941] Tainted: [L]=SOFTLOCKUP [ 1125.202807][T21941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1125.202818][T21941] Call Trace: [ 1125.202826][T21941] [ 1125.202834][T21941] dump_stack_lvl+0x100/0x190 [ 1125.202866][T21941] should_fail_ex.cold+0x5/0xa [ 1125.202885][T21941] ? prepare_alloc_pages+0x16d/0x5f0 [ 1125.202908][T21941] should_fail_alloc_page+0xeb/0x140 [ 1125.202928][T21941] prepare_alloc_pages+0x1f0/0x5f0 [ 1125.202948][T21941] ? rcu_is_watching+0x12/0xc0 [ 1125.202979][T21941] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1125.203006][T21941] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1125.203034][T21941] ? __pfx_css_rstat_updated+0x10/0x10 [ 1125.203064][T21941] ? find_held_lock+0x2b/0x80 [ 1125.203080][T21941] ? rcu_read_unlock+0x17/0x60 [ 1125.203099][T21941] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1125.203125][T21941] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1125.203150][T21941] ? page_counter_charge+0x1d2/0x240 [ 1125.203173][T21941] ? rcu_is_watching+0x12/0xc0 [ 1125.203200][T21941] ? trace_mm_page_alloc+0x17a/0x1d0 [ 1125.203229][T21941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1125.203261][T21941] ? policy_nodemask+0xed/0x4f0 [ 1125.203281][T21941] alloc_pages_mpol+0x1fb/0x550 [ 1125.203307][T21941] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1125.203325][T21941] ? do_raw_spin_lock+0x128/0x260 [ 1125.203351][T21941] ? find_held_lock+0x2b/0x80 [ 1125.203367][T21941] ? __pud_alloc+0x575/0x760 [ 1125.203389][T21941] alloc_pages_noprof+0x131/0x390 [ 1125.203409][T21941] __pmd_alloc+0x3b/0x9c0 [ 1125.203428][T21941] ? __pud_alloc+0x57a/0x760 [ 1125.203449][T21941] walk_to_pmd+0x3a3/0x4c0 [ 1125.203471][T21941] get_locked_pte+0x25/0xc0 [ 1125.203493][T21941] map_ldt_struct+0x3c1/0xa70 [ 1125.203519][T21941] ? __pfx_map_ldt_struct+0x10/0x10 [ 1125.203537][T21941] ? alloc_pages_noprof+0x233/0x390 [ 1125.203560][T21941] write_ldt+0x6d3/0xd40 [ 1125.203581][T21941] ? __pfx_write_ldt+0x10/0x10 [ 1125.203600][T21941] ? xfd_validate_state+0x129/0x190 [ 1125.203634][T21941] __x64_sys_modify_ldt+0xb1/0x170 [ 1125.203653][T21941] do_syscall_64+0x106/0xf80 [ 1125.203675][T21941] ? clear_bhb_loop+0x40/0x90 [ 1125.203698][T21941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.203717][T21941] RIP: 0033:0x7fddb0b9c629 [ 1125.203734][T21941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.203753][T21941] RSP: 002b:00007fddaedf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1125.203772][T21941] RAX: ffffffffffffffda RBX: 00007fddb0e15fa0 RCX: 00007fddb0b9c629 [ 1125.203784][T21941] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001 [ 1125.203802][T21941] RBP: 00007fddb0c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1125.203814][T21941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.203825][T21941] R13: 00007fddb0e16038 R14: 00007fddb0e15fa0 R15: 00007ffcadbf49e8 [ 1125.203850][T21941] [ 1126.827353][T21951] Invalid ELF header magic: != ELF [ 1126.947762][ T30] INFO: task syz.3.3338:19915 blocked for more than 143 seconds. [ 1126.983471][ T30] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1127.026363][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1127.103905][ T30] task:syz.3.3338 state:D stack:27336 pid:19915 tgid:19914 ppid:16619 task_flags:0x400140 flags:0x00080002 [ 1127.196718][ T30] Call Trace: [ 1127.220714][ T30] [ 1127.239897][ T30] __schedule+0xfee/0x60e0 [ 1127.244357][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1127.305398][ T30] ? __pfx___schedule+0x10/0x10 [ 1127.340014][ T30] ? find_held_lock+0x2b/0x80 [ 1127.344741][ T30] ? schedule+0x2bf/0x390 [ 1127.349109][ T30] schedule+0xdd/0x390 [ 1127.436406][ T30] schedule_preempt_disabled+0x13/0x30 [ 1127.509475][ T30] __mutex_lock+0xc9a/0x1b90 [ 1127.556223][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1127.621041][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1127.626119][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1127.686090][ T30] ? net_generic+0xea/0x2a0 [ 1127.710042][ T30] ? net_generic+0xea/0x2a0 [ 1127.714688][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1127.780136][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 1127.785307][ T30] nfsd_umount+0x3b/0x60 [ 1127.789565][ T30] deactivate_locked_super+0xc1/0x1b0 [ 1127.859473][ T30] deactivate_super+0xe7/0x110 [ 1127.880249][ T30] cleanup_mnt+0x21f/0x450 [ 1127.884712][ T30] task_work_run+0x150/0x240 [ 1127.889320][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1127.930150][ T30] ? __x64_sys_mount+0x23e/0x310 [ 1127.935138][ T30] exit_to_user_mode_loop+0x100/0x4a0 [ 1127.964860][ T30] do_syscall_64+0x668/0xf80 [ 1127.969504][ T30] ? clear_bhb_loop+0x40/0x90 [ 1128.000266][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.030251][ T30] RIP: 0033:0x7ffb0cd9c629 [ 1128.034718][ T30] RSP: 002b:00007ffb0dcd0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1128.081937][ T30] RAX: fffffffffffffffe RBX: 00007ffb0d015fa0 RCX: 00007ffb0cd9c629 [ 1128.090042][ T30] RDX: 0000200000000140 RSI: 0000200000000280 RDI: 0000000000000000 [ 1128.101055][ T30] RBP: 00007ffb0ce32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1128.116110][ T30] R10: 00000000000000d3 R11: 0000000000000246 R12: 0000000000000000 [ 1128.124662][ T30] R13: 00007ffb0d016038 R14: 00007ffb0d015fa0 R15: 00007ffeca8c50b8 [ 1128.134454][ T30] [ 1128.271127][ T30] INFO: task syz.0.3349:19964 blocked for more than 144 seconds. [ 1128.278886][ T30] Tainted: G L syzkaller #0 [ 1128.390426][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1128.399134][ T30] task:syz.0.3349 state:D stack:26832 pid:19964 tgid:19963 ppid:16437 task_flags:0x400140 flags:0x00080006 [ 1128.561799][ T30] Call Trace: [ 1128.565122][ T30] [ 1128.568168][ T30] __schedule+0xfee/0x60e0 [ 1128.630631][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1128.635717][ T30] ? __pfx___schedule+0x10/0x10 [ 1128.690866][ T30] ? find_held_lock+0x2b/0x80 [ 1128.695590][ T30] ? schedule+0x2bf/0x390 [ 1128.699930][ T30] schedule+0xdd/0x390 [ 1128.770629][ T30] schedule_preempt_disabled+0x13/0x30 [ 1128.776132][ T30] __mutex_lock+0xc9a/0x1b90 [ 1128.840624][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1128.845955][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1128.900662][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1128.905743][ T30] ? net_generic+0xea/0x2a0 [ 1128.910310][ T30] ? net_generic+0xea/0x2a0 [ 1128.969579][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1128.977232][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 1128.982893][ T30] nfsd_umount+0x3b/0x60 [ 1128.987335][ T30] deactivate_locked_super+0xc1/0x1b0 [ 1128.994389][ T30] deactivate_super+0xe7/0x110 [ 1128.999177][ T30] cleanup_mnt+0x21f/0x450 [ 1129.003974][ T30] task_work_run+0x150/0x240 [ 1129.008587][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1129.014316][ T30] ? __x64_sys_mount+0x23e/0x310 [ 1129.019271][ T30] exit_to_user_mode_loop+0x100/0x4a0 [ 1129.024958][ T30] do_syscall_64+0x668/0xf80 [ 1129.039032][ T30] ? clear_bhb_loop+0x40/0x90 [ 1129.044935][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.051118][ T30] RIP: 0033:0x7fb28c59c629 [ 1129.055537][ T30] RSP: 002b:00007fb28d37b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1129.064321][ T30] RAX: fffffffffffffffe RBX: 00007fb28c815fa0 RCX: 00007fb28c59c629 [ 1129.072709][ T30] RDX: 0000200000000140 RSI: 0000200000000280 RDI: 0000000000000000 [ 1129.082637][ T30] RBP: 00007fb28c632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1129.096417][ T30] R10: 00000000000000d3 R11: 0000000000000246 R12: 0000000000000000 [ 1129.106235][ T30] R13: 00007fb28c816038 R14: 00007fb28c815fa0 R15: 00007ffe6f542638 [ 1129.114439][ T30] [ 1129.182248][ T30] INFO: task syz.2.3350:19967 blocked for more than 145 seconds. [ 1129.190017][ T30] Tainted: G L syzkaller #0 [ 1129.205904][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1129.216288][ T30] task:syz.2.3350 state:D stack:26896 pid:19967 tgid:19966 ppid:15599 task_flags:0x400140 flags:0x00080006 [ 1129.228444][ T30] Call Trace: [ 1129.241006][ T30] [ 1129.243980][ T30] __schedule+0xfee/0x60e0 [ 1129.248404][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1129.263306][ T30] ? __pfx___schedule+0x10/0x10 [ 1129.268190][ T30] ? find_held_lock+0x2b/0x80 [ 1129.273206][ T30] ? schedule+0x2bf/0x390 [ 1129.277598][ T30] schedule+0xdd/0x390 [ 1129.281930][ T30] schedule_preempt_disabled+0x13/0x30 [ 1129.287398][ T30] __mutex_lock+0xc9a/0x1b90 [ 1129.292529][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1129.297830][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1129.303040][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1129.308079][ T30] ? net_generic+0xea/0x2a0 [ 1129.315305][ T30] ? net_generic+0xea/0x2a0 [ 1129.319834][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1129.327022][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 1129.340364][ T30] nfsd_umount+0x3b/0x60 [ 1129.344863][ T30] deactivate_locked_super+0xc1/0x1b0 [ 1129.350252][ T30] deactivate_super+0xe7/0x110 [ 1129.355346][ T30] cleanup_mnt+0x21f/0x450 [ 1129.359784][ T30] task_work_run+0x150/0x240 [ 1129.367718][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1129.374305][ T30] ? __x64_sys_mount+0x23e/0x310 [ 1129.379394][ T30] exit_to_user_mode_loop+0x100/0x4a0 [ 1129.385072][ T30] do_syscall_64+0x668/0xf80 [ 1129.389675][ T30] ? clear_bhb_loop+0x40/0x90 [ 1129.394785][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.400705][ T30] RIP: 0033:0x7f4ed2b9c629 [ 1129.405756][ T30] RSP: 002b:00007f4ed39f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1129.415823][ T30] RAX: fffffffffffffffe RBX: 00007f4ed2e15fa0 RCX: 00007f4ed2b9c629 [ 1129.425972][ T30] RDX: 0000200000000140 RSI: 0000200000000280 RDI: 0000000000000000 [ 1129.442916][ T30] RBP: 00007f4ed2c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1129.451201][ T30] R10: 00000000000000d3 R11: 0000000000000246 R12: 0000000000000000 [ 1129.459194][ T30] R13: 00007f4ed2e16038 R14: 00007f4ed2e15fa0 R15: 00007ffefa6579d8 [ 1129.467478][ T30] [ 1129.507985][ T30] [ 1129.507985][ T30] Showing all locks held in the system: [ 1129.536155][ T30] 1 lock held by khungtaskd/30: [ 1129.550639][ T30] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1129.561219][ T30] 3 locks held by kworker/0:3/5829: [ 1129.566423][ T30] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1129.577502][ T30] #1: ffffc90004147d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1129.590466][ T30] #2: ffff88808899e240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 1129.604756][ T30] 2 locks held by kworker/u11:0/11367: [ 1129.610254][ T30] #0: ffff88801ebdf948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1129.621679][ T30] #1: ffffc90003a17d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1129.633430][ T30] 2 locks held by kworker/u11:1/11369: [ 1129.638901][ T30] #0: ffff88801ebdf948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1129.660863][ T30] #1: ffffc9000513fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1129.672776][ T30] 2 locks held by kworker/u11:2/11370: [ 1129.678236][ T30] #0: ffff88801ebdf948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1129.690228][ T30] #1: ffffc90004197d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1129.702396][ T30] 3 locks held by kworker/u11:5/11621: [ 1129.707887][ T30] #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1129.722941][ T30] #1: ffffc90002f27d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1129.734411][ T30] #2: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1129.751293][ T30] 2 locks held by syz.3.3338/19915: [ 1129.756533][ T30] #0: ffff8880549800e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1129.770443][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1129.780307][ T30] 2 locks held by syz.1.3339/19918: [ 1129.785754][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1129.794156][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 1129.804498][ T30] 2 locks held by syz.0.3349/19964: [ 1129.809885][ T30] #0: ffff88805b1d60e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1129.822509][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1129.835100][ T30] 2 locks held by syz.2.3350/19967: [ 1129.840393][ T30] #0: ffff88806a8720e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1129.858047][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1129.867961][ T30] 2 locks held by syz.4.3351/20036: [ 1129.877038][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1129.885499][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 1129.895775][ T30] 2 locks held by syz-executor/20039: [ 1129.901327][ T30] #0: ffff88808ccf00e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1129.912049][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1129.921902][ T30] 2 locks held by syz.6.3386/20240: [ 1129.927108][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1129.936808][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 1129.956654][ T30] 2 locks held by syz.5.3418/20383: [ 1129.962368][ T30] #0: ffff8880551720e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1129.973760][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1129.986805][ T30] 2 locks held by syz.8.3419/20387: [ 1129.992252][ T30] #0: ffff8880498640e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1130.002807][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1130.012820][ T30] 1 lock held by syz.9.3433/20473: [ 1130.017972][ T30] #0: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1130.027562][ T30] 2 locks held by syz.3.3539/20938: [ 1130.033139][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1130.043374][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 1130.060953][ T30] 2 locks held by syz.1.3640/21326: [ 1130.068558][ T30] #0: ffff888047fa40e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1130.079432][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1130.089304][ T30] 1 lock held by syz.0.3647/21362: [ 1130.098403][ T30] #0: ffffffff8e7f4d00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1130.108829][ T30] 2 locks held by syz.4.3783/21945: [ 1130.114312][ T30] #0: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1130.123640][ T30] #1: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1130.140244][ T30] 1 lock held by syz.2.3785/21948: [ 1130.146088][ T30] #0: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1130.207766][ T30] [ 1130.210145][ T30] ============================================= [ 1130.210145][ T30] [ 1130.283547][ T30] NMI backtrace for cpu 0 [ 1130.283568][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1130.283595][ T30] Tainted: [L]=SOFTLOCKUP [ 1130.283602][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1130.283614][ T30] Call Trace: [ 1130.283620][ T30] [ 1130.283628][ T30] dump_stack_lvl+0x100/0x190 [ 1130.283663][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1130.283694][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1130.283722][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1130.283753][ T30] sys_info+0x141/0x190 [ 1130.283776][ T30] watchdog+0xd25/0x1050 [ 1130.283800][ T30] ? __pfx_watchdog+0x10/0x10 [ 1130.283819][ T30] ? __kthread_parkme+0x18c/0x230 [ 1130.283842][ T30] ? kthread+0x13a/0x450 [ 1130.283865][ T30] ? __pfx_watchdog+0x10/0x10 [ 1130.283881][ T30] kthread+0x370/0x450 [ 1130.283904][ T30] ? __pfx_kthread+0x10/0x10 [ 1130.283930][ T30] ret_from_fork+0x754/0xd80 [ 1130.283958][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1130.283988][ T30] ? __switch_to+0x7b4/0x1120 [ 1130.284008][ T30] ? __pfx_kthread+0x10/0x10 [ 1130.284033][ T30] ret_from_fork_asm+0x1a/0x30 [ 1130.284063][ T30] [ 1130.596434][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1130.603337][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1130.614008][ T30] Tainted: [L]=SOFTLOCKUP [ 1130.618324][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1130.628376][ T30] Call Trace: [ 1130.631653][ T30] [ 1130.634594][ T30] dump_stack_lvl+0x100/0x190 [ 1130.639286][ T30] vpanic+0x552/0x970 [ 1130.643267][ T30] ? __pfx_vpanic+0x10/0x10 [ 1130.647858][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1130.654025][ T30] panic+0xd1/0xe0 [ 1130.657747][ T30] ? __pfx_panic+0x10/0x10 [ 1130.662166][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1130.668346][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1130.674513][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1130.680687][ T30] ? watchdog.cold+0x198/0x1ca [ 1130.685473][ T30] ? watchdog+0xd35/0x1050 [ 1130.689905][ T30] watchdog.cold+0x1a9/0x1ca [ 1130.694519][ T30] ? __pfx_watchdog+0x10/0x10 [ 1130.699214][ T30] ? __kthread_parkme+0x18c/0x230 [ 1130.704245][ T30] ? kthread+0x13a/0x450 [ 1130.708492][ T30] ? __pfx_watchdog+0x10/0x10 [ 1130.713169][ T30] kthread+0x370/0x450 [ 1130.717246][ T30] ? __pfx_kthread+0x10/0x10 [ 1130.721944][ T30] ret_from_fork+0x754/0xd80 [ 1130.726572][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1130.731749][ T30] ? __switch_to+0x7b4/0x1120 [ 1130.736622][ T30] ? __pfx_kthread+0x10/0x10 [ 1130.741238][ T30] ret_from_fork_asm+0x1a/0x30 [ 1130.746037][ T30] [ 1130.749153][ T30] Kernel Offset: disabled [ 1130.753492][ T30] Rebooting in 86400 seconds..