last executing test programs:

2m40.528115921s ago: executing program 3 (id=1269):
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r1, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff)
unshare$auto(0x80000000003)
r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r4, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9})
semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000)
sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="34040000", @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf2502000000040001801c04018017042f80800022003ee6e53c4c07ea5d20478f32b73dab93bda17a38691d14cc7389d7c01028c43754a4fb5f8a12d6b77f0cde3683abeb97f5bc35d14655c93dec83474ae0e23bc53f9ad75829e2b91ff11ac72fef15a647d6cccb3152fc263d3ebc8588a7c6dfef87cbec3a9363e1a83299887f7475c25579dcaa6f4489de497816a6b32b4d02edce816134154a0f50376a72eb390400f7802bb6aff7fd457803268008002300", @ANYRES32=0x0, @ANYBLOB="8601138008003300e0000001f3003580251833cbb52fb6e9a8a6c734d4b32e43485e1a777ff5d38ae7d38b165bdd0ada0d5fc84472c2824af615a5b9c9d4aef4847e6cd61f302c4c84d37c389d4aee42df3fd9de39ca471c974947269cd1e3e1fffd060286f1ef42c152732b82c126709986c0e76652410a1b3faef2f661b3a01f96e963498e7e1680995aee71840cb8d56a573fccee540455ff19054a0bdc0e49fdb498bd369ace53d516de6b953b83b46f8af0a99ceedc581d0507f2ddfbfc3128e82296efda855e3c5c83606a8f8988ff87fc7d7366e2a4fa16d2fe496f8132cc740e20bd90d5de040e0989894a3b4ef44c9f4e00"/260, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="04005000f87b9416806f64201a21270c0a3ff7b336f58a7b0b9018d9560bfbec945affd5dac9331511c6a463d7751882550b5a973531d670d3b1fabd9be47f231020225ee5c38bbc151f79175b29ad35f552640060228b90ef7e72a5eb3b7cfe4e604e302772050613d65a1983c85d091fbfd199cd7ac46da186efa6a0664282478ee3a362fc98609d7df18cfd5580a36e94eaaff631d7edc5e37b304de9cc2fa44fa1e7c01884a61f368712fb1ccebda65ea228e863f2ce24305412cee7907118a7134d26f019072232c5778fa5ae86c2ffefe2d0fa0cc82a3e32a2fbdd8841b26f3a0f2c00000c00ec00000000000000000009005680382fc93a8d00000000"], 0x434}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2)
r7 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
write$auto_lockdown_ops_lockdown(r7, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000100)={0x5fc, r6, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_BEACON_TAIL={0x5a9, 0xf, "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"}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, '/dev/raw-gadget\x00'}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x4010}, 0x80)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0xd5, 0x8, 0x4)
madvise$auto(0x0, 0x2003f0, 0x15)
madvise$auto(0x0, 0x20000b, 0x800)

2m39.347999438s ago: executing program 3 (id=1274):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x2, 0x88)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r0 = open(0x0, 0x261c2, 0x84)
close_range$auto(0x2, 0x8000, 0x0)
setsockopt$auto_SO_SNDTIMEO_NEW(r0, 0x5, 0x43, &(0x7f0000000180)='\\@)\x00', 0x4)
io_uring_setup$auto(0x9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r2 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', <r4=>0x0})
clone$auto(0xb74b, 0xfffffffe, &(0x7f00000003c0)=0x99, 0x0, 0xc)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'})
r5 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x401, r2, @relative_id=0x13, 0xe600}, 0xf)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc)
bpf$auto_BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)=@bpf_attr_4={0x7fffffffffffffff, r5, 0xe47d, r0}, 0x1)
bpf$auto(0x2, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x8000000000000001, 0x9, 0x5, 0xf870e9f, 0x7, 0x8}, 0x9)
bpf$auto(0x5, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf)

2m39.125536955s ago: executing program 3 (id=1275):
r0 = open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12)
r1 = socket(0xa, 0x1, 0x84)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/xfrm0/router_solicitations\x00', 0x42202, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio1\x00', 0x101001, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r1, 0xa3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(0x0, r0)
socket(0x2, 0x1, 0x0)
r3 = socket(0x10, 0x2, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x3, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
socket(0x1d, 0x2, 0x2)
connect$auto(0x3, 0x0, 0x55)
write$auto(0x3, 0x0, 0xfffffdef)
r4 = socket(0x10, 0x2, 0x8)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050)
write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef)
r5 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy9/hw_conf\x00', 0x8000, 0x0)
read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r5, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
acct$auto(0x0)
unshare$auto(0x40000080)
socket(0xa, 0x1, 0x84)

2m37.80814295s ago: executing program 3 (id=1280):
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
write$auto(r0, 0x0, 0xfffffde9)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2)
madvise$auto(0x0, 0xffffffff97fb20a5, 0x10002)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon2\x00', 0x40080, 0x0)
ioctl$auto_MON_IOCQ_URB_LEN(r2, 0x9201, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xb0141, 0x0)
socket(0x1f, 0x800, 0xffffff01)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4004000)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x6482, 0x0)
unshare$auto(0x40000080)
socket(0xa, 0x801, 0x84)
close_range$auto(0x2, 0x8, 0x0)

2m35.606980101s ago: executing program 0 (id=1289):
mmap$auto(0x0, 0xe987, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1ff)
socket(0x2, 0x1, 0x0)
openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/queues/tx-6/traffic_class\x00', 0xe0a00, 0x0)
socket(0xa, 0x2, 0x73)
sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16, @ANYBLOB="00f60180072e01"], 0x2e20}, 0x1, 0x6000, 0x0, 0x2000c040}, 0x4)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0x8)
modify_ldt$auto(0x1, 0x0, 0x10)
socket(0x1d, 0x2, 0x6)
r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r0, &(0x7f0000000180)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe28\xfb\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6\x00\x00\x00\x00\x00', 0x1003, 0x400)
socket(0x1e, 0x1, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xd05402, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x400000000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
select$auto(0x8, 0x0, 0x0, &(0x7f0000000040)={[0x616b, 0x7, 0x8, 0x8fd6, 0x80000001, 0x20020, 0x400, 0xfffffffd, 0xfffffffffffffe00, 0x62, 0x80000001, 0x7, 0x10, 0x8, 0x1, 0x7]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0x4, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x403, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0xfffffffffffffff7, 0x6]}, 0x0)
mmap$auto(0xc, 0x20008, 0x5, 0xeb1, 0x405, 0x8000)
write$auto(0xffffffffffffffff, 0x0, 0xffd8)
unshare$auto(0x40000080)
mmap$auto(0x0, 0xe983, 0xdb, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev7\x00', 0x20281, 0x0)

2m34.15396896s ago: executing program 0 (id=1292):
shmget$auto(0x2, 0x0, 0xfffffffb) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32)
r0 = socket(0x10, 0x2, 0x14) (rerun: 32)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2m33.80149789s ago: executing program 0 (id=1294):
mmap$auto(0x4, 0x5, 0x4000000000e0, 0xebe, 0xffffffffffffffff, 0x8000)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x123801, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0)
ioctl$auto(r1, 0xc0305602, r0)
r2 = io_uring_setup$auto(0x12, 0x0)
close_range$auto(0x2, r2, 0x0)
open(0x0, 0x0, 0x1b5)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto(0x3, 0x80106f53, r3)

2m33.726219521s ago: executing program 3 (id=1295):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0)
close_range$auto(0x0, r0, 0x5)
socket(0xa, 0x2, 0x73)
mmap$auto(0x0, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r1 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xae, 0x9, 0x1403, 0x4, 0x6, 0x1000005, 0x3, 0x2004000000010006, 0x0, 0x7, 0x5, 0x1, 0x3, 0xaf, 0x209, 0x3, 0x3, 0x105, 0x7, 0x0, 0x100000, 0x2, 0x0, 0x0, 0x2}, 0x8, 0x81) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xae, 0x9, 0x1403, 0x4, 0x6, 0x1000005, 0x3, 0x2004000000010006, 0x0, 0x7, 0x5, 0x1, 0x3, 0xaf, 0x209, 0x3, 0x3, 0x105, 0x7, 0x0, 0x100000, 0x2, 0x0, 0x0, 0x2}, 0x8, 0x81)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='O\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='O\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
socket(0x2, 0x801, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
timerfd_create$auto(0x0, 0x0) (async)
timerfd_create$auto(0x0, 0x0)
timerfd_settime$auto(r2, 0x3, 0x0, 0x0) (async)
timerfd_settime$auto(r2, 0x3, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
pipe2$auto(0x0, 0x80) (async)
pipe2$auto(0x0, 0x80)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x0, 0x80000008) (async)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x0, 0x80000008)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x800, 0x0)
keyctl$auto(0x4, 0xffffffffffffffff, 0x9b, 0x0, 0x5) (async)
keyctl$auto(0x4, 0xffffffffffffffff, 0x9b, 0x0, 0x5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7001f9dbca250100000008000a00000000000500070000000000080009009c781e010600020000000000080017"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)

2m33.532221335s ago: executing program 0 (id=1296):
prctl$auto_PR_PPC_GET_DEXCR(0x48, 0x6, 0xd4b3, 0x7, 0x8f02)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0)
mmap$auto(0x0, 0x9, 0xe, 0x8012, 0x3, 0x83000000)

2m33.394581929s ago: executing program 0 (id=1298):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), r1)
sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$auto_KSMBD_EVENT_RPC_RESPONSE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24005050)
ustat$auto(0x1, &(0x7f0000000000)={0xfffffffe, 0xfffffffffffffffb, "2e611ab40958", "de988845b8ca"})
setresgid$auto(0x81, 0x800000a0, 0x8)
socket(0x2, 0x2, 0x1)
r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x18, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_CIPHER_SUPPORT={0x4}]}, 0xfe21}, 0x1, 0x0, 0x0, 0x1}, 0x4044820)

2m33.234998796s ago: executing program 3 (id=1299):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x70, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0xa, 0x2, 0x88)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', <r6=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, 0xffffffffffffffff, 0x8, 0xff, r4, @relative_fd, 0xe600}, 0xf)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb)
r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r3, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)={0x14, r7, 0x301, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000)
sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000084)
syncfs$auto(r1)
ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x100)

2m33.023668162s ago: executing program 0 (id=1300):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x70, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0)
ioctl$auto(r4, 0x800454cf, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0xa, 0x2, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', <r7=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, 0xffffffffffffffff, 0x8, 0xff, r5, @relative_fd, 0xe600}, 0xf)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r3, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)={0x14, r8, 0x301, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000)
sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000084)
syncfs$auto(r1)
ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x100)

2m20.032925403s ago: executing program 32 (id=1290):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x70, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0)
ioctl$auto(r4, 0x800454cf, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0xa, 0x2, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', <r7=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, 0xffffffffffffffff, 0x8, 0xff, r5, @relative_fd, 0xe600}, 0xf)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r3, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)={0x14, r8, 0x301, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000)
sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000084)
syncfs$auto(r1)
ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x100)

2m17.865858768s ago: executing program 33 (id=1300):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x70, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0)
ioctl$auto(r4, 0x800454cf, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0xa, 0x2, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', <r7=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, 0xffffffffffffffff, 0x8, 0xff, r5, @relative_fd, 0xe600}, 0xf)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r3, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)={0x14, r8, 0x301, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000)
sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000084)
syncfs$auto(r1)
ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x100)

2m17.730754743s ago: executing program 34 (id=1299):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x70, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0xa, 0x2, 0x88)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', <r6=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, 0xffffffffffffffff, 0x8, 0xff, r4, @relative_fd, 0xe600}, 0xf)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb)
r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r3, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)={0x14, r7, 0x301, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000)
sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000084)
syncfs$auto(r1)
ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x100)

1m51.99435595s ago: executing program 4 (id=1404):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram6\x00', 0x14f682, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
fcntl$auto(0x8000000000000001, 0x26, 0x8)
io_uring_setup$auto(0x1, 0x0)
fcntl$auto(0x8000000000000001, 0x24, 0x4)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
semctl$auto_IPC_INFO(0x8, 0x800, 0x3, 0x0)
madvise$auto(0x0, 0x454, 0x9)

1m51.79012083s ago: executing program 4 (id=1405):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
ioperm$auto(0x3, 0x8001, 0x146)
r1 = setfsuid$auto(0xee00)
read$auto_snd_ctl_f_ops_control(r0, &(0x7f00000001c0)=""/132, 0x84)
setreuid$auto(r1, 0x0)
setpriority$auto(0x0, r1, 0x8)
close_range$auto(0x2, 0x8, 0x2)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0xe8)
r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cmdline\x00', 0x2080, 0x0)
read$auto_proc_mountinfo_operations_mnt_namespace(r3, &(0x7f0000000040)=""/66, 0x42)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2000d, 0xe5, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0)
read$auto(r5, &(0x7f0000000200)='*$}\x00', 0xfff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x80045500, 0x38)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000)
r6 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa507}, 0x800}, 0x7, 0x8)

1m51.188543382s ago: executing program 4 (id=1406):
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000080)={0x6, 0x0, <r2=>r0})
mmap$auto(0xfffffffffffffffc, 0xfbd3, 0x100003, 0x57, 0xfffffffffffffffa, 0x1)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0x4)
socket(0x2b, 0x3, 0x6) (async)
socket(0x2b, 0x3, 0x6)
lstat$auto(0x0, &(0x7f0000000380)={0x4, 0x7ff, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x8, 0x1ff, 0x800000000100002, 0x40000406, 0x2, 0x800000000c, 0x2, 0x11, 0x6, 0x3}) (async)
lstat$auto(0x0, &(0x7f0000000380)={0x4, 0x7ff, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x8, 0x1ff, 0x800000000100002, 0x40000406, 0x2, 0x800000000c, 0x2, 0x11, 0x6, 0x3})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000340), r3)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) (async)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x22c982, 0x0)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72)
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x80002, 0x73)
socket(0xa, 0x5, 0x0)
setsockopt$auto(r4, 0x10000000084, 0x4, 0x0, 0x9) (async)
setsockopt$auto(r4, 0x10000000084, 0x4, 0x0, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xee46}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xee46}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x800006, 0x400, 0x8}, 0x9, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x0) (async)
socket(0x2b, 0x1, 0x0)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/airtime_flags\x00', 0x2, 0x0) (async)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/airtime_flags\x00', 0x2, 0x0)
socket(0x2b, 0x1, 0x1)
setsockopt$auto(0x3, 0x29, 0x43, 0x0, 0x3)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/rxrpc/stats\x00', 0x133200, 0x0)

1m50.781336636s ago: executing program 4 (id=1407):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
r1 = socket(0x2, 0x2, 0x100)
futex$auto(&(0x7f0000000080)=0xfff, 0x5, 0x7, &(0x7f0000000180)={0x5, 0x3ff}, &(0x7f00000001c0)=0x7fffffff, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x4)
socket(0x10, 0x80006, 0x7ff)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
mmap$auto(0x40000, 0x3, 0x4000000000df, 0x18, r1, 0x9)
setresuid$auto(0x0, 0xee00, 0xffffffffffffffff)
keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x3)
r3 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x28, 0x6, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@llc={0x1a, 0x313, 0x9f, 0x1, 0xf5, 0x2, @broadcast}, 0x56)
unshare$auto(0x40000080)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080)
mmap$auto(0x8, 0x2020007, 0x1fffffffffffc, 0x15, r1, 0x200000000008000)

1m50.404469346s ago: executing program 4 (id=1410):
mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0)
mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x4044000, 0x0)
r0 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = socket(0x2, 0xa, 0xa)
futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0)
setsockopt$auto(0x3, 0x1, 0x2b, 0x0, 0x28)
sendmmsg$auto(r1, &(0x7f0000000300)={{&(0x7f0000000140), 0x12, 0x0, 0x7, 0x0, 0x3, 0x1}, 0x7}, 0x8, 0x7fff)
process_madvise$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x10001}, 0x2, 0x4, 0x0)
mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) (async)
mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) (async)
mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x4044000, 0x0) (async)
timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x2) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
socket(0x2, 0xa, 0xa) (async)
futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) (async)
setsockopt$auto(0x3, 0x1, 0x2b, 0x0, 0x28) (async)
sendmmsg$auto(r1, &(0x7f0000000300)={{&(0x7f0000000140), 0x12, 0x0, 0x7, 0x0, 0x3, 0x1}, 0x7}, 0x8, 0x7fff) (async)
process_madvise$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x10001}, 0x2, 0x4, 0x0) (async)

1m50.07315453s ago: executing program 4 (id=1411):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000300), r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
socket(0x2, 0x1, 0x0)
r3 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98)
fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ipvlan1\x00'})
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x40, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty7\x00', 0x200300, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x8080, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r6)
ioctl$auto_KVM_CREATE_VM(r5, 0xc040aed5, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r7], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x7000000)
sendmsg$auto_SMC_PNETID_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m44.981492434s ago: executing program 5 (id=1379):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
mmap$auto(0x0, 0xe983, 0xdc, 0x15, r0, 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x1e, 0x5, 0x300000)
connect$auto(0x3, &(0x7f00000018c0)=@phonet={0x23, 0x80, 0xf2, 0x9}, 0x55)
exit$auto(0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0)
sendmmsg$auto(r1, 0x0, 0x200019, 0x3008)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
r2 = socket(0x2, 0x80002, 0x73)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
writev$auto(r2, &(0x7f0000000200)={&(0x7f0000000100)="d939aa411d73430e9addb18f5a0dabc353a6d503858bef984578e48e594940231ba9ba5c956d1dcfab9bb479bebb3d48a4d3e0eb796cffe4d3b0fd5ca6a4aa2de451c78dcf1121ec040017a4eb9ccbd7852a68b69707030057bd3f93c4457643a92477b511e98963c64be18aef910a07d710912790599db032a93df0dd59ba66306229873cdf64de96c6b9a4ad3cff6d5e228cdf41e73cf1", 0x3}, 0x5)
mmap$auto(0x0, 0x6068, 0x1, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8640, 0x0)
socket(0x2c, 0xa, 0x0)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r3, 0x0)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/pci0000:00/0000:00:04.0/net/eth0/statistics/collisions\x00', 0x191101, 0x0)
read$auto(r4, 0x0, 0x20)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video59\x00', 0x0, 0x0)
openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2, 0x0)
write$auto(r3, 0x0, 0xfdef)

1m43.869728423s ago: executing program 5 (id=1426):
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x102, 0x0)
ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000040))
openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x80300, 0x0)
mmap$auto(0x0, 0x9, 0x9cad, 0x8012, 0x3, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000020281, 0x8, 0x2, 0xfffffffffffffff8})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000100))
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
getsockopt$auto_SO_REUSEPORT(r0, 0x3, 0xf, &(0x7f0000000040)='/dev/zero\x00', &(0x7f0000000080)=0x4)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0)
sendfile$auto(r1, r1, 0x0, 0x10000800000003)

1m43.44715643s ago: executing program 5 (id=1428):
socket(0x10, 0x3, 0x6)
openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x101400, 0x0)
r0 = socketpair$auto(0x1, 0x9, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
ioctl$auto_I2C_FUNCS(r1, 0x705, 0x0)
bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa)
mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000)
close_range$auto(r0, r1, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r2 = io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYRES16=r2], 0x1ac}}, 0x40000)
recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, 0x0, 0xffffff4b)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x408043, 0x84)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/ad_num_ports\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000240)=""/254, 0xfe)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/security/tomoyo/audit\x00', 0x80001, 0x0)

1m42.359990263s ago: executing program 5 (id=1429):
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
io_uring_setup$auto(0xc, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip6_tables_matches\x00', 0x40, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0)
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8)
readv$auto(0x3, 0x0, 0x10001)
mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r1 = socket(0x2, 0x1, 0x84)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/bdi/1:3/strict_limit\x00', 0x62, 0x0)
write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
fsopen$auto(0x0, 0x1)
fsconfig$auto(r1, 0x804, &(0x7f00000005c0)='Q**\x001\x1be\xafAT\xa1 \x06\xc6\xef\xab\xb1U\xb5.\x1f\xbc\x84tPckR\xd5o\xe2\x15\t\xd3\x1bS\xae\xb9\xa3\xd4\f\xe24\xfa\xff\xff\xffrq\xbb\x92\xdfd\xe8B(.2r\x8c\x98\xb2\xe2^\'\x80V\x03@\xfb\x90\xdd\x85i\x1e\x9a\xa2W\xc1\xba\x0e\x8f\xa6\x88Xs\xfa\xedtO\xea\x14\xf19\xd6g\x96\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06gl\x11\xce\xc2\xb7\xc9\xa2\xeb\xf5!HF\xe1h\xad\xb5\xd5\x88-\xc4\x961Kc\xa7\xedy\xbe5\xac*[|w:\xf1*\xcd\xb4F\xaf\xc2|\x06\x9b\x03\x19j\xac\xd7\xf1D\x90\x95\x15\bP\x98y=H\xa6\"K\x14\xbf\xde\x81\x03\x03\x8bn\x99\xe6;\x9aF\xd3d~\xd5\xc9xR\xda\xf4\xaf\x1c\xec\xa1\xdb!\xe3\xeav\xe5\xb5\x7f\xcf\x9ev\xa0\xc9L\xdb_\xfb\x1b\x86Y\x03\x16\x8f\xc4\"U3\xcc\r\x9aT7F?\x1c\xe4\xbfCa\'', &(0x7f0000000240)="fdd1", 0x0)
prctl$auto_PR_GET_PDEATHSIG(0x2, 0x1, 0xfffffffffffffffb, 0x2, 0xffff)
socket(0x2, 0x3, 0x6)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(r2, &(0x7f0000000040)='\x00)\xe8\xc7.\xf0\xb0f\xd2\x02\x00>\x00\x10\x1a\x13I]{\xe0\n\xd4n\x9f\xae\xed\xcd6\x9f\xf6\x01\x00s\xa6\x03y\x97\x0eR\xb8\xb7\xcc\x83\xb8O\xe5\b\x80\xd0\xd7\xc0+:\x17\x8d\xf4A\xdc\xd4A`\xdb\x80E|X\xc3\xa4H\xb9\xd8\x03*\x9c\x00\x00\x00\x00\x00\x00\x00', 0x100002001)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid})
sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80)
r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='~', 0x8000, 0x1}, 0x8}, 0x1, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138f}, 0xb, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'pim6reg0\x00'})

1m41.020364172s ago: executing program 5 (id=1435):
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), 0xffffffffffffffff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ttyq8/power/runtime_suspended_time\x00', 0x22002, 0x0)
r0 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
read$auto_component_list_fops_(r0, &(0x7f0000000100)=""/78, 0x4e)
getrandom$auto(0x0, 0x6000000, 0x3)
ioctl$auto(0xc8, 0x5452, 0x0)
mmap$auto(0x0, 0x2, 0x2, 0x9b72, 0x7, 0x5)
sysfs$auto(0x2, 0x2, 0x0)
socket(0x2, 0x5, 0x400006)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x0)
bind$auto(0x3, 0x0, 0x6a)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r2)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r2)
r3 = fsopen$auto(0x0, 0xffff0000)
r4 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_gtp(0x0, r4)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x20000000)
iopl$auto(0x3)
getpgid(0x0)
migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b)
getrandom$auto(&(0x7f0000000180)='oVs_datapauh\x01', 0xfffffffffffffffc, 0x3)
r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x250000, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0))
ioctl$auto_SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f00000001c0))
fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0)

1m39.715934513s ago: executing program 5 (id=1439):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x70, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0)
ioctl$auto(r3, 0x800454cf, 0xffffffffffffffff)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0xa, 0x2, 0x88)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', <r6=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, 0xffffffffffffffff, 0x8, 0xff, r4, @relative_fd, 0xe600}, 0xf)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb)
r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r2, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)={0x14, r7, 0x301, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000)
sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000084)
syncfs$auto(r1)
ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x100)

1m34.526481892s ago: executing program 35 (id=1411):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000300), r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
socket(0x2, 0x1, 0x0)
r3 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98)
fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ipvlan1\x00'})
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x40, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty7\x00', 0x200300, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x8080, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r6)
ioctl$auto_KVM_CREATE_VM(r5, 0xc040aed5, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r7], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x7000000)
sendmsg$auto_SMC_PNETID_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m24.613223778s ago: executing program 36 (id=1439):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x70, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0)
ioctl$auto(r3, 0x800454cf, 0xffffffffffffffff)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0xa, 0x2, 0x88)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', <r6=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, 0xffffffffffffffff, 0x8, 0xff, r4, @relative_fd, 0xe600}, 0xf)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb)
r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r2, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)={0x14, r7, 0x301, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000)
sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000084)
syncfs$auto(r1)
ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x100)

1m4.808314679s ago: executing program 6 (id=1528):
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0x15, 0x5, 0x0) (async, rerun: 64)
r0 = socket(0x1d, 0x2, 0x6) (rerun: 64)
socket(0x2, 0x1, 0x0) (async)
r1 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker\x00', 0x8a01, 0x0)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
init_module$auto(0x0, 0xffff9, 0x0) (async, rerun: 64)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) (rerun: 64)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
sendmsg$auto_TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80000) (async)
sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44)
ioctl$auto_BLKTRACESETUP32(r2, 0xc0401273, &(0x7f0000000080)={"4bbc5014aff0eb1a61ad41b84401f651192317a00e4eebe1edf57c21d5fbdbd5", 0x2, 0xfff, 0x69536921, 0x7, 0x0, 0xffffffffffffffff}) (async, rerun: 64)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 64)
mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x4, 0x14000000000df, 0x40eb2, r3, 0x300000000000) (async)
process_vm_writev$auto(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x4b4}, 0x9, 0x0, 0x19c1, 0x0) (async)
shutdown$auto(0x200000003, 0x2) (async, rerun: 32)
recvmmsg$auto(r0, 0x0, 0x10000, 0x300, 0x0) (rerun: 32)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000340)={<r5=>r1, &(0x7f0000000100)="9855cff1555d2da4f217e396903c98f99e96d4c77be9d451a8cd869867e84040f062c39988be341c", 0x179, &(0x7f0000000140)="731376a4fa03e8664e271f6bfc7978b0732a0b3627578f85cf5a6b42a1a9718125ecb8419a72624087d8574d64c8437cd623e95273300887534a218193688a3b5dc2cde01c314db11e88b866378ecae99170dbb258f32fdb798b5fce15d38ce3abe649837579e44a812b7471f1232861b07611ae8a104d584d4fbd3022278408cb21e34ad8597965fb021d1cb5988436620a44d33fcc1b0c909929253efe6c121ac817574f561bd291cd96e608fc", 0x8, &(0x7f0000000240)="5ff395aa8e3e5a6fd9559a45c9378e7fe13f786d9b4ea0201618f23b6a530119e12b3b239cdd7d1976f31ea265a73c8eb777e12c3701ae14b6447858af9af5d10b88d9087b659bedec64fe296bae0d76ff4b948876b375d718faf67fbf0130a3a5ad82579f72c3ada007e80a1f04789ae3088ae959bf27d92e0ab6834cd06e99434f073f614ad6fdf33f56484cadff3b5551f0f9c8cacf293746d6c1e7b6", &(0x7f0000000300)=0x42})
read$auto_ftrace_enable_fops_trace_events(r5, &(0x7f0000000380)=""/85, 0x55) (async)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40000, 0x0) (async)
open(&(0x7f0000000040)='./file0\x00', 0x100000, 0x8)
read$auto(r4, 0x0, 0xe8)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async)
mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r4, 0x28000) (async)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)

1m2.668627623s ago: executing program 6 (id=1533):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
mmap$auto(0x0, 0xe983, 0xdc, 0x15, r0, 0x5)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x29, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
exit$auto(0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
r2 = socket(0x2, 0x80002, 0x73)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
r3 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000240), r1)
sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r3, 0xc0a, 0x70bd26, 0x25dfdbfb, {}, [@HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x14)
writev$auto(r2, &(0x7f00000001c0)={&(0x7f0000000100)="d939aa411d73430e9addb18f5a0dabc353a6d503858bef984578e48e594940231ba9ba5c956d1dcfab9bb479bebb3d48a4d3e0eb796cffe4d3b0fd5ca6a4aa2de451c78dcf1121ecff5017a4eb9ca9d7852a68b69707030057bd3f93c4457643a92477b511e98963c64be18aef910a07d710912790599db032a93df0dd59ba66306229873cdf64de9fc6b9a4ad3cff6d5e228cdf41e73cf1", 0x3}, 0x5)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8640, 0x0)
socket(0x10, 0x6, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/err\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0xa, 0x0)

1m1.578310893s ago: executing program 6 (id=1535):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/034/001\x00', 0x2001, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async)
socket(0x23, 0x2, 0x0) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
fsconfig$auto(r1, 0x4, &(0x7f0000000080)='+\x00\xc04\x95\x96XD\x11T\x11\xac@\xb9\'\xa8\x99\xf6\x99\xad\xa2w\xd55\xea|-&\v\xa9\xc5\xb1\xc6\n\xb0{\xe8', 0x0, 0x0)
pipe2$auto(0x0, 0x80)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
io_uring_setup$auto(0x6, 0x0) (async)
socket(0x18, 0x4, 0x0) (async)
openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) (async)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async, rerun: 64)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20c40, 0x0) (async)
openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42dc0, 0x1a0) (async, rerun: 32)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183042, 0x0) (async, rerun: 32)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty17\x00', 0x0, 0x0) (async)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000100), 0x22800, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye4\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
ioctl$auto(0x3, 0x540b, 0xfffffffffffff4e0)
ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0xfffe, 0x4, 0x0, 0x1, 0x0})

58.481925425s ago: executing program 6 (id=1543):
personality$auto(0x40004010410ffc)
unshare$auto(0x4) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
remap_file_pages$auto(0x6a25, 0x1000, 0x0, 0x3, 0x0)

57.225320941s ago: executing program 6 (id=1547):
mount$auto(0x0, 0x0, &(0x7f0000000300)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82Oi\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\x83\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)\x17\xbby\xe5\xc4w\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0Z>\xe1=\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\x85\xa4??\xbc=\x04\xc8\xa9\b\a\x1c\x89\xc1\x82\xdc\x0f\x12\xd5\xa1\xb0\x93s\xban\x02\x13\x8d\xe8\xa1\xe89\x13\x8d\x7f\x11Z{J\xc0J\x8ao\x96GB\xde\xc7\xf6\xd3\x98', 0x104, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a0001000000000000000000060006000500000008000200", @ANYRES32=0x0, @ANYBLOB="0800040003"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0)
rename$auto(&(0x7f0000000140)='}[,&*}\x00', &(0x7f0000000180)='./file0\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

56.934758319s ago: executing program 6 (id=1548):
sysfs$auto(0xb, 0x101, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2404c004)
socket(0x2, 0x80800, 0x0)
mmap$auto(0x0, 0xa00006, 0xe4, 0x40eb1, 0x602, 0x300000000000)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
rseq$auto(&(0x7f00000015c0)={0x5, 0x85, 0x9416, 0x1, 0xb, 0x6, "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"}, 0x6, 0x3, 0xff)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x7c16c0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x4000a, 0x2, 0x19, r1, 0x27ffc)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18eb41, 0x0)
msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004)
open(0x0, 0xeee01, 0x179)
socket(0x15, 0xa, 0x5)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x0, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c03, 0xfffffffffffffffd)
socket(0x2, 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0xe}}, 0x2)
mmap$auto(0x0, 0x6, 0xfffc, 0x16, 0x401, 0x80000000008)
ioperm$auto(0x7, 0x8001, 0x2000000000000149)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x3, 0x8000, 0x3000}, 0x4)
mmap$auto(0xfffffffffffffffd, 0x6, 0x4, 0x17, r0, 0x7e)
mprotect$auto(0x200000000000, 0x806121, 0x8)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptyq4\x00', 0x2241, 0x0)
mmap$auto(0x9, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event2\x00', 0x101c00, 0x0)

54.926910123s ago: executing program 2 (id=1554):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc)
mmap$auto(0x0, 0x4, 0xffd, 0x12, 0x3, 0x0)
r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0)
r2 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
select$auto(0x5, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$auto(r2, 0x40, r0, 0x0)
bind$auto(0xffffffffffffffff, 0x0, 0x66)
r3 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
mmap$auto(0xffffffffffffff85, 0x2020009, 0x3, 0xeb1, r3, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
madvise$auto(0x0, 0xfffffffffffe7ffd, 0x17)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x591002, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ppoll$auto(0x0, 0x3, 0x0, 0x0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
fstatfs$auto(0x0, 0x0)
write$auto(0xca, &(0x7f00000005c0)='\x04>\x01\x01\x00\x00\xe2\x00\x00\xb6d\x89\x14\xd7\xe0\x99T%4&c\xde\xdf\xe4A\x83\x1dX{\xb4\xf4\xdc\x81\xa7\xda\xb5 F\xc3\xd5\xd4\nK#\xc7\x10\xd6h\xfc\xa1\x87(\x85\x95f\x87\nW\xf8\f@\x0e^\x84B}\x94\xb4\xe2\xdd\xfe\xb6I\xd4\v5\xef@\xb3d\xbdW\xaa\xe2\x8b\x94W\xa2%1?f\xdb?\\\xb1\x9fvl\x89\xf6\xcb\t\x97\x89\x9b\xea\x14+\x9e\x19q\xea3-c_\x89\xbd\xb7O\x94\xeeS\x9d\xa8\x17\xb3\xf6\xa2r~\xbc\x80\xbb~\xa9\xd2$\x1bU\xa2t%\x066\x9e\x15|\xa5\x8b\x98Jc\xb4[\xc5\xb5\xdd\x84\v\x17\x1f\a\x06\xd7\x1d\xed\xd6\x8eKBZ\xcc\xcd\xc4T\xb0\v\xcdd\xb6\\\xbaiV\xfd\xf9\x03\xf4[\x92,\xe5\x83\x0e\xa7\xef\"\xf3\xc5\xe0\xc5\f\xb2F[\xbe\xe3\x9f\x0f*\xaa\x04\x02\xfa\x8b8\xfe\x14\xd7\xf5\xb2\f\xfaxz\xbb\xcb\xa2\x99\x9b\x8dgF\x00\x9b\xe8$\x02\x18\x93A\xae\xb2\xc7\xa2&?\x9b\x9b\x9eE\xc78\xc4\x99\al\xa43\xdaf\x13q\xe3\xe9LH\xbdO\xf7\xd80M\xd04]`\xe2\xa0\b\x14\f$K\xf5\xd40\x01\xd3\xd7\n\x8e\x93\xb8\x1e\xa8h\x8c\x9c\xe4I\xb4\x19-#\xe2\x95\xd7\x18\x96M\xc3;M\xb2\x95\x1b\xb9\x9bg\xec\x87{x\xed\xcf\xc8\x80X\xc2XBY\xa2\\s\r\xe3\xd2enFM$O\xbd\xdb\x01\xe1m\x16\xd7\xe7P\xfeq_`1\xd9]a\xee\x18\xca\x8cP!y\x04y\xe8N\xa5F\x06zL\xd1p8:p-NDf\xb3\xd6\xc4\xe2\xb9`]+\xc3\xa50\x0e\xf3\xc1,B\xd8\x89\x8a\xa4b\x0e\xb1\xc9;\xd2\xcd9\xf73\xb7\x92\xcc\xb6G\x0f\x1b?\x9b 6o\xa0~g\x01b\x0f\xd8Y!P\xff\x97\xa6j8B[\x9fG\xf1\x00'/467, 0x7f)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x1)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x400800, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioperm$auto(0x800, 0x5, 0xd)
ptrace$auto(0x10, r4, 0x4, 0x7ff)
ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r4, 0x4, 0x8)

53.946830908s ago: executing program 2 (id=1559):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
mmap$auto(0x0, 0xe983, 0xdc, 0x15, r0, 0x5)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0)
socket(0x29, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
exit$auto(0x2)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
r1 = socket(0x2, 0x80002, 0x73)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
write$auto(r1, &(0x7f0000000200)='\\$\x00', 0x4)
writev$auto(r1, &(0x7f00000001c0)={&(0x7f0000000100)="d939aa411d73430e9addb18f5a0dabc353a6d503858bef984578e48e594940231ba9ba5c956d1dcfab9bb479bebb3d48a4d3e0eb796cffe4d3b0fd5ca6a4aa2de451c78dcf1121ecff5017a4eb9ca9d7852a68b69707030057bd3f93c4457643a92477b511e98963c64be18aef910a07d710912790599db032a93df0dd59ba66306229873cdf64de9fc6b9a4ad3cff6d5e228cdf41e73cf1", 0x3}, 0x5)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8640, 0x0)
socket(0x10, 0x2, 0x0)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0)
ioctl$auto(r2, 0x64c6, 0x1e2)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0xa, 0x0)

52.798927025s ago: executing program 2 (id=1562):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x5, 0x5, 0xb2, 0xeb1, r0, 0x167c)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy10/netdev:wlan0/stations/08:02:11:00:00:01/aid\x00', 0x220c01, 0x0) (async)
pipe2$auto(&(0x7f00000000c0), 0x0) (async)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003)
r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r2 = socket(0xa, 0x5, 0x0)
getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0)
read$auto_mISDN_fops_timerdev(r1, 0x0, 0x0)
ioctl$auto_IMADDTIMER(r1, 0x80044940, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x0, 0x5, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x7f, 0x1fc, 0x0, 0x0) (async)
getpgid(0x0)
acct$auto(&(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aqm\x00') (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
epoll_create$auto(0x4) (async)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async)
r3 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0x240742, 0x0)
readv$auto(r3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)

52.269342107s ago: executing program 2 (id=1564):
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000)
r0 = socket(0x11, 0x80003, 0x300)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
io_uring_register$auto_IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080)="fbcd79cb61e0ba85f1ba2f7896af81ae157e39b759b587f1fe8439bc8a271b314df7d677a700aba0e2abec6adea77dfd1aa4acfca80924457c9189274e7ccce523c1a17ed8", 0xdab)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x20)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0xb0081, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x2ab01, 0x0)

51.880244067s ago: executing program 2 (id=1566):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
read$auto(r0, &(0x7f0000000100)='.&\x00', 0x73ee)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c00098008"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

51.731195317s ago: executing program 2 (id=1568):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x70, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0)
ioctl$auto(r4, 0x800454cf, 0xffffffffffffffff)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0xa, 0x2, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', <r7=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, 0xffffffffffffffff, 0x8, 0xff, r5, @relative_fd, 0xe600}, 0xf)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r3, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)={0x14, r8, 0x301, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000)
sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000084)
syncfs$auto(r1)
ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x100)

41.415421882s ago: executing program 37 (id=1548):
sysfs$auto(0xb, 0x101, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2404c004)
socket(0x2, 0x80800, 0x0)
mmap$auto(0x0, 0xa00006, 0xe4, 0x40eb1, 0x602, 0x300000000000)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
rseq$auto(&(0x7f00000015c0)={0x5, 0x85, 0x9416, 0x1, 0xb, 0x6, "551e7285968d8e86bd4794a0e875ee9f7b35db28d0a7e72b7a19039c336389cb57a05ba0582cc612c6c0be4beb4cc54d8337d40c93638ba34c4a0435c32a206e808194584d8c359d418662d18943a5e3c6234e712a096205457b56f0a1e5d4d19835696295a54f38117d9d751e23b5fb61daa5a6b2c75148106dc167a20061e3fe55cc53ffadf62b0945da4b27515a0102a8d2d002a842362b4744b8972a5e11e8a6aab89c7b85947f3901d696d459641aa7e6b89b73387ec5fa2d2af6c992213d82c5774c4bcd4187585bcf652af094e988e75002e01f607abf5e25ae0f5548fd13175b681fc059c1f9160aef893bae78cf6cf62c30fa3f0c5c60cbe383a9c0cc1289519b0c7cff81cc3b4fec739fad19c662b0f98d607b61d825d10e2dd3b27b0f7a6b1adc5a452f344c39da5f086ea7c5d99674ca69c4f5635776e67c151bad72f906cd65231da3a55d6056e23b00686723714fabd752f3e2c86dafdee9d379230c0abeabfde9cf88cae099f3ccc76ea7e64a3734ced5ffe749a8012db53ad4d6a5e347bdd83bb409c1bdb762f4aba145df74833d73ccd583797d4fb4ed3e0c7c29d502aacaef02e114d9e60ca6b0bcb28f825f5d49e94ccd2f830933c39a3ba3782505453e3de872ad8da84a6a22aaa62970428bb9a95d1817dbeeded1c53c5d508dea6cc53d80153b05f954c263278bb9c8bc02f3b1805dd9299dc8b97ebff0165d615ba7bf5ce8c490f4dd273642a18267b0a61a594cb1d608f3dffb292991ea32bb647a6f9b951f283e118dc73b45843b5aa883410e402e3bec9ba889ec237462042cedaed761cca0c3b7058d3ffc276c9a75e18b79804f4e21650d911edbedb9fedd31959a8783b1e39d7d6408554bddb2a5d67703d225fe4422bf2367ca483e77fe479495be3235f4c77b3872a9e33946d2602486b83e84e7d8d1742d369e2d00b9dbb552385502c0f597b3615bed54de65af106b58d2b6bebbdd3fe625152527af965b67e9424da7be2e2574e1492aed568d4faaa9da508e0a2e687876fa291e38b7c3ef38643e2c49e0d46d0f2d53352da2f184c4ced2305865ab0ad1435644419773ea82336ffdf62dd325a6a8b2d199d96dba8a13bb5a86ff65b80818ceb37ee8a2b2a8813b33e474e5b110e1ed13dbc4f52efabbce38935a8ada53a0ed5a1a01453a254a1dc528492159591aa192ff6cfa0b372caf236c78d1a0c94dc37916746358b4cf3cc1c0132657818ce6465e58936dbf5991dfb74ff97382c066ba0ceb06ac4f0c005e4c9166e94161bc08e1c23df7ed3419b10ae229aa6bafb19e6af003c9e319956723d839dc50a7edd8d80bce971ba504e0aac811d76e65acffdc4f7e9836396ba98b824be6cc704c59f5849642b191437a5cf902fc1ac491e8c59241586c6791b282b5cfae57eb7e6792048c4769b5b3f21987ec5097e530fd001da5d2999db4ded708225e9a53a2b48d2be3401a063da3c19168769eccaef710d7c2e06818bb05c4a9aa0ce2785a5a6d2846bac9836f1905a9b042029dcc59d918450b6affb522fbf78116941c5cef4ecb82a2134ee8e67ea6091170b67bfc3abec9e2cfc8208d4ba3bb732230fe6a9470c1152ebdc31bbce93cb742b4484bc1cef4298ce897a36c7e8b3ef8bd1b0e3d4dfa46da8bf89b06d67d8a5da465e8f68f999ec38ef8d1b7972125d2d8492680f6698419313afb74b5f715c90aa5ca0a6ea5561acd89a25d0fd066234b1752d6535251be347d8e69afea162f0ae84aa08a1a5475e6860af5956babe0530b6349e918fa97f14e6a83f7e2054c85ec37424757c49c6b76a889cde8473eebc495ac1088fda54f5c70bb17ef4873bf7b524ae892cd8267adfcd1e7054ac0c8b904855f816cbab8a6c5332d2221060b97931130187e1f07b0b9fad917c06f56d3f9fbca9d0ad93c300d88a6025359eb609e86c2b604d6834cde1351ccb0ba238715d6a77953f58b23a78db05bc38cf1e47d5336226a966af0a88fa19b4d992fc82310b7fceee45a202bfdf759dedee618361082881f91f85020e5282fd6a4ff376455f09bd1ca73b165498937eb7396525f9be44e1d5455f2fb0e9b0d79a2b05104239ddb65afabac40f2568353278905243edcffa25dbe93c91fd0982c77eb13c90cde8107888e9891ed1f3fd75b91f275544db3fb132c587243bdd433ad395ec44311df726aa04c20709aa456adebeba0e42ba8be3710f9e8f307febbb8bf1971d6e02b435ec6e209f6d3e3200f51b17e97c7b8eed34b6b297b03db790c857329989e778133d2f9ca40e62aafa5a053d416a09d36a78e1b0716aa049da6fc9fedc96a02d10a13260d6f7cc86a7c681b97ec9987e16bb190e75137bc3e3ce64b51a599f1ebed0683f55240e49eeb6588a13b55c266ee997d1b237f0deefa3bd5670293249c6e79decfc6ee39a08d1ffb71231ed36b9aea01fd0804fc591b7100e6cf5cf97ddb1871afe44a534f2eeafb12d217c6684d474f19bf7d957b11429843723823da2e555a9a9f9d5af6d1ddd40a59a67c459581604f280f4412b0a4b8736bbdd1cd2d4d27cd273ad39d3d52036832e968f93ff343a92f4001c8a2c43ec1f3377c67f3b49f6297de1e2dc5a10abafbf034a029e5d1d89e627fc3741ab5fa68afc24fdf22b6ef215e0927fff8bdb671ef6314ecaa7a8397292e699b693600e49f9e428604fed71f05f2775c224eead65c378539b80ff7f475c68933366da1f76e0542991277c4147358c34ad37a5d81bd1810f39ebf7ece6a0054f4bf5f846bd95f9ba31ea606c226d267d95ad95c29b897fb1fba58f121939ff3c41535d1199c71c9f6bd928eae64c7884affef531df2c690e7cbc000518097ed7ef60d0bc9cf05abc36e724c11185b73612978a9c6fa58b5d27e763fc2cf74fef5084129fbf47847b947e6a9d860fab7a802045357badb25231f48356934b4754e8e5727060e4e17a5ec333500b2942851a8e97c9df3d9d925877dbf322f0b9518d96b16987df8bd2fc176bef7de39db55679009471caad67b3795f9adf591b6605dbd00c75062cdb538caeb1e3c80db54860a1b2b8d5dd6537fecf2df1dc0ab37769325cb019f954b1bc105cbd896d5dbe4b40469b05cd98d053bf2c7f0ed6449bdfd13fbf93f4ce3ec680064f919a6f448937625090f072abe26bdb0c6c379637948a3c62c8aa20e46c8c86deafd1b5cdfac216aa17ddd7a86a5e3c56ba2036f965194ed0fdeb4966bc01240351f8352079749618c35f344408996cb1f0756af37917a3ceb97c72eb14e3d2efc70011ef07a6547ce5f1332ba45eeaed4ba1529a9e9d4af5137b63d94cf2d80bc84e26049a1293ecd769c5ff406f3b2952ea56ae9eb5bb5c1ce072f80211d5d8d26dc72ede3c5bd14c28e3f8f119fcd3cf0ea800ddafcc718e9d724a305bc348093cf0964c6efe93049a1c0f8e2fa2c1f0422a09247fd52a7f4518af3e284d0fd4a864d41308f1600a2c97b1cf45f684b9b0af091de1db32b003bfc44f45d51d017ec5d06736e035e0d2cf65d7000299362b4102a487715c44b960c299545c3a33e209bb2641ffffdb1c35a1e3ebd3e34733051c980a49070e317eff14bba561e2fedd7e9f4d252051fd15255e98f7c41891342b28b0322c028d912eb474bbc9e86e0b18993ba33d4e6b78187a36fd0cdf0341753c29302b99756d0c449f353765d051518fc06c675e11f82fe9521ae18a903d96e556bf84478390ad141170c0e0990cfe393b2560d76a186a5bfe4edd18b1be4b417deba365b7cd52539eaffc7f499ed846032b6a33e0df76dd86ef1e8f6e15e608bccfe3847ef8df42de3acc04856cb890fe5f12c811ad808b215b4dc936360b858c80c0ebed18bf2dbec3ea127f071809a26395e027c73913da152e387774a1a063bbe652cc265c0498e3da96eb63a1a467404729a9f16f81b7462844f76962fd72f209f93fddf1c240a95d4094f1506cde954ec4a711d2be412aa438278aad4fdefcc925102bdba564e8896e77e5cd528b10c32c8529738a9f8128017ea5afa2c5ae6bd77f4fd4a501159cde94c14c3752d34809712dd76a70e5ef57acc9c66ade916a42a778a4310d557cd9bfc0a70b7b6f72e38bc7a94680d371364b8c8605dcf9dedd5a452d4e2eee05dd3aa0c5e1a5ead1a498d361a14e7bebadd1d42d6590f83ee597ba1c79a582a75cb562b0089ca9974d4a6e494e8df78db65b340b7e4c4a6bf34b09afa260fa3dab80550437d16dccf9cfd609d91a8282f8ca7fe4b7c623e2335261f784e7122e5b290dc100af06b0806edba47ba75ae41cc0f498218991cf9c42492f97dec71ad0a9cb8c6bfee30c2690e1ad47b8c5631def9e0f4238015542846b5118936e3c12fdf7e1e43004edabe47602ebb7fe1eb4af7a9a44c3d7558c9d47b2d7e6c9b51a0b39dbe192c579881d1133c078e45cdfe3a159467059e189787042830fd2d8de351b6903900ef35767ccd73d28d16e1e1ddae9674da771f074aa8c1e024abbdf316415b1b91a483a4572cf644b2bbd092eafecef21c1845701a527f0d675e1cbff2363fdd2085640edc7936e84970d478a4c4806b820f12aedf7826abf4ed816b3496d3693ad21c60bb565ade13e12ff59dba6722374c384c72229987916f1dc8792b5e7e33057c302d93f7e63f5a18c711f168dd0829b3f894e1e82a6736f6989798586709c59d139c2d450e31c804106a55108ecbfdee94f401f5c0ba2e7d214f7a7b1a5dde17d09bd7f2b3db196a397afa855901657a9d2308aabcf82950a28512ef1851b010f8dfcc96a1e0f0ebc737e374ed3acbeb9660ed37469d624e1c1341e27ebcf2e889b5b3e93adb41af058d26b37f06924038333723c25b24fe5f3db2d747810d3f729f8351b9f2a5c3a84d106eb6024e1b78a2a17c079d80a41da6ae73fc279caf574d90f98e6c5dd8e85b59e429f3c5afdc981f8a0c3f170cd083157c3763b047ce2973e033e207523a3395f4a30628a7c1b3903948be71b5d901fcd4c6cf5195c6828c3681464b4c3b0b4f846e01225ef8d2f42e5011b4256ef2117a32777dfe5adc28cac7a3429ca9d84e7d1d0ec9fa4ead975355b10b800a61aed3266b9b99ecf491929de9e9ba24209bf7dd5880143df0142664d5c0ccfb168a0476c50a6c67576ac3206a3af55feb072a89344a74358bd84a82138dfb8780fea2631dfd34fab03469c49dce4148fc07656394111a2e3fc63c1f1e9d718f84ac69b3cee050879962f2a3a3466ef609e2ff14bddad613edcc02bd55444577450c2a9a0e9acfec8bdea90b4c6a7fdf323b16799a3f34375c75c0f7bbfa402a9feb93e418293b2ca90cf1182320f9e97f198957ae83b89276ea5305dfa0fb697c8fb085478accfeeea9d4ec048f049fd7d0eef0df15c2af18029a9edf620b3f714b2da5f466303b7208dd77c1e52dca33737dfd41892bddd202d4beb525aed140abb8b8f02a2ab5a507756636e1011ec5c9d10a73a4e70c0e8e18240d06b234507e192be2d5b142d1e7fb65beee88dded7e670c9f7802004940952a5661d28df7446f334ed25d1162d0e77b4b189e66dc908d6e600c9129fba6f424f21af091c37822c242ace2b606317a173989d6eb890a056b19487d738f431eebccf3e9f408f9fb50c5cdd2b6e0846ee2ae400c7d5abaf96566f93130dac325466e9b87922015bad26b82c9e9ea45b09c386bffce51526b997658626f63cdce4d3c2180379c57610b65edf55816"}, 0x6, 0x3, 0xff)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x7c16c0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x4000a, 0x2, 0x19, r1, 0x27ffc)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18eb41, 0x0)
msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004)
open(0x0, 0xeee01, 0x179)
socket(0x15, 0xa, 0x5)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x0, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c03, 0xfffffffffffffffd)
socket(0x2, 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0xe}}, 0x2)
mmap$auto(0x0, 0x6, 0xfffc, 0x16, 0x401, 0x80000000008)
ioperm$auto(0x7, 0x8001, 0x2000000000000149)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x3, 0x8000, 0x3000}, 0x4)
mmap$auto(0xfffffffffffffffd, 0x6, 0x4, 0x17, r0, 0x7e)
mprotect$auto(0x200000000000, 0x806121, 0x8)
io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptyq4\x00', 0x2241, 0x0)
mmap$auto(0x9, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event2\x00', 0x101c00, 0x0)

36.498053505s ago: executing program 38 (id=1568):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x70, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0)
ioctl$auto(r4, 0x800454cf, 0xffffffffffffffff)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0xa, 0x2, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', <r7=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, 0xffffffffffffffff, 0x8, 0xff, r5, @relative_fd, 0xe600}, 0xf)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r3, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)={0x14, r8, 0x301, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000)
sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000084)
syncfs$auto(r1)
ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x100)

20.638489106s ago: executing program 1 (id=1616):
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x0, 0x7, 0xffffffff, 0x2, "24229ba6405fe4fc8b79b54d7e17"}, 0x7ffd, 0xfffffff4, 0x6)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0x81)
mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x4c2801, 0x0)
lsm_set_self_attr$auto(0x3, 0xfffffffffffffffc, 0x1f, 0x8000000000000000)
syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff)
pipe$auto(&(0x7f00000000c0)=<r1=>r0)
read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x23, 0x80805, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)

20.329243093s ago: executing program 1 (id=1617):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050727bd7000fbdbdf256700000005002a0140000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
pipe$auto(0x0)
setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6})
socket(0x2, 0x1, 0x0)
pipe$auto(0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(0x0, &(0x7f0000000000)=0x9, 0x2, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0p\x00', 0x80, 0x0)
getsockopt$auto(0x3, 0x0, 0xe, 0x0, 0x0)

18.538649691s ago: executing program 1 (id=1625):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
mincore$auto(0x0, 0x0, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001180)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)

18.068188762s ago: executing program 1 (id=1627):
mmap$auto(0x0, 0x400008, 0x3, 0x19, 0x2, 0x8100)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
r0 = socket(0x10, 0x2, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x5, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/wakeup/wakeup8/max_time_ms\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x9)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x2, 0x0)
r2 = socket(0x2, 0x1, 0x0)
openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000280), 0x319480, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
socket(0x2, 0x1, 0x106)
listen$auto(0x3, 0x81)
socket(0xa, 0x1, 0x84)
accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
ioctl$auto(r3, 0x560d, 0xffffffffffffffff)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

17.530941269s ago: executing program 7 (id=1629):
mmap$auto(0x0, 0x1000000002020009, 0x3, 0x10000000000eb1, 0xfffffffffffffffa, 0xaf)
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x10000, 0x0)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
mmap$auto(0x0, 0x4, 0xdf, 0x40000000009b72, 0x7, 0x28000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
io_uring_setup$auto(0x1, 0x0)
connect$auto(0x3, 0x0, 0x55)
listen$auto(0x3, 0x81)
mmap$auto(0x10000, 0x8, 0xde, 0x11, r0, 0x7ffd)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)

16.699644576s ago: executing program 7 (id=1631):
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x0, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r0], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40100, 0x0)
pread64$auto(r3, 0x0, 0x10001, 0x830)
write$auto(r2, 0x0, 0x100)
read$auto(0x3, 0x0, 0x80)
unshare$auto(0x40000080)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0xc0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

16.296336552s ago: executing program 1 (id=1632):
mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000)
iopl$auto(0x3)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
getsockopt$auto(0x3, 0x200000000001, 0x11, 0x0, 0x0)
flistxattr$auto(0x1, 0x0, 0x9)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
ioctl$auto(r0, 0x8108551b, r0)
close_range$auto(r0, r0, 0x0)
mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
iopl$auto(0x3) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async)
getsockopt$auto(0x3, 0x200000000001, 0x11, 0x0, 0x0) (async)
flistxattr$auto(0x1, 0x0, 0x9) (async)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (async)
ioctl$auto(r0, 0x8108551b, r0) (async)
close_range$auto(r0, r0, 0x0) (async)

15.088436904s ago: executing program 1 (id=1635):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x70, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0)
ioctl$auto(r4, 0x800454cf, 0xffffffffffffffff)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0xa, 0x2, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', <r7=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, 0xffffffffffffffff, 0x8, 0xff, r5, @relative_fd, 0xe600}, 0xf)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r3, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)={0x14, r8, 0x301, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000)
sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000084)
syncfs$auto(r1)
ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x100)

14.501429534s ago: executing program 7 (id=1637):
read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0)
prctl$auto_PR_PAC_RESET_KEYS(0x36, 0xe, 0x3, 0x6, 0x7) (async)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video30\x00', 0x2381, 0x0) (async)
mmap$auto(0x0, 0x810004, 0xfff, 0x8000000008012, 0x3, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async)
close_range$auto(0x0, 0xe903, 0x2) (async)
socket(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40) (async)
write$auto(0x3, 0x0, 0xfffffdef) (async)
socket(0xa, 0x6, 0x0) (async)
r0 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r0, 0x7, 0x465, 0x0, &(0x7f00000000c0)=0x28) (async)
connect$auto(0x3, &(0x7f0000000240)=@generic={0x21, "000000000000000000c3f546d200"}, 0x9)
set_tid_address$auto(0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
open(&(0x7f00000001c0)='./cgroup\x00', 0x800, 0x8a)
bpf$auto(0x10, &(0x7f00000000c0)=@enable_stats={0x1}, 0x40) (async)
mbind$auto(0x0, 0x4, 0x5, 0x0, 0x6, 0x4) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x400, 0x3f)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x1ffff000, 0x7, 0x100000000)
shmget$auto(0x8, 0x10563, 0x568d1af2)
mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x4, 0x101)
acct$auto(&(0x7f0000000540)='u[,&*}\x93\x93\r\x16\xa8;5\x83\x86F\xba\x8blL\xf5\xf4}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\x9e\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9auA\xd8\xe7\xd2\xf3[r\xc5S&1q[\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8a')
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sda1\x00', 0x20800, 0x0) (async)
r2 = getpgid(0xffffffffffffffff)
ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000004c0)={"141a070000000000000060357fb9fe94f9d26800", 0x1, 0x4, 0x6, 0x0, 0xfffffffffffffffc, r2})

14.006971083s ago: executing program 7 (id=1639):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x4, 0x7ff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
memfd_create$auto(0x0, 0x9)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7)
write$auto(0x3, 0x0, 0xfffffdef)
r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd8/rqos/wbt/unknown_cnt\x00', 0x8100, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f0000000140)=""/40, 0x28)
fallocate$auto(0x3, 0x0, 0xe, 0x8ec8)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/pvrusb2/remove_id\x00', 0x100, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x221c2, 0xe8)
mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000)
write$auto(0x3, 0x0, 0x296)
fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
read$auto(r2, 0x0, 0x20)
select$auto(0xc, &(0x7f0000000200)={[0x3, 0xb, 0x7, 0x5, 0x1, 0x1, 0x1, 0x0, 0x83cf, 0x9, 0x0, 0x8000000000000000, 0x8, 0x2, 0x826, 0x42f4]}, &(0x7f00000002c0)={[0x0, 0x9, 0x8, 0x0, 0x6, 0xc, 0x805, 0x6, 0x8d, 0xfffffffffffff112, 0x9, 0x2, 0x3, 0x9, 0x3]}, &(0x7f0000000340)={[0x0, 0xd, 0x7f, 0x3, 0xfff, 0x4, 0x80000000, 0x8, 0x2, 0x5, 0x8, 0xb3f, 0x5, 0x5, 0x10000, 0xfffffffffffffff0]}, &(0x7f0000000080)={0x2, 0x23})
r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'batadv0\x00'})
r5 = socket(0x2, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/options/stacktrace\x00', 0xc2c01, 0x0)
sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000280)=ANY=[@ANYBLOB='u\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="93ab2dbd7000fbdbdb2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x808}, 0x20048000)
ptrace$auto_PTRACE_SETOPTIONS(0x4200, r0, 0x7fffffffffffffff, 0x17a0000)

12.164167095s ago: executing program 7 (id=1643):
socket(0x10, 0x2, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x2000000000009, 0x3, 0x7, 0xfffffffffffff718, 0x5, 0x7fff, 0x2000000000010006, 0x0, 0x7, 0x8, 0x0, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x8001, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x7fffffffffffffff]}, 0x200, 0xfffffffb)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040840}, 0x94)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20040001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00'})
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nbd7\x00', 0x228040, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
socket(0x2, 0x80002, 0x73)
r0 = socket(0xa, 0x1, 0x84)
sendmsg$auto_NL80211_CMD_DEL_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[@ANYBLOB='4\n\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/490, @ANYBLOB="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"], 0xa34}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0)
init_module$auto(0x0, 0xffff9, 0x0)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0)
sendfile$auto(r1, r2, 0x0, 0x4)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, 0x0, 0x8240, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
socket(0x2, 0x1, 0x0)

11.108371669s ago: executing program 7 (id=1646):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x70, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0)
ioctl$auto(r4, 0x800454cf, 0xffffffffffffffff)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x88)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00'})
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r3, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)={0x14, r6, 0x301, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000)
sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r8, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000084)
syncfs$auto(r1)
ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x100)

6.391219688s ago: executing program 9 (id=1655):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0)
r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r0)
sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x88, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xf255}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xc}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x7}, @NFC_ATTR_VENDOR_DATA={0x5b, 0x1f, "63b35eb1cdab213d52cf32027e2c9d1bd6c9243abed3cb2ab0ddb17f44d76e41702c7c3c844608e99d2f6620e322e6047cac42a897d1905056d4ca28b3406421143749a75532a3925b953ce4248b2097bc5d367fe2c1f9"}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000090)
sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0xe, 0x4, 'TASKSTATS\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000)

6.207791418s ago: executing program 9 (id=1656):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r0=>0x21eb, 0x7ff, 0x3ff, 0xffffffffffffffff, 0x3, 0x5f, 0x0, 0x10}, 0x6f6)
r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0)
readv$auto(r1, &(0x7f00000000c0)={0x0, 0x101d0}, 0x3)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
setsockopt$auto_SO_OOBINLINE(r0, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
accept$auto(0x3, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0xf7f, 0x6, &(0x7f0000000000)='!.##\x00', &(0x7f0000000180))
ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f00000001c0)={@raw=0xbe, "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"})
socket(0x1f, 0x2, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)

5.145680253s ago: executing program 9 (id=1660):
unshare$auto(0x40000080)
semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff)
close_range$auto(0x2, 0x8, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x88, 0x0, 0x0, 0x80000000)
socket(0x10, 0x2, 0x7fffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x1a5942, 0x0)
socket(0x2, 0x1, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyb6/power/runtime_active_time\x00', 0xc7a81, 0x0)
read$auto(0xc8, 0x0, 0x200)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r1 = gettid()
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4)
kill$auto(r1, 0x11)
syz_clone3(&(0x7f0000000400)={0x180102000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f00000001c0)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
access$auto(0x0, 0x8)
semctl$auto_IPC_STAT(0x0, 0x101, 0x2, 0x200)
prctl$auto(0x39, 0xffffffffffffffff, 0x0, 0x0, 0x42)

2.207315949s ago: executing program 9 (id=1665):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x34, r1, 0xd0d58b333228212f, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_FREQUENCIES={0x18, 0x2c, 0x0, 0x1, [@typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x34}}, 0x4044004)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_lprops\x00', 0x40aa2, 0x0)
r3 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x7)
read$auto(r3, 0x0, 0x1)
write$auto(0x3, 0x0, 0xffd8)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r4, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000001c0)={{@inferred=<r6=>0x0, 0x1, 0x6, 0x80000001, "a2b8e85fc56865ba529faa000000000000000000000018f4ffffdeffff0000000000c7692a240000008000"}, 0x6, 0x5, 0x7, @raw=0x8, @reserved="fb99d320be0de941ac3f58d7aae0c84cbe332d618e0342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d3c89bee7005c5affd5ab811fd53443e6cf63a902991b44e48364e8de3f344584996c31f9ae16c6c4f064c38f590125ed26400", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f4ab606c276852295e00af49090000008034"})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f00000000c0)={@inferred=r6, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c})

2.064079606s ago: executing program 9 (id=1666):
openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0)
mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
ioctl$auto(0x3, 0x541b, 0x10000000000402) (async)
capget$auto(0x0, 0xfffffffffffffffe) (async)
capset$auto(0x0, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010) (async)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) (async)
connect$auto(0x4, 0x0, 0x10)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async)
socket(0x2, 0x1, 0x106) (async)
pipe$auto(&(0x7f0000000500))
flock$auto(0xffffffffffffffff, 0x9) (async)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x0)
close_range$auto(0x2, 0x8000, 0xffffd603) (async)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4) (async)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) (async)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x12f040, 0x0) (async)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

1.776381556s ago: executing program 8 (id=1668):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x23, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto(r0, 0x1, 0x4c, 0x0, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x40802, 0x0)
r1 = fanotify_init$auto(0x4, 0x1)
lseek$auto(r0, 0x10000, 0x8)
fanotify_mark$auto(r1, 0x205, 0x100000a, 0x4, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
fstatfs$auto(0x3, 0x0)
ioctl$auto(r2, 0x4b66, 0x1)
close_range$auto(0x2, 0x8, 0x0)

1.652958185s ago: executing program 8 (id=1669):
r0 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040)="4a67d23edb3100000000000000000075210d2de48306c2fb", 0x49}, 0x5, &(0x7f0000000180), 0x5}, 0x1}, 0x2, 0x3)
mmap$auto(0x0, 0xa3f, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x10, 0x3, 0x6)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = getpid()
r2 = gettid()
rt_tgsigqueueinfo$auto(r1, r2, 0x21, &(0x7f0000000400)={@siginfo_0_0={0xc4, 0xc, 0x80, @_sigsys={0x0, 0xffff, 0x7}}})
move_pages$auto(r1, 0x1, &(0x7f0000000080)=&(0x7f0000000180)="50e6798f89d3097c187e54ba4cfab41ec63c391f8d12263c802807f520ca6b7e60d5d20fdc825242e165ea4ab844db382b3cf31ef539ce26eb806908028d6459d1501c288851df5a6f7e98076c09172718caf14cd85d1abfef476c333ba7fd3cd1805a6375136f1716c1702792a25c7903ed2dcb37638711a1d1f1a9847d", &(0x7f0000000100)=0x81, &(0x7f0000000200)=0x7fff, 0x3)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0x100082)
mmap$auto(0x0, 0x2020009, 0x3, 0x11, r3, 0x9)
io_uring_setup$auto(0x0, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
r4 = socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = open(0x0, 0x22240, 0x155)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e22}, 0x55)
r6 = open(0x0, 0xc162, 0x0)
ftruncate$auto(r6, 0xdaaf)
sendfile$auto(r4, r5, 0x0, 0x10000007fffeffa)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)

1.44119905s ago: executing program 8 (id=1670):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050727bd7000fbdbdf256700000005002a0140000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
pipe$auto(0x0)
setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6})
socket(0x2, 0x1, 0x0)
pipe$auto(0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(0x0, &(0x7f0000000000)=0x9, 0x2, 0x0)

1.056850799s ago: executing program 9 (id=1671):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
read$auto(0x3, 0x0, 0x80)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x11, 0x3, 0x300)
setsockopt$auto(r0, 0x107, 0x5, 0x0, 0x8004)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2000, 0x0)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x34c, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xe2, 0xac, "df94e11d19ebfb68ffb81529d4094dac2c1a6e935f6966d6a2358e31a0d7bacf575888740ab89011d0d10fe35380766caaa6ccbcb06a09b050f655cda7e775a3dc96627880efef2d7bfb6a31f0905206d85d7e718c249f13f5d11233c3ac2ea9d27bfc269b0a7c540e49d53207ed3280bc0afc168ff772ce59a8c8a4a2c2f33725c143be6d1056cf20b97868158e376c4c9ef2fe9b35a876bab33f3cdd2e89042e4a612037ca20078eb96ba390a5b8f36f8a17e4565a82b516e5682d53bdb70277099f97a1bcbd61565dbd4c0a20406c1da253292250fabd94b84ad4c7af"}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_HT_CAPABILITY={0x7e, 0x1f, "7e7210ea3e601e31313f26f976b53c5f80296482f6d91a3c410c7afffddae8f99a97ce247eba1961b5769eff651aa09c66895ac53f0c7b2ce12eccaf17ccda323e8e49643922c073c658e2749c515bcdcef860d62c6ad9c96e118ebe8610ec84ee02f8162a05de265014dea106a1951e94e4d786113be32d47a0"}, @NL80211_ATTR_TID_CONFIG={0x1cc, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x66}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xf6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, "8e"}, @NL80211_TXRATE_HE={0xb, 0x5, "97d3e405b8f928"}, @NL80211_TXRATE_LEGACY={0x5, 0x1, "02"}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x6}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xc}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x10}]}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, "3845f14c91db8ed32b6aaf20e3ab8e3dee2c33a08890e61766aed93a8b51"}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xf}, @NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_HT={0x24, 0x2, "327d40fdc4006310ac61fea89e97724f9f2f80836223eed53b86360fd9437d42"}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, "03a17fce4297ae76d9ae1a649bbf87463b"}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0xc}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xff}, @NL80211_TXRATE_VHT={0x47, 0x3, "3ebdad581482afe687b07d43d57a9778b7ac8141a08bbfa99697216f20a16ef3d65622882ab5fe1f9fb4ddcadbd23839b633963c52d10e0810ab7f2813c7a1b0d0fe1f"}, @NL80211_TXRATE_LEGACY={0xd, 0x1, "936d2699930df12def"}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8}, @NL80211_TXRATE_LEGACY={0xe, 0x1, "367b6d045845dbf6e22b"}, @NL80211_TXRATE_HT={0xd, 0x2, "df629fbbfa0832f908"}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000091)
read$auto(r1, 0x0, 0x20)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda25684", 0xffff, 0x26, 0x2, 0x9b4, 0x9, "ce25aff8d593000000000000223ffe", '\x00', "0400e6ad", "2ff43123", ["f5404de9641f8bf1bad22a9f", "a1679d340ad98fad2453f86d", "b06f8ca10c66eebcbd6f17c8", "5fe10eedab2c4b353c392a92"]})
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x100, 0x0)
mmap$auto(0x0, 0xc, 0xfff, 0x44eb2, 0x10006, 0x300000000000)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
unshare$auto(0x40000080)

1.054779693s ago: executing program 8 (id=1672):
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
process_vm_writev$auto(0x0, &(0x7f00000011c0)={&(0x7f00000001c0)="42777dd1330b458d0b5c44ca32e94fc00cfbce962ee7d8f31c0f90c327830f55adfdceafcc0f7b5a21ea23bdf5344d47d49d60218e57bb33118d04fdd37f5fd17f96a318132a5dd282784244bd58b9a0c8adc60d2f8535b3", 0x8}, 0x7, 0x0, 0x7, 0xb5)
r2 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000180), 0x69, &(0x7f0000000100)={&(0x7f0000000180)="4c0300000000000000a3677337f9eca9075f6bba441b", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100)
read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xffffffffffffff2b, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40000c0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80002, 0x0)
mmap$auto(0xffffffffffffffff, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000)
ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8)
madvise$auto(0x0, 0x200007, 0x19)
syz_clone3(0x0, 0x0)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1)
futex_wake$auto(0x0, 0xa, 0xfffffffb, 0x20000009)
sysfs$auto(0x2, 0x23, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r2, 0x0, 0x4)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)

104.744861ms ago: executing program 8 (id=1673):
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x200, 0x1)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x84)
fanotify_mark$auto(0x0, 0x31, 0x9, r0, 0x0)
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')

20.250318ms ago: executing program 39 (id=1635):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x70, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0)
ioctl$auto(r4, 0x800454cf, 0xffffffffffffffff)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0xa, 0x2, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', <r7=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, 0xffffffffffffffff, 0x8, 0xff, r5, @relative_fd, 0xe600}, 0xf)
r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007180), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHC_VCLOCKS_GET(r3, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000007200)={&(0x7f00000071c0)={0x14, r8, 0x301, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x2000000, 0x0, 0xc0000}, 0x8000)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000)
sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000084)
syncfs$auto(r1)
ioctl$auto_FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x100)

0s ago: executing program 8 (id=1675):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000)
r0 = clone$auto(0x4, 0x400, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xd1)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x40100, 0x0)
read$auto_proc_pagemap_operations_internal(r1, &(0x7f0000001540)=""/209, 0xd1)
r2 = prctl$auto_SECCOMP_MODE_FILTER(0x80, 0x2, r0, 0x8, 0xc)
openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$auto_SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000080)=0x68b)

kernel console output (not intermixed with test programs):

yz.3.971 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  303.187052][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  303.187067][T10279] Call Trace:
[  303.187076][T10279]  <TASK>
[  303.187087][T10279]  dump_stack_lvl+0x16c/0x1f0
[  303.187126][T10279]  should_fail_ex+0x512/0x640
[  303.187163][T10279]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  303.187197][T10279]  should_failslab+0xc2/0x120
[  303.187231][T10279]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  303.187260][T10279]  ? __d_alloc+0x31/0xaa0
[  303.187290][T10279]  __d_alloc+0x31/0xaa0
[  303.187313][T10279]  ? rcu_is_watching+0x12/0xc0
[  303.187342][T10279]  d_alloc_pseudo+0x1c/0xc0
[  303.187374][T10279]  alloc_file_pseudo+0xcf/0x230
[  303.187425][T10279]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  303.187474][T10279]  ? alloc_fd+0x471/0x7d0
[  303.187521][T10279]  __anon_inode_getfile+0xf7/0x370
[  303.187571][T10279]  anon_inode_getfile_fmode+0x37/0xa0
[  303.187615][T10279]  __do_sys_timerfd_create+0x216/0x3e0
[  303.187638][T10279]  ? do_syscall_64+0x91/0x230
[  303.187671][T10279]  do_syscall_64+0xcd/0x230
[  303.187706][T10279]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.187728][T10279] RIP: 0033:0x7ff6abd8e969
[  303.187751][T10279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.187777][T10279] RSP: 002b:00007ff6acc83038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b
[  303.187805][T10279] RAX: ffffffffffffffda RBX: 00007ff6abfb5fa0 RCX: 00007ff6abd8e969
[  303.187823][T10279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009
[  303.187838][T10279] RBP: 00007ff6abe10ab1 R08: 0000000000000000 R09: 0000000000000000
[  303.187854][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  303.187868][T10279] R13: 0000000000000000 R14: 00007ff6abfb5fa0 R15: 00007ffdc595a4a8
[  303.187902][T10279]  </TASK>
[  304.314731][T10285] warning: `syz.3.971' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  305.332946][T10287] netlink: 504 bytes leftover after parsing attributes in process `syz.2.972'.
[  305.377159][T10287] netlink: 350 bytes leftover after parsing attributes in process `syz.2.972'.
[  305.437813][T10287] netlink: 'syz.2.972': attribute type 16 has an invalid length.
[  305.445974][T10287] netlink: 330 bytes leftover after parsing attributes in process `syz.2.972'.
[  308.486937][T10316] netlink: 122 bytes leftover after parsing attributes in process `syz.0.977'.
[  309.039850][T10327] QAT: Device 0 not found
[  309.046193][T10326] QAT: Device 0 not found
[  309.688075][T10352] netlink: 504 bytes leftover after parsing attributes in process `syz.1.987'.
[  309.703601][T10352] netlink: 504 bytes leftover after parsing attributes in process `syz.1.987'.
[  309.881713][T10342] netlink: 504 bytes leftover after parsing attributes in process `syz.3.985'.
[  309.952040][T10349] netlink: 350 bytes leftover after parsing attributes in process `syz.3.985'.
[  309.990241][T10342] netlink: 'syz.3.985': attribute type 16 has an invalid length.
[  310.019312][T10342] netlink: 330 bytes leftover after parsing attributes in process `syz.3.985'.
[  310.756052][T10366] svc: failed to register nfsdv3 RPC service (errno 111).
[  310.765389][T10366] svc: failed to register nfsaclv3 RPC service (errno 111).
[  312.676042][T10404] svc: failed to register nfsdv3 RPC service (errno 111).
[  312.721675][T10404] svc: failed to register nfsaclv3 RPC service (errno 111).
[  313.165108][T10431] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  313.449895][T10437] FAULT_INJECTION: forcing a failure.
[  313.449895][T10437] name failslab, interval 1, probability 0, space 0, times 0
[  313.483921][T10437] CPU: 0 UID: 0 PID: 10437 Comm: syz.0.1008 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  313.483968][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  313.483983][T10437] Call Trace:
[  313.483992][T10437]  <TASK>
[  313.484003][T10437]  dump_stack_lvl+0x16c/0x1f0
[  313.484043][T10437]  should_fail_ex+0x512/0x640
[  313.484081][T10437]  ? __kmalloc_noprof+0xbf/0x510
[  313.484113][T10437]  ? constrain_params_by_rules+0x175/0xca0
[  313.484150][T10437]  should_failslab+0xc2/0x120
[  313.484184][T10437]  __kmalloc_noprof+0xd2/0x510
[  313.484212][T10437]  ? kasan_quarantine_put+0x10a/0x240
[  313.484239][T10437]  ? lockdep_hardirqs_on+0x7c/0x110
[  313.484276][T10437]  constrain_params_by_rules+0x175/0xca0
[  313.484309][T10437]  ? constrain_params_by_rules+0xa09/0xca0
[  313.484349][T10437]  ? constrain_params_by_rules+0xa0e/0xca0
[  313.484397][T10437]  ? __pfx_constrain_params_by_rules+0x10/0x10
[  313.484437][T10437]  ? __pfx_constrain_params_by_rules+0x10/0x10
[  313.484472][T10437]  ? kfree+0x2b6/0x4d0
[  313.484510][T10437]  ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0
[  313.484566][T10437]  ? snd_pcm_oss_change_params_locked+0x1398/0x3b40
[  313.484597][T10437]  ? snd_pcm_oss_make_ready+0xe6/0x1b0
[  313.484629][T10437]  ? snd_interval_refine+0x2fa/0x580
[  313.484670][T10437]  snd_pcm_hw_refine+0x7de/0xad0
[  313.484707][T10437]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  313.484747][T10437]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  313.484795][T10437]  snd_pcm_hw_param_first+0x334/0x6f0
[  313.484830][T10437]  snd_pcm_hw_param_near.constprop.0+0x702/0x8e0
[  313.484866][T10437]  ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10
[  313.484902][T10437]  ? __asan_memset+0x23/0x50
[  313.484938][T10437]  ? calc_src_frames.isra.0+0x187/0x1d0
[  313.484983][T10437]  snd_pcm_oss_change_params_locked+0x1398/0x3b40
[  313.485041][T10437]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  313.485082][T10437]  ? __pfx___mutex_lock+0x10/0x10
[  313.485143][T10437]  snd_pcm_oss_make_ready+0xe6/0x1b0
[  313.485182][T10437]  ? __pfx_snd_pcm_oss_release+0x10/0x10
[  313.485217][T10437]  snd_pcm_oss_sync+0x1de/0x840
[  313.485258][T10437]  ? __pfx_snd_pcm_oss_release+0x10/0x10
[  313.485295][T10437]  snd_pcm_oss_release+0x28b/0x310
[  313.485333][T10437]  ? __pfx_snd_pcm_oss_release+0x10/0x10
[  313.485380][T10437]  __fput+0x3ff/0xb70
[  313.485424][T10437]  task_work_run+0x14d/0x240
[  313.485469][T10437]  ? __pfx_task_work_run+0x10/0x10
[  313.485513][T10437]  ? __pfx___do_sys_close_range+0x10/0x10
[  313.485539][T10437]  ? rcu_is_watching+0x12/0xc0
[  313.485574][T10437]  syscall_exit_to_user_mode+0x27b/0x2a0
[  313.485611][T10437]  do_syscall_64+0xda/0x230
[  313.485649][T10437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.485678][T10437] RIP: 0033:0x7f222678e969
[  313.485701][T10437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.485728][T10437] RSP: 002b:00007f22245f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  313.485756][T10437] RAX: 0000000000000000 RBX: 00007f22269b5fa0 RCX: 00007f222678e969
[  313.485774][T10437] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  313.485790][T10437] RBP: 00007f2226810ab1 R08: 0000000000000000 R09: 0000000000000000
[  313.485806][T10437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  313.485822][T10437] R13: 0000000000000000 R14: 00007f22269b5fa0 R15: 00007ffc9324d1e8
[  313.485860][T10437]  </TASK>
[  314.513020][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'.
[  314.921686][T10465] svc: failed to register nfsdv3 RPC service (errno 111).
[  314.952054][T10465] svc: failed to register nfsaclv3 RPC service (errno 111).
[  315.720281][T10490] can: request_module (can-proto-3) failed.
[  321.634284][T10600] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1038'.
[  321.682170][T10601] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1038'.
[  322.113715][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'.
[  322.814138][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  322.821884][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  323.002424][T10637] FAULT_INJECTION: forcing a failure.
[  323.002424][T10637] name failslab, interval 1, probability 0, space 0, times 0
[  323.040456][T10637] CPU: 1 UID: 0 PID: 10637 Comm: syz.3.1047 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  323.040499][T10637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  323.040523][T10637] Call Trace:
[  323.040533][T10637]  <TASK>
[  323.040543][T10637]  dump_stack_lvl+0x16c/0x1f0
[  323.040584][T10637]  should_fail_ex+0x512/0x640
[  323.040617][T10637]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  323.040649][T10637]  should_failslab+0xc2/0x120
[  323.040682][T10637]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  323.040713][T10637]  ? getname_flags.part.0+0x4c/0x550
[  323.040753][T10637]  getname_flags.part.0+0x4c/0x550
[  323.040791][T10637]  getname_flags+0x93/0xf0
[  323.040847][T10637]  do_sys_openat2+0xb8/0x1d0
[  323.040884][T10637]  ? __pfx_do_sys_openat2+0x10/0x10
[  323.040936][T10637]  __x64_sys_openat+0x174/0x210
[  323.040974][T10637]  ? __pfx___x64_sys_openat+0x10/0x10
[  323.041020][T10637]  ? rcu_is_watching+0x12/0xc0
[  323.041079][T10637]  do_syscall_64+0xcd/0x230
[  323.041116][T10637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.041150][T10637] RIP: 0033:0x7ff6abd8e969
[  323.041174][T10637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  323.041200][T10637] RSP: 002b:00007ff6acc62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  323.041225][T10637] RAX: ffffffffffffffda RBX: 00007ff6abfb6080 RCX: 00007ff6abd8e969
[  323.041242][T10637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  323.041258][T10637] RBP: 00007ff6abe10ab1 R08: 0000000000000000 R09: 0000000000000000
[  323.041272][T10637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  323.041285][T10637] R13: 0000000000000000 R14: 00007ff6abfb6080 R15: 00007ffdc595a4a8
[  323.041316][T10637]  </TASK>
[  325.258355][T10684] svc: failed to register nfsdv3 RPC service (errno 111).
[  325.293208][T10684] svc: failed to register nfsaclv3 RPC service (errno 111).
[  325.587811][T10685] svc: failed to register nfsdv3 RPC service (errno 111).
[  325.623212][T10685] svc: failed to register nfsaclv3 RPC service (errno 111).
[  326.644803][T10641] kexec: Could not allocate control_code_buffer
[  327.876686][   T30] audit: type=1326 audit(4294968352.813:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.3.1066" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff6abd8e969 code=0x0
[  328.126143][T10721] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1066'.
[  328.425929][T10721] bridge0: port 3(gretap0) entered disabled state
[  328.942013][T10728] svc: failed to register nfsdv3 RPC service (errno 111).
[  328.981467][T10728] svc: failed to register nfsaclv3 RPC service (errno 111).
[  332.329948][T10779] svc: failed to register nfsdv3 RPC service (errno 111).
[  332.355369][T10779] svc: failed to register nfsaclv3 RPC service (errno 111).
[  332.383723][T10784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1084'.
[  332.941194][T10796] Invalid ELF header magic: != ELF
[  333.833703][T10811] netlink: zone id is out of range
[  333.839266][T10811] netlink: zone id is out of range
[  333.839282][T10811] netlink: zone id is out of range
[  333.839291][T10811] netlink: zone id is out of range
[  333.839302][T10811] netlink: zone id is out of range
[  333.839312][T10811] netlink: zone id is out of range
[  333.839323][T10811] netlink: zone id is out of range
[  333.839334][T10811] netlink: zone id is out of range
[  333.839345][T10811] netlink: zone id is out of range
[  333.839356][T10811] netlink: zone id is out of range
[  334.271427][T10831] svc: failed to register nfsdv3 RPC service (errno 111).
[  334.307204][T10831] svc: failed to register nfsaclv3 RPC service (errno 111).
[  337.301639][T10894] svc: failed to register nfsdv3 RPC service (errno 111).
[  337.314926][T10894] svc: failed to register nfsaclv3 RPC service (errno 111).
[  338.870980][T10925] FAULT_INJECTION: forcing a failure.
[  338.870980][T10925] name failslab, interval 1, probability 0, space 0, times 0
[  338.952469][T10925] CPU: 0 UID: 0 PID: 10925 Comm: syz.2.1111 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  338.952510][T10925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  338.952525][T10925] Call Trace:
[  338.952534][T10925]  <TASK>
[  338.952544][T10925]  dump_stack_lvl+0x16c/0x1f0
[  338.952582][T10925]  should_fail_ex+0x512/0x640
[  338.952617][T10925]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  338.952659][T10925]  should_failslab+0xc2/0x120
[  338.952692][T10925]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  338.952722][T10925]  ? __alloc_skb+0x2b2/0x380
[  338.952768][T10925]  __alloc_skb+0x2b2/0x380
[  338.952809][T10925]  ? __pfx___alloc_skb+0x10/0x10
[  338.952850][T10925]  ? bpf_ksym_find+0x124/0x1c0
[  338.952889][T10925]  ? aa_label_sk_perm+0x19b/0x5a0
[  338.952919][T10925]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  338.952955][T10925]  tcp_stream_alloc_skb+0x34/0x570
[  338.952993][T10925]  tcp_sendmsg_locked+0xec1/0x3930
[  338.953052][T10925]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  338.953089][T10925]  ? do_raw_spin_lock+0x12c/0x2b0
[  338.953130][T10925]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  338.953179][T10925]  ? __local_bh_enable_ip+0xa4/0x120
[  338.953215][T10925]  tcp_sendmsg+0x2e/0x50
[  338.953244][T10925]  ? __pfx_tcp_sendmsg+0x10/0x10
[  338.953289][T10925]  inet_sendmsg+0xb9/0x140
[  338.953325][T10925]  sock_write_iter+0x4aa/0x5b0
[  338.953361][T10925]  ? __pfx_sock_write_iter+0x10/0x10
[  338.953408][T10925]  ? bpf_lsm_file_permission+0x9/0x10
[  338.953448][T10925]  ? security_file_permission+0x71/0x210
[  338.953485][T10925]  ? rw_verify_area+0xcf/0x680
[  338.953528][T10925]  vfs_write+0x5ba/0x1180
[  338.953553][T10925]  ? __pfx_sock_write_iter+0x10/0x10
[  338.953589][T10925]  ? __pfx_vfs_write+0x10/0x10
[  338.953611][T10925]  ? find_held_lock+0x2b/0x80
[  338.953661][T10925]  ksys_write+0x205/0x240
[  338.953686][T10925]  ? __pfx_ksys_write+0x10/0x10
[  338.953708][T10925]  ? rcu_is_watching+0x12/0xc0
[  338.953744][T10925]  do_syscall_64+0xcd/0x230
[  338.953781][T10925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.953808][T10925] RIP: 0033:0x7f4d2958e969
[  338.953831][T10925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.953856][T10925] RSP: 002b:00007f4d273f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  338.953882][T10925] RAX: ffffffffffffffda RBX: 00007f4d297b5fa0 RCX: 00007f4d2958e969
[  338.953899][T10925] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003
[  338.953914][T10925] RBP: 00007f4d273f6090 R08: 0000000000000000 R09: 0000000000000000
[  338.953930][T10925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.953945][T10925] R13: 0000000000000000 R14: 00007f4d297b5fa0 R15: 00007ffd821455b8
[  338.953981][T10925]  </TASK>
[  339.936781][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1117'.
[  340.016783][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1117'.
[  340.042671][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1117'.
[  340.076703][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1117'.
[  340.107762][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1117'.
[  340.147122][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1117'.
[  340.157028][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1117'.
[  340.167176][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1117'.
[  340.186751][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1117'.
[  340.198952][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1117'.
[  341.023156][T10979] FAULT_INJECTION: forcing a failure.
[  341.023156][T10979] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  341.057061][T10979] CPU: 1 UID: 0 PID: 10979 Comm: syz.2.1125 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  341.057102][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  341.057118][T10979] Call Trace:
[  341.057126][T10979]  <TASK>
[  341.057137][T10979]  dump_stack_lvl+0x16c/0x1f0
[  341.057174][T10979]  should_fail_ex+0x512/0x640
[  341.057216][T10979]  _copy_from_user+0x2e/0xd0
[  341.057256][T10979]  kstrtouint_from_user+0xd6/0x1d0
[  341.057288][T10979]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  341.057315][T10979]  ? __lock_acquire+0xaa4/0x1ba0
[  341.057365][T10979]  proc_fail_nth_write+0x83/0x250
[  341.057413][T10979]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  341.057462][T10979]  vfs_write+0x25c/0x1180
[  341.057483][T10979]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  341.057520][T10979]  ? __pfx___mutex_lock+0x10/0x10
[  341.057552][T10979]  ? __pfx_vfs_write+0x10/0x10
[  341.057594][T10979]  ? __fget_files+0x20e/0x3c0
[  341.057649][T10979]  ksys_write+0x12a/0x240
[  341.057674][T10979]  ? __pfx_ksys_write+0x10/0x10
[  341.057696][T10979]  ? rcu_is_watching+0x12/0xc0
[  341.057732][T10979]  do_syscall_64+0xcd/0x230
[  341.057769][T10979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.057797][T10979] RIP: 0033:0x7f4d2958d41f
[  341.057817][T10979] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  341.057841][T10979] RSP: 002b:00007f4d273f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  341.057866][T10979] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d2958d41f
[  341.057883][T10979] RDX: 0000000000000001 RSI: 00007f4d273f60a0 RDI: 0000000000000005
[  341.057898][T10979] RBP: 00007f4d273f6090 R08: 0000000000000000 R09: 0000000000000000
[  341.057913][T10979] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  341.057928][T10979] R13: 0000000000000000 R14: 00007f4d297b5fa0 R15: 00007ffd821455b8
[  341.057965][T10979]  </TASK>
[  342.372478][   T30] audit: type=1800 audit(4294968367.343:3): pid=11005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1130" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0
[  342.563343][T11012] Invalid ELF header magic: != ELF
[  344.825863][T11070] could not allocate digest TFM handle 
[  344.849938][T11079] macsec0: entered allmulticast mode
[  344.917119][T11079] veth1_macvtap: entered allmulticast mode
[  345.695335][T11091] svc: failed to register nfsdv3 RPC service (errno 111).
[  345.766816][T11091] svc: failed to register nfsaclv3 RPC service (errno 111).
[  346.107781][T11102] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  346.697614][T11117] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  346.744036][T11117] CIFS mount error: No usable UNC path provided in device string!
[  346.744036][T11117] 
[  346.781930][T11117] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  346.990152][T11128] net_ratelimit: 77 callbacks suppressed
[  346.990177][T11128] openvswitch: netlink: nsh attr 68 is out of range max 3
[  349.569585][T11197] __nla_validate_parse: 60 callbacks suppressed
[  349.569612][T11197] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1173'.

syzkaller
syzkaller login: [  349.943641][T11209] random: crng reseeded on system resumption
[  350.745907][T11222] svc: failed to register nfsdv3 RPC service (errno 111).
[  350.780925][T11222] svc: failed to register nfsaclv3 RPC service (errno 111).
[  351.185499][T11230] svc: failed to register nfsdv3 RPC service (errno 111).
[  351.222445][T11230] svc: failed to register nfsaclv3 RPC service (errno 111).
[  351.333381][T11237] perf: Dynamic interrupt throttling disabled, can hang your system!
[  351.701621][T11244] netlink: 'syz.3.1186': attribute type 1 has an invalid length.
[  351.969956][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1185'.
[  353.507551][T11275] svc: failed to register nfsdv3 RPC service (errno 111).
[  353.551757][T11275] svc: failed to register nfsaclv3 RPC service (errno 111).
[  354.026097][T11295] Invalid ELF header magic: != ELF
[  354.655096][T11309] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1199'.
[  355.105303][T11325] svc: failed to register nfsdv3 RPC service (errno 111).
[  355.119080][T11325] svc: failed to register nfsaclv3 RPC service (errno 111).
[  356.413083][T11381] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1215'.
[  356.662138][T11359] kexec: Could not allocate control_code_buffer
[  356.844107][T11387] svc: failed to register nfsdv3 RPC service (errno 111).
[  356.873632][T11387] svc: failed to register nfsaclv3 RPC service (errno 111).
[  360.933666][T11452] can: request_module (can-proto-3) failed.
[  361.779665][T11475] CIFS mount error: No usable UNC path provided in device string!
[  361.779665][T11475] 
[  362.001600][T11475] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  362.266925][T11471] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[11471]
[  362.690661][T11488] FAULT_INJECTION: forcing a failure.
[  362.690661][T11488] name failslab, interval 1, probability 0, space 0, times 0
[  362.704018][T11488] CPU: 1 UID: 0 PID: 11488 Comm: syz.2.1238 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  362.704061][T11488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  362.704078][T11488] Call Trace:
[  362.704088][T11488]  <TASK>
[  362.704100][T11488]  dump_stack_lvl+0x16c/0x1f0
[  362.704142][T11488]  should_fail_ex+0x512/0x640
[  362.704182][T11488]  ? fs_reclaim_acquire+0xae/0x150
[  362.704229][T11488]  should_failslab+0xc2/0x120
[  362.704265][T11488]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[  362.704300][T11488]  ? set_tracefs_inode_owner+0x235/0x310
[  362.704337][T11488]  ? ima_alloc_tfm+0x21a/0x2e0
[  362.704377][T11488]  ? ima_collect_measurement+0x4b5/0xa40
[  362.704412][T11488]  krealloc_noprof+0x1fb/0x380
[  362.704449][T11488]  ima_collect_measurement+0x4b5/0xa40
[  362.704490][T11488]  ? __pfx_ima_collect_measurement+0x10/0x10
[  362.704543][T11488]  ? trace_contention_end+0xdd/0x130
[  362.704583][T11488]  ? __mutex_lock+0x1ca/0xb90
[  362.704618][T11488]  ? is_bad_inode+0xd/0x40
[  362.704656][T11488]  ? xattr_resolve_name+0x27b/0x3f0
[  362.704717][T11488]  ? vfs_getxattr_alloc+0xec/0x340
[  362.704772][T11488]  ? ima_get_hash_algo+0x27c/0x400
[  362.704811][T11488]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  362.704862][T11488]  ? process_measurement+0x11fa/0x23e0
[  362.704902][T11488]  process_measurement+0x11fa/0x23e0
[  362.704952][T11488]  ? __pfx_process_measurement+0x10/0x10
[  362.705000][T11488]  ? mod_objcg_state+0x5eb/0xa50
[  362.705069][T11488]  ? __pfx_tracing_clock_show+0x10/0x10
[  362.705110][T11488]  ? single_open+0x15f/0x1f0
[  362.705141][T11488]  ? inode_to_bdi+0x9e/0x160
[  362.705181][T11488]  ima_file_check+0xc5/0x110
[  362.705220][T11488]  ? __pfx_ima_file_check+0x10/0x10
[  362.705270][T11488]  security_file_post_open+0x8e/0x210
[  362.705305][T11488]  path_openat+0x147d/0x2d40
[  362.705347][T11488]  ? __pfx_path_openat+0x10/0x10
[  362.705381][T11488]  do_filp_open+0x20b/0x470
[  362.705404][T11488]  ? __pfx_do_filp_open+0x10/0x10
[  362.705456][T11488]  ? alloc_fd+0x471/0x7d0
[  362.705507][T11488]  do_sys_openat2+0x11b/0x1d0
[  362.705542][T11488]  ? __pfx_do_sys_openat2+0x10/0x10
[  362.705592][T11488]  __x64_sys_openat+0x174/0x210
[  362.705628][T11488]  ? __pfx___x64_sys_openat+0x10/0x10
[  362.705667][T11488]  ? rcu_is_watching+0x12/0xc0
[  362.705713][T11488]  do_syscall_64+0xcd/0x230
[  362.705753][T11488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.705782][T11488] RIP: 0033:0x7f4d2958e969
[  362.705807][T11488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  362.705834][T11488] RSP: 002b:00007f4d273f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  362.705862][T11488] RAX: ffffffffffffffda RBX: 00007f4d297b5fa0 RCX: 00007f4d2958e969
[  362.705880][T11488] RDX: 0000000000022500 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  362.705897][T11488] RBP: 00007f4d29610ab1 R08: 0000000000000000 R09: 0000000000000000
[  362.705913][T11488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  362.705929][T11488] R13: 0000000000000000 R14: 00007f4d297b5fa0 R15: 00007ffd821455b8
[  362.705965][T11488]  </TASK>
[  362.712935][   T30] audit: type=1800 audit(4294968387.673:4): pid=11488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1238" name="trace_clock" dev="tracefs" ino=1258 res=0 errno=0
[  363.430669][T11498] delete_channel: no stack
[  367.013011][T11568] FAULT_INJECTION: forcing a failure.
[  367.013011][T11568] name failslab, interval 1, probability 0, space 0, times 0
[  367.067442][T11568] CPU: 1 UID: 0 PID: 11568 Comm: syz.3.1257 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  367.067480][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  367.067495][T11568] Call Trace:
[  367.067504][T11568]  <TASK>
[  367.067514][T11568]  dump_stack_lvl+0x16c/0x1f0
[  367.067552][T11568]  should_fail_ex+0x512/0x640
[  367.067587][T11568]  ? fs_reclaim_acquire+0xae/0x150
[  367.067626][T11568]  ? tomoyo_encode2+0x100/0x3e0
[  367.067655][T11568]  should_failslab+0xc2/0x120
[  367.067686][T11568]  __kmalloc_noprof+0xd2/0x510
[  367.067713][T11568]  ? d_absolute_path+0x136/0x1a0
[  367.067749][T11568]  tomoyo_encode2+0x100/0x3e0
[  367.067788][T11568]  tomoyo_encode+0x29/0x50
[  367.067820][T11568]  tomoyo_realpath_from_path+0x18f/0x6e0
[  367.067866][T11568]  tomoyo_path_number_perm+0x245/0x580
[  367.067902][T11568]  ? tomoyo_path_number_perm+0x237/0x580
[  367.067935][T11568]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  367.067966][T11568]  ? find_held_lock+0x2b/0x80
[  367.068023][T11568]  ? find_held_lock+0x2b/0x80
[  367.068046][T11568]  ? hook_file_ioctl_common+0x145/0x410
[  367.068083][T11568]  ? __fget_files+0x20e/0x3c0
[  367.068131][T11568]  security_file_ioctl+0x9b/0x240
[  367.068165][T11568]  __x64_sys_ioctl+0xb7/0x200
[  367.068205][T11568]  do_syscall_64+0xcd/0x230
[  367.068240][T11568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.068267][T11568] RIP: 0033:0x7ff6abd8e969
[  367.068289][T11568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.068314][T11568] RSP: 002b:00007ff6acc83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  367.068340][T11568] RAX: ffffffffffffffda RBX: 00007ff6abfb5fa0 RCX: 00007ff6abd8e969
[  367.068357][T11568] RDX: 0000000000000000 RSI: 000000000000541c RDI: 0000000000000002
[  367.068373][T11568] RBP: 00007ff6acc83090 R08: 0000000000000000 R09: 0000000000000000
[  367.068388][T11568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.068403][T11568] R13: 0000000000000000 R14: 00007ff6abfb5fa0 R15: 00007ffdc595a4a8
[  367.068439][T11568]  </TASK>
[  367.068517][T11568] ERROR: Out of memory at tomoyo_realpath_from_path.
[  368.010464][T11589] netlink: 'syz.2.1262': attribute type 10 has an invalid length.
[  368.069308][T11589] netlink: 230 bytes leftover after parsing attributes in process `syz.2.1262'.
[  368.106203][T11589] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  368.930499][T11617] netlink: zone id is out of range
[  368.945989][T11617] netlink: zone id is out of range
[  368.989722][T11617] netlink: zone id is out of range
[  369.004734][T11617] netlink: zone id is out of range
[  369.056409][T11617] netlink: zone id is out of range
[  369.083660][T11617] netlink: zone id is out of range
[  369.104917][T11617] netlink: zone id is out of range
[  369.129734][T11617] netlink: zone id is out of range
[  369.135105][T11617] netlink: zone id is out of range
[  370.074712][T11628] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1272'.
[  372.561845][T11673] svc: failed to register nfsdv3 RPC service (errno 111).
[  372.580434][T11673] svc: failed to register nfsaclv3 RPC service (errno 111).
[  372.999966][T11684] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1286'.
[  374.271051][T11703] zram: Added device: zram1
[  375.272904][T11717] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1292'.
[  375.820363][T11726] netlink: 194 bytes leftover after parsing attributes in process `syz.3.1295'.
[  375.951464][T11734] ksmbd: Unknown IPC event: 14, ignore.
[  376.229508][T11732] tipc: Started in network mode
[  376.234598][T11732] tipc: Node identity bb1414ac, cluster identity 4711
[  376.280748][T11732] tipc: Node number set to 3138655404
[  377.505034][T11756] lo: entered allmulticast mode
[  377.576904][T11757] lo: left allmulticast mode
[  383.903508][  T975] Process accounting resumed
[  384.073212][T11803] FAULT_INJECTION: forcing a failure.
[  384.073212][T11803] name failslab, interval 1, probability 0, space 0, times 0
[  384.088435][T11803] CPU: 0 UID: 0 PID: 11803 Comm: syz.2.1314 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  384.088476][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  384.088491][T11803] Call Trace:
[  384.088500][T11803]  <TASK>
[  384.088511][T11803]  dump_stack_lvl+0x16c/0x1f0
[  384.088553][T11803]  should_fail_ex+0x512/0x640
[  384.088591][T11803]  ? __kmalloc_noprof+0xbf/0x510
[  384.088626][T11803]  ? __register_sysctl_table+0xb3/0x1900
[  384.088655][T11803]  should_failslab+0xc2/0x120
[  384.088689][T11803]  __kmalloc_noprof+0xd2/0x510
[  384.088728][T11803]  __register_sysctl_table+0xb3/0x1900
[  384.088789][T11803]  ? is_module_address+0x5f/0xf0
[  384.088835][T11803]  ? __pfx___register_sysctl_table+0x10/0x10
[  384.088866][T11803]  ? is_module_address+0x69/0xf0
[  384.088902][T11803]  ? register_net_sysctl_sz+0x228/0x3e0
[  384.088944][T11803]  ? __asan_memcpy+0x3c/0x60
[  384.088994][T11803]  __ip_vs_lblc_init+0x159/0x340
[  384.089036][T11803]  ? __pfx___ip_vs_lblc_init+0x10/0x10
[  384.089073][T11803]  ops_init+0x1df/0x5f0
[  384.089104][T11803]  setup_net+0x21e/0x850
[  384.089135][T11803]  ? __pfx_setup_net+0x10/0x10
[  384.089163][T11803]  ? lockdep_init_map_type+0x5c/0x280
[  384.089200][T11803]  ? __pfx_down_read_killable+0x10/0x10
[  384.089245][T11803]  ? debug_mutex_init+0x37/0x70
[  384.089294][T11803]  copy_net_ns+0x2a6/0x5f0
[  384.089330][T11803]  create_new_namespaces+0x3ea/0xad0
[  384.089371][T11803]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  384.089406][T11803]  ksys_unshare+0x45b/0xa40
[  384.089445][T11803]  ? __pfx_ksys_unshare+0x10/0x10
[  384.089486][T11803]  ? syscall_user_dispatch+0x78/0x140
[  384.089535][T11803]  __x64_sys_unshare+0x31/0x40
[  384.089573][T11803]  do_syscall_64+0xcd/0x230
[  384.089612][T11803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.089640][T11803] RIP: 0033:0x7f4d2958e969
[  384.089664][T11803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  384.089691][T11803] RSP: 002b:00007f4d273f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  384.089718][T11803] RAX: ffffffffffffffda RBX: 00007f4d297b5fa0 RCX: 00007f4d2958e969
[  384.089736][T11803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  384.089761][T11803] RBP: 00007f4d29610ab1 R08: 0000000000000000 R09: 0000000000000000
[  384.089777][T11803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  384.089793][T11803] R13: 0000000000000000 R14: 00007f4d297b5fa0 R15: 00007ffd821455b8
[  384.089831][T11803]  </TASK>
[  384.366219][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  384.372687][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  384.755691][T11814] netlink: 'syz.2.1316': attribute type 1 has an invalid length.
[  384.841986][T11816] Invalid ELF header magic: != ELF
[  387.162987][T11835] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1322'.
[  389.289605][T11849] bond0: no command found in slaves file - use +ifname or -ifname
[  389.693724][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  389.703812][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  389.712506][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  389.722136][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  389.730782][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  389.984238][T11859] chnl_net:caif_netlink_parms(): no params data found
[  390.150214][T11859] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.161808][T11859] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.171101][T11859] bridge_slave_0: entered allmulticast mode
[  390.179855][T11859] bridge_slave_0: entered promiscuous mode
[  390.189475][T11859] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.199317][T11859] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.207133][T11859] bridge_slave_1: entered allmulticast mode
[  390.215479][T11859] bridge_slave_1: entered promiscuous mode
[  390.293121][T11859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  390.309426][T11859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  390.371604][T11859] team0: Port device team_slave_0 added
[  390.387954][T11859] team0: Port device team_slave_1 added
[  390.432226][T11872] net_ratelimit: 78 callbacks suppressed
[  390.432249][T11872] openvswitch: netlink: Flow actions attr not present in new flow.
[  390.448552][   T30] audit: type=1326 audit(4294968415.423:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz.2.1328" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d2958e969 code=0x0
[  390.472759][T11859] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.480271][T11859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.509854][T11859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.524514][T11859] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.532600][T11859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.560061][T11859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.613239][T11859] hsr_slave_0: entered promiscuous mode
[  390.620614][T11859] hsr_slave_1: entered promiscuous mode
[  390.627217][T11859] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  390.634830][T11859] Cannot create hsr debugfs directory
[  390.822924][T11859] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  390.833806][T11859] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  390.845909][T11859] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  390.858610][T11859] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  390.892273][T11859] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.899705][T11859] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.907511][T11859] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.914929][T11859] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.975863][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.985864][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.019606][T11859] 8021q: adding VLAN 0 to HW filter on device bond0
[  391.042916][T11859] 8021q: adding VLAN 0 to HW filter on device team0
[  391.056193][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.063499][ T6970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  391.081950][T11336] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.089727][T11336] bridge0: port 2(bridge_slave_1) entered forwarding state
[  391.402730][T11859] 8021q: adding VLAN 0 to HW filter on device batadv0
[  391.776493][ T5833] Bluetooth: hci4: command tx timeout
[  392.325838][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  392.348043][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  392.364761][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  392.379107][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  392.379391][T11859] veth0_vlan: entered promiscuous mode
[  392.394117][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  392.427085][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  392.433279][T11859] veth1_vlan: entered promiscuous mode
[  392.451018][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  392.467331][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  392.477958][T11859] veth0_macvtap: entered promiscuous mode
[  392.491928][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  392.504079][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  392.510111][T11859] veth1_macvtap: entered promiscuous mode
[  392.598293][T11859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.609735][T11859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.621788][T11859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.632864][T11859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.644081][T11859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.658605][T11859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.668743][T11859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.680059][T11859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.693113][T11859] batman_adv: batadv0: Interface activated: batadv_slave_0
[  392.731878][T11859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.744246][T11859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.755905][T11859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.768125][T11859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.778335][T11859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.789142][T11859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.799580][T11859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.811759][T11859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.823699][T11859] batman_adv: batadv0: Interface activated: batadv_slave_1
[  392.855385][T11859] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  392.865889][T11859] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  392.875039][T11859] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  392.884163][T11859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.427491][T11893] chnl_net:caif_netlink_parms(): no params data found
[  393.493058][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.510248][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.676638][T11336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.685444][T11336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.846636][ T5845] Bluetooth: hci4: command tx timeout
[  393.852637][T11893] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.861349][T11893] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.869097][T11893] bridge_slave_0: entered allmulticast mode
[  393.887499][T11893] bridge_slave_0: entered promiscuous mode
[  393.914950][T11895] chnl_net:caif_netlink_parms(): no params data found
[  393.983567][T11893] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.998406][T11893] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.007358][T11893] bridge_slave_1: entered allmulticast mode
[  394.015518][T11893] bridge_slave_1: entered promiscuous mode
[  394.106292][T11893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.195335][T11893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.334622][T11893] team0: Port device team_slave_0 added
[  394.470463][T11893] team0: Port device team_slave_1 added
[  394.487264][ T5845] Bluetooth: hci5: command tx timeout
[  394.516126][T11895] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.529045][T11895] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.537391][T11895] bridge_slave_0: entered allmulticast mode
[  394.545835][T11895] bridge_slave_0: entered promiscuous mode
[  394.566466][ T5833] Bluetooth: hci6: command tx timeout
[  394.576132][T11935] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„
[  394.579301][T11895] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.598909][T11895] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.607047][T11895] bridge_slave_1: entered allmulticast mode
[  394.615693][T11895] bridge_slave_1: entered promiscuous mode
[  394.626761][T11893] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.634226][T11893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.663521][T11893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.737163][T11893] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.744439][T11893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.775642][T11893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.819535][T11895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.890816][T11895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  395.132104][T11893] hsr_slave_0: entered promiscuous mode
[  395.148088][T11893] hsr_slave_1: entered promiscuous mode
[  395.154664][T11893] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  395.177469][T11893] Cannot create hsr debugfs directory
[  395.195631][T11895] team0: Port device team_slave_0 added
[  395.277281][T11949] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1341'.
[  395.359401][T11895] team0: Port device team_slave_1 added
[  395.569562][T11895] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.577782][T11895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.606177][T11895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.642474][T11895] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.650178][T11895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.686905][T11895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.818199][T11895] hsr_slave_0: entered promiscuous mode
[  395.824735][T11895] hsr_slave_1: entered promiscuous mode
[  395.840972][T11895] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  395.878037][T11895] Cannot create hsr debugfs directory
[  395.927061][ T5833] Bluetooth: hci4: command tx timeout
[  395.951291][T11959] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1344'.
[  396.233630][T11893] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  396.287414][T11893] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  396.315262][T11893] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  396.344171][T11893] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  396.567109][ T5833] Bluetooth: hci5: command tx timeout
[  396.646591][ T5833] Bluetooth: hci6: command tx timeout
[  396.961652][T11895] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  397.017057][T11895] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  397.039073][T11893] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.083298][T11895] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  397.117133][T11895] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  397.206293][T11893] 8021q: adding VLAN 0 to HW filter on device team0
[  397.256267][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.264535][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.332205][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.339695][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.503179][T11991] cgroup: fork rejected by pids controller in /syz4
[  397.794865][T11895] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.911719][T11895] 8021q: adding VLAN 0 to HW filter on device team0
[  397.939379][T11281] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.946767][T11281] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.988757][T11281] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.996027][T11281] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.007981][ T5833] Bluetooth: hci4: command tx timeout
[  398.084762][T11895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  398.648300][ T5833] Bluetooth: hci5: command tx timeout
[  398.726544][ T5833] Bluetooth: hci6: command tx timeout
[  398.947416][T12081] MTRR 1 not used
[  399.036680][T11893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  399.138605][T11895] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.098750][T12102] Invalid ELF header magic: != ELF
[  400.279374][T11893] veth0_vlan: entered promiscuous mode
[  400.409814][T11895] veth0_vlan: entered promiscuous mode
[  400.421504][T11893] veth1_vlan: entered promiscuous mode
[  400.529948][T11895] veth1_vlan: entered promiscuous mode
[  400.583197][T11893] veth0_macvtap: entered promiscuous mode
[  400.727144][ T5833] Bluetooth: hci5: command tx timeout
[  400.757515][T11893] veth1_macvtap: entered promiscuous mode
[  400.806784][ T5833] Bluetooth: hci6: command tx timeout
[  400.854680][T11895] veth0_macvtap: entered promiscuous mode
[  400.901045][T11893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  400.936540][T11893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  400.978615][T11893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.013456][T11893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.064367][T11893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.090019][T11893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.100822][T11893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.114609][T11893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.125377][T11893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.137405][T11893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.171061][T11893] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.208152][T11895] veth1_macvtap: entered promiscuous mode
[  401.235011][T11893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.250694][T11893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.264429][T11893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.276198][T11893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.296613][T11893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.307857][T11893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.318774][T11893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.330291][T11893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.341553][T11893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.352535][T11893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.365933][T11893] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.382900][T12130] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$â��æµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ	�-¾_€™¯Ôåáª5Zäoåé¢mžÐfwYÍhº*/ÿxD
lÝ©Š×ígÕkÇ�Aí³ùÏ7ÍØØ9’�ôXöa/fê_ÿAR£ˆ™�‘ÈxM	‚v¬—pÿ±$^;ôØq‡3±«£n졵-
6�©+e„k�„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨�t®ÐSMÎÆ1,�á%Àmö%1ºç^í0܆êG)?p'
[  401.414981][T11893] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.426051][T11893] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.435977][T11893] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.446005][T11893] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.472010][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.486226][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.496882][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.508053][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.521372][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.542519][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.560162][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.581575][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.594683][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.618374][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.636832][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.648532][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.661369][T11895] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.706027][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.734696][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.755214][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.778105][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.796054][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.814621][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.829597][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.841406][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.852281][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.865430][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.878920][T11895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.890689][T11895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.903309][T11895] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.942348][T11895] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.952679][T11895] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.963998][T11895] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.989053][T11895] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  402.298084][T11342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.320990][T11342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.408672][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.441202][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.445707][ T6966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.464313][ T6966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.525055][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.557154][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.087748][T12176] i2c i2c-0: new_device: Can't parse I2C address
[  405.552427][T12215] FAULT_INJECTION: forcing a failure.
[  405.552427][T12215] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  405.602739][T12215] CPU: 0 UID: 0 PID: 12215 Comm: syz.2.1375 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  405.602778][T12215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  405.602791][T12215] Call Trace:
[  405.602799][T12215]  <TASK>
[  405.602809][T12215]  dump_stack_lvl+0x16c/0x1f0
[  405.602844][T12215]  should_fail_ex+0x512/0x640
[  405.602885][T12215]  should_fail_alloc_page+0xe7/0x130
[  405.602919][T12215]  prepare_alloc_pages+0x3c2/0x610
[  405.602958][T12215]  ? rcu_is_watching+0x12/0xc0
[  405.602986][T12215]  __alloc_frozen_pages_noprof+0x18f/0x23a0
[  405.603018][T12215]  ? __lock_acquire+0x5ca/0x1ba0
[  405.603051][T12215]  ? xas_create+0x1d7/0x1460
[  405.603092][T12215]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  405.603120][T12215]  ? cgroup_rstat_updated+0x2a/0xb20
[  405.603173][T12215]  ? __lock_acquire+0x5ca/0x1ba0
[  405.603202][T12215]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  405.603236][T12215]  ? policy_nodemask+0xea/0x4e0
[  405.603269][T12215]  alloc_pages_mpol+0x1fb/0x550
[  405.603299][T12215]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  405.603331][T12215]  ? filemap_get_entry+0x1a7/0x3b0
[  405.603369][T12215]  folio_alloc_noprof+0x20/0x2d0
[  405.603402][T12215]  filemap_alloc_folio_noprof+0x3a1/0x470
[  405.603431][T12215]  ? __pfx_filemap_alloc_folio_noprof+0x10/0x10
[  405.603459][T12215]  ? rcu_is_watching+0x12/0xc0
[  405.603496][T12215]  __filemap_get_folio+0x5e9/0xc10
[  405.603537][T12215]  ioctx_alloc+0x761/0x2060
[  405.603588][T12215]  ? __pfx_ioctx_alloc+0x10/0x10
[  405.603619][T12215]  ? __might_fault+0x13b/0x190
[  405.603657][T12215]  __x64_sys_io_setup+0xc9/0x210
[  405.603694][T12215]  do_syscall_64+0xcd/0x230
[  405.603729][T12215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.603753][T12215] RIP: 0033:0x7f4d2958e969
[  405.603773][T12215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.603797][T12215] RSP: 002b:00007f4d273d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  405.603821][T12215] RAX: ffffffffffffffda RBX: 00007f4d297b6080 RCX: 00007f4d2958e969
[  405.603837][T12215] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff
[  405.603853][T12215] RBP: 00007f4d29610ab1 R08: 0000000000000000 R09: 0000000000000000
[  405.603868][T12215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  405.603883][T12215] R13: 0000000000000000 R14: 00007f4d297b6080 R15: 00007ffd821455b8
[  405.603917][T12215]  </TASK>
[  405.645794][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1377'.
[  405.911281][T12218] team0: Port device team_slave_0 removed
[  406.970813][T12054] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.012685][T12233] tty tty12: ldisc open failed (-12), clearing slot 11
[  407.323839][T12054] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.412942][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  407.425028][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  407.442725][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  407.460948][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  407.471697][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  407.589610][T12054] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.707351][T12247] can: request_module (can-proto-3) failed.
[  407.851234][T12054] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.588645][T12259] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1385'.
[  408.721920][T12259] ›: renamed from hsr0 (while UP)
[  408.945129][T12054] bridge_slave_1: left allmulticast mode
[  408.952217][T12054] bridge_slave_1: left promiscuous mode
[  408.983002][T12054] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.049505][T12054] bridge_slave_0: left allmulticast mode
[  409.055222][T12054] bridge_slave_0: left promiscuous mode
[  409.067895][T12054] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.236690][T12260] zswap: compressor  not available
[  409.312490][T12273] Setting dangerous option i915.mitigations - tainting kernel
[  409.527014][ T5845] Bluetooth: hci6: command tx timeout
[  410.753730][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'.
[  411.043837][T12054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  411.097154][T12054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  411.125960][T12054] bond0 (unregistering): Released all slaves
[  411.196940][T12242] chnl_net:caif_netlink_parms(): no params data found
[  411.607209][ T5845] Bluetooth: hci6: command tx timeout
[  412.036594][T12242] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.055384][T12242] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.071612][T12242] bridge_slave_0: entered allmulticast mode
[  412.082792][T12242] bridge_slave_0: entered promiscuous mode
[  412.115076][T12054] hsr_slave_0: left promiscuous mode
[  412.123051][T12054] hsr_slave_1: left promiscuous mode
[  412.138081][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  412.146692][T12054] batman_adv: batadv0: Removing interface: batadv_slave_0
[  412.168965][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  412.182563][T12054] batman_adv: batadv0: Removing interface: batadv_slave_1
[  412.222031][T12054] veth1_macvtap: left promiscuous mode
[  412.228454][T12054] veth0_macvtap: left promiscuous mode
[  412.234238][T12054] veth1_vlan: left promiscuous mode
[  412.240291][T12054] veth0_vlan: left promiscuous mode
[  412.392519][T12310] random: crng reseeded on system resumption

				



				


	
	
		
		

		
		


	

	

	
	


	
	


		
	
	


	
	


		
	
	

	




	









		









	



	
	






			
	

		

	





		



	
		

	






		









	



	
	






			
	

		

	





		



	
		

	

	

	

	
	
	
	
	

	

	

	
		
	

	
		

	
		

	


	
	

		
	
		
	


	

	



			








	





	




	
		
		
		
	

	
	
		
	




	

	


	
	
	
	

	
	
	
	

	
	
		


		


		


	



	
	









	




	


	
	


	






	




	





		







			

			

			

			


	
		

	
		

		
		

		
	
	

		
		

		
	
	



		
		
	







	
		


	

	
		

	
		

	


	
	

		
	
		
	


	

	



			








	




	


















	
	


	




	


	

	


	
	

	

	






	




	





		








	

	

	


	


	
















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	






	

	




















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	






	

	




	
	

	

			
	
			
	
			
	
			
	


				


			


				


			
	

	
		

		
	
	

	
	
	

	
		
	

	
		
	
	

	

	

	
	

	
		
	

	
		
	
	
	
	
	

		
	




		
		

		
		


	

	

	
	
		
		

		
		


	

	

	
	


	
	


		
	
	


	
	


		
	
	

	




	









		









	



	
	






			
	

		

	





		



	
		

	






		









	



	
	






			
	

		

	





		



	
		

	

	

	
		






	
	
	
			

			

			

			


	
		

	
		

		
		

		
	
	

		
		

		
	
	


	
		



	

	


	


	
















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	






	

	




















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	






	

	




			
	
			
	
			
	
			
	


				


			


				


			
	
	
	
	


		
	




		
	




		
	




		
	




		
	




		
	




		
	


	
	

	
	
	

	
		
	
	

	
	
	

	
		
	
	
	
	
	
	
	
	
	
	
	
	
	

		
	




		
		

		
		


	

	

	
	


	
	
		
		

		
		


	

	

	
	
	
	


	
	


		
	
	


	
	


		
	
	
	

	




	









		









	



	
	






			
	

		

	





		



	
		

	






		









	



	
	






			
	

		

	





		



	
		

	

	

	
		






	
	

	
		
	
	
			

	
			

			

			


	
		


	
	

	
		

		
		

		
	
	

		
		

		
	
	




		
		
	
	
	


		
		
	

	
		



	

	


	


	
	
	
















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	






	

	




















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

	





	

	




			
	
			
	
			
	
			
	


				


			


				


			
	
	

	
	
	

	
		


	
	


	
		














	

	
		

		
	

	
		


	

	
		
	

		




	
	




			

			
	


	
		

	


	
	

		
	
		
	


	

	



			








	

	
	


	




		

		

			



	
	
	
	
		
	

	
	

	

	

	







	
	
	










	
	






	




	





		








	

	
	

	
		
	
	

	

	

	
	

	

	
		

	


	

	

		
	
		
	


	

	



			








	

	























































	


	






		
	
	




















	










	






	
	






	


	



	









	
	






	




	





		








	
	
	
	
	
	
	

		
	




		
		

		
		


	

	

	
	
		
		

		
		


	

	

	
	


	
	


		
	
	


	
	


		
	
	

	




	









		









	



	
	






			
	

		

	





		



	
		

	






		









	



	
	






			
	

		

	





		



	
		

	

	

	
		






	

	
				
	
	



	
		
			

			

			

			

		
		

		
	
	

		
		

		
	
	

		
		


		
		



	
		

	
		

		
		

		
	
	

		
		

		
	
	

	
	

	
		



	

	


	


	
















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	






	

	




















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	

















	

	






		

	
	






	

	




			
	
			
	
			
	
			
	
	
	


				


			


				


			

syzkaller
syzkaller login: [  493.585620][T13577] random: crng reseeded on system resumption
[  493.904284][ T5833] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  493.914972][ T5833] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  493.924238][ T5833] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  493.938233][ T5833] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  493.948192][ T5833] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  494.326629][ T5833] Bluetooth: hci9: command tx timeout
[  494.782136][T13580] chnl_net:caif_netlink_parms(): no params data found
[  495.290041][T13580] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.326541][T13580] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.333973][T13580] bridge_slave_0: entered allmulticast mode
[  495.369650][T13580] bridge_slave_0: entered promiscuous mode
[  495.398708][T13580] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.419328][T13580] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.446781][T13580] bridge_slave_1: entered allmulticast mode
[  495.467156][T13580] bridge_slave_1: entered promiscuous mode
[  495.788305][T13580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.831031][T13580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  495.981416][   T30] audit: type=1326 audit(4294967344.480:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13609 comm="syz.9.1592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f155c58e969 code=0x0
[  496.007022][ T5833] Bluetooth: hci10: command tx timeout
[  496.038776][T13580] team0: Port device team_slave_0 added
[  496.083551][T13580] team0: Port device team_slave_1 added
[  496.118232][T13611] netlink: 330 bytes leftover after parsing attributes in process `syz.9.1592'.
[  496.292970][T13580] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.308957][T13580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.339465][T13580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  496.372127][T13580] batman_adv: batadv0: Adding interface: batadv_slave_1
[  496.387741][T13580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.417429][ T5833] Bluetooth: hci9: command tx timeout
[  496.495501][T13580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  496.657194][T13580] hsr_slave_0: entered promiscuous mode
[  496.672541][T13580] hsr_slave_1: entered promiscuous mode
[  496.694478][T13580] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  496.702677][T13580] Cannot create hsr debugfs directory
[  497.861598][T13580] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.081634][T13580] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.092571][ T5833] Bluetooth: hci10: command tx timeout
[  498.374349][T13580] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.488949][T13580] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.723946][T13580] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  498.745256][T13580] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  498.769242][T13580] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  498.788917][T13580] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  498.963376][T13580] 8021q: adding VLAN 0 to HW filter on device bond0
[  499.029900][T13580] 8021q: adding VLAN 0 to HW filter on device team0
[  499.063074][T13374] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.070458][T13374] bridge0: port 1(bridge_slave_0) entered forwarding state
[  499.093270][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.100747][ T6966] bridge0: port 2(bridge_slave_1) entered forwarding state

syzkaller
syzkaller login: [  499.497045][T13580] 8021q: adding VLAN 0 to HW filter on device batadv0
[  499.602742][T13580] veth0_vlan: entered promiscuous mode
[  499.628239][T13580] veth1_vlan: entered promiscuous mode
[  499.681325][T13580] veth0_macvtap: entered promiscuous mode
[  499.705398][T13580] veth1_macvtap: entered promiscuous mode
[  499.763489][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.788052][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.806043][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.831194][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.847955][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.876525][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.896406][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.915571][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.930786][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.942303][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.953011][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.963612][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.978929][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.989546][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.999817][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.011183][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.023088][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.037151][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.048512][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.060325][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.074910][T13580] batman_adv: batadv0: Interface activated: batadv_slave_0
[  500.097433][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.110195][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.121937][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.144894][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.155896][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.168672][ T5833] Bluetooth: hci10: command tx timeout
[  500.189110][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.201758][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.213326][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.223770][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.237422][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.247736][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.258411][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.268484][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.281429][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.292371][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.303238][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.314804][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.326101][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.350882][T13580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.364456][T13580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.388526][T13580] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.414202][T13580] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  500.442825][T13580] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.455171][T13580] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.471028][T13580] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.674497][T11285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.703992][T11285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.785598][ T6965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.806038][ T6965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.257584][ T5833] Bluetooth: hci10: command tx timeout
[  504.276026][T13662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1602'.
[  504.331766][T13662] veth0_macvtap: entered allmulticast mode
[  504.902039][   T30] audit: type=1326 audit(4294967353.400:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.1.1604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef39b8e969 code=0x0
[  504.985104][T13675] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1604'.
[  507.157033][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  507.163520][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  509.111863][   T30] audit: type=1326 audit(4294967357.610:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.8.1618" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55f8d8e969 code=0x0
[  509.226483][T13733] netlink: 330 bytes leftover after parsing attributes in process `syz.8.1618'.
[  510.643394][T13755] Invalid ELF header magic: != ELF
[  511.561144][T13772] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1627'.
[  512.630373][T13786] openvswitch: netlink: Unknown nsh attribute 0
[  514.326796][ T5845] Bluetooth: hci4: command 0x0406 tx timeout
[  514.390685][T13800] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  517.472556][T13868] Invalid ELF header magic: != ELF
[  519.447773][ T5845] Bluetooth: hci5: command 0x0406 tx timeout
[  520.396493][T13899] netlink: 'syz.9.1650': attribute type 1 has an invalid length.
[  520.624165][T13878] kexec: Could not allocate control_code_buffer
[  524.184252][T13945] openvswitch: netlink: Key type 261 is out of range max 32
[  526.691710][T13948] kexec: Could not allocate control_code_buffer
[  529.686908][ T5845] Bluetooth: hci6: command 0x0406 tx timeout
[  529.758242][ T5845] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  529.778609][ T5845] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  529.789408][ T5845] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  529.798282][ T5845] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  529.808130][ T5845] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  530.285782][T13994] chnl_net:caif_netlink_parms(): no params data found
[  530.525104][T13994] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.533484][T13994] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.544361][T13994] bridge_slave_0: entered allmulticast mode
[  530.554144][T13994] bridge_slave_0: entered promiscuous mode
[  530.564166][T13994] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.571559][T13994] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.579190][T13994] bridge_slave_1: entered allmulticast mode
[  530.588762][T13994] bridge_slave_1: entered promiscuous mode
[  530.651216][T13994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.665919][T13994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.732836][T13994] team0: Port device team_slave_0 added
[  530.774262][T13994] team0: Port device team_slave_1 added
[  530.879106][T13994] batman_adv: batadv0: Adding interface: batadv_slave_0
[  530.896200][T13994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  530.924712][T13994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  530.938946][T13994] batman_adv: batadv0: Adding interface: batadv_slave_1
[  530.946207][T13994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  530.988333][T13994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  531.074454][T13994] hsr_slave_0: entered promiscuous mode
[  531.104243][T13994] hsr_slave_1: entered promiscuous mode
[  531.117390][T13994] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  531.125029][T13994] Cannot create hsr debugfs directory
[  531.522576][T13994] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.659410][T13994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.799855][T13994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.846771][ T5845] Bluetooth: hci11: command tx timeout
[  531.921406][T13994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.223298][T13994] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  532.258163][T13994] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  532.272083][T13994] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  532.287189][T13994] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  532.394602][T13994] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.421494][T13994] 8021q: adding VLAN 0 to HW filter on device team0
[  532.436155][T11285] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.443541][T11285] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.468778][T12054] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.476233][T12054] bridge0: port 2(bridge_slave_1) entered forwarding state
[  532.729760][   T31] INFO: task syz.3.1299:11738 blocked for more than 143 seconds.
[  532.743377][   T31]       Tainted: G     U              6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0
[  532.752867][T13994] 8021q: adding VLAN 0 to HW filter on device batadv0
[  532.756428][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  532.770453][   T31] task:syz.3.1299      state:D stack:27304 pid:11738 tgid:11737 ppid:5836   task_flags:0x400140 flags:0x00000004
[  532.783073][   T31] Call Trace:
[  532.786880][   T31]  <TASK>
[  532.789887][   T31]  __schedule+0x116f/0x5de0
[  532.797480][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  532.803380][   T31]  ? stack_depot_save_flags+0x28/0xa50
[  532.810329][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  532.815559][   T31]  ? __pfx___schedule+0x10/0x10
[  532.821926][   T31]  ? find_held_lock+0x2b/0x80
[  532.827226][   T31]  ? schedule+0x2d7/0x3a0
[  532.831920][   T31]  schedule+0xe7/0x3a0
[  532.836231][   T31]  schedule_preempt_disabled+0x13/0x30
[  532.843148][   T31]  __mutex_lock+0x6c7/0xb90
[  532.853344][   T31]  ? nfsd_nl_threads_set_doit+0x698/0xbf0
[  532.864691][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  532.874560][   T31]  ? net_generic+0xea/0x2a0
[  532.880868][   T31]  ? nfsd_nl_threads_set_doit+0x698/0xbf0
[  532.887453][   T31]  nfsd_nl_threads_set_doit+0x698/0xbf0
[  532.902452][   T31]  genl_family_rcv_msg_doit+0x206/0x2f0
[  532.912185][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  532.921649][T13994] veth0_vlan: entered promiscuous mode
[  532.935949][   T31]  ? rcu_is_watching+0x12/0xc0
[  532.944930][   T31]  ? bpf_lsm_capable+0x9/0x10
[  532.958358][T13994] veth1_vlan: entered promiscuous mode
[  532.958639][   T31]  ? security_capable+0x7e/0x260
[  532.982858][   T31]  genl_rcv_msg+0x55c/0x800
[  533.005969][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  533.021141][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  533.030010][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[  533.035508][   T31]  netlink_rcv_skb+0x16a/0x440
[  533.040644][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  533.051347][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  533.062367][   T31]  ? __pfx_down_read+0x10/0x10
[  533.068474][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  533.073839][   T31]  genl_rcv+0x28/0x40
[  533.078603][T13994] veth0_macvtap: entered promiscuous mode
[  533.088552][   T31]  netlink_unicast+0x53a/0x7f0
[  533.093450][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  533.119714][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[  533.121563][T13994] veth1_macvtap: entered promiscuous mode
[  533.124944][   T31]  netlink_sendmsg+0x8d1/0xdd0
[  533.166418][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  533.172190][   T31]  ____sys_sendmsg+0xa95/0xc70
[  533.186392][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[  533.192058][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  533.203964][T13994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.213898][   T31]  ___sys_sendmsg+0x134/0x1d0
[  533.220643][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  533.226217][   T31]  __sys_sendmsg+0x16d/0x220
[  533.236315][T13994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.240391][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  533.275173][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[  533.276307][T13994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.282706][   T31]  ? rcu_is_watching+0x12/0xc0
[  533.306525][T13994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.316547][   T31]  do_syscall_64+0xcd/0x230
[  533.321411][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.326342][T13994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.337534][   T31] RIP: 0033:0x7ff6abd8e969
[  533.343729][   T31] RSP: 002b:00007ff6acc83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  533.353228][T13994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.364227][   T31] RAX: ffffffffffffffda RBX: 00007ff6abfb5fa0 RCX: 00007ff6abd8e969
[  533.372267][T13994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.372293][T13994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.372317][T13994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.372336][T13994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.372356][T13994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.412593][   T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 000000000000000b
[  533.536322][T13994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.536544][   T31] RBP: 00007ff6abe10ab1 R08: 0000000000000000 R09: 0000000000000000
[  533.565612][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  533.574770][   T31] R13: 0000000000000000 R14: 00007ff6abfb5fa0 R15: 00007ffdc595a4a8
[  533.575007][T13994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.583192][   T31]  </TASK>
[  533.583260][   T31] INFO: task syz.0.1300:11745 blocked for more than 144 seconds.
[  533.583285][   T31]       Tainted: G     U              6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0
[  533.583304][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  533.583317][   T31] task:syz.0.1300      state:D stack:26216 pid:11745 tgid:11744 ppid:5828   task_flags:0x400140 flags:0x00000004
[  533.583409][   T31] Call Trace:
[  533.583419][   T31]  <TASK>
[  533.583436][   T31]  __schedule+0x116f/0x5de0
[  533.583473][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  533.583502][   T31]  ? stack_depot_save_flags+0x28/0xa50
[  533.583562][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  533.583607][   T31]  ? __pfx___schedule+0x10/0x10
[  533.583647][   T31]  ? find_held_lock+0x2b/0x80
[  533.583676][   T31]  ? schedule+0x2d7/0x3a0
[  533.583708][   T31]  schedule+0xe7/0x3a0
[  533.622947][T13994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.639086][   T31]  schedule_preempt_disabled+0x13/0x30
[  533.669883][T13994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.684417][   T31]  __mutex_lock+0x6c7/0xb90
[  533.696335][T13994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.705483][   T31]  ? nfsd_nl_threads_set_doit+0x698/0xbf0
[  533.740145][T13994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.742213][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  533.752170][T13994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.766530][   T31]  ? net_generic+0xea/0x2a0
[  533.769518][T13994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.771243][   T31]  ? nfsd_nl_threads_set_doit+0x698/0xbf0
[  533.782591][T13994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.798550][   T31]  nfsd_nl_threads_set_doit+0x698/0xbf0
[  533.804200][   T31]  genl_family_rcv_msg_doit+0x206/0x2f0
[  533.806898][T13994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.825871][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  533.832453][   T31]  ? rcu_is_watching+0x12/0xc0
[  533.833305][T13994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.837491][   T31]  ? bpf_lsm_capable+0x9/0x10
[  533.837527][   T31]  ? security_capable+0x7e/0x260
[  533.837580][   T31]  genl_rcv_msg+0x55c/0x800
[  533.837622][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  533.837655][   T31]  ? __pfx___dev_queue_xmit+0x10/0x10
[  533.837694][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  533.837729][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[  533.837775][   T31]  netlink_rcv_skb+0x16a/0x440
[  533.837815][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  533.837851][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  533.837898][   T31]  ? __pfx_down_read+0x10/0x10
[  533.871685][T13994] batman_adv: batadv0: Interface activated: batadv_slave_0
[  533.932751][ T5845] Bluetooth: hci11: command tx timeout
[  533.954407][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  533.965059][   T31]  genl_rcv+0x28/0x40
[  533.971744][   T31]  netlink_unicast+0x53a/0x7f0
[  533.976851][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  533.982198][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[  533.987613][   T31]  netlink_sendmsg+0x8d1/0xdd0
[  533.992620][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  533.998054][   T31]  ____sys_sendmsg+0xa95/0xc70
[  534.002893][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[  534.009745][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  534.015206][   T31]  ___sys_sendmsg+0x134/0x1d0
[  534.023012][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  534.028584][   T31]  __sys_sendmsg+0x16d/0x220
[  534.033356][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  534.038686][   T31]  ? __x64_sys_futex+0x1e0/0x4c0
[  534.043837][   T31]  ? rcu_is_watching+0x12/0xc0
[  534.049008][   T31]  do_syscall_64+0xcd/0x230
[  534.053758][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.059971][   T31] RIP: 0033:0x7f222678e969
[  534.064534][   T31] RSP: 002b:00007f22245f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  534.074194][   T31] RAX: ffffffffffffffda RBX: 00007f22269b5fa0 RCX: 00007f222678e969
[  534.085626][   T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000009
[  534.098993][   T31] RBP: 00007f2226810ab1 R08: 0000000000000000 R09: 0000000000000000
[  534.108951][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  534.118224][   T31] R13: 0000000000000000 R14: 00007f22269b5fa0 R15: 00007ffc9324d1e8
[  534.136380][   T31]  </TASK>
[  534.150122][   T31] 
[  534.150122][   T31] Showing all locks held in the system:
[  534.180975][   T31] 1 lock held by khungtaskd/31:
[  534.186081][   T31]  #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  534.216527][   T31] 3 locks held by kworker/1:4/5870:
[  534.222085][   T31]  #0: ffff88801b480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  534.256387][   T31]  #1: ffffc90004b1fd18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  534.276358][   T31]  #2: ffffffff8e3ca978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0
[  534.296351][   T31] 3 locks held by kworker/0:4/5872:
[  534.302798][   T31]  #0: ffff88801b480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  534.330679][   T31]  #1: ffffc90004b3fd18 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  534.357670][   T31]  #2: ffff888021f19240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1bb/0x2e80
[  534.386333][   T31] 2 locks held by syz.1.1290/11702:
[  534.391707][   T31]  #0: ffffffff901c71d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.439896][   T31]  #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0
[  534.463484][   T31] 2 locks held by syz.3.1299/11738:
[  534.476689][   T31]  #0: ffffffff901c71d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.486232][   T31]  #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0
[  534.512990][   T31] 2 locks held by syz.0.1300/11745:
[  534.525557][   T31]  #0: ffffffff901c71d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.546337][   T31]  #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0
[  534.572403][   T31] 2 locks held by syz-executor/11859:
[  534.582446][   T31]  #0: ffff888051d9c0e0 (&type->s_umount_key#49){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  534.593530][   T31]  #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  534.603531][   T31] 2 locks held by syz-executor/11893:
[  534.609150][   T31]  #0: ffff8880256e20e0 (&type->s_umount_key#49){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  534.620062][   T31]  #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  534.629934][   T31] 2 locks held by syz.5.1439/12616:
[  534.638604][   T31]  #0: ffffffff901c71d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.647937][   T31]  #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0
[  534.659213][   T31] 5 locks held by syz-executor/12871:
[  534.664742][   T31]  #0: ffff888032f6cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90
[  534.674792][   T31]  #1: ffff888032f6c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0
[  534.685365][   T31]  #2: ffffffff90394208 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260
[  534.696233][   T31]  #3: ffff888061ec7b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730
[  534.706489][   T31]  #4: ffffffff8e3ca978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  534.717042][   T31] 2 locks held by syz.2.1568/13462:
[  534.722548][   T31]  #0: ffffffff901c71d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.731093][   T31]  #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0
[  534.743105][   T31] 2 locks held by syz-executor/13520:
[  534.748850][   T31]  #0: ffff88808b4460e0 (&type->s_umount_key#49){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  534.760156][   T31]  #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[  534.770891][   T31] 2 locks held by getty/13637:
[  534.775799][   T31]  #0: ffff8880313930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  534.788217][   T31]  #1: ffffc90003d2e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  534.798910][   T31] 2 locks held by syz.1.1635/13815:
[  534.804234][   T31]  #0: ffffffff901c71d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.812723][   T31]  #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0
[  534.823384][   T31] 2 locks held by syz.7.1646/13883:
[  534.829000][   T31]  #0: ffffffff901c71d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.837506][   T31]  #1: ffffffff8e7cc128 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0
[  534.851235][   T31] 3 locks held by syz-executor/13994:
[  534.856840][   T31]  #0: ffff8880232d8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90
[  534.866980][   T31]  #1: ffff8880232d8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0
[  534.877756][   T31]  #2: ffffffff90394208 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260
[  534.891438][   T31] 
[  534.894633][   T31] =============================================
[  534.894633][   T31] 
[  534.904937][   T31] NMI backtrace for cpu 0
[  534.904964][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U              6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  534.905005][   T31] Tainted: [U]=USER
[  534.905013][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  534.905029][   T31] Call Trace:
[  534.905038][   T31]  <TASK>
[  534.905049][   T31]  dump_stack_lvl+0x116/0x1f0
[  534.905088][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  534.905125][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  534.905155][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  534.905196][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  534.905240][   T31]  watchdog+0xf70/0x12c0
[  534.905277][   T31]  ? __pfx_watchdog+0x10/0x10
[  534.905308][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  534.905341][   T31]  ? __kthread_parkme+0x19e/0x250
[  534.905376][   T31]  ? __pfx_watchdog+0x10/0x10
[  534.905408][   T31]  kthread+0x3c2/0x780
[  534.905445][   T31]  ? __pfx_kthread+0x10/0x10
[  534.905476][   T31]  ? __pfx_kthread+0x10/0x10
[  534.905508][   T31]  ? __pfx_kthread+0x10/0x10
[  534.905540][   T31]  ? __pfx_kthread+0x10/0x10
[  534.905571][   T31]  ? rcu_is_watching+0x12/0xc0
[  534.905592][   T31]  ? __pfx_kthread+0x10/0x10
[  534.905741][   T31]  ret_from_fork+0x45/0x80
[  534.905779][   T31]  ? __pfx_kthread+0x10/0x10
[  534.905812][   T31]  ret_from_fork_asm+0x1a/0x30
[  534.905862][   T31]  </TASK>
[  534.905877][   T31] Sending NMI from CPU 0 to CPUs 1:
[  535.065054][    C1] NMI backtrace for cpu 1
[  535.065077][    C1] CPU: 1 UID: 0 PID: 5834 Comm: kworker/1:3 Tainted: G     U              6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  535.065111][    C1] Tainted: [U]=USER
[  535.065118][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  535.065132][    C1] Workqueue: mld mld_dad_work
[  535.065163][    C1] RIP: 0010:lock_acquire+0x179/0x350
[  535.065193][    C1] Code: 48 81 24 24 00 02 00 00 44 89 f6 48 89 df 6a 00 6a 00 6a 00 ff b4 24 88 00 00 00 41 0f 94 c1 41 57 45 0f b6 c9 e8 27 da ff ff <48> c7 c7 5c 47 bb 8d 48 83 c4 28 e8 37 22 d1 09 b8 ff ff ff ff 65
[  535.065214][    C1] RSP: 0018:ffffc90000a077f8 EFLAGS: 00000086
[  535.065230][    C1] RAX: 0000000000000001 RBX: ffffffff8e3bf440 RCX: 000000007f1fed10
[  535.065245][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000005970cd9e
[  535.065258][    C1] RBP: 0000000000000002 R08: 03813abc02fcf7df R09: 0000000000000000
[  535.065271][    C1] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000000
[  535.065284][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  535.065298][    C1] FS:  0000000000000000(0000) GS:ffff888124aef000(0000) knlGS:0000000000000000
[  535.065320][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  535.065335][    C1] CR2: 000055f36cb0b088 CR3: 000000000e180000 CR4: 00000000003526f0
[  535.065349][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  535.065362][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  535.065376][    C1] Call Trace:
[  535.065383][    C1]  <IRQ>
[  535.065391][    C1]  ? unwind_next_frame+0xbd/0x20a0
[  535.065418][    C1]  ? unwind_next_frame+0x3f4/0x20a0
[  535.065441][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  535.065465][    C1]  unwind_next_frame+0xd1/0x20a0
[  535.065487][    C1]  ? unwind_next_frame+0xbd/0x20a0
[  535.065508][    C1]  ? ret_from_fork+0x45/0x80
[  535.065539][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  535.065561][    C1]  arch_stack_walk+0x94/0x100
[  535.065586][    C1]  ? __pfx_kthread+0x10/0x10
[  535.065612][    C1]  ? ret_from_fork+0x45/0x80
[  535.065643][    C1]  stack_trace_save+0x8e/0xc0
[  535.065663][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  535.065684][    C1]  ? __lock_acquire+0xaa4/0x1ba0
[  535.065710][    C1]  kasan_save_stack+0x33/0x60
[  535.065732][    C1]  ? kasan_save_stack+0x33/0x60
[  535.065752][    C1]  ? kasan_save_track+0x14/0x30
[  535.065773][    C1]  ? kasan_save_free_info+0x3b/0x60
[  535.065803][    C1]  ? __kasan_slab_free+0x51/0x70
[  535.065824][    C1]  ? kmem_cache_free+0x2d4/0x4d0
[  535.065846][    C1]  ? __skb_ext_put+0x102/0x2c0
[  535.065881][    C1]  ? __skb_ext_del+0xf3/0x340
[  535.065905][    C1]  ? br_nf_dev_queue_xmit+0x7b7/0x2cb0
[  535.065934][    C1]  ? br_nf_post_routing+0x8e7/0x1190
[  535.065963][    C1]  ? nf_hook_slow+0xbb/0x200
[  535.065989][    C1]  ? nf_hook+0x45e/0x780
[  535.066013][    C1]  ? br_forward_finish+0xcd/0x130
[  535.066038][    C1]  ? br_nf_hook_thresh+0x301/0x410
[  535.066067][    C1]  ? br_nf_forward_finish+0x66a/0xba0
[  535.066097][    C1]  ? br_nf_forward_ip.part.0+0x609/0x810
[  535.066126][    C1]  ? br_nf_forward+0xf0f/0x1be0
[  535.066154][    C1]  ? nf_hook_slow+0xbb/0x200
[  535.066179][    C1]  ? nf_hook+0x45e/0x780
[  535.066202][    C1]  ? __br_forward+0x1be/0x5b0
[  535.066226][    C1]  ? br_flood+0x39c/0x650
[  535.066256][    C1]  ? br_handle_frame_finish+0xe8e/0x1c20
[  535.066286][    C1]  ? br_nf_hook_thresh+0x301/0x410
[  535.066318][    C1]  ? br_nf_pre_routing_finish_ipv6+0x76a/0xfb0
[  535.066352][    C1]  ? br_nf_pre_routing_ipv6+0x3cd/0x8c0
[  535.066382][    C1]  ? br_nf_pre_routing+0x860/0x15b0
[  535.066411][    C1]  ? br_handle_frame+0xad5/0x14a0
[  535.066438][    C1]  ? __netif_receive_skb_core.constprop.0+0xa23/0x4a00
[  535.066469][    C1]  ? __netif_receive_skb_one_core+0xb0/0x1e0
[  535.066497][    C1]  ? __netif_receive_skb+0x1d/0x160
[  535.066524][    C1]  ? process_backlog+0x442/0x15e0
[  535.066551][    C1]  ? __napi_poll.constprop.0+0xb7/0x550
[  535.066579][    C1]  ? net_rx_action+0xa97/0x1010
[  535.066608][    C1]  ? handle_softirqs+0x216/0x8e0
[  535.066631][    C1]  ? do_softirq+0xb2/0xf0
[  535.066653][    C1]  ? __local_bh_enable_ip+0x100/0x120
[  535.066676][    C1]  ? __dev_queue_xmit+0x8ab/0x43e0
[  535.066704][    C1]  ? ip6_finish_output2+0xe98/0x2020
[  535.066727][    C1]  ? ip6_finish_output+0x3f9/0x1360
[  535.066749][    C1]  ? ip6_output+0x1f9/0x540
[  535.066771][    C1]  ? mld_sendpack+0x9e9/0x1220
[  535.066795][    C1]  ? mld_send_initial_cr.part.0+0x1a1/0x260
[  535.066822][    C1]  ? mld_dad_work+0x51/0x2d0
[  535.066846][    C1]  ? process_one_work+0x9cc/0x1b70
[  535.066885][    C1]  ? worker_thread+0x6c8/0xf10
[  535.066913][    C1]  ? kthread+0x3c2/0x780
[  535.066939][    C1]  ? ret_from_fork+0x45/0x80
[  535.066975][    C1]  kasan_save_track+0x14/0x30
[  535.066996][    C1]  kasan_save_free_info+0x3b/0x60
[  535.067025][    C1]  __kasan_slab_free+0x51/0x70
[  535.067047][    C1]  kmem_cache_free+0x2d4/0x4d0
[  535.067069][    C1]  ? __skb_ext_put+0x102/0x2c0
[  535.067096][    C1]  __skb_ext_put+0x102/0x2c0
[  535.067123][    C1]  __skb_ext_del+0xf3/0x340
[  535.067151][    C1]  br_nf_dev_queue_xmit+0x7b7/0x2cb0
[  535.067183][    C1]  ? __pfx_br_nf_dev_queue_xmit+0x10/0x10
[  535.067215][    C1]  br_nf_post_routing+0x8e7/0x1190
[  535.067247][    C1]  ? __pfx_br_nf_post_routing+0x10/0x10
[  535.067275][    C1]  nf_hook_slow+0xbb/0x200
[  535.067303][    C1]  nf_hook+0x45e/0x780
[  535.067327][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  535.067354][    C1]  ? __pfx_nf_hook+0x10/0x10
[  535.067379][    C1]  ? __lock_acquire+0x5ca/0x1ba0
[  535.067403][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  535.067428][    C1]  ? mld_dad_work+0x51/0x2d0
[  535.067453][    C1]  ? process_one_work+0x9cc/0x1b70
[  535.067481][    C1]  ? worker_thread+0x6c8/0xf10
[  535.067509][    C1]  ? kthread+0x3c2/0x780
[  535.067534][    C1]  ? ret_from_fork+0x45/0x80
[  535.067562][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  535.067593][    C1]  br_forward_finish+0xcd/0x130
[  535.067619][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  535.067646][    C1]  br_nf_hook_thresh+0x301/0x410
[  535.067675][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  535.067703][    C1]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  535.067732][    C1]  ? lock_acquire+0x179/0x350
[  535.067758][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  535.067783][    C1]  ? net_generic+0xea/0x2a0
[  535.067812][    C1]  br_nf_forward_finish+0x66a/0xba0
[  535.067841][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  535.067876][    C1]  br_nf_forward_ip.part.0+0x609/0x810
[  535.067910][    C1]  br_nf_forward+0xf0f/0x1be0
[  535.067941][    C1]  ? __pfx_br_nf_forward+0x10/0x10
[  535.067969][    C1]  nf_hook_slow+0xbb/0x200
[  535.067998][    C1]  nf_hook+0x45e/0x780
[  535.068022][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  535.068049][    C1]  ? __pfx_nf_hook+0x10/0x10
[  535.068075][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  535.068104][    C1]  __br_forward+0x1be/0x5b0
[  535.068128][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  535.068155][    C1]  br_flood+0x39c/0x650
[  535.068183][    C1]  br_handle_frame_finish+0xe8e/0x1c20
[  535.068213][    C1]  ? __napi_poll.constprop.0+0xb7/0x550
[  535.068243][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  535.068272][    C1]  ? __local_bh_enable_ip+0x100/0x120
[  535.068294][    C1]  ? __dev_queue_xmit+0x7b3/0x43e0
[  535.068320][    C1]  ? ip6_finish_output2+0xe98/0x2020
[  535.068341][    C1]  ? ip6_copy_metadata+0x830/0xdf0
[  535.068361][    C1]  ? ip6_output+0x1f9/0x540
[  535.068381][    C1]  ? mld_send_initial_cr.part.0+0x1a1/0x260
[  535.068408][    C1]  ? mld_dad_work+0x51/0x2d0
[  535.068431][    C1]  ? process_one_work+0x9cc/0x1b70
[  535.068460][    C1]  ? kthread+0x3c2/0x780
[  535.068486][    C1]  ? ret_from_fork+0x45/0x80
[  535.068514][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  535.068546][    C1]  ? nf_hook_slow+0x132/0x200
[  535.068575][    C1]  br_nf_hook_thresh+0x301/0x410
[  535.068604][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  535.068635][    C1]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  535.068666][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  535.068695][    C1]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  535.068724][    C1]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  535.068752][    C1]  br_nf_pre_routing_finish_ipv6+0x76a/0xfb0
[  535.068784][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  535.068817][    C1]  br_nf_pre_routing_ipv6+0x3cd/0x8c0
[  535.068877][    C1]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  535.068907][    C1]  ? lock_acquire+0x179/0x350
[  535.068934][    C1]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  535.068965][    C1]  ? net_generic+0xea/0x2a0
[  535.068994][    C1]  br_nf_pre_routing+0x860/0x15b0
[  535.069025][    C1]  br_handle_frame+0xad5/0x14a0
[  535.069066][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  535.069095][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  535.069128][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  535.069155][    C1]  __netif_receive_skb_core.constprop.0+0xa23/0x4a00
[  535.069187][    C1]  ? kasan_quarantine_put+0xa0/0x240
[  535.069209][    C1]  ? kmem_cache_free+0x2d4/0x4d0
[  535.069232][    C1]  ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10
[  535.069263][    C1]  ? kfree_skbmem+0x1a4/0x1f0
[  535.069288][    C1]  ? sk_skb_reason_drop+0x136/0x1a0
[  535.069311][    C1]  ? ip6_mc_input+0x46c/0xfd0
[  535.069335][    C1]  ? __pfx_ip6_mc_input+0x10/0x10
[  535.069363][    C1]  ? __lock_acquire+0x5ca/0x1ba0
[  535.069390][    C1]  ? process_backlog+0x3f0/0x15e0
[  535.069417][    C1]  __netif_receive_skb_one_core+0xb0/0x1e0
[  535.069446][    C1]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  535.069478][    C1]  ? lock_acquire+0x179/0x350
[  535.069506][    C1]  ? process_backlog+0x3f0/0x15e0
[  535.069533][    C1]  __netif_receive_skb+0x1d/0x160
[  535.069561][    C1]  process_backlog+0x442/0x15e0
[  535.069592][    C1]  __napi_poll.constprop.0+0xb7/0x550
[  535.069624][    C1]  net_rx_action+0xa97/0x1010
[  535.069654][    C1]  ? find_held_lock+0x2b/0x80
[  535.069675][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  535.069704][    C1]  ? sched_balance_domains+0x283/0xee0
[  535.069727][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  535.069750][    C1]  ? sched_clock+0x38/0x60
[  535.069777][    C1]  ? sched_clock_cpu+0x6c/0x530
[  535.069806][    C1]  ? mark_held_locks+0x49/0x80
[  535.069831][    C1]  handle_softirqs+0x216/0x8e0
[  535.069861][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  535.069885][    C1]  ? __dev_queue_xmit+0x896/0x43e0
[  535.069914][    C1]  do_softirq+0xb2/0xf0
[  535.069935][    C1]  </IRQ>
[  535.069942][    C1]  <TASK>
[  535.069950][    C1]  __local_bh_enable_ip+0x100/0x120
[  535.069972][    C1]  ? __dev_queue_xmit+0x896/0x43e0
[  535.069998][    C1]  __dev_queue_xmit+0x8ab/0x43e0
[  535.070029][    C1]  ? ip6mr_fib_lookup+0x136/0x1a0
[  535.070051][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  535.070080][    C1]  ? __lock_acquire+0x5ca/0x1ba0
[  535.070106][    C1]  ? __lock_acquire+0xaa4/0x1ba0
[  535.070140][    C1]  ip6_finish_output2+0xe98/0x2020
[  535.070167][    C1]  ip6_finish_output+0x3f9/0x1360
[  535.070191][    C1]  ip6_output+0x1f9/0x540
[  535.070214][    C1]  mld_sendpack+0x9e9/0x1220
[  535.070241][    C1]  ? __pfx_mld_sendpack+0x10/0x10
[  535.070273][    C1]  mld_send_initial_cr.part.0+0x1a1/0x260
[  535.070302][    C1]  mld_dad_work+0x51/0x2d0
[  535.070327][    C1]  process_one_work+0x9cc/0x1b70
[  535.070360][    C1]  ? __pfx_mld_ifc_work+0x10/0x10
[  535.070385][    C1]  ? __pfx_process_one_work+0x10/0x10
[  535.070419][    C1]  ? assign_work+0x1a0/0x250
[  535.070448][    C1]  worker_thread+0x6c8/0xf10
[  535.070481][    C1]  ? __kthread_parkme+0x19e/0x250
[  535.070505][    C1]  ? __pfx_worker_thread+0x10/0x10
[  535.070535][    C1]  kthread+0x3c2/0x780
[  535.070562][    C1]  ? __pfx_kthread+0x10/0x10
[  535.070588][    C1]  ? __pfx_kthread+0x10/0x10
[  535.070614][    C1]  ? __pfx_kthread+0x10/0x10
[  535.070641][    C1]  ? __pfx_kthread+0x10/0x10
[  535.070670][    C1]  ? rcu_is_watching+0x12/0xc0
[  535.070690][    C1]  ? __pfx_kthread+0x10/0x10
[  535.070719][    C1]  ret_from_fork+0x45/0x80
[  535.070750][    C1]  ? __pfx_kthread+0x10/0x10
[  535.070777][    C1]  ret_from_fork_asm+0x1a/0x30
[  535.070810][    C1]  </TASK>
[  535.071999][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  535.072022][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U              6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) 
[  535.072058][   T31] Tainted: [U]=USER
[  535.072066][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  535.072080][   T31] Call Trace:
[  535.072088][   T31]  <TASK>
[  535.072099][   T31]  dump_stack_lvl+0x3d/0x1f0
[  535.072130][   T31]  panic+0x71c/0x800
[  535.072164][   T31]  ? __pfx_panic+0x10/0x10
[  535.072194][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  535.072235][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  535.072269][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  535.072306][   T31]  ? watchdog+0xdda/0x12c0
[  535.072335][   T31]  ? watchdog+0xdcd/0x12c0
[  535.072368][   T31]  watchdog+0xdeb/0x12c0
[  535.072403][   T31]  ? __pfx_watchdog+0x10/0x10
[  535.072431][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  535.072460][   T31]  ? __kthread_parkme+0x19e/0x250
[  535.072489][   T31]  ? __pfx_watchdog+0x10/0x10
[  535.072519][   T31]  kthread+0x3c2/0x780
[  535.072551][   T31]  ? __pfx_kthread+0x10/0x10
[  535.072579][   T31]  ? __pfx_kthread+0x10/0x10
[  535.072617][   T31]  ? __pfx_kthread+0x10/0x10
[  535.072647][   T31]  ? __pfx_kthread+0x10/0x10
[  535.072677][   T31]  ? rcu_is_watching+0x12/0xc0
[  535.072700][   T31]  ? __pfx_kthread+0x10/0x10
[  535.072732][   T31]  ret_from_fork+0x45/0x80
[  535.072765][   T31]  ? __pfx_kthread+0x10/0x10
[  535.072797][   T31]  ret_from_fork_asm+0x1a/0x30
[  535.072844][   T31]  </TASK>
[  536.433366][   T31] Kernel Offset: disabled
[  536.437819][   T31] Rebooting in 86400 seconds..