last executing test programs: 16m49.181971427s ago: executing program 2 (id=424): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe$auto(0x0) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f"], 0xe0}, 0x1, 0x0, 0x0, 0x4040043}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0e/power/autosuspend_delay_ms\x00', 0x82940, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r1) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer1\x00', 0x500, 0x0) ioctl$auto_SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f00000004c0)) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f0000000100)={"b1ec2b3d73eb3704600008fde7f9a86cba53ec92136c2cb4ea07c3ff554fd857", 0x5, 0xffffff65, 0x6, 0x2, 0x40, 0xffffffffffffffff}) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000200), r0) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x88000) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) 16m47.841281903s ago: executing program 2 (id=427): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket(0xa, 0x3, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x6, 0x1, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x20c000, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0x401) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_RESUME(r4, 0x4147, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) ioctl$auto(r2, 0xc1205531, r1) ioctl$auto(r0, 0x400454ca, 0x38) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x9) 16m32.438451003s ago: executing program 32 (id=427): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket(0xa, 0x3, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x6, 0x1, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x20c000, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0x401) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_RESUME(r4, 0x4147, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) ioctl$auto(r2, 0xc1205531, r1) ioctl$auto(r0, 0x400454ca, 0x38) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x9) 9m9.634592343s ago: executing program 33 (id=2153): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8a5b, 0x3fe) close_range$auto(0x2, 0xa, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) r0 = socket(0x29, 0x3, 0x0) getsockopt$auto(r0, 0x11b, 0x8, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/mei/uevent\x00', 0xa0281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)='5', 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x7c3, 0x0) timer_create$auto(0x9, 0x0, 0x0) socket(0xa, 0x1, 0x100) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/default/stable_secret\x00', 0x40d02, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) ptrace$auto(0x317, r2, 0x4, 0x1) ptrace$auto(0x10, r2, 0x1, 0x7ff) ptrace$auto(0xe, r2, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0xfffffffffffffffe, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f00000004c0)="8d8cfd72f1c71518ed22169e0b95f9ec78a50679ec2009e4e3018d19c40010000017fab27c8579476acec85237f8ee85a1a4f668e8bbf6de7eda4cce570cdc4ad25d47013279315093693917beb5529512a42b566170312af88ef6fca3f39a425ee156ae4823453ad2bad1d6598fa3fdcb9ad2564da6c2600f9a637eb9f08c29647dc27dd36d8eec3a653ba7970450556d16e72337e37dab3baa15a54a737e6358cae87a8c1a9d34b61758d617ff7ac0ea9ba5fd08d14f3b2711e4262d5b403627add992f61b4ac9a7075aa7ded7c216e3d2d2e9378db3d568198d19471a760cbf3a415d69a3b3186e6b86550d5c9f796e6613da92e50d791275ab160a46a8383a80a1ad75cc5a44ad926206dd5f147e2c77ab523d4101ceb9987091d87897d48e55026f3a7d2f4d3f90286ccfc831bbb53aedbbb7874dad9aa19852d9986b6fb5f1797a7ca90ea0067c909fb9c3597160f39f52e2221665") read$auto(r4, 0x0, 0x2800000009) write$auto(0x3, 0x0, 0xfdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002abdc6eee74f69a75593302b7000fddbdf250400000008000c0003000000bb33a9bec8e70f51b85566820d2c6193284301f840cec65a8f46aca598aac19911d6afc3ff2c031840790678528416f35e587502b79152f3112008fed261310a92c7bd8b8a138a3926702979da681b8fd438713b255102b48b1485522b0d53aa9005c7f81e736073e34b4c2cf5d5fe9007840cb4355b6e"], 0x1c}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x40000) prctl$auto(0x3e, 0x1, 0x0, 0x400000001, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) 4m30.676420748s ago: executing program 34 (id=3570): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x36281, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto_hwsim_fops_rx_rssi_(r0, &(0x7f00000000c0)="03daf1d98bf4ff99f0695502", 0xc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) r3 = syz_clone3(&(0x7f0000000040)={0x221020700, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) lstat$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)={0x1, 0x1, 0x8, 0x23, 0xee00, 0xffffffffffffffff, 0x0, 0x6, 0x800, 0x4, 0x17, 0x6, 0x0, 0x10001, 0x4000000a, 0x5, 0x100}) shmctl$auto_SHM_STAT(0x4, 0xd, &(0x7f0000000400)={{0x6, r4, 0xffffffffffffffff, 0x0, 0x9, 0x9, 0x1}, 0x101, 0x6, 0x7fffffff, 0x6, @raw=0x77e, @inferred=r3, 0x8001, 0x0, &(0x7f0000000280)="828185737cec3dfcd60481adce8cac619c8617a7adfcb932a0283cd9465270fbf5861a5c08def1ec04c699ca1ade99f13ca5eaed5e0a87f095716b5d789c750efd4e7e24c1d1e72a6bca5750470bc83a121499eabb69d8354ed755fc5a88f10333ef4a1727e84e", &(0x7f0000000300)="d505dc71631bc0a2fab2011a1643ec684b38448b74c32c238610f9f6e69d0bce84bfca9b28f703c06ccc2205d4c64016ea02529c78cf27c6274bd3be5404ce3741942e5c1b94ee7ccb4ca447967eab7e5f2163abd1c2c9afd0a75ea4daa42d539853b92bc5b114176d66748d653dcf765570031952206e447000aa2a3393077b69d6cfe744aa35bb8123bbba61f795148880bacdf8af5aa1cd3372bed3cbd6807ce5a761062defb3b84525af3dc07488071fb4eef45e646db94f3680e1cfe2813d9e742be6847676097f09dd9b76341ce9ec246ef1d381f04d067b4af738027ac9a891b9a0be9ec7f417df9bd63dfd4411052d619c3160f2"}) move_pages$auto(r3, 0x4080000003, 0x0, 0x0, 0x0, 0x0) mremap$auto(0xcc8, 0x7fff, 0x401, 0xa67, 0x5) r5 = socket(0xa, 0x5, 0x84) setsockopt$auto(r5, 0x10000000084, 0x22, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) 2m26.884163303s ago: executing program 4 (id=4188): socket(0x2, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) pselect6$auto(0x5, &(0x7f0000000400)={[0x1000000008, 0xfffffffffffffffc, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0xffffffffffffff81, 0xffffffff, 0x7fffffffffffffff, 0x8000, 0x1004, 0x9, 0xa, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) clock_nanosleep$auto(0x8, 0x1, 0x0, 0xffffffffffffffff) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x81) mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0x2) mkdir$auto(&(0x7f0000000300)='}[,&*}\x00', 0x6) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x42200, 0x0) capset$auto(0x0, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xff, @raw=0xfffff00c}}) r1 = openat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10001, 0x10) write$auto(r1, &(0x7f0000000100)='/dev/mixer\x00', 0xfffffffffffffffe) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r2, 0x80004508, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) 2m26.253142979s ago: executing program 6 (id=4191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="1cf0ffff", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf2502000000080001000900002c6f01"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2004c890) 2m26.114396851s ago: executing program 6 (id=4192): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x40000000029, 0xb, 0xfffffffffffffffe, 0x0) connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0xe0}, 0x55) (fail_nth: 3) 2m25.797656665s ago: executing program 4 (id=4194): socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) fadvise64$auto(r1, 0x7fffffffffffffff, 0x5, 0x7) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x400, 0x2b, 0x940, 0x1ffe0, 0x5a6, 0x3, 0x100002, 0x7f, 0x767, 0xfff, 0x7, 0xb2, 0x9, 0x4, 0x3, 0x1, 0x4, 0x20, 0x0, 0x1, 0x202, 0x62c, 0x40000000, 0x0, 0x9, 0x0, 0x0, 0x2, [0x251, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x400000000, 0x5, 0x0, 0x200000, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x87ffd, 0x0, 0x4, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1]}, 0x1fa, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xf}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe6}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x80000001}, @NFSD_A_SERVER_SCOPE={0x13, 0x4, '/dev/mtdblock0\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x15}]}, 0x58}, 0x1, 0x0, 0x0, 0x814}, 0x80) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xfc2, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2m24.751908515s ago: executing program 6 (id=4199): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044802}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r2 = socket(0x18, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)="bdf60891cfcc7d6835330e56f8404a8b22d333a4f64b092c1af6162adb0e58ad7fe5374e308a97cdf06f5213b117b19012e03d58dcf9b4196ea4c56135741dce302876195911dccf6b2724b1de035ca5cb3b9c0621b393d9d38272f6069e06b919e41373142b733acc1d171532fab7f8f645cbef13bc6b2aa7a6c9bdf62c7a2473fcad26691f4003824a3339f5f8b4647b850d") socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x410340, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r4 = socket(0x18, 0x5, 0x1) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x80047437, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x14, r5, 0xb01, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 2m24.556982798s ago: executing program 6 (id=4202): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x1a000, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x59, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fe, 0x0) mmap$auto(0x7, 0x2, 0xa, 0x80000010, r3, 0x101) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd3bc0ddb60f9236c0095295603854aabf973f037e0896b19cbe04c0aa95c55dc07885568f7828784abe1a8f697619b28fd79800000000216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x18, 0x3, 0x2) accept$auto(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05082dbd7000fbdbdf257e0000000800", @ANYRES32=r9, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r8, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xf7}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008015}, 0x4) socket(0x10, 0x2, 0xc) socket(0xa, 0x3, 0x3a) 2m24.175804132s ago: executing program 6 (id=4204): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x322d) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m10.44398344s ago: executing program 35 (id=4194): socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) fadvise64$auto(r1, 0x7fffffffffffffff, 0x5, 0x7) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x400, 0x2b, 0x940, 0x1ffe0, 0x5a6, 0x3, 0x100002, 0x7f, 0x767, 0xfff, 0x7, 0xb2, 0x9, 0x4, 0x3, 0x1, 0x4, 0x20, 0x0, 0x1, 0x202, 0x62c, 0x40000000, 0x0, 0x9, 0x0, 0x0, 0x2, [0x251, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x400000000, 0x5, 0x0, 0x200000, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x87ffd, 0x0, 0x4, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1]}, 0x1fa, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xf}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe6}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x80000001}, @NFSD_A_SERVER_SCOPE={0x13, 0x4, '/dev/mtdblock0\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x15}]}, 0x58}, 0x1, 0x0, 0x0, 0x814}, 0x80) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xfc2, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2m8.92559503s ago: executing program 36 (id=4204): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x322d) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m5.800123409s ago: executing program 37 (id=4213): socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) fadvise64$auto(0xffffffffffffffff, 0x7fffffffffffffff, 0x5, 0x7) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x400, 0x2b, 0x940, 0x1ffe0, 0x5a6, 0x3, 0x100002, 0x7f, 0x767, 0xfff, 0x7, 0xb2, 0x9, 0x4, 0x3, 0x1, 0x4, 0x20, 0x0, 0x1, 0x202, 0x62c, 0x40000000, 0x0, 0x9, 0x0, 0x0, 0x2, [0x251, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x400000000, 0x5, 0x0, 0x200000, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x87ffd, 0x0, 0x4, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1]}, 0x1fa, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xf}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe6}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x80000001}, @NFSD_A_SERVER_SCOPE={0x13, 0x4, '/dev/mtdblock0\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x15}]}, 0x58}, 0x1, 0x0, 0x0, 0x814}, 0x80) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2m4.752826173s ago: executing program 38 (id=4221): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x2005c095) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0050000", @ANYRES16=r4, @ANYBLOB="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"], 0x5b0}}, 0x24004045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x4000000000000000, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/23, 0x17) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) 1m54.270824878s ago: executing program 2 (id=4228): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async, rerun: 32) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) (async, rerun: 32) write$auto(0xffffffffffffffff, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) (async) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f0000000000)="632d1bfe595046ab5c40bd7563307acb6d16baef6176e669a216aae183cccafdd80500ffffffff0600"/56, 0x38) (async) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000100)=""/184, 0xb8) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x14) (async) madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) exit$auto(0x5eb) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) 1m53.220087139s ago: executing program 2 (id=4245): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x1bd184, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SUPPORTED_SELECTORS={0x5, 0x14e, "13"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r6, &(0x7f0000000280)=""/40, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="93ab2cbd7000fbdbdf250800000008000300", @ANYRES32=r14, @ANYBLOB="0800060042"], 0x24}, 0x1, 0x0, 0x0, 0xc811}, 0x10) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r15) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r18 = bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x1, &(0x7f00000001c0)=@query={@target_fd=r18, 0x1, 0x86e6, 0x0, 0xf7d, @count=0x80, 0x0, 0x6, 0x2, 0xfffffffffffff001, 0xb716}, 0xc) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r16, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdf4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x7fff}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x16d}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1m52.972816524s ago: executing program 2 (id=4246): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x80, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x59, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fe, 0x0) mmap$auto(0x7, 0x2, 0xa, 0x80000010, r3, 0x101) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x18, 0x3, 0x2) accept$auto(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05082dbd7000fbdbdf257e0000000800", @ANYRES32=r9, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r8, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xf7}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008015}, 0x4) socket(0x10, 0x2, 0xc) socket(0xa, 0x3, 0x3a) 1m52.609148965s ago: executing program 2 (id=4247): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x1bd184, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SUPPORTED_SELECTORS={0x5, 0x14e, "13"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r6, &(0x7f0000000280)=""/40, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1\x00', 0x0}) r9 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="93ab2cbd7000fbdbdf250800000008000300", @ANYRES32=r14, @ANYBLOB="0800060042"], 0x24}, 0x1, 0x0, 0x0, 0xc811}, 0x10) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r15) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r18 = bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x1, &(0x7f00000001c0)=@query={@target_fd=r18, 0x1, 0x86e6, 0x0, 0xf7d, @count=0x80, 0x0, 0x6, 0x2, 0xfffffffffffff001, 0xb716}, 0xc) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r16, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdf4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x7fff}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x16d}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1m49.658894255s ago: executing program 9 (id=4254): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x29, 0x2, 0x0) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r1, 0xc05c5340, 0x38) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b62, r2) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x100000000000000) ioctl$auto(0x3, 0xc00caee0, r2) close_range$auto(0x2, 0x8, 0x0) 1m49.495430469s ago: executing program 9 (id=4255): mmap$auto(0x0, 0x400008, 0x6a1, 0x9b72, 0x2, 0x8000) openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x4c480, 0x0) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) 1m49.263933865s ago: executing program 9 (id=4256): r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/numa_maps\x00', 0x100, 0x0) mmap$auto(0x4, 0x2020009, 0x3, 0x100000000000eb1, r0, 0x200008000) (async) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) (async) r2 = socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x106) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) (async) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r2) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) write$auto(r4, &(0x7f0000000340)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\xff\xcf\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x\x00\x80\x00\x00\x00\x00\x00\x00-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\x9a\xc4\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44o\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\x03\x00@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xbb\x7f\xa5\x87\x02\x87\xbbR\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xcau6^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1Tz\xc1;Pw!\x8b\xf5{\xc7Zf/7\xf7h\xe2f\x1d\xa2\x11U\x91v\xf8Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VEv\xeb>\xffY\xe7\xc7\xe1,\xe7`\xe3\xc4\x95\xe52\x9d\x1e`#\xd8\xd7M\xc7\x15\x00\x00\x00\x00\x00\x00E\xd0e\x0eM\xa9Q\xac\x0eX]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x00'/551, 0xcd) (async, rerun: 32) r5 = getpgid(0xffffffffffffffff) (rerun: 32) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x104, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x28, 0x19, 0x0, 0x1, [@generic="fe299241fa553feeac4e5eff22e525ca52fb2e3433f687c02078af4871ce672ca5ced5b9"]}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5e}, @NL802154_ATTR_SUPPORTED_COMMANDS={0xa8, 0x19, 0x0, 0x1, [@nested={0x9c, 0xc9, 0x0, 0x1, [@typed={0x4, 0x151}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r5}, @generic="a2ed79076256ccbf2f31aacfd32ca9a8005456fa9bb7d8", @generic, @nested={0x4, 0x60}, @nested={0x4, 0x3f}, @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@remote}, @generic="26f292b007b4f086e248ea9a393d5f28d136fec95027752c7414a5697dbb8e278261e9ec5770d610bef233d22608bc97fe9dc1bcc6542f194a40266a0882da110a7ad5d2cf750b5219e5cf8e27", @nested={0x4, 0x113}]}, @typed={0x8, 0xab, 0x0, 0x0, @uid=0xee01}]}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xcc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x8800}, 0x4040080) r6 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r6, &(0x7f0000000180)='!:-', 0x3) (async) r7 = openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats_csv\x00', 0x20000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x40000105, 0x7, 0x1000}]}) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r7, &(0x7f0000000140)=""/136, 0x88) 1m49.004024694s ago: executing program 9 (id=4257): r0 = pidfd_open$auto(0x1, 0x0) (async) mq_notify$auto(0xffffffffffffffff, &(0x7f00000000c0)={@sival_ptr=0x0, @inferred, 0x2, @_sigev_thread={0x0, 0x0}}) setns(r0, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) setreuid$auto(0x3, 0x7) (async, rerun: 64) syz_clone3(&(0x7f0000000000)={0x10920080, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r0) (rerun: 32) sendmsg$auto_TIPC_NL_SOCK_GET(r0, &(0x7f0000002f80)={&(0x7f0000000200), 0xc, &(0x7f0000002f40)={&(0x7f0000001d80)={0x1194, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xcd, 0x3, 0x0, 0x1, [@generic, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1e0b4}, @generic="f082be5521c147f441e560acf0d0628af500c70abe74aa092a662d2ee8a16e81f0e835b680ad6fbccf4ec7106e3892a2c730ce6e609a0ef3132643ec477e2a9b290f7889bf9cc1f57b4ec24744653e", @generic="247513a024203353504d4867e116e6e9c4bf6550e9b5000245f8a726d5fe7f42c91c9d21bed0fb74ffb95869aadeb49f445337e6e0b7973e78f9d6619169170793bcb8af2828c1e11e8bb093546e470f70aad8564b4bd3a30e227fba81cb5f9e13ae0ac8c00765383667f180de5a056d7182"]}, @TIPC_NLA_LINK={0x10b0, 0x4, 0x0, 0x1, [@generic="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", @generic="6c6d6198b69c71bfb9a045d6dc922fc7473f2edc6c4accf3d5edc51e", @nested={0x90, 0x78, 0x0, 0x1, [@generic="04753fe57f78be5fe3b6906ee5528ae59ca5cfb12b069a0c9822e2e3a80dfe9b63d6a1feb86f9e008f8ba1be2390a347caf5cc714148d990d8f057ae9c5dd7964c1e3c3e604bfa", @nested={0x4, 0x14f}, @generic="a7688c18875e88b17f91211d2495cd32912525cd6bb710c15d4b4fc3e55f9301b25a379768b0905c7ae0af6f3ff30e6273ef32682bcbcff5792bcfbcc54544b699", @generic]}]}]}, 0x1194}, 0x1, 0x0, 0x0, 0x40011}, 0x805) r2 = socket(0x10, 0x3, 0x6) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) unshare$auto(0x8100000) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r3, 0x0, 0x18) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd3/size\x00', 0x40400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000b00)=""/4077, 0xffd0) (async) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x2000000}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000000c0), r2) (async, rerun: 64) renameat2$auto(r0, &(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x2) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20020000", @ANYRES16=r6, @ANYBLOB="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"], 0x220}, 0x1, 0x0, 0x0, 0x40440c0}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RCVMARK(r7, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) (async) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000001b00)={0x248, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_TZ_ID={0x8, 0x2, 0x1}, @THERMAL_GENL_ATTR_CDEV={0x213, 0xe, 0x0, 0x1, [@generic="4fb0092f662f966ceff8dace9ecb659843602f58ef7baa6bec43094ca9d0bf4a23430e558822637c4a4e512bdad03ebf3fe9826d12e7f5bff0ccc607fbad0c69adff6c9e1bfcbf2691d1c6149c0b69dbf62e834eb05757d5bd6f4c0441fd942ab15ca04571ecf1d8b61e811845", @generic="0bcd49aeee0a8a6d999afcde828534fc47b0c01d4e652baad27bd58a494110906f3edcaa2fe5be83b2df20e61cdafa7fa15b2c6a87a1662218881f72d833633b55a0c4250ba24eb6cf8e4e3ed1155ffe4b95c5e1d42f1e9aa91c2368c994581ce626a016b3532a53ff2d6caa3d31ff27c306a38c749546d7ebfd72eba02bdc0b6e42", @generic="4a4c6904c391851c4a739729f57245f8b5acb2ea2a41df6ba46f51a54c8c1d867aab6280d29b838647b0b37addcc0c5fd2afcfdb321f6f7b7e4baa3f0a152b4af1b56a49da3bb77445ae3dfe639cc90288ab2dcb605d9427029dd23eabb09345a7472e78dba8ce845973fde7d1ff5a7eeabe909739b96b013372336bad71963d317582a83c148d0bac2c5114ab9e1111dcf5f2565a55ddbb09f040088562e339e9ebadefc0ce8dd96b14a297f2d277b08efab8471232906bdb1271ca58a2f2720161745136f0fee0d7e8a34fb8eb40e394f4a3c7c9ce9b69696811823cba458e25008a6e", @generic="a35ec6c0c868d64f4a2ff711327fcdcaf502ce2bc22171194ea49ee248d19989d2e9af6af7d88fb8aa96057679ac983ba65448558cc89b0786a5eddd"]}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x8, 0x9}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x3}]}, 0x248}, 0x1, 0x0, 0x0, 0x40001}, 0xb5e24e4233f9bde3) 1m48.883406607s ago: executing program 9 (id=4258): openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$auto(0x3, 0x0, 0x8080) ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) setsockopt$auto(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x56b) (async) setsockopt$auto(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x10052b) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) (async) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) (async) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x80000000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) (async) r1 = socket(0x22, 0xa, 0x6) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) unshare$auto(0x40000080) (async) mmap$auto(0xfffffffffffffffe, 0x81c0000000, 0xa, 0x9b72, r0, 0x5) (async) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1bc, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1aa}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10001}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40c00c4}, 0x40010) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r2, 0x2, 0x0) 1m48.335254763s ago: executing program 9 (id=4259): socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) r1 = socket(0xa, 0x3, 0x3a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resync_time\x00') setsockopt$auto(r1, 0x8, 0xfffffffc, &(0x7f0000000040)=',%\x00', 0xfffffffc) add_key$auto(&(0x7f0000000740)='#)-\\&[}\x00', &(0x7f0000000780)='.\\@&\x00', 0x0, 0x5, 0x9) acct$auto(0x0) getsockopt$auto(r1, 0x29, 0xcf, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r2 = socket(0x29, 0x2, 0x0) getsockopt$auto(r2, 0x119, 0x1, 0x0, 0x0) epoll_create1$auto(0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) fadvise64$auto(0xffffffffffffffff, 0x7fffffffffffffff, 0x5, 0x7) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x400, 0x2b, 0x940, 0x1ffe0, 0x5a6, 0x3, 0x100002, 0x7f, 0x767, 0xfff, 0x7, 0xb2, 0x9, 0x4, 0x3, 0x1, 0x4, 0x20, 0x0, 0x1, 0x202, 0x62c, 0x40000000, 0x0, 0x9, 0x0, 0x0, 0x2, [0x251, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x400000000, 0x5, 0x0, 0x200000, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x87ffd, 0x0, 0x4, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1]}, 0x1fa, 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xf}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe6}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x80000001}, @NFSD_A_SERVER_SCOPE={0x13, 0x4, '/dev/mtdblock0\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x15}]}, 0x58}, 0x1, 0x0, 0x0, 0x814}, 0x80) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m44.916870488s ago: executing program 39 (id=4238): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x230c11000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) pidfd_open$auto(0x1, 0x0) 1m37.394244039s ago: executing program 40 (id=4247): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x1bd184, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SUPPORTED_SELECTORS={0x5, 0x14e, "13"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r6, &(0x7f0000000280)=""/40, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1\x00', 0x0}) r9 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="93ab2cbd7000fbdbdf250800000008000300", @ANYRES32=r14, @ANYBLOB="0800060042"], 0x24}, 0x1, 0x0, 0x0, 0xc811}, 0x10) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r15) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r18 = bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x1, &(0x7f00000001c0)=@query={@target_fd=r18, 0x1, 0x86e6, 0x0, 0xf7d, @count=0x80, 0x0, 0x6, 0x2, 0xfffffffffffff001, 0xb716}, 0xc) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r16, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdf4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x7fff}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x16d}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1m32.573015229s ago: executing program 41 (id=4259): socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) r1 = socket(0xa, 0x3, 0x3a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resync_time\x00') setsockopt$auto(r1, 0x8, 0xfffffffc, &(0x7f0000000040)=',%\x00', 0xfffffffc) add_key$auto(&(0x7f0000000740)='#)-\\&[}\x00', &(0x7f0000000780)='.\\@&\x00', 0x0, 0x5, 0x9) acct$auto(0x0) getsockopt$auto(r1, 0x29, 0xcf, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r2 = socket(0x29, 0x2, 0x0) getsockopt$auto(r2, 0x119, 0x1, 0x0, 0x0) epoll_create1$auto(0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) fadvise64$auto(0xffffffffffffffff, 0x7fffffffffffffff, 0x5, 0x7) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x400, 0x2b, 0x940, 0x1ffe0, 0x5a6, 0x3, 0x100002, 0x7f, 0x767, 0xfff, 0x7, 0xb2, 0x9, 0x4, 0x3, 0x1, 0x4, 0x20, 0x0, 0x1, 0x202, 0x62c, 0x40000000, 0x0, 0x9, 0x0, 0x0, 0x2, [0x251, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x400000000, 0x5, 0x0, 0x200000, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x87ffd, 0x0, 0x4, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1]}, 0x1fa, 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xf}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe6}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x80000001}, @NFSD_A_SERVER_SCOPE={0x13, 0x4, '/dev/mtdblock0\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x15}]}, 0x58}, 0x1, 0x0, 0x0, 0x814}, 0x80) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m29.800249244s ago: executing program 1 (id=4298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r0) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0xe00, 0x490}, 0x8010) 1m29.544399438s ago: executing program 1 (id=4299): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) setresuid$auto(0x0, 0x8, 0x0) setfsuid$auto(0x0) ioctl$auto_TIOCEXCL2(0xffffffffffffffff, 0x540c, 0x0) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000022fc0), r0) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000023280)={0x0, 0x0, &(0x7f0000023240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000054b22960707b2d5fcdb77f315b78f33554d5b3a11370b2178f6e7718eb458e58b0d0e41cd789faa79ce0ef92473b65e9dc0e0ce6ffec1bdc093d8e8f2cbb54e458e9310291a6b7ad59c9bc0000a159a2ac6795a65bb41f18fef641abeadbc2", @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf256200000035000e001c11b753147d3f4bf365f6f66676508731aeed1d2c56c93b878f73058e2cf1085657d8cb0000000100"/70], 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/debug/netdevsim/netdevsim7/max_vfs\x00', 0x1a1100, 0x0) read$auto_nsim_dev_max_vfs_fops_dev(r2, &(0x7f0000001940)=""/4096, 0x1000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) futex$auto(0x0, 0x5, 0x1ff, 0x0, 0x0, 0xfffffffa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m29.12474038s ago: executing program 1 (id=4300): openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/ipsec\x00', 0x100, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='V\x89Zn\xbd\x93\x8e\x91$\x11\xddM\n\xc292\xb6$\xde|\x85\x83R\xe7*\x9bY\xce\xa9\x10\xf6\x8c|\xfb\xd0x\xd8\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6f\xa8\xe0RV\x91\xd4\x16\xa9\xafWW\xb1\xf4o\x1d \xc6\xef\x9dB\xce\xde\xac\x97v\\n\x00\xc6L\xa8\x01~\xe9\x8d\xc7\x18\xcc\xed\xfe\xe3\xe6!\x9e\x9d\x04\xe9\xfc', 0xdda) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x0, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) mremap$auto(0x110c230000, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) swapon$auto(0x0, 0x6) quotactl_fd$auto(r1, 0x200, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0x1, 0x19, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u51\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r6, 0x0, 0xa2b0) 1m22.627880625s ago: executing program 1 (id=4308): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) mmap$auto(0x0, 0x200004, 0xffffffff, 0x40eb2, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x6, 0x10, 0xb, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b3ce63f000000001000", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x4, 0x63f8}, 0xf) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2d, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2a100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) r0 = socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) socket(0x1, 0x1, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x7}, 0x3, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) r1 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x5) 1m16.647833722s ago: executing program 4 (id=4293): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x20008891}, 0x4) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) pread64$auto(r0, 0x0, 0x4, 0xc9) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdf1) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$auto(r5, 0x0, &(0x7f0000001180)=0x80000000) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="05082cbd7000fbdbdf257e000000000000ffe9ff00000000fbcdcf723761e464cc2327ce89ce96a5082aecdbbbdb9b60b1d900"/60], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10800418}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0072e4", @ANYRES16=r7, @ANYBLOB="00082cbd7000fddbdf256a0000000400d1000400dd00"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x40800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c01, &(0x7f00000002c0)={0x0, 0xf}, 0xd, 0x0, 0x0, 0x7}, 0x7}, 0x5, 0x0) 1m16.132598516s ago: executing program 4 (id=4321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x24, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80000300}]}, 0x24}, 0x1, 0x1f00}, 0x4000000) 1m16.006389983s ago: executing program 4 (id=4322): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x1a000, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x59, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fe, 0x0) mmap$auto(0x7, 0x2, 0xa, 0x80000010, r3, 0x101) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x18, 0x3, 0x2) accept$auto(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05082dbd7000fbdbdf257e0000000800", @ANYRES32=r9, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"/376], 0x20}, 0x1, 0x0, 0x0, 0x24008015}, 0x4) socket(0x10, 0x2, 0xc) socket(0xa, 0x3, 0x3a) 1m15.245673103s ago: executing program 4 (id=4323): socket(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) read$auto(r0, &(0x7f0000000000)='*`@\\!#.\\\x00', 0x3) 1m7.247927119s ago: executing program 42 (id=4308): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) mmap$auto(0x0, 0x200004, 0xffffffff, 0x40eb2, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x6, 0x10, 0xb, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b3ce63f000000001000", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x4, 0x63f8}, 0xf) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2d, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2a100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) r0 = socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) socket(0x1, 0x1, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x7}, 0x3, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) r1 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x5) 1m0.263754925s ago: executing program 43 (id=4323): socket(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) read$auto(r0, &(0x7f0000000000)='*`@\\!#.\\\x00', 0x3) 57.183391038s ago: executing program 6 (id=4347): read$auto(0xffffffffffffffff, 0x0, 0xff09) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e2142, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k\xc9\xb7\x80T\xd0\xc2\xa0\a\xf6*:\xb7_\xf1\xb1yx\xc8\x00\xf1\xf9\x87\xa4D\xf4S\xda\xa9Y4*\x1a[\xcdv\x83q\xab\x1aK8 \xe9\xf7TU\xc6\xe3~\x92S\xef\x9c\xc0\xc9\x04/\x18\xf1\xe2\xe4_\xfa{\xe0DB\x1d\x83e\x12*\xa0K\xc0`\nt\xf5\xac$\x94\xf0>\xceXs\xb5\xd8dV\xc4lG\b~\x1cn\x80\xde?\xed~\xcfV\xcd\xdc\xdd\'\xc4^.=\xc4\x86\xce*\xba<\xbf\x19N\xc5~zFY\xc6\x90\xf6o>\xf7\x1a$\xfd\xc7\xf1[-9\xf5v/\x10\x87@\'1\xf3\xd7\xcd\xbf\xac\x84\xe2\x98\x96>\xff1\x8a\x1d\xdalWU\x1c\xc7N\xdf\xcbR\xf6\xea\x89\x01\x04\x00[\x1eP3\xec\x13\x1eh\xab#\x1do\xa1?s\n\xb6\xcc{\x9e\xbb\x06\xe4>J\xbew\xc2K\x1c\x97_=\xe6]\x06)`\xad*\x88k\x1d\x87&\n\xdf#?\x03\x06(\xef;\x7f\x1d\x7f\xb8\xd5\xe9\xfe`M\xe7\x95\xb2\xa6\v\x190\xce\xc4\x15`\xa5C\x9ar\ta\xec\x17\x16\xc6\xf0\x03\xc6\x85U).\xf5\xc5\a\x94\xc5\x86\xb6\xce\r,M\xd2]r\xe5m\x83X\xa82&\x01r3\x8dW\xb0\xf8/\xbf6\xee\x88\xf9LD\r\n\x17\x901\xa1\x10K\x85Yk\x99{\x88\x94\x13rp\xbb\xe18\xbdK\x92\xd8i\x89!l\xad\x1e\xf3M/W3E\xebZ\x92\x1c\xa34\xd2\x84vkf\n6z\x10!\x85\xd9(\xa17\xeb\x82\x97\xd2\x94Nu\x86\xac\x12a\xedp\xa3D\xf7_\x11\x96|V>\xbdj\xb6\x85/\xa6\x17\x11n%\xbe~\x15\x91\xe6\xa9z\xd4\x91\x8f\xac\xc5}\xe4\a\x9an\xa8\xf0\xda\xa1\xb2\xee\xef\xed+S\x1b&X\x82{\x8d\xe3m\xc7\xe8x\xe8V\xf7\xec\xcaH\tQ\xaehU+\x87@\x9b\xe3\xbc\x8e\x99\x8e\x8e\x06/\x0f\ax\xcc\xb0\x88*\xffsuV', 0x2) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x147) getpid() mmap$auto(0x200000, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) socket(0xa, 0x2, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xcf, 0xfffffffffffffffc, 0x4) fadvise64$auto(0xffffffffffffffff, 0x7fffffffffffffff, 0x5, 0x7) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x400, 0x2b, 0x941, 0x1ffe0, 0x6, 0x3, 0x100002, 0x7f, 0x767, 0x1001, 0x7, 0xb2, 0x9, 0x4, 0x3, 0x1, 0x4, 0x20, 0x0, 0x1, 0x202, 0x62c, 0x40000000, 0x0, 0xd, 0x0, 0x0, 0x2, [0x251, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x400000000, 0x5, 0x0, 0x200000, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x87ffd, 0x0, 0x4, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80]}, 0x1fa, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), r1) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xf}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe6}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x80000001}, @NFSD_A_SERVER_SCOPE={0x13, 0x4, '/dev/mtdblock0\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x15}]}, 0x58}, 0x1, 0x0, 0x0, 0x814}, 0x80) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 44.040418868s ago: executing program 8 (id=4444): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) timer_settime$auto(0x0, 0x809, &(0x7f0000000000)={{0xa6, 0xffff}, {0x10000000000, 0x3}}, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sendto$auto(r0, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0xa, "01e98301800a006f00"}, 0x1c) 43.90449614s ago: executing program 8 (id=4446): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x1bd184, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000280)=""/40, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) r6 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="93ab2cbd7000fbdbdf250800000008000300", @ANYRES32=r11, @ANYBLOB="0800060042"], 0x24}, 0x1, 0x0, 0x0, 0xc811}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r12) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r15 = bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x1, &(0x7f00000001c0)=@query={@target_fd=r15, 0x1, 0x86e6, 0x0, 0xf7d, @count=0x80, 0x0, 0x6, 0x2, 0xfffffffffffff001, 0xb716}, 0xc) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r13, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdf4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x7fff}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x16d}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 42.977210033s ago: executing program 8 (id=4451): openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim4/ports/0/ipsec\x00', 0x4540, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec26\x00', 0xc0000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000180)={'\x00', 0x0, 0x5, 0x2, 0x9b7, 0x9, "fafffffc3924222ce18c1000", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "6c6529a30418fffffffff300", "ef5ac4927aed9c5c00000080", ' \x00\x00\x00\x00\x00\t\x00']}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, 0x0) write$auto(0x3, 0x0, 0x400000000000050) r2 = socket(0xa, 0x1, 0x84) r3 = getsockopt$auto(r2, 0x0, 0x53, 0x0, 0x0) mmap$auto(0xea88, 0xb, 0xd, 0x10, 0x3, 0xffffffffffffffff) shmctl$auto_SHM_LOCK(0x6, 0xb, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400005, 0x9, 0xff, r3, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x800000005, &(0x7f0000000500)={0x0, 0x1ffffffff}, 0x2, 0x0) setsockopt$auto(r1, 0x140400, 0x40000005, 0x0, 0x8000008) unshare$auto(0x40000080) mmap$auto(0x2, 0x2020009, 0x3, 0x400000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) setfsuid$auto(0xee00) getsockopt$auto_SO_TXTIME(r2, 0x9, 0x3d, 0x0, 0x0) prctl$auto(0x23, 0x6, 0x0, 0x7e, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socketpair$auto(0x12008, 0x7ff, 0x4, 0x0) 41.41076808s ago: executing program 44 (id=4347): read$auto(0xffffffffffffffff, 0x0, 0xff09) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e2142, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k\xc9\xb7\x80T\xd0\xc2\xa0\a\xf6*:\xb7_\xf1\xb1yx\xc8\x00\xf1\xf9\x87\xa4D\xf4S\xda\xa9Y4*\x1a[\xcdv\x83q\xab\x1aK8 \xe9\xf7TU\xc6\xe3~\x92S\xef\x9c\xc0\xc9\x04/\x18\xf1\xe2\xe4_\xfa{\xe0DB\x1d\x83e\x12*\xa0K\xc0`\nt\xf5\xac$\x94\xf0>\xceXs\xb5\xd8dV\xc4lG\b~\x1cn\x80\xde?\xed~\xcfV\xcd\xdc\xdd\'\xc4^.=\xc4\x86\xce*\xba<\xbf\x19N\xc5~zFY\xc6\x90\xf6o>\xf7\x1a$\xfd\xc7\xf1[-9\xf5v/\x10\x87@\'1\xf3\xd7\xcd\xbf\xac\x84\xe2\x98\x96>\xff1\x8a\x1d\xdalWU\x1c\xc7N\xdf\xcbR\xf6\xea\x89\x01\x04\x00[\x1eP3\xec\x13\x1eh\xab#\x1do\xa1?s\n\xb6\xcc{\x9e\xbb\x06\xe4>J\xbew\xc2K\x1c\x97_=\xe6]\x06)`\xad*\x88k\x1d\x87&\n\xdf#?\x03\x06(\xef;\x7f\x1d\x7f\xb8\xd5\xe9\xfe`M\xe7\x95\xb2\xa6\v\x190\xce\xc4\x15`\xa5C\x9ar\ta\xec\x17\x16\xc6\xf0\x03\xc6\x85U).\xf5\xc5\a\x94\xc5\x86\xb6\xce\r,M\xd2]r\xe5m\x83X\xa82&\x01r3\x8dW\xb0\xf8/\xbf6\xee\x88\xf9LD\r\n\x17\x901\xa1\x10K\x85Yk\x99{\x88\x94\x13rp\xbb\xe18\xbdK\x92\xd8i\x89!l\xad\x1e\xf3M/W3E\xebZ\x92\x1c\xa34\xd2\x84vkf\n6z\x10!\x85\xd9(\xa17\xeb\x82\x97\xd2\x94Nu\x86\xac\x12a\xedp\xa3D\xf7_\x11\x96|V>\xbdj\xb6\x85/\xa6\x17\x11n%\xbe~\x15\x91\xe6\xa9z\xd4\x91\x8f\xac\xc5}\xe4\a\x9an\xa8\xf0\xda\xa1\xb2\xee\xef\xed+S\x1b&X\x82{\x8d\xe3m\xc7\xe8x\xe8V\xf7\xec\xcaH\tQ\xaehU+\x87@\x9b\xe3\xbc\x8e\x99\x8e\x8e\x06/\x0f\ax\xcc\xb0\x88*\xffsuV', 0x2) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x147) getpid() mmap$auto(0x200000, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) socket(0xa, 0x2, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xcf, 0xfffffffffffffffc, 0x4) fadvise64$auto(0xffffffffffffffff, 0x7fffffffffffffff, 0x5, 0x7) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x400, 0x2b, 0x941, 0x1ffe0, 0x6, 0x3, 0x100002, 0x7f, 0x767, 0x1001, 0x7, 0xb2, 0x9, 0x4, 0x3, 0x1, 0x4, 0x20, 0x0, 0x1, 0x202, 0x62c, 0x40000000, 0x0, 0xd, 0x0, 0x0, 0x2, [0x251, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x400000000, 0x5, 0x0, 0x200000, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x87ffd, 0x0, 0x4, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80]}, 0x1fa, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), r1) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xf}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe6}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x80000001}, @NFSD_A_SERVER_SCOPE={0x13, 0x4, '/dev/mtdblock0\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x15}]}, 0x58}, 0x1, 0x0, 0x0, 0x814}, 0x80) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 41.035114426s ago: executing program 8 (id=4457): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x440, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mmap$auto(0x0, 0xe980, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram8/queue/rotational\x00', 0x109001, 0x0) r0 = gettid() rt_tgsigqueueinfo$auto(0x0, r0, 0x21, 0x0) r1 = bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000016c0)=@bpf_attr_11={0x9, 0x8c, 0x4, 0x40, 0x7, 0x25, 0x100000, 0xffffffffffffffff}, 0x9) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000001a00)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000019c0)={&(0x7f00000017c0)={0x1d4, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xea, 0x4, "8e2b1679edb243dec7a8f0019570696cad31cb80568f66a839a70b024634cb881b7b3115306d99bcef45d24b5f00b3117b7833c959f301731d9fee865e87ecd73e6cfb5e747ba42dce5d3ece748cd5217f1643b9ec743d77f3e0aa33fa79a9ee08d85b716d7afb09a4f0f6ba01606a6983c6009d3548a6107b0ee3e6155eb9840a55f7e91d764f96263633c82700f8d7212f5ba4a106544e3c4ae1b845f584dbdca8bddacc16eb6643f8f6acbedc51178f1abc5740ad0d152d6c57e94c78bfeab0d63c51f1a2a1528d7fa2af39410b17facc71e91afd9b8b404ebb6c17471ca058fb2053b5d4"}, @SEG6_ATTR_HMACINFO={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @fd}]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x10}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRET={0xa3, 0x4, "bf9baaa93cb35ab7fc4a3019082f53f4a6a44d636c66f033552008b94a44a4c596db4096c16e924f963eab815cc2ad4ad68c0de2aa04cc1b90c2ddfd972dcfaa48ea0890c58af2b023fbf7408d1fb4cb218125ed0e93ad213b76de74a241aa50602a2e54ec71f7a60c2d7944c60818a0cd4810bf65fd701ee0547413d9a0051d243cb8b98f373ed503bbc758fab6685d275579d02800c1ade90302e698077e"}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80}, 0x40800) bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3fdc, 0x4, 0xffffffffffffffff, 0x9, 0xaf}, 0x4) r3 = set_tid_address$auto(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000080)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000001580)={0x20000080, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000003c0), {0x10}, &(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000001440)=""/187, &(0x7f0000001500)=[0x0, 0xffffffffffffffff, 0x0, r3], 0x4, {r4}}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000200), 0xa0e01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r7 = io_uring_setup$auto(0x2, 0x0) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001600)='/dev/ptyac\x00', 0x80000, 0x0) ioctl$auto_TIOCSETD2(r8, 0x5423, 0x0) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r6) sendmsg$auto_NL80211_CMD_SET_CQM(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="08002bbd7000fedbdf253f000000050018010b000000050060000e000000bc00c8001d744bf5cc4612cb4ca1b9aa0b01c15f495ca24ecbf7ace50cb507f23d3eae2e82d810bdf30f0ffceae98a534786688373405719db69a98d33be2ba732ae1838b451e795675c7c688c6762ecf5469aab61928f0b6d562c009939eb8136754f694670e64f5ab5a6fb0cde8976f2e39ca50def39cf6fe00c6ff146487a8b5b6a68f7b5bc450b523b156654489ef8fdea89f4529bb703e7492afac87418e2ac7b460d02905cc89573b890fa22c639741a8ac6bb2900b4874f9a0600b40005000000"], 0xe8}, 0x1, 0x0, 0x0, 0x8800}, 0x60000004) socketpair$auto(0x5b, 0x2, 0x0, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r8, 0x5437, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r1, 0x41015500, &(0x7f0000001a40)={"47e044b80907472d8488e0872dbb1983021ea2c648f46ed17c8e60fe5f78ab5dd3de4fa33f7f9ca912c924710ff81fcc9172fdb1aca79ae3f22e59055e51391a993505faab13654282b07f8d6e9a2422373817fecb3929bc5379e264023216b689fdff1d0f9e9b8b4a9951b318d631e39f09809fee654f4df83c54606072646d", "515a73384b9f8eb778f8855807edd3523a917afc7fccf06ed248e76dd60087e5b3dabb7aadacd0f860cc685e4f9d351a5cb5f25e74ca33573a9087f92cd3c89dc0fbc088df7afa3e8ba3aedb767c44394d3f7e714ba606a5afe8d9c6f333a674e2f13b1b3d1f31cef52bf45ac5720e81a94dc1d8ebcb9cf50217be84049db54f", 0x5}) 40.307313181s ago: executing program 8 (id=4459): openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$auto(0x3, 0x0, 0x8080) ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x56b) setsockopt$auto(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x10052b) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x80000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) socket(0x22, 0xa, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) unshare$auto(0x40000080) socket(0x2c, 0x3, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) mmap$auto(0xfffffffffffffffe, 0x81c0000000, 0xa, 0x9b72, r0, 0x5) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r1, 0x2, 0x0) 39.41725469s ago: executing program 8 (id=4461): mmap$auto(0x300000000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 24.31443193s ago: executing program 45 (id=4461): mmap$auto(0x300000000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 15.65768721s ago: executing program 5 (id=4572): mmap$auto(0xfffffffffffffffe, 0x102, 0x2, 0x18, 0xffffffffffffffff, 0x7ffd) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) r1 = socket(0x2, 0x3, 0x100) splice$auto(r0, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x29, 0x2, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x3, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x40000d0) sendmmsg$auto(r2, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0p\x00', 0x143101, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000000240)={0x9, 0x49f, 0x0, 0xf583}) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) sendmsg$auto(r4, &(0x7f0000000400)={&(0x7f0000000200)="4b6d6fc84b", 0x2, &(0x7f00000002c0)={&(0x7f0000000280)="083ef2d9b7aa29b9a89d6729cae53d07d462ba0f4616e8dd41143ffaec5b963acd7ab179b957cea4fa0b70da", 0x5}, 0x4, &(0x7f0000000300)="f86107c5ce15ea0d9ab64873176ed0b1cdccf09ab7381ae282c9025ae587ce3c4a77d96043395f872a831367f1914716d73786", 0x4e, 0x8000}, 0x8) r5 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r5, 0xc05c5340, 0x38) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0x8a801, 0x0) write$auto(r7, &(0x7f0000000340)='1\x00\\\xa0\x04|\t\xcb\x12\xfa\b\x1c\xc7k\xfb\x8bv\xf7\r`]\x02\xdb\t\xf7K\x84\x84$h;\xb8\xdc\xb1M\xb9h_O\x98w\x87\a\x92\x10Q\xb0\xc2b\xa1\x11\xb6\xa0/\x17yV\x12jd\xa3mT:;;\xda\x91hy\xf5C\x11\xa1\n\xa4v\xe9\x1e\x1f\x87\x18>\xb3~\x83UF\xb6`6\xb6\xf5\n\xb8!\xfd\'\xb1\x89\xfd\xde8f\xbc\xf0a)-\xb2\xe7\x16\xb7\xdd}\x98h\xae\xb7:,\x93\x14\xe7\xd0\'\xa4\xb2\xd8\xc1\xf6\xa1\xe9]\x061o\x0f', 0x81) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r6) close_range$auto(0x2, 0x8, 0x0) 15.485240219s ago: executing program 5 (id=4573): r0 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000300), 0x101100, 0x0) lseek$auto(r0, 0x0, 0x3) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r0, 0xc, &(0x7f0000000040)='}&-!*!(^\x00', &(0x7f0000000080)="585d895aa2ec056bea689f25df2458124d2993540f774cbd56481aba5b33d030a26d9cd4cc8a3d2376d38657177a7e3b511dc8e9671de325e7b6abb06a13baa36481010b95e1e4e6ec1de309ea62f7e9ebaf3a9674fc03238715089cc3d0bdb0d2d4af0bc5b1d6c97d732427dee3af593e1fc8d7a05fcee06be7ea8c8d6bc8f3ef383e54c5b9a2cec69f9c32378e33592402197dbfa24dfa50f09b84e3eaad301396dcc2e8ce4b", 0x2) unshare$auto(0x40000080) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r1, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', 0x0) mmap$auto(0x800000, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r2 = getpid() mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) shmget$auto(0x0, 0x7b, 0x100) process_vm_readv$auto(r2, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) r4 = syz_clone3(&(0x7f0000000480)={0x22000000, 0x0, &(0x7f00000001c0), &(0x7f0000000200), {0xa}, &(0x7f00000002c0)=""/150, 0x96, 0x0, &(0x7f0000000440)=[r2], 0x1}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x4dd8, 0x5) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_BIND_RX(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250d00000008000300", @ANYRESDEC=0x0, @ANYBLOB="0400028008000100"], 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x4) close_range$auto(0x2, 0x8, 0x0) r7 = prctl$auto(0x3e, 0x1ff, r4, 0xffffffffffffffff, 0x4000006) listen$auto(r1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) dup$auto(r7) r8 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/14/node\x00', 0x20000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r8, &(0x7f00000001c0)=""/215, 0xd7) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) pread64$auto(r9, 0x0, 0x6000000000, 0x100000004) 14.872765254s ago: executing program 5 (id=4577): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8a5b, 0x401) close_range$auto(0x2, 0xa, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) r0 = socket(0x2c, 0x3, 0x0) getsockopt$auto(r0, 0x11b, 0x8, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) timer_create$auto(0x9, 0x0, 0x0) socket(0xa, 0x1, 0x100) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x317, r1, 0x4, 0x1) ptrace$auto(0x10, r1, 0x1, 0x7ff) ptrace$auto(0xe, r1, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0xfffffffffffffffe, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000100)="8d8cfd72f1c71518ed22169e0b95f9ec78a50679ec2009e4e3018d19c40010000017fab27c8579476acec85237f8ee85a124f668e8bbf6de7eda4cce570cdc4ad25d470132") read$auto(0xffffffffffffffff, 0x0, 0x2800000009) write$auto(0x3, 0x0, 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {0x4, 0x0, 0x4000}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x40000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) 13.436705686s ago: executing program 5 (id=4583): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) 13.331877248s ago: executing program 5 (id=4585): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0xa, 0x9) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) sysfs$auto(0x2, 0x1c, 0x0) r1 = fsopen$auto(0x0, 0x1) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000300)={"e3f11d66", 0x0, 0x2, 0x8, 0x2, 0xbf0, "9e541511fdcbc4c95715ac63e6025e", "a38c6f21", "1e4499dc", "b5b696fb", ["26fd2415e2a00b737dcc1927", "f771cb6227347037e0daa034", "a2ca8beb3818703f84139aa7", "8f33bd510d0a8c09a53c0b1c"]}) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001640), 0x200, 0x0) r4 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$auto_nst_seq_fops_netdebug(r4, &(0x7f0000000040)=""/227, 0xe3) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) 12.925392347s ago: executing program 5 (id=4589): socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) fadvise64$auto(0xffffffffffffffff, 0x7fffffffffffffff, 0x5, 0x7) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x400, 0x2b, 0x940, 0x1ffe0, 0x5a6, 0x3, 0x100002, 0x7f, 0x767, 0xfff, 0x7, 0xb2, 0x9, 0x4, 0x3, 0x1, 0x4, 0x20, 0x0, 0x1, 0x202, 0x62c, 0x40000000, 0x0, 0x9, 0x0, 0x0, 0x2, [0x251, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x400000000, 0x5, 0x0, 0x200000, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x87ffd, 0x0, 0x4, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1]}, 0x1fa, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xf}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe6}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x80000001}, @NFSD_A_SERVER_SCOPE={0x13, 0x4, '/dev/mtdblock0\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x15}]}, 0x58}, 0x1, 0x0, 0x0, 0x814}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r4, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@nested={0x4, 0x12c}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908208dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x400080}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 8.456983536s ago: executing program 0 (id=4608): mmap$auto(0x0, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xd6}, 0xe50) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x1242, 0x0) lseek$auto(r0, 0x4, 0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r1, 0x0, 0x39b8) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_nsim_psample_enable_fops_psample(0xffffffffffffffff, &(0x7f00000005c0)='Y', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x0) io_uring_setup$auto(0x59, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) pidfd_getfd$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3) 7.207409675s ago: executing program 0 (id=4615): r0 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/ipsec\x00', 0x100, 0x0) read$auto_ipsec_dbg_fops_ipsec(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000080), 0xffffffffffffffff) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x2406a90b, 0x83, 0x3}, 0x20, 0x0, 0x8000006) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x16bd00, 0x0) pread64$auto(r3, 0x0, 0x100000001, 0x400000000000100) rseq$auto(0x0, 0x6, 0x8, 0x10) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000002440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002400)={&(0x7f00000000c0)={0x2334, r2, 0x308, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCAT={0x124, 0xb, 0x0, 0x1, [@generic="6a06a937cca6138eee2a9667c5f0aa72849623adcf92395c0451cfc28cd2bfd4a7d790b5f6b4be5dae16a5d3905ae32b3b19081dd925216baf50753d10aee7aa24726bad36ad0640a69617cdcbcbaaeb23951850acc66e6a946fa87345688d16305d05f8d0e66432f6", @typed={0x8, 0x11b, 0x0, 0x0, @u32=0x10000}, @generic="0a430e80de3e607deb0436d6149e790b88493a03a5d664e5d65acd028d02a7aee9a8de8b0fcd73d92605a64ae16d0e7393b6ddbf", @generic="4c8f920c198b9b40664e0a19fa8ad919abddb1d5a86b271f728ded9ac292e866bc309cd358292fef32bc2aa123ad494c0b752774640b3a859edacc059551203d29e083c037ef8078a67f3fd370931e83939acf6e25a1e11e6ebf3388aa0be9a6e620b3fa538f7f85be7fcf451fe823d486e98065b95fc4281f5f7c"]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0xbe8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x80000000}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x80000001}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x82, 0x4, 0x0, 0x1, [@nested={0x1c, 0x94, 0x0, 0x1, [@nested={0x4, 0xdf}, @nested={0x4, 0x92}, @typed={0xe, 0xb9, 0x0, 0x0, @str='*[--{@)@%\x00'}]}, @generic="3f0f02faa056a0bead240840a0913966b93ba365f2fb74cf3aae07c74b6c47c1d0d25139c3e13c3fe0f7b3c33644d976e12759e7218e5cba0c51b26d6c226acce65c267c7dbfc5cafecf25d0f8db051cd9eea6e9fb16bb9bb14fd4777413c6061aa4"]}, @NLBL_CIPSOV4_A_MLSCAT={0x2155, 0xb, 0x0, 0x1, [@typed={0x8, 0x168, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="92672b00f9360659421d33a7a78d67f385b8da7c2c7d9ebd32f51232fc9293b512db80463a022e0c837333d5494b8c2ff3342f2a2900537d0049c2b9e05397b13ca9642f61afefa945531c6b5cc131959399fe5a012e31725a518802a892f41657c21768d57ec10edab9d4dad44456e9304ef7091b0b6225df8144843fb58cf43b155304986b39aad36d0438eb501b33257434f0f3c698e923985d88430db989fdf659237c7d4fd657303bd28e7ac79f0f33ce25c71813537f70bf4b7f7edd1cb78c3ebe7b5c5f470ef861571501f5dbb4cfffa3826610ac6bde9864aeb9c4df7569f3798e23d5274d90", @generic="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", @generic="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", @typed={0x8, 0x81, 0x0, 0x0, @u32=0x2000000}, @nested={0x34, 0x101, 0x0, 0x1, [@typed={0x14, 0xf1, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x153, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x101, 0x0, 0x0, @uid}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xc8}]}, @generic="3369c2d93fadad168c5b109fa6f9230906e90dd95521fd5169e0d96322a755e03d318c"]}]}, 0x2334}, 0x1, 0x0, 0x0, 0x94}, 0x20008c01) 6.968746309s ago: executing program 0 (id=4616): r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/pcmC1D1p\x00', 0x82f1052bfc7f8c4a, 0x0) mmap$auto(0x6, 0x40000b, 0x78a, 0x9b74, r0, 0x7e) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0xfffffffc, 0x10000038, 0xffffff01, 0x7b, 0x9, 0x80000007, 0x7, 0x10000000008, 0x5, 0xd, 0x7e, 0x1, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x1, 0x2000000000000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, [0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x800, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x5, 0x0) socket(0x10, 0x2, 0x0) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000800df, 0xeb1, 0x401, 0x8000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000041}, 0x24000008) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000004000800040003374b0008"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = socket(0x2b, 0x1, 0x1) r3 = getsockopt$auto(r2, 0x0, 0x80, 0x0, 0x0) sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffc01}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0xffffffff7fffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0xa732}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, &(0x7f0000000340)={0x1, 0xebce, 0x5, 0x5, 0x3, 0x87}) r4 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000280), 0x4042, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x8) ftruncate$auto(0x0, 0x8800000) fsync$auto(r4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000300)={0x0, 0xc4}, 0x10, 0x0, 0x8000000000000, 0x9}, 0x7}, 0x3, 0x0) 6.760271692s ago: executing program 0 (id=4620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x18, r1, 0x1, 0x70bd2f, 0x25dfdbfd, {0xc, 0x0, 0x700}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x24048084) 6.616408057s ago: executing program 0 (id=4622): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x29, 0x2, 0x0) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1300000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r1, 0xc05c5340, 0x38) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b62, r2) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r2) close_range$auto(0x2, 0x8, 0x0) 6.471973514s ago: executing program 0 (id=4624): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x38d400, 0x98) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) unshare$auto(0x8100000) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4080) r4 = open_by_handle_at$auto(r1, &(0x7f0000000140)={0x8, 0x2, "0100000000000000"}, 0xdffffff3) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x80002, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, &(0x7f0000000240)="d2e655af5786a1ebcbdc5d95cb219fa978f7c6548babcd934d59d569f359470fe733fb8a796d85ace9f3150f8490aca20f7bf1e609db43cef77f667df53f434647e98a06db780daceac3887297e2ae72ddb02620f8d1fd489d93dfdcb74c29c222d017605f933ac5acca7871b6f577d7a1a06bfd0e3e304b095f188d49e5407f2f23bd3daffd602a39aa237e913f30fcc720e76bdf148f8b01b2f07edb5c27f5138d92") ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000080)={0x28, 0xf3, 0xb0, @raw=0xfffff00c}}) 4.116149193s ago: executing program 7 (id=4640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x24, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80000300}]}, 0x24}, 0x1, 0x0, 0x7000000}, 0x4000000) 3.976710753s ago: executing program 7 (id=4642): r0 = pidfd_open$auto(0x1, 0x0) ioctl$auto_FIOQSIZE(r0, 0x5460, 0x7ff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0) r2 = ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000540)={r1, &(0x7f0000000180)="bf22d0086df2b1cdb519acee020785a478abc7ae1e991f72827acb50099f222265fa74cc9575a20fc14a6cd12d660d512a7c355c3b14ba6d447e50ca15c4d2745346434c5fa47e8da21d7989a1ccf0ddd42e0000d74a07971aca0605757fe96876b5e983bb20d2399ebaa9847aca1ffe45d08c32d1f0063d3e670004000042454e0bf8cf0ca4674da4833ea216003e8b9a8dd4b8de3ff93c10e8", 0x5, &(0x7f0000000140)="81d3cb8cb77b2a4eddf037101e", 0x8, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80040, 0x0) sendmsg$auto_NBD_CMD_RECONFIGURE(r3, 0x0, 0x8) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x7, 0x3, 0x0) setresuid$auto(0x0, 0x7, 0x8080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000780), r2) socket(0x2, 0x1, 0x106) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) listen$auto(0x3, 0x400000) r4 = socket(0x2, 0x2, 0x1) setsockopt$auto(r4, 0x10000001, 0x100000c, 0x0, 0x81) setfsuid$auto(0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xff, 0xdf, 0x2009b72, 0x2, 0x8000) uname$auto(0x0) ioctl$auto(r5, 0x4b66, r6) 3.832284297s ago: executing program 7 (id=4644): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x200000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) pidfd_open$auto(0x1, 0x0) 987.529751ms ago: executing program 3 (id=4654): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x14, 0x0, 0x73b, 0x70bd27, 0x25dfdbfd, {0x3, 0x0, 0x810}}, 0xffcc}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000e40), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x800, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r3 = semctl$auto(0x36000, 0x5, 0x799a, 0x7540) move_pages$auto(r3, 0x7, &(0x7f00000003c0)=&(0x7f0000000280)="3dc780d153032759044b61a80a01d0eae985436975538882b1903051566ff504a9518130eda36c831dbdd46d5a68d93e69885608a21ba36d04b2601437cffc9897516ea8f5038ddf04972c39e0e1006e6eb0ea34e417961d722f8c797e4078685f23716805deac45ab2dcb0ebcda8dff7d2b87ae4c52d6207ba491194d5b77f9ecb1acb701992881a181828731791c91200df9f9be1fc41d12eaa54be1537cde1dbeb472c61de3f207435032613c9a4b3672a29db80ab77cc7f1943628e650445c05fd44b088cbd5194b00", 0x0, &(0x7f0000000440)=0x17ae77a0, 0xd) mremap$auto(0x204000, 0x7, 0x3fd6, 0x3, 0x200000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x6}, @NL80211_ATTR_FILS_KEK={0x1e, 0xf2, "ea676a053cf9c397cccecb756ef0574bf31ab2e2290d7f194499"}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)={0x18, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_NO_VIF={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x2, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 762.427866ms ago: executing program 3 (id=4655): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x29, 0x2, 0x0) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1f00000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r1, 0xc05c5340, 0x38) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b62, r2) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r2) close_range$auto(0x2, 0x8, 0x0) 710.431714ms ago: executing program 7 (id=4656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="1c0000f0", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf2502000000080001000900002c6f01"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2004c890) 672.437163ms ago: executing program 3 (id=4657): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x10, 0x2, 0x0) setresuid$auto(0x0, 0x8, 0x0) setfsuid$auto(0x0) ioctl$auto_TIOCEXCL2(0xffffffffffffffff, 0x540c, 0x0) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000022fc0), r0) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000023280)={0x0, 0x0, &(0x7f0000023240)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, 0x0, 0x1a1100, 0x0) read$auto_nsim_dev_max_vfs_fops_dev(r1, 0x0, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) futex$auto(0x0, 0x5, 0x1fe, 0x0, 0x0, 0xfffffffa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 517.003489ms ago: executing program 3 (id=4658): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x1bd184, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000280)=""/40, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) r6 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="93ab2cbd7000fbdbdf250800000008000300", @ANYRES32=r11, @ANYBLOB="0800060042"], 0x24}, 0x1, 0x0, 0x0, 0xc811}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r12) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r15 = bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x1, &(0x7f00000001c0)=@query={@target_fd=r15, 0x1, 0x86e6, 0x0, 0xf7d, @count=0x80, 0x0, 0x6, 0x2, 0xfffffffffffff001, 0xb716}, 0xc) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r13, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdf4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x7fff}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x16d}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 409.958602ms ago: executing program 3 (id=4659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2f, 0x25dfdbfd, {0xc, 0x0, 0x700}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x24048084) 333.749301ms ago: executing program 3 (id=4660): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x7, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x7) r0 = memfd_create$auto(0x0, 0x6) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000003, 0xe9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) r1 = timerfd_create$auto(0x1, 0x0) timerfd_settime$auto(r1, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) socket(0xf, 0xa, 0x5) rt_sigsuspend$auto(&(0x7f0000000140)={0x10}, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_TUNSETGROUP(r0, 0x400454ce, &(0x7f00000000c0)=0x3) socket(0x2, 0x801, 0x6) shutdown$auto(0x200000003, 0x2) listen$auto(0x3, 0x7) shmctl$auto_SHM_STAT(0x5, 0xd, &(0x7f0000000240)={{0x3, 0xee01, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x7}, 0xfffffffe, 0x9, 0x0, 0x5, @inferred, @raw=0x6, 0x0, 0x0, 0x0, 0x0}) 89.948236ms ago: executing program 7 (id=4661): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24009e00", @ANYRES16=r1, @ANYBLOB="130026bd7000fcdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 0s ago: executing program 7 (id=4662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000040)={"4bd9abb0811ba7263e1f277771a7f7a10c052fe479caad0cf03f3b258977763e", 0x8, 0x4, 0x5, 0x3, 0x2e60}) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0xc4, 0xf95d970a, 0x6, @_rt={0x0, 0x0, @sival_int=0x7}}}, 0x41c, &(0x7f0000000140)={{0x5, 0x9}, {0x0, 0x8f83}, 0xae7, 0x7, 0x4, 0xd, 0x9, 0x6, 0x95, 0x388, 0x8000000000000001, 0x4, 0x10001, 0x5, 0x8, 0x1}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd11/queue/read_ahead_kb\x00', 0x22b42, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r3 = prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/radio29\x00', 0x28002, 0x0) pwrite64$auto(0xc8, &(0x7f0000000480)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05e\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\b2[\x05\xbdn\x1d\x00\xeb]B\xa0\x99\xb0B\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a0\xeb\xbf\xcfwU&[\xde?\x81\x9a@\xb8h\xc0\x88_\xa0u\xa2\xddH\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xe, 0x10000) poll$auto(&(0x7f00000001c0)={r4, 0xffff, 0x29}, 0x6, 0x5) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x2a1, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0xfffffffd, 0x1, 0x40, 0x76c5, 0x100008, 0x100000000}}) ioctl$auto_EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000100)={0xffffffff, 0x0, "f9f62da2db7faff11eebdb0f76aa9b2f9ddaafb36b03b06d2066d1f95303dfdaddf65c3b36eb5565bb24a0da3d29ef667f9c88bed392690ac95ff12670a411d6dc05fd1aedd8dd75052005196c1b8d1c510088113c45cb8e9415a2ef61c9e13d1f46af4ac44aff82d55a2570b9c61e441aaef371dd7110ea3c12790104b9e41cd430cde315df3401f150b2d1f92c18c1a23bf33763fd4732b65dacc08dfbcf976b12d7282c30754b005442a8b4bc50353e54c8240a9115f2f6f50d58286f97c6f286db732a8246701566eb69b5fbe02da9ad98008877760ea7a8150acf39cb4cce9c2436d3307fd5ed58617c3c14116eee33a2"}) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)=ANY=[@ANYBLOB="300000d8", @ANYRES16=r1, @ANYBLOB="000126bd7000fedbdf25030000000400080004000380120001008900"/42], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r5 = socket(0x22, 0x1, 0xb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), r2) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf340300000008002700060000000500190008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x881) bind$auto(0x3, &(0x7f0000000000)=@phonet={0x23, 0x6, 0x3, 0xf9}, 0x6a) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x100009) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) kernel console output (not intermixed with test programs): _hardirqs_on+0x78/0x100 [ 1044.775269][T23049] do_syscall_64+0x115/0x840 [ 1044.775288][T23049] ? clear_bhb_loop+0x40/0x90 [ 1044.775306][T23049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.775322][T23049] RIP: 0033:0x7f79fd99ce59 [ 1044.775336][T23049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.775351][T23049] RSP: 002b:00007f79fe7b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1044.775367][T23049] RAX: ffffffffffffffda RBX: 00007f79fdc15fa0 RCX: 00007f79fd99ce59 [ 1044.775378][T23049] RDX: 0000000000000051 RSI: 0000200000000080 RDI: 0000000000000003 [ 1044.775388][T23049] RBP: 00007f79fda32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1044.775398][T23049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.775407][T23049] R13: 00007f79fdc16038 R14: 00007f79fdc15fa0 R15: 00007fff0dfe34b8 [ 1044.775429][T23049] [ 1045.793997][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4182'. [ 1046.028595][T23075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4183'. [ 1046.111207][T23072] NFSD: Failed to start, no listeners configured. [ 1047.403671][T23105] futex_wake_op: syz.5.4193 tries to shift op by -1; fix this program [ 1047.757079][T23106] FAULT_INJECTION: forcing a failure. [ 1047.757079][T23106] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.797025][T23109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4194'. [ 1047.816686][T23106] CPU: 0 UID: 0 PID: 23106 Comm: syz.6.4192 Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.816709][T23106] Tainted: [L]=SOFTLOCKUP [ 1047.816714][T23106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1047.816722][T23106] Call Trace: [ 1047.816727][T23106] [ 1047.816733][T23106] dump_stack_lvl+0x100/0x190 [ 1047.816761][T23106] should_fail_ex.cold+0x5/0xa [ 1047.816780][T23106] should_failslab+0xc2/0x120 [ 1047.816797][T23106] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1047.816817][T23106] ? sctp_add_bind_addr+0xae/0x3e0 [ 1047.816838][T23106] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1047.816856][T23106] sctp_add_bind_addr+0xae/0x3e0 [ 1047.816878][T23106] sctp_do_bind+0x36c/0x760 [ 1047.816899][T23106] sctp_connect_new_asoc+0x5e7/0x770 [ 1047.816919][T23106] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1047.816938][T23106] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1047.816966][T23106] __sctp_connect+0x3e7/0xc70 [ 1047.816988][T23106] ? __pfx___sctp_connect+0x10/0x10 [ 1047.817006][T23106] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1047.817024][T23106] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1047.817045][T23106] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1047.817061][T23106] sctp_inet_connect+0x15f/0x220 [ 1047.817080][T23106] __sys_connect_file+0x141/0x1a0 [ 1047.817104][T23106] __sys_connect+0x141/0x170 [ 1047.817124][T23106] ? __pfx___sys_connect+0x10/0x10 [ 1047.817143][T23106] ? __fget_files+0x21f/0x3d0 [ 1047.817166][T23106] ? __pfx_ksys_write+0x10/0x10 [ 1047.817187][T23106] __x64_sys_connect+0x72/0xb0 [ 1047.817206][T23106] ? lockdep_hardirqs_on+0x78/0x100 [ 1047.817226][T23106] do_syscall_64+0x115/0x840 [ 1047.817244][T23106] ? clear_bhb_loop+0x40/0x90 [ 1047.817261][T23106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.817276][T23106] RIP: 0033:0x7fa06c99ce59 [ 1047.817289][T23106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.817309][T23106] RSP: 002b:00007fa06abd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1047.817323][T23106] RAX: ffffffffffffffda RBX: 00007fa06cc16090 RCX: 00007fa06c99ce59 [ 1047.817333][T23106] RDX: 0000000000000055 RSI: 0000200000000040 RDI: 0000000000000003 [ 1047.817342][T23106] RBP: 00007fa06abd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.817350][T23106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.817359][T23106] R13: 00007fa06cc16128 R14: 00007fa06cc16090 R15: 00007ffc2b301d58 [ 1047.817378][T23106] [ 1048.176403][ T6353] Bluetooth: hci4: command 0x0406 tx timeout [ 1048.309559][T23122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4197'. [ 1048.508003][T23128] usbip-vudc usbip-vudc.0: gadget not bound [ 1049.035118][ T8622] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1049.091176][T23139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4202'. [ 1050.852677][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1050.859053][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1051.213382][T23157] FAULT_INJECTION: forcing a failure. [ 1051.213382][T23157] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.226461][T23157] CPU: 0 UID: 0 PID: 23157 Comm: syz.5.4208 Tainted: G L syzkaller #0 PREEMPT(full) [ 1051.226486][T23157] Tainted: [L]=SOFTLOCKUP [ 1051.226492][T23157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1051.226502][T23157] Call Trace: [ 1051.226507][T23157] [ 1051.226514][T23157] dump_stack_lvl+0x100/0x190 [ 1051.226544][T23157] should_fail_ex.cold+0x5/0xa [ 1051.226564][T23157] should_failslab+0xc2/0x120 [ 1051.226582][T23157] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1051.226605][T23157] ? sock_alloc_inode+0x26/0x290 [ 1051.226626][T23157] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1051.226645][T23157] sock_alloc_inode+0x26/0x290 [ 1051.226662][T23157] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1051.226679][T23157] alloc_inode+0x68/0x250 [ 1051.226702][T23157] sock_alloc+0x44/0x280 [ 1051.226716][T23157] ? security_socket_create+0x7f/0x250 [ 1051.226734][T23157] __sock_create+0xc2/0x860 [ 1051.226757][T23157] __sys_socketpair+0x1e4/0x5b0 [ 1051.226778][T23157] ? __pfx___sys_socketpair+0x10/0x10 [ 1051.226799][T23157] ? xfd_validate_state+0x129/0x190 [ 1051.226820][T23157] __x64_sys_socketpair+0x96/0x100 [ 1051.226841][T23157] ? lockdep_hardirqs_on+0x78/0x100 [ 1051.226862][T23157] do_syscall_64+0x115/0x840 [ 1051.226880][T23157] ? clear_bhb_loop+0x40/0x90 [ 1051.226898][T23157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.226914][T23157] RIP: 0033:0x7f083999ce59 [ 1051.226927][T23157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.226942][T23157] RSP: 002b:00007f083a90f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1051.226956][T23157] RAX: ffffffffffffffda RBX: 00007f0839c15fa0 RCX: 00007f083999ce59 [ 1051.226968][T23157] RDX: 0000000000000400 RSI: 0000000000000005 RDI: 000000000000001e [ 1051.226977][T23157] RBP: 00007f0839a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1051.226986][T23157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1051.226995][T23157] R13: 00007f0839c16038 R14: 00007f0839c15fa0 R15: 00007ffd2f2bd268 [ 1051.227015][T23157] [ 1051.227023][T23157] socket: no more sockets [ 1051.504416][T23162] netlink: 'syz.5.4209': attribute type 1 has an invalid length. [ 1051.820728][T23175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4213'. [ 1052.337947][T23182] futex_wake_op: syz.0.4216 tries to shift op by -1; fix this program [ 1062.895945][T17414] Process accounting resumed [ 1063.038822][T17415] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1063.056471][T17415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1063.066608][T17415] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1063.075141][T17415] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1063.083214][T17415] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1063.515530][T23202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.523374][T23202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.531379][T23202] bridge_slave_0: entered allmulticast mode [ 1063.538347][T23202] bridge_slave_0: entered promiscuous mode [ 1063.546193][T23202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.553512][T23202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.561564][T23202] bridge_slave_1: entered allmulticast mode [ 1063.568859][T23202] bridge_slave_1: entered promiscuous mode [ 1063.597842][T23202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.613094][T23202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.640721][T23202] team0: Port device team_slave_0 added [ 1063.648531][T23202] team0: Port device team_slave_1 added [ 1063.672965][T23202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.679994][T23202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.706977][T23202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.722927][T23202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.730084][T23202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.757125][T23202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.795726][T23202] hsr_slave_0: entered promiscuous mode [ 1063.802179][T23202] hsr_slave_1: entered promiscuous mode [ 1063.971386][T23202] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1063.984957][T23202] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1063.993454][T23202] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1064.002611][T23202] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1064.011075][T23202] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1064.023504][T23202] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1064.032876][T23202] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1064.042575][T23202] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1064.073301][T23202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.080454][T23202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.087810][T23202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.094946][T23202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.146716][T23202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.164280][T13826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.174772][T13826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.188772][T23202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.200224][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.207400][ T7750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.236445][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.243575][ T7750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.640007][T17415] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1064.656884][T17415] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1064.665562][T17415] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1064.675624][T17415] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1064.685271][T17415] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1064.851535][T23202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.171847][T17415] Bluetooth: hci2: command tx timeout [ 1065.271150][T23202] veth0_vlan: entered promiscuous mode [ 1065.313593][T23202] veth1_vlan: entered promiscuous mode [ 1065.376540][T23202] veth0_macvtap: entered promiscuous mode [ 1065.394974][T23202] veth1_macvtap: entered promiscuous mode [ 1065.445537][T23202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.477539][T23202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.514232][ T7733] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.554321][ T7750] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.564029][ T7750] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.690126][ T7733] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.704436][T23237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.712178][T23237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.719802][T23237] bridge_slave_0: entered allmulticast mode [ 1065.726858][T23237] bridge_slave_0: entered promiscuous mode [ 1065.749160][T23237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.762523][T23237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.770766][T23237] bridge_slave_1: entered allmulticast mode [ 1065.778241][T23237] bridge_slave_1: entered promiscuous mode [ 1065.827456][ T7733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.842933][T23237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.859689][ T7733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.879052][T23237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.926243][T13826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.938854][T23237] team0: Port device team_slave_0 added [ 1065.944482][T13826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.957343][T23237] team0: Port device team_slave_1 added [ 1066.007474][T23237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.024016][T23237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.106524][T23237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.139715][T23237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.150093][T23237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.181004][T23237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.281776][T23237] hsr_slave_0: entered promiscuous mode [ 1066.299485][T23237] hsr_slave_1: entered promiscuous mode [ 1066.314505][T23237] debugfs: 'hsr0' already exists in 'hsr' [ 1066.326669][T23237] Cannot create hsr debugfs directory [ 1066.763915][T17415] Bluetooth: hci5: command tx timeout [ 1067.077568][T23237] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1067.116029][T23237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1067.134610][T23237] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1067.154975][T23237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1067.185457][T23237] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1067.205522][T23237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1067.221115][T23237] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1067.242490][T17415] Bluetooth: hci2: command tx timeout [ 1067.252214][T23237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1067.456152][T23237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.534094][T23237] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.595259][T13826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.602395][T13826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.695035][T13826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.702175][T13826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.020358][ T8622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1068.039591][ T8622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1068.051445][ T8622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1068.064220][ T8622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1068.073351][ T8622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1068.831692][ T8622] Bluetooth: hci5: command tx timeout [ 1068.912990][T23237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.924968][T17415] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1068.945534][T17415] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1068.954970][T17415] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1068.964166][T17415] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1068.972181][T17415] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1069.310192][T17415] Bluetooth: hci2: command tx timeout [ 1069.594796][T23308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.613766][T23308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.633668][T23308] bridge_slave_0: entered allmulticast mode [ 1069.643676][T23308] bridge_slave_0: entered promiscuous mode [ 1069.662782][T23308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.675165][T23308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.683088][T23308] bridge_slave_1: entered allmulticast mode [ 1069.693029][T23308] bridge_slave_1: entered promiscuous mode [ 1069.754091][T23308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.778719][T23308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.809559][T23237] veth0_vlan: entered promiscuous mode [ 1069.849449][T23308] team0: Port device team_slave_0 added [ 1069.858387][T23237] veth1_vlan: entered promiscuous mode [ 1069.874155][T23308] team0: Port device team_slave_1 added [ 1069.932954][T23308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.943321][T23308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.974159][T23308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.988583][T23308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.995895][T23308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.024443][T23308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.083706][T23237] veth0_macvtap: entered promiscuous mode [ 1070.105038][T17415] Bluetooth: hci6: command tx timeout [ 1070.122798][T23308] hsr_slave_0: entered promiscuous mode [ 1070.131319][T23308] hsr_slave_1: entered promiscuous mode [ 1070.139374][T23308] debugfs: 'hsr0' already exists in 'hsr' [ 1070.145717][T23308] Cannot create hsr debugfs directory [ 1070.151561][T23237] veth1_macvtap: entered promiscuous mode [ 1070.253418][T23237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.337203][T23237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.462365][ T7750] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.487008][ T7750] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.560438][ T7750] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.629186][ T7750] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.904993][T17415] Bluetooth: hci5: command tx timeout [ 1071.060974][T17415] Bluetooth: hci7: command tx timeout [ 1071.082892][T23328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.097145][T23328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.113168][T23328] bridge_slave_0: entered allmulticast mode [ 1071.128924][T23328] bridge_slave_0: entered promiscuous mode [ 1071.160063][T23328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.185288][T23328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.210465][T23328] bridge_slave_1: entered allmulticast mode [ 1071.234986][T23328] bridge_slave_1: entered promiscuous mode [ 1071.328331][ T7733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.354421][ T7733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.380031][T17415] Bluetooth: hci2: command tx timeout [ 1071.492621][T23328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.511311][T23367] futex_wake_op: syz.7.4232 tries to shift op by -1; fix this program [ 1071.525660][T23308] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1071.540904][T23308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1071.559396][T23308] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1071.591759][T23308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1071.615588][T23328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.650866][ T7746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.670209][T23308] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1071.683426][ T7746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.707735][T23308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1071.752227][T23308] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1071.773682][T23308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1071.808981][T23328] team0: Port device team_slave_0 added [ 1071.837631][T23328] team0: Port device team_slave_1 added [ 1071.932296][T23328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.972271][T23328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.082786][T23328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.130402][T23328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.159688][T23328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.205602][T17415] Bluetooth: hci6: command tx timeout [ 1072.268119][T23328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.387183][T23388] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1072.441895][T23328] hsr_slave_0: entered promiscuous mode [ 1072.468415][T23328] hsr_slave_1: entered promiscuous mode [ 1072.498759][T23328] debugfs: 'hsr0' already exists in 'hsr' [ 1072.523497][T23328] Cannot create hsr debugfs directory [ 1072.963158][T23308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.970596][T17415] Bluetooth: hci5: command tx timeout [ 1073.132357][T17415] Bluetooth: hci7: command tx timeout [ 1073.393460][T23400] Invalid ELF header magic: != ELF [ 1073.762815][T23308] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.819775][T13826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.826924][T13826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.002933][T13826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.010090][T13826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.244477][T17415] Bluetooth: hci6: command tx timeout [ 1075.114951][T23328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1075.155052][T23328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1075.182717][T23328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1075.200119][T17415] Bluetooth: hci7: command tx timeout [ 1075.265419][T23328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1075.303466][T23328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1075.352873][T23328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1075.401023][T23328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1075.429065][T23328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1075.699189][T23308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.753760][T23328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.829372][T23328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.893756][T13826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.900955][T13826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.972183][T13826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.979340][T13826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.318893][T17415] Bluetooth: hci6: command tx timeout [ 1076.565606][T23308] veth0_vlan: entered promiscuous mode [ 1076.621255][T23308] veth1_vlan: entered promiscuous mode [ 1076.733356][T23308] veth0_macvtap: entered promiscuous mode [ 1076.776079][T23308] veth1_macvtap: entered promiscuous mode [ 1076.853032][T23308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.930137][T23308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.999491][T13818] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.037407][T13818] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.085995][T13818] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.133894][T13818] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.268053][T17415] Bluetooth: hci7: command tx timeout [ 1077.453605][ T7746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.505170][ T7746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.551478][T23328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.624191][T13818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.679533][T13818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.753619][T23328] veth0_vlan: entered promiscuous mode [ 1077.809365][T23328] veth1_vlan: entered promiscuous mode [ 1077.952229][T23328] veth0_macvtap: entered promiscuous mode [ 1077.997723][T23328] veth1_macvtap: entered promiscuous mode [ 1078.093373][T23328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.145417][T23328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.194912][T13826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.220628][T13826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.289159][T13826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.338486][T13826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.709526][T13826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.770613][T13826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.884430][T13826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.924124][T13826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.757083][T23517] random: crng reseeded on system resumption [ 1080.444554][T23536] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1083.506666][T23566] Process accounting resumed [ 1085.899935][T23677] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1085.946648][ T30] audit: type=1800 audit(1843123189.873:30): pid=23671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4262" name="features" dev="configfs" ino=126767 res=0 errno=0 [ 1088.514836][ T8622] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1088.524328][ T8622] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1088.535803][ T8622] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1088.545005][ T8622] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1088.553416][ T8622] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1089.572110][T23728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.598534][T23728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.627199][T23728] bridge_slave_0: entered allmulticast mode [ 1089.653757][T23728] bridge_slave_0: entered promiscuous mode [ 1089.731676][T23728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.763668][T23728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.778228][T23728] bridge_slave_1: entered allmulticast mode [ 1089.807680][T23728] bridge_slave_1: entered promiscuous mode [ 1089.919526][T23728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.958380][T23728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.019509][T23728] team0: Port device team_slave_0 added [ 1090.037939][T23728] team0: Port device team_slave_1 added [ 1090.109880][T23728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.125476][T23728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.187348][T23728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.236935][T23728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.251612][T23728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.310964][T23728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.416572][T23728] hsr_slave_0: entered promiscuous mode [ 1090.429802][T23728] hsr_slave_1: entered promiscuous mode [ 1090.443209][T23728] debugfs: 'hsr0' already exists in 'hsr' [ 1090.451235][T23728] Cannot create hsr debugfs directory [ 1090.638950][T17415] Bluetooth: hci8: command tx timeout [ 1092.190667][T23728] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1092.222916][T23728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1092.263697][T23728] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1092.313479][T23728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1092.356405][T23728] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1092.404850][T23728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1092.430643][T23728] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1092.462767][T23728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1092.710792][T17415] Bluetooth: hci8: command tx timeout [ 1092.740099][T23728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.780591][T23728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.815432][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.822574][ T7750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.899137][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.906298][ T7734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.623729][T23838] FAULT_INJECTION: forcing a failure. [ 1093.623729][T23838] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.695716][T23838] CPU: 0 UID: 0 PID: 23838 Comm: syz.8.4276 Tainted: G L syzkaller #0 PREEMPT(full) [ 1093.695744][T23838] Tainted: [L]=SOFTLOCKUP [ 1093.695750][T23838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1093.695760][T23838] Call Trace: [ 1093.695766][T23838] [ 1093.695772][T23838] dump_stack_lvl+0x100/0x190 [ 1093.695806][T23838] should_fail_ex.cold+0x5/0xa [ 1093.695827][T23838] should_failslab+0xc2/0x120 [ 1093.695847][T23838] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1093.695870][T23838] ? dup_fd+0x4d/0xd10 [ 1093.695889][T23838] ? trace_kmalloc+0xe3/0x110 [ 1093.695908][T23838] dup_fd+0x4d/0xd10 [ 1093.695928][T23838] ? apparmor_task_alloc+0x2c1/0x3b0 [ 1093.695948][T23838] copy_process+0x2965/0x7ed0 [ 1093.695969][T23838] ? __futex_wait+0x256/0x300 [ 1093.695999][T23838] ? __pfx_copy_process+0x10/0x10 [ 1093.696021][T23838] ? futex_hash+0x141/0x370 [ 1093.696047][T23838] kernel_clone+0x176/0x9e0 [ 1093.696065][T23838] ? __pfx_futex_wait+0x10/0x10 [ 1093.696084][T23838] ? __pfx_kernel_clone+0x10/0x10 [ 1093.696113][T23838] __do_sys_clone+0xd9/0x120 [ 1093.696132][T23838] ? __pfx___do_sys_clone+0x10/0x10 [ 1093.696159][T23838] ? ksys_write+0x1ac/0x250 [ 1093.696179][T23838] ? rcu_is_watching+0x12/0xc0 [ 1093.696199][T23838] do_syscall_64+0x115/0x840 [ 1093.696219][T23838] ? clear_bhb_loop+0x40/0x90 [ 1093.696237][T23838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.696252][T23838] RIP: 0033:0x7fbf3999ce59 [ 1093.696267][T23838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.696282][T23838] RSP: 002b:00007fbf3a913fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1093.696298][T23838] RAX: ffffffffffffffda RBX: 00007fbf39c15fa0 RCX: 00007fbf3999ce59 [ 1093.696315][T23838] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000000000008000 [ 1093.696325][T23838] RBP: 00007fbf39a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1093.696335][T23838] R10: 0000200000000180 R11: 0000000000000206 R12: 0000000000000000 [ 1093.696345][T23838] R13: 00007fbf39c16038 R14: 00007fbf39c15fa0 R15: 00007ffc75c779b8 [ 1093.696364][T23838] [ 1094.738869][T23728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.777800][T17415] Bluetooth: hci8: command tx timeout [ 1095.078093][T23728] veth0_vlan: entered promiscuous mode [ 1095.141852][T23728] veth1_vlan: entered promiscuous mode [ 1095.240354][T23728] veth0_macvtap: entered promiscuous mode [ 1095.278113][T23728] veth1_macvtap: entered promiscuous mode [ 1095.339587][T23728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.372589][T23728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.476023][ T7734] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.505691][ T7734] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.550975][ T7734] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.614285][ T7734] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.797146][ T7734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.833463][ T7734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.032421][T23900] __vm_enough_memory: pid: 23900, comm: syz.8.4283, bytes: 9223372036854775808 not enough memory for the allocation [ 1096.107862][T13826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.177584][T13826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.459022][ T8622] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1096.474998][ T8622] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1096.486810][ T8622] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1096.494665][ T8622] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1096.505084][ T8622] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1096.847152][ T8622] Bluetooth: hci8: command tx timeout [ 1097.109344][T23923] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4286'. [ 1097.159517][T23928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4286'. [ 1098.599009][ T8622] Bluetooth: hci9: command tx timeout [ 1098.960678][T23907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.986432][T23907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.012652][T23907] bridge_slave_0: entered allmulticast mode [ 1099.037604][T23907] bridge_slave_0: entered promiscuous mode [ 1099.074317][T23907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.112574][T23907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.152347][T23907] bridge_slave_1: entered allmulticast mode [ 1099.203122][T23907] bridge_slave_1: entered promiscuous mode [ 1099.335134][T23907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.388895][T23907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.539158][T23907] team0: Port device team_slave_0 added [ 1099.676966][T23907] team0: Port device team_slave_1 added [ 1099.911951][T23907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.946417][T23907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.066324][T23907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.126438][T23907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.163782][T23907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.297394][T23907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.667523][ T8622] Bluetooth: hci9: command tx timeout [ 1100.691112][T23907] hsr_slave_0: entered promiscuous mode [ 1100.728607][T23907] hsr_slave_1: entered promiscuous mode [ 1100.772470][T23907] debugfs: 'hsr0' already exists in 'hsr' [ 1100.815517][T23907] Cannot create hsr debugfs directory [ 1101.248185][T17415] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1101.266095][T17415] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1101.276914][T17415] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1101.289537][T17415] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1101.298701][T17415] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1101.416156][T24016] ima: policy update failed [ 1101.536542][ T30] audit: type=1802 audit(1843123205.544:31): pid=24016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4294" res=0 errno=0 [ 1102.735685][T17415] Bluetooth: hci9: command tx timeout [ 1103.372542][T17415] Bluetooth: hci10: command tx timeout [ 1104.023254][T24067] futex_wake_op: syz.1.4299 tries to shift op by -1; fix this program [ 1104.764258][T23907] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1104.805579][T17415] Bluetooth: hci9: command tx timeout [ 1104.854748][T23907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1104.889716][T23907] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1104.932413][T23907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1105.018807][T23907] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1105.084384][T23907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1105.123974][T23907] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1105.196013][T23907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1105.443488][T17415] Bluetooth: hci10: command tx timeout [ 1105.578119][T24012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.628523][T24012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.673304][T24012] bridge_slave_0: entered allmulticast mode [ 1105.713014][T24012] bridge_slave_0: entered promiscuous mode [ 1105.756037][T24012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.801316][T24012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.835246][T24012] bridge_slave_1: entered allmulticast mode [ 1105.879804][T24012] bridge_slave_1: entered promiscuous mode [ 1106.040401][T24012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.094772][T24012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.272505][T24012] team0: Port device team_slave_0 added [ 1106.347179][T24012] team0: Port device team_slave_1 added [ 1106.375006][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4303'. [ 1106.548132][T24012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.589155][T24012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.692067][T24012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.738906][T24012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.764906][T24012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.865871][T24012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.264048][T24012] hsr_slave_0: entered promiscuous mode [ 1107.288037][T24012] hsr_slave_1: entered promiscuous mode [ 1107.310717][T24012] debugfs: 'hsr0' already exists in 'hsr' [ 1107.343962][T24012] Cannot create hsr debugfs directory [ 1107.514456][T17415] Bluetooth: hci10: command tx timeout [ 1107.736025][T23907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.077389][T23907] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.203271][T13826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.210430][T13826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.289023][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.296206][ T7734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.866370][T24012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.488492][T24012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.580502][T17415] Bluetooth: hci10: command tx timeout [ 1109.903943][T24012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.945282][T24171] blktrace: Concurrent blktraces are not allowed on nbd8 [ 1110.263351][T24012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.214359][T23907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.446338][T24012] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1111.492559][T24012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1111.535079][T24012] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1111.582679][T24012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1111.631388][T24012] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1111.680324][T24012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1111.735981][T24012] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1111.782942][T24012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1111.855353][T23907] veth0_vlan: entered promiscuous mode [ 1111.922779][T23907] veth1_vlan: entered promiscuous mode [ 1111.972179][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1111.978644][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1112.152001][T23907] veth0_macvtap: entered promiscuous mode [ 1112.200552][T23907] veth1_macvtap: entered promiscuous mode [ 1112.311858][T24012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.348101][T23907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.402464][T23907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.449889][T24012] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.488146][ T7365] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.580275][ T7365] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.629849][ T7365] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.692137][T13818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.699256][T13818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.769826][T13818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.776941][T13818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.865077][ T7365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.139974][T24012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1113.259810][T13826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.308124][T13826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.487404][T13818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.541291][T13818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.161928][T17415] Bluetooth: hci9: Malformed HCI Event: 0x22 [ 1114.618989][T24012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.662631][T24272] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4314'. [ 1115.774168][T24012] veth0_vlan: entered promiscuous mode [ 1115.832864][T24012] veth1_vlan: entered promiscuous mode [ 1115.914478][T24012] veth0_macvtap: entered promiscuous mode [ 1115.954563][T24012] veth1_macvtap: entered promiscuous mode [ 1116.012991][T24012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.060129][T24012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.106569][ T7750] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.162978][ T7750] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.200641][ T7750] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.240022][ T7750] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.418668][ T7733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.449772][ T7733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.522721][T13818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.546948][T13818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.975739][T24310] futex_wake_op: syz.3.4319 tries to shift op by -1; fix this program [ 1117.378267][T24325] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1117.473416][T24326] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4320'. [ 1117.540203][T24328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4322'. [ 1119.657522][T24382] futex_wake_op: syz.3.4328 tries to shift op by -1; fix this program [ 1123.204713][T24446] futex_wake_op: syz.3.4339 tries to shift op by -1; fix this program [ 1123.661017][T24454] random: crng reseeded on system resumption [ 1123.870469][T24460] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1123.944345][T24460] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4342'. [ 1124.927974][T24469] netlink: 17 bytes leftover after parsing attributes in process `syz.8.4344'. [ 1125.008986][T24474] FAULT_INJECTION: forcing a failure. [ 1125.008986][T24474] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.070655][T24474] CPU: 0 UID: 0 PID: 24474 Comm: syz.3.4346 Tainted: G L syzkaller #0 PREEMPT(full) [ 1125.070683][T24474] Tainted: [L]=SOFTLOCKUP [ 1125.070689][T24474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1125.070699][T24474] Call Trace: [ 1125.070705][T24474] [ 1125.070711][T24474] dump_stack_lvl+0x100/0x190 [ 1125.070741][T24474] should_fail_ex.cold+0x5/0xa [ 1125.070762][T24474] should_failslab+0xc2/0x120 [ 1125.070781][T24474] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1125.070806][T24474] ? __alloc_skb+0x140/0x710 [ 1125.070826][T24474] __alloc_skb+0x140/0x710 [ 1125.070845][T24474] ? __alloc_skb+0x5b7/0x710 [ 1125.070860][T24474] ? __pfx___alloc_skb+0x10/0x10 [ 1125.070873][T24474] ? genl_rcv_msg+0x4be/0x800 [ 1125.070903][T24474] netlink_ack+0x117/0xb80 [ 1125.070927][T24474] netlink_rcv_skb+0x333/0x420 [ 1125.070946][T24474] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1125.070968][T24474] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1125.070995][T24474] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1125.071016][T24474] genl_rcv+0x28/0x40 [ 1125.071035][T24474] netlink_unicast+0x585/0x850 [ 1125.071056][T24474] ? __pfx_netlink_unicast+0x10/0x10 [ 1125.071080][T24474] netlink_sendmsg+0x8b0/0xda0 [ 1125.071110][T24474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1125.071133][T24474] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1125.071153][T24474] __sys_sendto+0x468/0x4b0 [ 1125.071175][T24474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1125.071195][T24474] ? __pfx___sys_sendto+0x10/0x10 [ 1125.071226][T24474] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1125.071244][T24474] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1125.071276][T24474] __x64_sys_sendto+0xe0/0x1c0 [ 1125.071298][T24474] ? do_syscall_64+0x90/0x840 [ 1125.071319][T24474] ? lockdep_hardirqs_on+0x78/0x100 [ 1125.071338][T24474] do_syscall_64+0x115/0x840 [ 1125.071358][T24474] ? clear_bhb_loop+0x40/0x90 [ 1125.071377][T24474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.071392][T24474] RIP: 0033:0x7f4781b5d68e [ 1125.071405][T24474] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1125.071420][T24474] RSP: 002b:00007f47829a9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1125.071435][T24474] RAX: ffffffffffffffda RBX: 00007f47829ab6c0 RCX: 00007f4781b5d68e [ 1125.071445][T24474] RDX: 0000000000000020 RSI: 00007f47829aa000 RDI: 0000000000000008 [ 1125.071454][T24474] RBP: 0000000000000000 R08: 00007f47829a9f04 R09: 000000000000000c [ 1125.071464][T24474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1125.071473][T24474] R13: 00007f47829a9f58 R14: 00007f47829aa000 R15: 0000000000000000 [ 1125.071493][T24474] [ 1125.656503][T24469] FAULT_INJECTION: forcing a failure. [ 1125.656503][T24469] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.695521][T24469] CPU: 0 UID: 0 PID: 24469 Comm: syz.8.4344 Tainted: G L syzkaller #0 PREEMPT(full) [ 1125.695548][T24469] Tainted: [L]=SOFTLOCKUP [ 1125.695554][T24469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1125.695564][T24469] Call Trace: [ 1125.695570][T24469] [ 1125.695576][T24469] dump_stack_lvl+0x100/0x190 [ 1125.695608][T24469] should_fail_ex.cold+0x5/0xa [ 1125.695627][T24469] ? tracepoint_add_func+0x3a8/0x1150 [ 1125.695648][T24469] should_failslab+0xc2/0x120 [ 1125.695666][T24469] __kmalloc_noprof+0xe0/0x850 [ 1125.695695][T24469] ? __pfx_trace_event_raw_event_nfsd_cb_class+0x10/0x10 [ 1125.695779][T24469] tracepoint_add_func+0x3a8/0x1150 [ 1125.695800][T24469] ? __pfx_trace_event_raw_event_nfsd_cb_class+0x10/0x10 [ 1125.695824][T24469] ? __pfx_trace_event_raw_event_nfsd_cb_class+0x10/0x10 [ 1125.695843][T24469] tracepoint_probe_register+0xc4/0x110 [ 1125.695865][T24469] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1125.695885][T24469] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1125.695907][T24469] ? __pfx_trace_event_raw_event_nfsd_cb_class+0x10/0x10 [ 1125.695926][T24469] ? __pfx_probe_sched_switch+0x10/0x10 [ 1125.696000][T24469] ? __lock_acquire+0x4a5/0x2630 [ 1125.696027][T24469] trace_event_reg+0x209/0x350 [ 1125.696048][T24469] __ftrace_event_enable_disable+0x211/0x6f0 [ 1125.696081][T24469] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1125.696112][T24469] ftrace_set_clr_event+0x1b7/0x3f0 [ 1125.696131][T24469] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1125.696147][T24469] ? trace_get_user+0x3ae/0xa70 [ 1125.696215][T24469] ftrace_event_write+0x259/0x2c0 [ 1125.696232][T24469] ? __pfx_ftrace_event_write+0x10/0x10 [ 1125.696257][T24469] vfs_write+0x2aa/0x1070 [ 1125.696276][T24469] ? __pfx_ftrace_event_write+0x10/0x10 [ 1125.696294][T24469] ? __pfx_vfs_write+0x10/0x10 [ 1125.696315][T24469] ? __fget_files+0x215/0x3d0 [ 1125.696338][T24469] ? __fget_files+0x21f/0x3d0 [ 1125.696360][T24469] ksys_write+0x12a/0x250 [ 1125.696377][T24469] ? __pfx_ksys_write+0x10/0x10 [ 1125.696396][T24469] ? rcu_is_watching+0x12/0xc0 [ 1125.696416][T24469] do_syscall_64+0x115/0x840 [ 1125.696436][T24469] ? clear_bhb_loop+0x40/0x90 [ 1125.696455][T24469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.696470][T24469] RIP: 0033:0x7fbf3999ce59 [ 1125.696485][T24469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.696500][T24469] RSP: 002b:00007fbf3a914028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1125.696515][T24469] RAX: ffffffffffffffda RBX: 00007fbf39c15fa0 RCX: 00007fbf3999ce59 [ 1125.696526][T24469] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000008 [ 1125.696535][T24469] RBP: 00007fbf39a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1125.696545][T24469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.696554][T24469] R13: 00007fbf39c16038 R14: 00007fbf39c15fa0 R15: 00007ffc75c779b8 [ 1125.696575][T24469] [ 1125.696648][T24469] event trace: Could not enable event nfsd_cb_shutdown [ 1126.174658][ T8622] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1126.189299][ T8622] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1126.197456][ T8622] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1126.205342][ T8622] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1126.215054][ T8622] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1127.196865][T24493] futex_wake_op: syz.8.4349 tries to shift op by -1; fix this program [ 1127.763778][T24478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.792206][T24478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.821820][T24478] bridge_slave_0: entered allmulticast mode [ 1127.841237][T24478] bridge_slave_0: entered promiscuous mode [ 1127.857002][T24478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.872461][T24478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.904357][T24478] bridge_slave_1: entered allmulticast mode [ 1127.927956][T24478] bridge_slave_1: entered promiscuous mode [ 1128.014771][T24478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.039964][T24478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.153025][T24478] team0: Port device team_slave_0 added [ 1128.170867][T24478] team0: Port device team_slave_1 added [ 1128.249978][T24478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.265630][T24478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.302070][ T8622] Bluetooth: hci11: command tx timeout [ 1128.368539][T24478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.396181][T24478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.418932][T24478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.534959][T24478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.695228][T24478] hsr_slave_0: entered promiscuous mode [ 1128.711500][T24478] hsr_slave_1: entered promiscuous mode [ 1128.736561][T24478] debugfs: 'hsr0' already exists in 'hsr' [ 1128.757568][T24478] Cannot create hsr debugfs directory [ 1129.380290][T24542] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4364'. [ 1129.541220][T24478] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.702761][T24545] FAULT_INJECTION: forcing a failure. [ 1129.702761][T24545] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.755661][T24545] CPU: 0 UID: 0 PID: 24545 Comm: syz.8.4365 Tainted: G L syzkaller #0 PREEMPT(full) [ 1129.755704][T24545] Tainted: [L]=SOFTLOCKUP [ 1129.755714][T24545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1129.755731][T24545] Call Trace: [ 1129.755741][T24545] [ 1129.755751][T24545] dump_stack_lvl+0x100/0x190 [ 1129.755804][T24545] should_fail_ex.cold+0x5/0xa [ 1129.755830][T24545] should_failslab+0xc2/0x120 [ 1129.755847][T24545] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1129.755869][T24545] ? mas_preallocate+0x1105/0x14a0 [ 1129.755887][T24545] mas_preallocate+0x1105/0x14a0 [ 1129.755903][T24545] ? __pfx_mas_preallocate+0x10/0x10 [ 1129.755923][T24545] ? anon_vma_name+0x5a/0x250 [ 1129.756004][T24545] __split_vma+0x33d/0xda0 [ 1129.756027][T24545] ? __pfx___split_vma+0x10/0x10 [ 1129.756053][T24545] ? up_write+0x28c/0x4f0 [ 1129.756071][T24545] vms_gather_munmap_vmas+0x1d2/0x1720 [ 1129.756096][T24545] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1129.756120][T24545] ? __lock_acquire+0x4a5/0x2630 [ 1129.756144][T24545] ? __lock_acquire+0x4a5/0x2630 [ 1129.756170][T24545] do_vmi_align_munmap+0x287/0x5f0 [ 1129.756194][T24545] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1129.756241][T24545] do_vmi_munmap+0x1f8/0x3e0 [ 1129.756264][T24545] shrink_vma+0x1c5/0x380 [ 1129.756286][T24545] ? __pfx_shrink_vma+0x10/0x10 [ 1129.756313][T24545] ? __pfx_mtree_load+0x10/0x10 [ 1129.756334][T24545] mremap_to+0x382/0x4c0 [ 1129.756355][T24545] ? __pfx_mremap_to+0x10/0x10 [ 1129.756375][T24545] ? check_prep_vma+0x912/0xe60 [ 1129.756400][T24545] __do_sys_mremap+0xb3e/0x1850 [ 1129.756424][T24545] ? find_held_lock+0x2b/0x80 [ 1129.756441][T24545] ? ksys_write+0x190/0x250 [ 1129.756456][T24545] ? ksys_write+0x190/0x250 [ 1129.756472][T24545] ? __pfx___do_sys_mremap+0x10/0x10 [ 1129.756499][T24545] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1129.756522][T24545] ? __fget_files+0x21f/0x3d0 [ 1129.756547][T24545] ? rcu_is_watching+0x12/0xc0 [ 1129.756566][T24545] do_syscall_64+0x115/0x840 [ 1129.756584][T24545] ? clear_bhb_loop+0x40/0x90 [ 1129.756602][T24545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.756617][T24545] RIP: 0033:0x7fbf3999ce59 [ 1129.756629][T24545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.756643][T24545] RSP: 002b:00007fbf3a914028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1129.756657][T24545] RAX: ffffffffffffffda RBX: 00007fbf39c15fa0 RCX: 00007fbf3999ce59 [ 1129.756667][T24545] RDX: 0000000000003fd6 RSI: 000000000000fee0 RDI: 0000000000004000 [ 1129.756675][T24545] RBP: 00007fbf3a914090 R08: 00000000fffff000 R09: 0000000000000000 [ 1129.756684][T24545] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1129.756693][T24545] R13: 00007fbf39c16038 R14: 00007fbf39c15fa0 R15: 00007ffc75c779b8 [ 1129.756712][T24545] [ 1130.353774][ T8622] Bluetooth: hci11: command tx timeout [ 1130.407611][T24478] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.565437][T24478] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.730542][T24478] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.351243][T24478] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1131.373861][T24478] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1131.400720][T24478] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1131.422951][T24478] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1131.454151][T24478] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1131.483576][T24478] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1131.500152][T24478] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1131.521930][T24478] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1131.694937][T24478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.905511][T24478] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.959591][ T7734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.966751][ T7734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.036402][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.043543][ T7734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.421406][ T8622] Bluetooth: hci11: command tx timeout [ 1132.816538][T24599] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1133.070822][T24478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.525583][T17415] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1133.550531][T17415] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1133.559691][T17415] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1133.578464][T17415] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1133.586007][T17415] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1134.028465][T24643] futex_wake_op: syz.8.4385 tries to shift op by -1; fix this program [ 1134.140327][T24478] veth0_vlan: entered promiscuous mode [ 1134.207802][T24478] veth1_vlan: entered promiscuous mode [ 1134.405160][T24478] veth0_macvtap: entered promiscuous mode [ 1134.468179][T24478] veth1_macvtap: entered promiscuous mode [ 1134.490737][T17415] Bluetooth: hci11: command tx timeout [ 1134.753050][T24478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.860481][T24680] netlink: 'syz.8.4387': attribute type 11 has an invalid length. [ 1134.885243][T24478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.903832][T24680] netlink: 'syz.8.4387': attribute type 11 has an invalid length. [ 1134.932838][T24680] netlink: 'syz.8.4387': attribute type 11 has an invalid length. [ 1135.002680][ T7365] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.070224][ T7365] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.137769][ T7365] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.169617][ T7365] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.634763][ T7733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.684349][T17415] Bluetooth: hci12: command tx timeout [ 1135.697154][ T7733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.890802][T24660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.958292][T24660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.516741][T24712] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4347'. [ 1136.604640][T24630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.642426][T24630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.672994][T24630] bridge_slave_0: entered allmulticast mode [ 1136.699727][T24630] bridge_slave_0: entered promiscuous mode [ 1136.735394][T24630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.777182][T24630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.810097][T24630] bridge_slave_1: entered allmulticast mode [ 1136.828345][T24630] bridge_slave_1: entered promiscuous mode [ 1136.891451][T24630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.913400][T24630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.066203][T24630] team0: Port device team_slave_0 added [ 1137.098671][T24630] team0: Port device team_slave_1 added [ 1137.161256][T24630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.173676][T24630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.205088][T24726] FAULT_INJECTION: forcing a failure. [ 1137.205088][T24726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.221568][T24630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.234332][T24726] CPU: 0 UID: 0 PID: 24726 Comm: syz.3.4394 Tainted: G L syzkaller #0 PREEMPT(full) [ 1137.234354][T24726] Tainted: [L]=SOFTLOCKUP [ 1137.234359][T24726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1137.234368][T24726] Call Trace: [ 1137.234374][T24726] [ 1137.234380][T24726] dump_stack_lvl+0x100/0x190 [ 1137.234409][T24726] should_fail_ex.cold+0x5/0xa [ 1137.234427][T24726] _copy_from_user+0x2e/0xd0 [ 1137.234449][T24726] copy_msghdr_from_user+0x9f/0x4f0 [ 1137.234469][T24726] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1137.234492][T24726] ? rcu_is_watching+0x12/0xc0 [ 1137.234508][T24726] ? ___sys_recvmsg+0x177/0x1a0 [ 1137.234525][T24726] ? kfree+0x1dd/0x6c0 [ 1137.234547][T24726] ___sys_recvmsg+0xdd/0x1a0 [ 1137.234566][T24726] ? __pfx____sys_recvmsg+0x10/0x10 [ 1137.234595][T24726] ? __pfx___might_resched+0x10/0x10 [ 1137.234614][T24726] do_recvmmsg+0x301/0x760 [ 1137.234635][T24726] ? __pfx_do_recvmmsg+0x10/0x10 [ 1137.234653][T24726] ? ksys_write+0x190/0x250 [ 1137.234672][T24726] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1137.234695][T24726] ? kernel_write+0x683/0x6c0 [ 1137.234715][T24726] ? __fget_files+0x21f/0x3d0 [ 1137.234736][T24726] __x64_sys_recvmmsg+0x22a/0x280 [ 1137.234756][T24726] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1137.234773][T24726] ? rcu_is_watching+0x12/0xc0 [ 1137.234791][T24726] do_syscall_64+0x115/0x840 [ 1137.234809][T24726] ? clear_bhb_loop+0x40/0x90 [ 1137.234827][T24726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.234842][T24726] RIP: 0033:0x7f4781b9ce59 [ 1137.234854][T24726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.234868][T24726] RSP: 002b:00007f47829ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1137.234882][T24726] RAX: ffffffffffffffda RBX: 00007f4781e15fa0 RCX: 00007f4781b9ce59 [ 1137.234891][T24726] RDX: 00000000fffffe0c RSI: 0000000000000000 RDI: 0000000000000003 [ 1137.234900][T24726] RBP: 00007f47829ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.234909][T24726] R10: 00000000000008e0 R11: 0000000000000246 R12: 0000000000000001 [ 1137.234918][T24726] R13: 00007f4781e16038 R14: 00007f4781e15fa0 R15: 00007fff39eb1748 [ 1137.234936][T24726] [ 1137.506600][T24630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.513641][T24630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.547009][T24630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.602325][T24630] hsr_slave_0: entered promiscuous mode [ 1137.608828][T24630] hsr_slave_1: entered promiscuous mode [ 1137.615491][T24630] debugfs: 'hsr0' already exists in 'hsr' [ 1137.621900][T24630] Cannot create hsr debugfs directory [ 1137.757421][T17415] Bluetooth: hci12: command tx timeout [ 1138.053991][T24736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4398'. [ 1138.065144][T24737] futex_wake_op: syz.8.4397 tries to shift op by -1; fix this program [ 1138.232348][T24630] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.460752][T24630] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.682224][T24630] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.727975][T24752] FAULT_INJECTION: forcing a failure. [ 1138.727975][T24752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.758741][T24752] CPU: 0 UID: 0 PID: 24752 Comm: syz.3.4403 Tainted: G L syzkaller #0 PREEMPT(full) [ 1138.758765][T24752] Tainted: [L]=SOFTLOCKUP [ 1138.758771][T24752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1138.758780][T24752] Call Trace: [ 1138.758785][T24752] [ 1138.758791][T24752] dump_stack_lvl+0x100/0x190 [ 1138.758820][T24752] should_fail_ex.cold+0x5/0xa [ 1138.758839][T24752] _copy_from_user+0x2e/0xd0 [ 1138.758863][T24752] copy_msghdr_from_user+0x9f/0x4f0 [ 1138.758884][T24752] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1138.758906][T24752] ? rcu_is_watching+0x12/0xc0 [ 1138.758922][T24752] ? ___sys_recvmsg+0x177/0x1a0 [ 1138.758939][T24752] ? kfree+0x1dd/0x6c0 [ 1138.758961][T24752] ___sys_recvmsg+0xdd/0x1a0 [ 1138.758980][T24752] ? __pfx____sys_recvmsg+0x10/0x10 [ 1138.759008][T24752] ? __pfx___might_resched+0x10/0x10 [ 1138.759032][T24752] do_recvmmsg+0x301/0x760 [ 1138.759053][T24752] ? __pfx_do_recvmmsg+0x10/0x10 [ 1138.759071][T24752] ? ksys_write+0x190/0x250 [ 1138.759090][T24752] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1138.759111][T24752] ? kernel_write+0x683/0x6c0 [ 1138.759131][T24752] ? __fget_files+0x21f/0x3d0 [ 1138.759165][T24752] __x64_sys_recvmmsg+0x22a/0x280 [ 1138.759182][T24752] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1138.759199][T24752] ? rcu_is_watching+0x12/0xc0 [ 1138.759222][T24752] do_syscall_64+0x115/0x840 [ 1138.759240][T24752] ? clear_bhb_loop+0x40/0x90 [ 1138.759258][T24752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.759273][T24752] RIP: 0033:0x7f4781b9ce59 [ 1138.759285][T24752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.759299][T24752] RSP: 002b:00007f478298a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1138.759313][T24752] RAX: ffffffffffffffda RBX: 00007f4781e16090 RCX: 00007f4781b9ce59 [ 1138.759323][T24752] RDX: 00000000fffffff9 RSI: 0000200000000040 RDI: 0000000000000003 [ 1138.759332][T24752] RBP: 00007f478298a090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.759341][T24752] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 1138.759349][T24752] R13: 00007f4781e16128 R14: 00007f4781e16090 R15: 00007fff39eb1748 [ 1138.759368][T24752] [ 1139.047374][T24754] FAULT_INJECTION: forcing a failure. [ 1139.047374][T24754] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.060058][T24754] CPU: 0 UID: 0 PID: 24754 Comm: syz.3.4404 Tainted: G L syzkaller #0 PREEMPT(full) [ 1139.060081][T24754] Tainted: [L]=SOFTLOCKUP [ 1139.060086][T24754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1139.060095][T24754] Call Trace: [ 1139.060101][T24754] [ 1139.060107][T24754] dump_stack_lvl+0x100/0x190 [ 1139.060135][T24754] should_fail_ex.cold+0x5/0xa [ 1139.060154][T24754] should_failslab+0xc2/0x120 [ 1139.060171][T24754] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1139.060193][T24754] ? vm_area_dup+0x27/0x8e0 [ 1139.060221][T24754] vm_area_dup+0x27/0x8e0 [ 1139.060242][T24754] __split_vma+0x18c/0xda0 [ 1139.060265][T24754] ? __pfx___split_vma+0x10/0x10 [ 1139.060289][T24754] ? __pfx_mas_prev+0x10/0x10 [ 1139.060315][T24754] vms_gather_munmap_vmas+0x3a5/0x1720 [ 1139.060340][T24754] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1139.060364][T24754] ? __lock_acquire+0x4a5/0x2630 [ 1139.060390][T24754] ? __lock_acquire+0x4a5/0x2630 [ 1139.060414][T24754] do_vmi_align_munmap+0x287/0x5f0 [ 1139.060437][T24754] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1139.060484][T24754] do_vmi_munmap+0x1f8/0x3e0 [ 1139.060507][T24754] shrink_vma+0x1c5/0x380 [ 1139.060529][T24754] ? __pfx_shrink_vma+0x10/0x10 [ 1139.060556][T24754] ? __pfx_mtree_load+0x10/0x10 [ 1139.060576][T24754] mremap_to+0x382/0x4c0 [ 1139.060598][T24754] ? __pfx_mremap_to+0x10/0x10 [ 1139.060618][T24754] ? check_prep_vma+0x912/0xe60 [ 1139.060642][T24754] __do_sys_mremap+0xb3e/0x1850 [ 1139.060666][T24754] ? find_held_lock+0x2b/0x80 [ 1139.060683][T24754] ? ksys_write+0x190/0x250 [ 1139.060699][T24754] ? ksys_write+0x190/0x250 [ 1139.060714][T24754] ? __pfx___do_sys_mremap+0x10/0x10 [ 1139.060742][T24754] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1139.060765][T24754] ? __fget_files+0x21f/0x3d0 [ 1139.060793][T24754] ? rcu_is_watching+0x12/0xc0 [ 1139.060812][T24754] do_syscall_64+0x115/0x840 [ 1139.060830][T24754] ? clear_bhb_loop+0x40/0x90 [ 1139.060847][T24754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.060862][T24754] RIP: 0033:0x7f4781b9ce59 [ 1139.060875][T24754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.060889][T24754] RSP: 002b:00007f47829ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1139.060903][T24754] RAX: ffffffffffffffda RBX: 00007f4781e15fa0 RCX: 00007f4781b9ce59 [ 1139.060912][T24754] RDX: 0000000000003fd6 RSI: 000000000000fee0 RDI: 0000000000004000 [ 1139.060921][T24754] RBP: 00007f47829ab090 R08: 00000000fffff000 R09: 0000000000000000 [ 1139.060930][T24754] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1139.060938][T24754] R13: 00007f4781e16038 R14: 00007f4781e15fa0 R15: 00007fff39eb1748 [ 1139.060957][T24754] [ 1139.407142][T24630] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.825509][T17415] Bluetooth: hci12: command tx timeout [ 1140.295491][T24775] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4409'. [ 1140.566184][T24630] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1140.599008][T24630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1140.646785][T24630] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1140.711190][T24630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1140.963491][T24630] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1141.037378][T24630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1141.073348][T24630] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1141.116743][T24630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1141.479888][T24630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.541610][T24630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.583668][T24665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.590784][T24665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.670005][T24665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.677148][T24665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.893275][T17415] Bluetooth: hci12: command tx timeout [ 1142.641687][T24630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.220586][T24630] veth0_vlan: entered promiscuous mode [ 1143.276300][T24630] veth1_vlan: entered promiscuous mode [ 1143.357469][T24630] veth0_macvtap: entered promiscuous mode [ 1143.400313][T24818] netlink: 'syz.3.4414': attribute type 64 has an invalid length. [ 1143.423478][T24818] netlink: 74 bytes leftover after parsing attributes in process `syz.3.4414'. [ 1143.434602][T24630] veth1_macvtap: entered promiscuous mode [ 1143.535872][T24630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.578602][T24630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.737165][ T7746] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.787108][ T7746] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.855641][ T7746] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.912826][ T7746] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.116515][T24665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.150502][T24665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.211199][ T7746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.231046][ T7746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.509883][T24849] netlink: 504 bytes leftover after parsing attributes in process `syz.3.4423'. [ 1145.579041][T24850] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1145.585496][T24850] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1146.726542][T24871] FAULT_INJECTION: forcing a failure. [ 1146.726542][T24871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.761840][T24871] CPU: 0 UID: 0 PID: 24871 Comm: syz.5.4430 Tainted: G L syzkaller #0 PREEMPT(full) [ 1146.761865][T24871] Tainted: [L]=SOFTLOCKUP [ 1146.761870][T24871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1146.761879][T24871] Call Trace: [ 1146.761885][T24871] [ 1146.761891][T24871] dump_stack_lvl+0x100/0x190 [ 1146.761920][T24871] should_fail_ex.cold+0x5/0xa [ 1146.761938][T24871] _copy_from_user+0x2e/0xd0 [ 1146.761959][T24871] copy_msghdr_from_user+0x9f/0x4f0 [ 1146.761979][T24871] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1146.762001][T24871] ? rcu_is_watching+0x12/0xc0 [ 1146.762018][T24871] ? ___sys_recvmsg+0x177/0x1a0 [ 1146.762035][T24871] ? kfree+0x1dd/0x6c0 [ 1146.762058][T24871] ___sys_recvmsg+0xdd/0x1a0 [ 1146.762077][T24871] ? __pfx____sys_recvmsg+0x10/0x10 [ 1146.762105][T24871] ? __pfx___might_resched+0x10/0x10 [ 1146.762124][T24871] do_recvmmsg+0x301/0x760 [ 1146.762145][T24871] ? __pfx_do_recvmmsg+0x10/0x10 [ 1146.762163][T24871] ? ksys_write+0x190/0x250 [ 1146.762182][T24871] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1146.762203][T24871] ? kernel_write+0x683/0x6c0 [ 1146.762223][T24871] ? __fget_files+0x21f/0x3d0 [ 1146.762245][T24871] __x64_sys_recvmmsg+0x22a/0x280 [ 1146.762261][T24871] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1146.762279][T24871] ? rcu_is_watching+0x12/0xc0 [ 1146.762296][T24871] do_syscall_64+0x115/0x840 [ 1146.762314][T24871] ? clear_bhb_loop+0x40/0x90 [ 1146.762332][T24871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.762346][T24871] RIP: 0033:0x7f264479ce59 [ 1146.762359][T24871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.762373][T24871] RSP: 002b:00007f26455ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1146.762388][T24871] RAX: ffffffffffffffda RBX: 00007f2644a15fa0 RCX: 00007f264479ce59 [ 1146.762398][T24871] RDX: 00000000fffffe0c RSI: 0000000000000000 RDI: 0000000000000003 [ 1146.762407][T24871] RBP: 00007f26455ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.762415][T24871] R10: 00000000000008e0 R11: 0000000000000246 R12: 0000000000000001 [ 1146.762424][T24871] R13: 00007f2644a16038 R14: 00007f2644a15fa0 R15: 00007ffea083f948 [ 1146.762443][T24871] [ 1147.936995][T24886] FAULT_INJECTION: forcing a failure. [ 1147.936995][T24886] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.008946][T24886] CPU: 0 UID: 0 PID: 24886 Comm: syz.3.4435 Tainted: G L syzkaller #0 PREEMPT(full) [ 1148.008971][T24886] Tainted: [L]=SOFTLOCKUP [ 1148.008976][T24886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1148.008985][T24886] Call Trace: [ 1148.008991][T24886] [ 1148.008997][T24886] dump_stack_lvl+0x100/0x190 [ 1148.009026][T24886] should_fail_ex.cold+0x5/0xa [ 1148.009044][T24886] should_failslab+0xc2/0x120 [ 1148.009062][T24886] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1148.009082][T24886] ? proc_thread_self_get_link+0x1a6/0x210 [ 1148.009103][T24886] proc_thread_self_get_link+0x1a6/0x210 [ 1148.009121][T24886] pick_link+0xac2/0x13c0 [ 1148.009135][T24886] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1148.009155][T24886] step_into_slowpath+0x9ba/0xf90 [ 1148.009173][T24886] ? __pfx_step_into_slowpath+0x10/0x10 [ 1148.009191][T24886] ? lookup_fast+0x2da/0x600 [ 1148.009204][T24886] ? inode_permission+0x374/0x620 [ 1148.009227][T24886] link_path_walk+0xf28/0x1cc0 [ 1148.009248][T24886] path_openat+0x1be/0x31a0 [ 1148.009265][T24886] ? kasan_save_stack+0x3f/0x50 [ 1148.009278][T24886] ? kasan_save_stack+0x30/0x50 [ 1148.009291][T24886] ? kasan_save_track+0x14/0x30 [ 1148.009304][T24886] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1148.009330][T24886] ? __pfx_path_openat+0x10/0x10 [ 1148.009354][T24886] do_file_open+0x20e/0x430 [ 1148.009372][T24886] ? __pfx_do_file_open+0x10/0x10 [ 1148.009402][T24886] ? alloc_fd+0x476/0x790 [ 1148.009424][T24886] ? do_getname+0x191/0x390 [ 1148.009446][T24886] do_sys_openat2+0x10d/0x1e0 [ 1148.009467][T24886] ? __pfx_do_sys_openat2+0x10/0x10 [ 1148.009495][T24886] __x64_sys_openat+0x12d/0x210 [ 1148.009516][T24886] ? __pfx___x64_sys_openat+0x10/0x10 [ 1148.009536][T24886] ? ksys_write+0x1ac/0x250 [ 1148.009554][T24886] ? rcu_is_watching+0x12/0xc0 [ 1148.009573][T24886] do_syscall_64+0x115/0x840 [ 1148.009598][T24886] ? clear_bhb_loop+0x40/0x90 [ 1148.009616][T24886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.009631][T24886] RIP: 0033:0x7f4781b9ce59 [ 1148.009643][T24886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.009657][T24886] RSP: 002b:00007f47829ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1148.009672][T24886] RAX: ffffffffffffffda RBX: 00007f4781e15fa0 RCX: 00007f4781b9ce59 [ 1148.009682][T24886] RDX: 0000000000020801 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1148.009691][T24886] RBP: 00007f4781c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1148.009700][T24886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1148.009708][T24886] R13: 00007f4781e16038 R14: 00007f4781e15fa0 R15: 00007fff39eb1748 [ 1148.009727][T24886] [ 1148.585446][T24900] FAULT_INJECTION: forcing a failure. [ 1148.585446][T24900] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.599911][T24900] CPU: 0 UID: 0 PID: 24900 Comm: syz.5.4439 Tainted: G L syzkaller #0 PREEMPT(full) [ 1148.599935][T24900] Tainted: [L]=SOFTLOCKUP [ 1148.599940][T24900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1148.599949][T24900] Call Trace: [ 1148.599954][T24900] [ 1148.599960][T24900] dump_stack_lvl+0x100/0x190 [ 1148.599989][T24900] should_fail_ex.cold+0x5/0xa [ 1148.600008][T24900] should_failslab+0xc2/0x120 [ 1148.600026][T24900] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1148.600048][T24900] ? mas_preallocate+0x1105/0x14a0 [ 1148.600066][T24900] mas_preallocate+0x1105/0x14a0 [ 1148.600083][T24900] ? __pfx_mas_preallocate+0x10/0x10 [ 1148.600102][T24900] ? anon_vma_name+0x5a/0x250 [ 1148.600124][T24900] __split_vma+0x33d/0xda0 [ 1148.600147][T24900] ? __pfx___split_vma+0x10/0x10 [ 1148.600170][T24900] ? __pfx_mas_prev+0x10/0x10 [ 1148.600195][T24900] vms_gather_munmap_vmas+0x3a5/0x1720 [ 1148.600220][T24900] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1148.600244][T24900] ? __lock_acquire+0x4a5/0x2630 [ 1148.600270][T24900] ? __lock_acquire+0x4a5/0x2630 [ 1148.600294][T24900] do_vmi_align_munmap+0x287/0x5f0 [ 1148.600318][T24900] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1148.600364][T24900] do_vmi_munmap+0x1f8/0x3e0 [ 1148.600388][T24900] shrink_vma+0x1c5/0x380 [ 1148.600410][T24900] ? __pfx_shrink_vma+0x10/0x10 [ 1148.600437][T24900] ? __pfx_mtree_load+0x10/0x10 [ 1148.600458][T24900] mremap_to+0x382/0x4c0 [ 1148.600480][T24900] ? __pfx_mremap_to+0x10/0x10 [ 1148.600500][T24900] ? check_prep_vma+0x912/0xe60 [ 1148.600524][T24900] __do_sys_mremap+0xb3e/0x1850 [ 1148.600554][T24900] ? find_held_lock+0x2b/0x80 [ 1148.600571][T24900] ? ksys_write+0x190/0x250 [ 1148.600587][T24900] ? ksys_write+0x190/0x250 [ 1148.600602][T24900] ? __pfx___do_sys_mremap+0x10/0x10 [ 1148.600629][T24900] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1148.600652][T24900] ? __fget_files+0x21f/0x3d0 [ 1148.600679][T24900] ? rcu_is_watching+0x12/0xc0 [ 1148.600699][T24900] do_syscall_64+0x115/0x840 [ 1148.600717][T24900] ? clear_bhb_loop+0x40/0x90 [ 1148.600735][T24900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.600750][T24900] RIP: 0033:0x7f264479ce59 [ 1148.600762][T24900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.600776][T24900] RSP: 002b:00007f26455ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1148.600793][T24900] RAX: ffffffffffffffda RBX: 00007f2644a15fa0 RCX: 00007f264479ce59 [ 1148.600803][T24900] RDX: 0000000000003fd6 RSI: 000000000000fee0 RDI: 0000000000004000 [ 1148.600811][T24900] RBP: 00007f26455ea090 R08: 00000000fffff000 R09: 0000000000000000 [ 1148.600820][T24900] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1148.600829][T24900] R13: 00007f2644a16038 R14: 00007f2644a15fa0 R15: 00007ffea083f948 [ 1148.600848][T24900] [ 1149.480367][T24913] FAULT_INJECTION: forcing a failure. [ 1149.480367][T24913] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.569189][T24913] CPU: 0 UID: 0 PID: 24913 Comm: syz.3.4443 Tainted: G L syzkaller #0 PREEMPT(full) [ 1149.569214][T24913] Tainted: [L]=SOFTLOCKUP [ 1149.569219][T24913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1149.569229][T24913] Call Trace: [ 1149.569234][T24913] [ 1149.569240][T24913] dump_stack_lvl+0x100/0x190 [ 1149.569268][T24913] should_fail_ex.cold+0x5/0xa [ 1149.569288][T24913] should_failslab+0xc2/0x120 [ 1149.569305][T24913] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1149.569326][T24913] ? sctp_add_bind_addr+0xae/0x3e0 [ 1149.569347][T24913] ? __sctp_v6_cmp_addr+0x206/0x530 [ 1149.569425][T24913] sctp_add_bind_addr+0xae/0x3e0 [ 1149.569448][T24913] sctp_copy_local_addr_list+0x349/0x550 [ 1149.569466][T24913] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1149.569483][T24913] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 1149.569507][T24913] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1149.569530][T24913] sctp_bind_addr_copy+0xe0/0x530 [ 1149.569554][T24913] sctp_connect_new_asoc+0x1c9/0x770 [ 1149.569574][T24913] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1149.569594][T24913] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1149.569617][T24913] __sctp_connect+0x3e7/0xc70 [ 1149.569639][T24913] ? __pfx___sctp_connect+0x10/0x10 [ 1149.569658][T24913] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1149.569677][T24913] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1149.569697][T24913] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1149.569713][T24913] sctp_inet_connect+0x15f/0x220 [ 1149.569732][T24913] __sys_connect_file+0x141/0x1a0 [ 1149.569756][T24913] __sys_connect+0x141/0x170 [ 1149.569776][T24913] ? __pfx___sys_connect+0x10/0x10 [ 1149.569795][T24913] ? __fget_files+0x21f/0x3d0 [ 1149.569819][T24913] ? __pfx_ksys_write+0x10/0x10 [ 1149.569839][T24913] __x64_sys_connect+0x72/0xb0 [ 1149.569859][T24913] ? lockdep_hardirqs_on+0x78/0x100 [ 1149.569879][T24913] do_syscall_64+0x115/0x840 [ 1149.569897][T24913] ? clear_bhb_loop+0x40/0x90 [ 1149.569917][T24913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.569933][T24913] RIP: 0033:0x7f4781b9ce59 [ 1149.569945][T24913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.569960][T24913] RSP: 002b:00007f478298a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1149.569974][T24913] RAX: ffffffffffffffda RBX: 00007f4781e16090 RCX: 00007f4781b9ce59 [ 1149.569984][T24913] RDX: 0000000000000055 RSI: 0000200000000040 RDI: 0000000000000003 [ 1149.569993][T24913] RBP: 00007f478298a090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.570002][T24913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1149.570011][T24913] R13: 00007f4781e16128 R14: 00007f4781e16090 R15: 00007fff39eb1748 [ 1149.570030][T24913] [ 1150.574404][T24937] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1152.450894][ T8622] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1152.473156][ T8622] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1152.486815][ T8622] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1152.497338][ T8622] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1152.508156][ T8622] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1154.546299][ T8622] Bluetooth: hci13: command tx timeout [ 1154.825209][T24966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.849167][T24966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.883417][T24966] bridge_slave_0: entered allmulticast mode [ 1154.904856][T24966] bridge_slave_0: entered promiscuous mode [ 1154.928696][T24966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.953476][T24966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.983723][T24966] bridge_slave_1: entered allmulticast mode [ 1155.007086][T24966] bridge_slave_1: entered promiscuous mode [ 1155.101382][T24966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.139988][T24966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.340183][T24966] team0: Port device team_slave_0 added [ 1155.378693][T24966] team0: Port device team_slave_1 added [ 1155.495261][T24966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.524499][T24966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.621854][T24966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.666864][T24966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.685854][T24966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.756549][T24966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.845726][T24966] hsr_slave_0: entered promiscuous mode [ 1155.861113][T24966] hsr_slave_1: entered promiscuous mode [ 1155.874635][T24966] debugfs: 'hsr0' already exists in 'hsr' [ 1155.887129][T24966] Cannot create hsr debugfs directory [ 1156.311311][T24966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.455452][T25016] netlink: 62 bytes leftover after parsing attributes in process `syz.3.4466'. [ 1156.600146][T24966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.618452][ T8622] Bluetooth: hci13: command tx timeout [ 1156.693722][T25020] futex_wake_op: syz.3.4467 tries to shift op by -1; fix this program [ 1156.783356][T24966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.223194][T24966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1157.248747][T24966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1157.268723][T24966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1157.288609][T24966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1157.304502][T24966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1157.322589][T24966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1157.343525][T24966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1157.372776][T24966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1157.531963][T24966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.573954][T24966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.606700][T24671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.613845][T24671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.664442][T24665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.671592][T24665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.063217][T25035] FAULT_INJECTION: forcing a failure. [ 1158.063217][T25035] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.114721][T25035] CPU: 0 UID: 0 PID: 25035 Comm: syz.3.4471 Tainted: G L syzkaller #0 PREEMPT(full) [ 1158.114747][T25035] Tainted: [L]=SOFTLOCKUP [ 1158.114752][T25035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1158.114762][T25035] Call Trace: [ 1158.114768][T25035] [ 1158.114774][T25035] dump_stack_lvl+0x100/0x190 [ 1158.114806][T25035] should_fail_ex.cold+0x5/0xa [ 1158.114826][T25035] should_failslab+0xc2/0x120 [ 1158.114844][T25035] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1158.114867][T25035] ? __kernfs_new_node+0xd2/0x9f0 [ 1158.114889][T25035] __kernfs_new_node+0xd2/0x9f0 [ 1158.114904][T25035] ? kernfs_add_one+0x583/0x850 [ 1158.114925][T25035] ? __pfx___kernfs_new_node+0x10/0x10 [ 1158.114947][T25035] ? find_held_lock+0x2b/0x80 [ 1158.114975][T25035] ? kernfs_root+0xee/0x2a0 [ 1158.114991][T25035] ? kernfs_root+0xee/0x2a0 [ 1158.115012][T25035] kernfs_new_node+0x11b/0x1a0 [ 1158.115034][T25035] kernfs_create_dir_ns+0x4c/0x1a0 [ 1158.115056][T25035] internal_create_group+0x36f/0xfb0 [ 1158.115077][T25035] ? bus_to_subsys+0x114/0x150 [ 1158.115165][T25035] ? __pfx_internal_create_group+0x10/0x10 [ 1158.115183][T25035] ? bus_add_device+0x368/0x6b0 [ 1158.115226][T25035] ? __pfx_bus_add_device+0x10/0x10 [ 1158.115245][T25035] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1158.115268][T25035] dpm_sysfs_add+0x80/0x280 [ 1158.115308][T25035] device_add+0x9ef/0x1950 [ 1158.115327][T25035] ? __pfx_device_add+0x10/0x10 [ 1158.115344][T25035] ? lockdep_init_map_type+0x5c/0x250 [ 1158.115368][T25035] ? __init_waitqueue_head+0xca/0x150 [ 1158.115416][T25035] netdev_register_kobject+0x1a9/0x3d0 [ 1158.115476][T25035] register_netdevice+0x151c/0x24b0 [ 1158.115541][T25035] ? __pfx_register_netdevice+0x10/0x10 [ 1158.115565][T25035] __ip_tunnel_create+0x52b/0x670 [ 1158.115614][T25035] ? __pfx___ip_tunnel_create+0x10/0x10 [ 1158.115633][T25035] ? net_generic+0xea/0x2a0 [ 1158.115657][T25035] ip_tunnel_init_net+0x230/0x780 [ 1158.115680][T25035] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1158.115705][T25035] ? __kmalloc_noprof+0x320/0x850 [ 1158.115730][T25035] ? __pfx_ipip_init_net+0x10/0x10 [ 1158.115772][T25035] ops_init+0x1e2/0x5f0 [ 1158.115791][T25035] setup_net+0x118/0x3a0 [ 1158.115809][T25035] ? __pfx_setup_net+0x10/0x10 [ 1158.115825][T25035] ? mutex_init_lockdep+0xf1/0x120 [ 1158.115845][T25035] copy_net_ns+0x46f/0x7c0 [ 1158.115864][T25035] create_new_namespaces+0x3ea/0xac0 [ 1158.115888][T25035] unshare_nsproxy_namespaces+0xf2/0x220 [ 1158.115908][T25035] ksys_unshare+0x438/0xab0 [ 1158.115930][T25035] ? __pfx_ksys_unshare+0x10/0x10 [ 1158.115949][T25035] ? xfd_validate_state+0x129/0x190 [ 1158.115979][T25035] __x64_sys_unshare+0x31/0x40 [ 1158.115999][T25035] do_syscall_64+0x115/0x840 [ 1158.116021][T25035] ? clear_bhb_loop+0x40/0x90 [ 1158.116040][T25035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.116057][T25035] RIP: 0033:0x7f4781b9ce59 [ 1158.116070][T25035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.116085][T25035] RSP: 002b:00007f47829ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1158.116101][T25035] RAX: ffffffffffffffda RBX: 00007f4781e15fa0 RCX: 00007f4781b9ce59 [ 1158.116111][T25035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1158.116120][T25035] RBP: 00007f4781c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1158.116130][T25035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.116140][T25035] R13: 00007f4781e16038 R14: 00007f4781e15fa0 R15: 00007fff39eb1748 [ 1158.116160][T25035] [ 1158.751884][ T8622] Bluetooth: hci13: command tx timeout [ 1159.406294][T24966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.509528][T24966] veth0_vlan: entered promiscuous mode [ 1159.546953][T24966] veth1_vlan: entered promiscuous mode [ 1159.624287][T24966] veth0_macvtap: entered promiscuous mode [ 1159.646776][T24966] veth1_macvtap: entered promiscuous mode [ 1159.687158][T24966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.736117][T24966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.764439][ T7746] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.775724][ T7746] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.849386][T25067] futex_wake_op: syz.3.4476 tries to shift op by -1; fix this program [ 1159.865538][ T7746] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.922009][ T7746] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.133900][T24674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.169182][T24674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.237975][T24674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.260559][T24674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.755012][T17415] Bluetooth: hci13: command tx timeout [ 1161.682940][T25101] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1161.868474][T25105] netlink: 'syz.0.4488': attribute type 1 has an invalid length. [ 1162.194522][T25115] virtio-pci 0000:00:03.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 1162.494974][T25122] FAULT_INJECTION: forcing a failure. [ 1162.494974][T25122] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1162.543004][T25122] CPU: 0 UID: 0 PID: 25122 Comm: syz.5.4494 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1162.543035][T25122] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1162.543042][T25122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1162.543052][T25122] Call Trace: [ 1162.543058][T25122] [ 1162.543064][T25122] dump_stack_lvl+0x100/0x190 [ 1162.543104][T25122] should_fail_ex.cold+0x5/0xa [ 1162.543124][T25122] get_futex_key+0x1d2/0x1510 [ 1162.543156][T25122] ? __pfx_get_futex_key+0x10/0x10 [ 1162.543187][T25122] futex_wake+0xea/0x530 [ 1162.543205][T25122] ? rcu_is_watching+0x12/0xc0 [ 1162.543223][T25122] ? __pfx_futex_wake+0x10/0x10 [ 1162.543243][T25122] ? putname+0xb1/0x110 [ 1162.543262][T25122] ? kmem_cache_free+0x127/0x6c0 [ 1162.543288][T25122] do_futex+0x32b/0x350 [ 1162.543303][T25122] ? __pfx_do_futex+0x10/0x10 [ 1162.543317][T25122] ? __pfx_do_sys_openat2+0x10/0x10 [ 1162.543344][T25122] __x64_sys_futex+0x34f/0x4d0 [ 1162.543360][T25122] ? __x64_sys_openat+0x12d/0x210 [ 1162.543382][T25122] ? __pfx___x64_sys_futex+0x10/0x10 [ 1162.543397][T25122] ? ksys_write+0x1ac/0x250 [ 1162.543416][T25122] ? rcu_is_watching+0x12/0xc0 [ 1162.543435][T25122] do_syscall_64+0x115/0x840 [ 1162.543455][T25122] ? clear_bhb_loop+0x40/0x90 [ 1162.543474][T25122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.543490][T25122] RIP: 0033:0x7f264479ce59 [ 1162.543503][T25122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.543518][T25122] RSP: 002b:00007f26455ea0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1162.543533][T25122] RAX: ffffffffffffffda RBX: 00007f2644a15fa8 RCX: 00007f264479ce59 [ 1162.543543][T25122] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2644a15fac [ 1162.543553][T25122] RBP: 00007f2644a15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1162.543562][T25122] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1162.543571][T25122] R13: 00007f2644a16038 R14: 00007ffea083f860 R15: 00007ffea083f948 [ 1162.543591][T25122] [ 1163.103782][T25129] netlink: 'syz.0.4498': attribute type 1 has an invalid length. [ 1163.872422][T25142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4501'. [ 1163.920576][T25142] netlink: 21 bytes leftover after parsing attributes in process `syz.0.4501'. [ 1164.999860][T25175] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4513'. [ 1165.075739][T25177] bridge0: port 3(dummy0) entered blocking state [ 1165.116077][T25177] bridge0: port 3(dummy0) entered disabled state [ 1165.159790][T25177] dummy0: entered allmulticast mode [ 1165.195439][T25177] dummy0: entered promiscuous mode [ 1165.249751][T25177] bridge0: port 3(dummy0) entered blocking state [ 1165.256232][T25177] bridge0: port 3(dummy0) entered forwarding state [ 1165.355398][T25183] futex_wake_op: syz.5.4514 tries to shift op by -1; fix this program [ 1165.486029][T25186] netlink: 'syz.5.4516': attribute type 1 has an invalid length. [ 1165.615176][T25192] futex_wake_op: syz.3.4517 tries to shift op by -1; fix this program [ 1166.248907][ T30] audit: type=1807 audit(1843123270.581:32): UNKNOWN=nl80211 res=0 [ 1166.285971][ T30] audit: type=1802 audit(1843123270.621:33): pid=25208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.4523" res=0 errno=0 [ 1166.421600][T25213] netlink: 'syz.0.4526': attribute type 1 has an invalid length. [ 1166.498029][T25202] ima: policy update failed [ 1166.535390][ T30] audit: type=1802 audit(1843123270.882:34): pid=25202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4523" res=0 errno=0 [ 1167.141408][T25231] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4529'. [ 1168.112010][T25260] netlink: 'syz.0.4536': attribute type 1 has an invalid length. [ 1168.251839][T25262] Invalid ELF header magic: != ELF [ 1169.386946][ T8622] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1169.400945][ T8622] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1169.409945][ T8622] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1169.425170][ T8622] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1169.441577][ T8622] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1170.005886][T25299] FAULT_INJECTION: forcing a failure. [ 1170.005886][T25299] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.050321][T25299] CPU: 0 UID: 0 PID: 25299 Comm: syz.3.4545 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1170.050348][T25299] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1170.050355][T25299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1170.050363][T25299] Call Trace: [ 1170.050369][T25299] [ 1170.050375][T25299] dump_stack_lvl+0x100/0x190 [ 1170.050404][T25299] should_fail_ex.cold+0x5/0xa [ 1170.050423][T25299] should_failslab+0xc2/0x120 [ 1170.050441][T25299] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1170.050462][T25299] ? mas_preallocate+0x1105/0x14a0 [ 1170.050481][T25299] mas_preallocate+0x1105/0x14a0 [ 1170.050498][T25299] ? __pfx_mas_preallocate+0x10/0x10 [ 1170.050521][T25299] vma_link+0x14a/0x8d0 [ 1170.050544][T25299] ? __pfx_vma_link+0x10/0x10 [ 1170.050570][T25299] ? anon_vma_clone+0x675/0xcd0 [ 1170.050594][T25299] copy_vma+0x7e6/0xac0 [ 1170.050617][T25299] ? __pfx_copy_vma+0x10/0x10 [ 1170.050653][T25299] ? __lock_acquire+0x4a5/0x2630 [ 1170.050674][T25299] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1170.050699][T25299] copy_vma_and_data+0x1cf/0x7c0 [ 1170.050723][T25299] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1170.050744][T25299] ? mtree_load+0x311/0xa90 [ 1170.050767][T25299] ? mtree_load+0x32d/0xa90 [ 1170.050790][T25299] ? arch_get_unmapped_area_topdown+0x3e6/0x9b0 [ 1170.050813][T25299] move_vma+0x574/0x1920 [ 1170.050837][T25299] ? __pfx_move_vma+0x10/0x10 [ 1170.050860][T25299] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1170.050878][T25299] ? cap_mmap_addr+0x4b/0x120 [ 1170.050893][T25299] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1170.050907][T25299] ? security_mmap_addr+0x71/0x1e0 [ 1170.050925][T25299] ? __get_unmapped_area+0x255/0x3e0 [ 1170.050944][T25299] ? vrm_set_new_addr+0x204/0x290 [ 1170.050966][T25299] mremap_to+0x234/0x4c0 [ 1170.050987][T25299] ? __pfx_mremap_to+0x10/0x10 [ 1170.051007][T25299] ? check_prep_vma+0x912/0xe60 [ 1170.051031][T25299] __do_sys_mremap+0xb3e/0x1850 [ 1170.051055][T25299] ? find_held_lock+0x2b/0x80 [ 1170.051072][T25299] ? ksys_write+0x190/0x250 [ 1170.051087][T25299] ? ksys_write+0x190/0x250 [ 1170.051103][T25299] ? __pfx___do_sys_mremap+0x10/0x10 [ 1170.051129][T25299] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1170.051152][T25299] ? __fget_files+0x21f/0x3d0 [ 1170.051184][T25299] ? rcu_is_watching+0x12/0xc0 [ 1170.051202][T25299] do_syscall_64+0x115/0x840 [ 1170.051221][T25299] ? clear_bhb_loop+0x40/0x90 [ 1170.051238][T25299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.051252][T25299] RIP: 0033:0x7f4781b9ce59 [ 1170.051265][T25299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.051279][T25299] RSP: 002b:00007f47829ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1170.051294][T25299] RAX: ffffffffffffffda RBX: 00007f4781e15fa0 RCX: 00007f4781b9ce59 [ 1170.051303][T25299] RDX: 0000000000003fd6 RSI: 000000000000fee0 RDI: 0000000000004000 [ 1170.051312][T25299] RBP: 00007f47829ab090 R08: 00000000fffff000 R09: 0000000000000000 [ 1170.051321][T25299] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1170.051329][T25299] R13: 00007f4781e16038 R14: 00007f4781e15fa0 R15: 00007fff39eb1748 [ 1170.051348][T25299] [ 1171.128373][T25338] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[23907] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[25338] [ 1171.466780][T25343] openvswitch: netlink: Key 4 has unexpected len 0 expected 12 [ 1171.504642][ T8622] Bluetooth: hci14: command tx timeout [ 1172.481567][T25279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.510113][T25279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.558488][T25279] bridge_slave_0: entered allmulticast mode [ 1172.590361][T25279] bridge_slave_0: entered promiscuous mode [ 1172.625141][T25279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.653169][T25279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.676243][T25279] bridge_slave_1: entered allmulticast mode [ 1172.699486][T25279] bridge_slave_1: entered promiscuous mode [ 1172.803070][T25279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.854802][T25279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.957477][T25279] team0: Port device team_slave_0 added [ 1172.993652][T25279] team0: Port device team_slave_1 added [ 1173.097897][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1173.104852][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1173.155132][T25279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.199285][T25279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.322046][T25279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.392960][T25279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.419651][T25279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.521169][T25279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.569110][ T8622] Bluetooth: hci14: command tx timeout [ 1173.687095][T25279] hsr_slave_0: entered promiscuous mode [ 1173.710473][T25279] hsr_slave_1: entered promiscuous mode [ 1173.739620][T25279] debugfs: 'hsr0' already exists in 'hsr' [ 1173.764858][T25279] Cannot create hsr debugfs directory [ 1174.417668][T25279] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.778340][T25279] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.991208][T25279] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.241429][T25279] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.639608][ T8622] Bluetooth: hci14: command tx timeout [ 1176.226151][T25279] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1176.259710][T25279] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1176.311661][T25279] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1176.338073][T25279] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1176.387328][T25279] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1176.430128][T25279] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1176.466634][T25279] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1176.534348][T25279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1177.543989][T25279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.705490][ T8622] Bluetooth: hci14: command tx timeout [ 1177.809965][T25279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.874335][T24674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.881436][T24674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.971092][T24674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.978280][T24674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.090849][T25423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4573'. [ 1178.207317][T25425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4574'. [ 1178.284657][T25425] HfR: entered promiscuous mode [ 1178.503683][T25433] FAULT_INJECTION: forcing a failure. [ 1178.503683][T25433] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1178.602677][T25433] CPU: 0 UID: 0 PID: 25433 Comm: syz.3.4576 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1178.602705][T25433] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1178.602711][T25433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1178.602721][T25433] Call Trace: [ 1178.602726][T25433] [ 1178.602732][T25433] dump_stack_lvl+0x100/0x190 [ 1178.602764][T25433] should_fail_ex.cold+0x5/0xa [ 1178.602783][T25433] ? prepare_alloc_pages+0x16d/0x5f0 [ 1178.602805][T25433] should_fail_alloc_page+0xeb/0x140 [ 1178.602824][T25433] prepare_alloc_pages+0x1f0/0x5f0 [ 1178.602845][T25433] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1178.602869][T25433] ? __pfx___up_read+0x10/0x10 [ 1178.602885][T25433] ? validate_mm+0x261/0x4e0 [ 1178.602904][T25433] ? validate_mm+0x261/0x4e0 [ 1178.602924][T25433] ? mas_find+0x2dd/0x740 [ 1178.602946][T25433] ? validate_mm+0x392/0x4e0 [ 1178.602966][T25433] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1178.602997][T25433] ? vma_iter_store_overwrite+0x392/0x650 [ 1178.603020][T25433] ? vma_link+0x5ee/0x8d0 [ 1178.603039][T25433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1178.603061][T25433] ? policy_nodemask+0xed/0x4f0 [ 1178.603080][T25433] alloc_pages_mpol+0x1fb/0x540 [ 1178.603097][T25433] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1178.603118][T25433] alloc_pages_noprof+0x1a/0x160 [ 1178.603137][T25433] __pmd_alloc+0x3b/0x950 [ 1178.603157][T25433] move_page_tables+0x2f7c/0x4610 [ 1178.603179][T25433] ? __pfx_copy_vma+0x10/0x10 [ 1178.603207][T25433] ? __pfx_move_page_tables+0x10/0x10 [ 1178.603236][T25433] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1178.603261][T25433] copy_vma_and_data+0x25c/0x7c0 [ 1178.603285][T25433] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1178.603306][T25433] ? mtree_load+0x311/0xa90 [ 1178.603328][T25433] ? mtree_load+0x32d/0xa90 [ 1178.603348][T25433] ? arch_get_unmapped_area_topdown+0x3e6/0x9b0 [ 1178.603371][T25433] move_vma+0x574/0x1920 [ 1178.603395][T25433] ? __pfx_move_vma+0x10/0x10 [ 1178.603418][T25433] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1178.603436][T25433] ? cap_mmap_addr+0x4b/0x120 [ 1178.603452][T25433] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1178.603467][T25433] ? security_mmap_addr+0x71/0x1e0 [ 1178.603485][T25433] ? __get_unmapped_area+0x255/0x3e0 [ 1178.603508][T25433] ? vrm_set_new_addr+0x204/0x290 [ 1178.603531][T25433] mremap_to+0x234/0x4c0 [ 1178.603552][T25433] ? __pfx_mremap_to+0x10/0x10 [ 1178.603572][T25433] ? check_prep_vma+0x912/0xe60 [ 1178.603596][T25433] __do_sys_mremap+0xb3e/0x1850 [ 1178.603620][T25433] ? find_held_lock+0x2b/0x80 [ 1178.603636][T25433] ? ksys_write+0x190/0x250 [ 1178.603653][T25433] ? ksys_write+0x190/0x250 [ 1178.603668][T25433] ? __pfx___do_sys_mremap+0x10/0x10 [ 1178.603695][T25433] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1178.603719][T25433] ? __fget_files+0x21f/0x3d0 [ 1178.603745][T25433] ? rcu_is_watching+0x12/0xc0 [ 1178.603764][T25433] do_syscall_64+0x115/0x840 [ 1178.603782][T25433] ? clear_bhb_loop+0x40/0x90 [ 1178.603800][T25433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.603815][T25433] RIP: 0033:0x7f4781b9ce59 [ 1178.603827][T25433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.603842][T25433] RSP: 002b:00007f47829ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1178.603856][T25433] RAX: ffffffffffffffda RBX: 00007f4781e15fa0 RCX: 00007f4781b9ce59 [ 1178.603866][T25433] RDX: 0000000000003fd6 RSI: 000000000000fee0 RDI: 0000000000004000 [ 1178.603875][T25433] RBP: 00007f47829ab090 R08: 00000000fffff000 R09: 0000000000000000 [ 1178.603884][T25433] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1178.603892][T25433] R13: 00007f4781e16038 R14: 00007f4781e15fa0 R15: 00007fff39eb1748 [ 1178.603911][T25433] [ 1180.108100][T25464] netlink: 25 bytes leftover after parsing attributes in process `syz.5.4585'. [ 1180.650919][T25279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1181.316090][T25498] synth uevent: /bus/mei: unknown uevent action string [ 1181.419735][T25279] veth0_vlan: entered promiscuous mode [ 1181.495992][T25279] veth1_vlan: entered promiscuous mode [ 1181.642387][T25279] veth0_macvtap: entered promiscuous mode [ 1181.671001][T25279] veth1_macvtap: entered promiscuous mode [ 1181.736514][T25279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1181.779883][T25279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1181.834616][T24674] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.870925][T24674] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.937957][T24674] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.008407][T24674] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.164694][ T7746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.211818][ T7746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.305468][T24676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.340154][T24676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.571758][T25539] Process accounting resumed [ 1185.084336][T25559] FAULT_INJECTION: forcing a failure. [ 1185.084336][T25559] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.143173][T25559] CPU: 0 UID: 0 PID: 25559 Comm: syz.7.4610 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1185.143200][T25559] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1185.143207][T25559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1185.143216][T25559] Call Trace: [ 1185.143222][T25559] [ 1185.143227][T25559] dump_stack_lvl+0x100/0x190 [ 1185.143256][T25559] should_fail_ex.cold+0x5/0xa [ 1185.143276][T25559] should_failslab+0xc2/0x120 [ 1185.143294][T25559] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1185.143315][T25559] ? __pmd_alloc+0xbf/0x950 [ 1185.143337][T25559] __pmd_alloc+0xbf/0x950 [ 1185.143356][T25559] move_page_tables+0x2f7c/0x4610 [ 1185.143378][T25559] ? __pfx_copy_vma+0x10/0x10 [ 1185.143406][T25559] ? __pfx_move_page_tables+0x10/0x10 [ 1185.143436][T25559] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1185.143461][T25559] copy_vma_and_data+0x25c/0x7c0 [ 1185.143483][T25559] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1185.143505][T25559] ? mtree_load+0x311/0xa90 [ 1185.143528][T25559] ? mtree_load+0x32d/0xa90 [ 1185.143548][T25559] ? arch_get_unmapped_area_topdown+0x3e6/0x9b0 [ 1185.143571][T25559] move_vma+0x574/0x1920 [ 1185.143595][T25559] ? __pfx_move_vma+0x10/0x10 [ 1185.143617][T25559] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1185.143636][T25559] ? cap_mmap_addr+0x4b/0x120 [ 1185.143650][T25559] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1185.143663][T25559] ? security_mmap_addr+0x71/0x1e0 [ 1185.143682][T25559] ? __get_unmapped_area+0x255/0x3e0 [ 1185.143701][T25559] ? vrm_set_new_addr+0x204/0x290 [ 1185.143724][T25559] mremap_to+0x234/0x4c0 [ 1185.143745][T25559] ? __pfx_mremap_to+0x10/0x10 [ 1185.143764][T25559] ? check_prep_vma+0x912/0xe60 [ 1185.143789][T25559] __do_sys_mremap+0xb3e/0x1850 [ 1185.143813][T25559] ? find_held_lock+0x2b/0x80 [ 1185.143830][T25559] ? ksys_write+0x190/0x250 [ 1185.143846][T25559] ? ksys_write+0x190/0x250 [ 1185.143862][T25559] ? __pfx___do_sys_mremap+0x10/0x10 [ 1185.143889][T25559] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1185.143912][T25559] ? __fget_files+0x21f/0x3d0 [ 1185.143939][T25559] ? rcu_is_watching+0x12/0xc0 [ 1185.143957][T25559] do_syscall_64+0x115/0x840 [ 1185.143976][T25559] ? clear_bhb_loop+0x40/0x90 [ 1185.143993][T25559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.144007][T25559] RIP: 0033:0x7ff13c59ce59 [ 1185.144020][T25559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.144033][T25559] RSP: 002b:00007ff13d50a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1185.144053][T25559] RAX: ffffffffffffffda RBX: 00007ff13c815fa0 RCX: 00007ff13c59ce59 [ 1185.144063][T25559] RDX: 0000000000003fd6 RSI: 000000000000fee0 RDI: 0000000000004000 [ 1185.144072][T25559] RBP: 00007ff13d50a090 R08: 00000000fffff000 R09: 0000000000000000 [ 1185.144081][T25559] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1185.144089][T25559] R13: 00007ff13c816038 R14: 00007ff13c815fa0 R15: 00007ffc31c10678 [ 1185.144108][T25559] [ 1185.569391][T17415] Bluetooth: hci2: command 0x0406 tx timeout [ 1185.623094][T25567] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(320.8192.104), cmd(12) [ 1186.327671][T25572] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1186.788841][T25595] FAULT_INJECTION: forcing a failure. [ 1186.788841][T25595] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1186.846520][T25595] CPU: 0 UID: 0 PID: 25595 Comm: syz.7.4621 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1186.846547][T25595] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1186.846553][T25595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1186.846563][T25595] Call Trace: [ 1186.846568][T25595] [ 1186.846575][T25595] dump_stack_lvl+0x100/0x190 [ 1186.846604][T25595] should_fail_ex.cold+0x5/0xa [ 1186.846626][T25595] get_futex_key+0x295/0x1510 [ 1186.846651][T25595] ? __pfx_get_futex_key+0x10/0x10 [ 1186.846679][T25595] futex_wake_op+0x16a/0xdc0 [ 1186.846694][T25595] ? get_pid_task+0xfc/0x250 [ 1186.846720][T25595] ? __pfx_futex_wake_op+0x10/0x10 [ 1186.846735][T25595] ? proc_fail_nth_write+0x9f/0x220 [ 1186.846758][T25595] ? find_held_lock+0x2b/0x80 [ 1186.846780][T25595] ? ksys_write+0x190/0x250 [ 1186.846795][T25595] ? ksys_write+0x190/0x250 [ 1186.846815][T25595] do_futex+0x2f1/0x350 [ 1186.846830][T25595] ? __pfx_do_futex+0x10/0x10 [ 1186.846849][T25595] __x64_sys_futex+0x34f/0x4d0 [ 1186.846865][T25595] ? fput+0x79/0x100 [ 1186.846883][T25595] ? __pfx___x64_sys_futex+0x10/0x10 [ 1186.846897][T25595] ? ksys_write+0x1ac/0x250 [ 1186.846912][T25595] ? __pfx_ksys_write+0x10/0x10 [ 1186.846936][T25595] ? rcu_is_watching+0x12/0xc0 [ 1186.846954][T25595] do_syscall_64+0x115/0x840 [ 1186.846974][T25595] ? clear_bhb_loop+0x40/0x90 [ 1186.846992][T25595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.847008][T25595] RIP: 0033:0x7ff13c59ce59 [ 1186.847020][T25595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.847034][T25595] RSP: 002b:00007ff13d4e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1186.847049][T25595] RAX: ffffffffffffffda RBX: 00007ff13c816090 RCX: 00007ff13c59ce59 [ 1186.847058][T25595] RDX: 00000000000001ff RSI: 0000000000000005 RDI: 0000000000000000 [ 1186.847067][T25595] RBP: 00007ff13d4e9090 R08: 0000000000000000 R09: 00000000fffffffa [ 1186.847076][T25595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1186.847084][T25595] R13: 00007ff13c816128 R14: 00007ff13c816090 R15: 00007ffc31c10678 [ 1186.847103][T25595] [ 1187.128875][T25602] futex_wake_op: syz.3.4623 tries to shift op by -1; fix this program [ 1189.835055][T25692] FAULT_INJECTION: forcing a failure. [ 1189.835055][T25692] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1189.894200][T25692] CPU: 0 UID: 0 PID: 25692 Comm: syz.3.4646 Tainted: G I L syzkaller #0 PREEMPT(full) [ 1189.894227][T25692] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1189.894233][T25692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1189.894242][T25692] Call Trace: [ 1189.894248][T25692] [ 1189.894253][T25692] dump_stack_lvl+0x100/0x190 [ 1189.894283][T25692] should_fail_ex.cold+0x5/0xa [ 1189.894299][T25692] ? prepare_alloc_pages+0x16d/0x5f0 [ 1189.894319][T25692] should_fail_alloc_page+0xeb/0x140 [ 1189.894337][T25692] prepare_alloc_pages+0x1f0/0x5f0 [ 1189.894358][T25692] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1189.894383][T25692] ? stack_trace_save+0x8e/0xc0 [ 1189.894402][T25692] ? __pfx_stack_trace_save+0x10/0x10 [ 1189.894419][T25692] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 1189.894441][T25692] ? stack_depot_save_flags+0x27/0x9d0 [ 1189.894465][T25692] ? __pfx___up_read+0x10/0x10 [ 1189.894479][T25692] ? validate_mm+0x261/0x4e0 [ 1189.894501][T25692] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1189.894522][T25692] ? kasan_save_track+0x14/0x30 [ 1189.894535][T25692] ? __kasan_slab_alloc+0x89/0x90 [ 1189.894550][T25692] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1189.894571][T25692] ? move_page_tables+0x2f7c/0x4610 [ 1189.894592][T25692] ? move_vma+0x574/0x1920 [ 1189.894611][T25692] ? mremap_to+0x234/0x4c0 [ 1189.894630][T25692] ? __do_sys_mremap+0xb3e/0x1850 [ 1189.894649][T25692] ? do_syscall_64+0x115/0x840 [ 1189.894668][T25692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.894692][T25692] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1189.894713][T25692] ? policy_nodemask+0xed/0x4f0 [ 1189.894731][T25692] alloc_pages_mpol+0x1fb/0x540 [ 1189.894749][T25692] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1189.894771][T25692] alloc_pages_noprof+0x1a/0x160 [ 1189.894795][T25692] pte_alloc_one+0x1c/0x3d0 [ 1189.894814][T25692] __pte_alloc+0x6d/0x380 [ 1189.894830][T25692] ? __pfx___pte_alloc+0x10/0x10 [ 1189.894846][T25692] ? _raw_spin_unlock+0x28/0x50 [ 1189.894863][T25692] ? __pmd_alloc+0x3fb/0x950 [ 1189.894882][T25692] move_page_tables+0x2ec4/0x4610 [ 1189.894904][T25692] ? __pfx_copy_vma+0x10/0x10 [ 1189.894932][T25692] ? __pfx_move_page_tables+0x10/0x10 [ 1189.894961][T25692] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1189.894987][T25692] copy_vma_and_data+0x25c/0x7c0 [ 1189.895010][T25692] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1189.895031][T25692] ? mtree_load+0x311/0xa90 [ 1189.895055][T25692] ? mtree_load+0x32d/0xa90 [ 1189.895074][T25692] ? arch_get_unmapped_area_topdown+0x3e6/0x9b0 [ 1189.895097][T25692] move_vma+0x574/0x1920 [ 1189.895121][T25692] ? __pfx_move_vma+0x10/0x10 [ 1189.895144][T25692] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1189.895162][T25692] ? cap_mmap_addr+0x4b/0x120 [ 1189.895176][T25692] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1189.895189][T25692] ? security_mmap_addr+0x71/0x1e0 [ 1189.895208][T25692] ? __get_unmapped_area+0x255/0x3e0 [ 1189.895229][T25692] ? vrm_set_new_addr+0x204/0x290 [ 1189.895251][T25692] mremap_to+0x234/0x4c0 [ 1189.895272][T25692] ? __pfx_mremap_to+0x10/0x10 [ 1189.895292][T25692] ? check_prep_vma+0x912/0xe60 [ 1189.895317][T25692] __do_sys_mremap+0xb3e/0x1850 [ 1189.895341][T25692] ? find_held_lock+0x2b/0x80 [ 1189.895358][T25692] ? ksys_write+0x190/0x250 [ 1189.895374][T25692] ? ksys_write+0x190/0x250 [ 1189.895389][T25692] ? __pfx___do_sys_mremap+0x10/0x10 [ 1189.895416][T25692] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1189.895439][T25692] ? __fget_files+0x21f/0x3d0 [ 1189.895465][T25692] ? rcu_is_watching+0x12/0xc0 [ 1189.895484][T25692] do_syscall_64+0x115/0x840 [ 1189.895502][T25692] ? clear_bhb_loop+0x40/0x90 [ 1189.895520][T25692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.895534][T25692] RIP: 0033:0x7f4781b9ce59 [ 1189.895547][T25692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.895560][T25692] RSP: 002b:00007f47829ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1189.895575][T25692] RAX: ffffffffffffffda RBX: 00007f4781e15fa0 RCX: 00007f4781b9ce59 [ 1189.895585][T25692] RDX: 0000000000003fd6 RSI: 000000000000fee0 RDI: 0000000000004000 [ 1189.895593][T25692] RBP: 00007f47829ab090 R08: 00000000fffff000 R09: 0000000000000000 [ 1189.895602][T25692] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1189.895610][T25692] R13: 00007f4781e16038 R14: 00007f4781e15fa0 R15: 00007fff39eb1748 [ 1189.895629][T25692] [ 1190.606437][T25645] Bluetooth: hci6: command 0x0406 tx timeout [ 1190.612544][T25645] Bluetooth: hci5: command 0x0406 tx timeout [ 1192.738600][T25734] futex_wake_op: syz.3.4657 tries to shift op by -1; fix this program [ 1193.481150][ T31] INFO: task syz-executor:20814 blocked for more than 143 seconds. [ 1193.491721][ T31] Tainted: G I L syzkaller #0 [ 1193.517376][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1193.536640][ T31] task:syz-executor state:D stack:23976 pid:20814 tgid:20814 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1193.568844][ T31] Call Trace: [ 1193.578202][ T31] [ 1193.587952][ T31] __schedule+0x1295/0x67a0 [ 1193.599093][ T31] ? __pfx___schedule+0x10/0x10 [ 1193.617388][ T31] ? find_held_lock+0x2b/0x80 [ 1193.622165][ T31] ? schedule+0x2bf/0x390 [ 1193.627405][ T31] schedule+0xdd/0x390 [ 1193.631585][ T31] schedule_preempt_disabled+0x13/0x30 [ 1193.637457][ T31] __mutex_lock+0xced/0x1b10 [ 1193.642133][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1193.648173][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1193.653833][ T31] ? net_generic+0xea/0x2a0 [ 1193.658969][ T31] ? net_generic+0xea/0x2a0 [ 1193.663566][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1193.670243][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1193.677234][ T31] nfsd_umount+0x3b/0x60 [ 1193.681610][ T31] deactivate_locked_super+0xc1/0x1b0 [ 1193.687301][ T31] deactivate_super+0xe7/0x110 [ 1193.692155][ T31] cleanup_mnt+0x21f/0x450 [ 1193.696939][ T31] task_work_run+0x150/0x240 [ 1193.701593][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1193.707293][ T31] ? rcu_is_watching+0x12/0xc0 [ 1193.719622][ T31] exit_to_user_mode_loop+0x157/0x670 [ 1193.726375][ T31] ? rcu_is_watching+0x12/0xc0 [ 1193.731818][ T31] do_syscall_64+0x652/0x840 [ 1193.736801][ T31] ? clear_bhb_loop+0x40/0x90 [ 1193.741581][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.747818][ T31] RIP: 0033:0x7fa06c99e097 [ 1193.752859][ T31] RSP: 002b:00007ffc2b300fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1193.761660][ T31] RAX: 0000000000000000 RBX: 00007fa06ca321ca RCX: 00007fa06c99e097 [ 1193.770087][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2b301080 [ 1193.779440][ T31] RBP: 00007ffc2b301080 R08: 00007ffc2b302080 R09: 00000000ffffffff [ 1193.790043][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2b302110 [ 1193.798310][ T31] R13: 00007fa06ca321ca R14: 0000000000100fa2 R15: 00007ffc2b302150 [ 1193.806661][ T31] [ 1193.809836][ T31] [ 1193.809836][ T31] Showing all locks held in the system: [ 1193.836915][ T31] 1 lock held by khungtaskd/31: [ 1193.841882][ T31] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1193.857942][ T31] 3 locks held by kworker/u11:1/6353: [ 1193.880565][ T31] #0: ffff888048a08140 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1193.906440][ T31] #1: ffffc9000590fd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1193.939725][ T31] #2: ffff88804dfe8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 1193.954874][ T31] 2 locks held by syz-executor/20814: [ 1193.960891][ T31] #0: ffff88807fdd40d8 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1193.971575][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1193.981496][ T31] 2 locks held by getty/21810: [ 1193.986741][ T31] #0: ffff88803369c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1193.998153][ T31] #1: ffffc900036d32e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1194.010206][ T31] 2 locks held by syz.4.4194/23117: [ 1194.021102][ T31] #0: ffffffff906b50a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1194.029635][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1194.041195][ T31] 2 locks held by syz.5.4213/23170: [ 1194.048866][ T31] #0: ffffffff906b50a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1194.057927][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1194.069478][ T31] 2 locks held by syz.0.4221/23199: [ 1194.074910][ T31] #0: ffffffff906b50a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1194.083499][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1194.094042][ T31] 2 locks held by syz-executor/23202: [ 1194.099451][ T31] #0: ffff888020f380d8 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1194.115235][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1194.129788][ T31] 2 locks held by syz-executor/23237: [ 1194.135534][ T31] #0: ffff88802b88e0d8 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1194.146702][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1194.159111][ T31] 2 locks held by syz-executor/23308: [ 1194.165916][ T31] #0: ffff88802a3ba0d8 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1194.178722][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1194.188722][ T31] 2 locks held by syz-executor/23328: [ 1194.194358][ T31] #0: ffff88809bec20d8 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1194.205139][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1194.215625][ T31] 2 locks held by syz-executor/23728: [ 1194.228264][ T31] #0: ffff88807c8160d8 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1194.239395][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1194.249353][ T31] 2 locks held by syz-executor/24012: [ 1194.254956][ T31] #0: ffff88802a4540d8 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1194.268172][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1194.278582][ T31] 2 locks held by syz-executor/24630: [ 1194.285679][ T31] #0: ffff88807c8900d8 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1194.296250][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1194.306140][ T31] 2 locks held by kworker/u10:18/24671: [ 1194.311730][ T31] #0: ffff88801ebec140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1194.328341][ T31] #1: ffffc9000460fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1194.344416][ T31] 4 locks held by kworker/u10:20/24674: [ 1194.350020][ T31] #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1194.360743][ T31] #1: ffffc90004fafd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1194.373947][ T31] #2: ffffffff905ede48 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1194.384815][ T31] #3: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1194.395805][ T31] 2 locks held by syz.6.4347/24707: [ 1194.401049][ T31] #0: ffffffff906b50a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1194.409759][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1194.420302][ T31] 2 locks held by syz.0.4624/25601: [ 1194.430793][ T31] #0: ffffffff906b50a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1194.439820][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 1194.469735][ T31] [ 1194.486815][ T31] ============================================= [ 1194.486815][ T31] [ 1194.512368][ T31] NMI backtrace for cpu 0 [ 1194.512384][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G I L syzkaller #0 PREEMPT(full) [ 1194.512406][ T31] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1194.512413][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1194.512421][ T31] Call Trace: [ 1194.512427][ T31] [ 1194.512439][ T31] dump_stack_lvl+0x100/0x190 [ 1194.512468][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1194.512485][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1194.512563][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1194.512583][ T31] sys_info+0x141/0x190 [ 1194.512606][ T31] watchdog+0xcb1/0x1030 [ 1194.512628][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1194.512647][ T31] ? __pfx_watchdog+0x10/0x10 [ 1194.512666][ T31] ? __kthread_parkme+0x18c/0x230 [ 1194.512686][ T31] ? kthread+0x13a/0x450 [ 1194.512704][ T31] ? __pfx_watchdog+0x10/0x10 [ 1194.512721][ T31] kthread+0x370/0x450 [ 1194.512740][ T31] ? __pfx_kthread+0x10/0x10 [ 1194.512761][ T31] ret_from_fork+0x72b/0xd50 [ 1194.512777][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1194.512792][ T31] ? __switch_to+0x800/0x1100 [ 1194.512811][ T31] ? __switch_to_asm+0x39/0x70 [ 1194.512828][ T31] ? __pfx_kthread+0x10/0x10 [ 1194.512848][ T31] ret_from_fork_asm+0x1a/0x30 [ 1194.512874][ T31] [ 1194.681335][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1194.688195][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G I L syzkaller #0 PREEMPT(full) [ 1194.698856][ T31] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1194.705334][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1194.715370][ T31] Call Trace: [ 1194.718644][ T31] [ 1194.721563][ T31] dump_stack_lvl+0x100/0x190 [ 1194.726236][ T31] vpanic+0x552/0x970 [ 1194.730201][ T31] ? __pfx_vpanic+0x10/0x10 [ 1194.734685][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1194.740825][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1194.746974][ T31] panic+0xd1/0xe0 [ 1194.750683][ T31] ? __pfx_panic+0x10/0x10 [ 1194.755082][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1194.761218][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1194.767352][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1194.773487][ T31] ? watchdog.cold+0x1ec/0x234 [ 1194.778259][ T31] ? watchdog+0xcc1/0x1030 [ 1194.782662][ T31] watchdog.cold+0x1fd/0x234 [ 1194.787240][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1194.793032][ T31] ? __pfx_watchdog+0x10/0x10 [ 1194.797694][ T31] ? __kthread_parkme+0x18c/0x230 [ 1194.802707][ T31] ? kthread+0x13a/0x450 [ 1194.806933][ T31] ? __pfx_watchdog+0x10/0x10 [ 1194.811598][ T31] kthread+0x370/0x450 [ 1194.815657][ T31] ? __pfx_kthread+0x10/0x10 [ 1194.820236][ T31] ret_from_fork+0x72b/0xd50 [ 1194.824808][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1194.829903][ T31] ? __switch_to+0x800/0x1100 [ 1194.834565][ T31] ? __switch_to_asm+0x39/0x70 [ 1194.839314][ T31] ? __pfx_kthread+0x10/0x10 [ 1194.843907][ T31] ret_from_fork_asm+0x1a/0x30 [ 1194.848665][ T31] [ 1194.851726][ T31] Kernel Offset: disabled [ 1194.856040][ T31] Rebooting in 86400 seconds..