last executing test programs: 3m58.432432263s ago: executing program 1 (id=472): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = getpgid(r0) mmap$auto(0x0, 0x1ff, 0xa, 0x1000000000000eb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) unshare$auto(0x40000080) setfsuid$auto(0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC2\x00', 0x52b901, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000009c0)={{@raw=0x7000, 0xd252, 0x9, 0x2, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x2000963, 0x2, @raw=0x404, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df5fdffffffffffffffdbb68aec3f51e29bc18b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673ee57f2f5fde573fa4d4328a8ea0be7eccec0adb4f64290e53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"}) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0xd, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="131729bd7000fedbdf25030000f00e0001002f6465762f63656334008cb6"], 0x24}, 0x1, 0x0, 0x0, 0x20044011}, 0x20000008) prctl$auto(0x1000000003b, 0xfff, r1, 0x5, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) uname$auto(0x0) 3m52.938335s ago: executing program 1 (id=478): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x2, 0xe, &(0x7f00000000c0)='*\\\x00', 0x0) preadv2$auto(r0, 0x0, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) bind$auto(0x3, &(0x7f0000000180)=@rc={0x1f, @none, 0xf5}, 0x6a) mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) shmget$auto(0xfffffffe, 0xd, 0x6) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) r1 = syz_clone3(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x4dd8, 0x5) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="280068bd30d7f339e008e3115d41315e0000", @ANYRES8=r0, @ANYBLOB="010026bd7000fcdbdf250d00000008000300", @ANYRESOCT=0x0, @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = prctl$auto(0x3e, 0x1ff, r1, 0xfffffffffffffffd, 0x4000006) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) dup$auto(r3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socketcall$auto(0xa, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(r5, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r4, 0x4138ae84, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m51.933044421s ago: executing program 1 (id=479): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r2, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001540), 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)=@bpf_attr_3={0x1, 0x200, 0x100000001, 0x9, 0x5, 0x2, 0x1, 0x6d, 0x7, "e250646a2cc3bcec67f2584daab5b34f", 0x0, 0x8, 0xffffffffffffffff, 0x5, 0x40, 0x3, 0x7, 0x101, 0x28, 0x6, @attach_btf_obj_fd, 0x8, 0x2, 0x0, 0x10000, 0xca}, 0x4) 3m48.252097725s ago: executing program 1 (id=485): socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x5, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x2, 0x1, 0x0) semctl$auto(0x201, 0xfffffffd, 0x3, 0x400000) setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0x100008) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, 0x0, 0x55) ioctl$auto(0x3, 0x800005411, 0x38) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x1000) socket(0x15, 0x5, 0x0) unshare$auto(0x40000080) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) 3m44.756224602s ago: executing program 1 (id=489): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, 0x0, 0x0) r2 = socket(0x8, 0x1, 0x33) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r3, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000740)={0xfffffffffffffffc, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x360, r0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x8}, @NL80211_ATTR_MESH_CONFIG={0x342, 0x23, 0x0, 0x1, [@nested={0x26e, 0x12e, 0x0, 0x1, [@nested={0x4, 0x9b}, @generic="4b9da7d76b15189619124be718fb6483d748f2b7213e8770f6232ef8b319793024f1aa9f7b983b253b71ceee4dc4b3fd61ba6e03abc0614443c3ff2951e429bdc3b503bb63cc377e103b74334b738cf3159a6e573659b48176cefb3962989bdd8d955bfb8fda176651a1d542d6120d2bcfafa2365629b92bf5ef027350765a1cefb010398d1385f1faef3f35d38adf7a447267c13b2ba2a455bdd22dd11f8fb01cee08e69f0a6f6e0c2ec1afca9574c25db058", @nested={0x4, 0x44}, @typed={0x14, 0x150, 0x0, 0x0, @ipv6=@loopback}, @generic="75a3c3e492a30ab7f68ac1b80cf9fe7f56f7f55f89368c8566c7198db5e2c4659965d41b958a9734b8fb97bb16a84903218bc8a744bd969693bf2ba4470ea49ec867d65e459ee2cdbfc3d138644f25aa83551bc9c950fa1168ac7d7b4598f0c712c68bcfb8a16e4198fe25574feb5c0af84fcc95e39d444e7538ba1c", @generic="4a6e9c71eb3504a0f744973c134920023cc8bfc7de2ea09be9f932c4928b6956bb8409fe9cc1be9ec1b0885c2875113bb6605ceec7f982a8", @generic="d130c04f66651be4506979e13d7508bdee8c4a2f3c256940e18a7bf6f080f19321950ef3561eca5433ebe058e799f4ab906e2fe47a83544c6f5e5714a99e9ff2d6c31d80b10c323215e4e17ccd8efd4b62cbffe0999836a21a7cca1a591e880db18c76cd013df0da187e82a0c7a158ee96e0d4197fec963555fd9696afbdc9e7e61ab74d5cf40863e9935424d547633aa842d1918dc5420d082abde191bec3d192b1d8d7208050880912cfe531e5567e3eb3daaac9d400f21aab1f7a8b19237b7ec28e697db3bd15be5996821929387f296e686b9b10b584b407054850880f3ffbbfeb9112b95d"]}, @generic="949c13abf5b77d14f5371d4424d8338c8c0f753c598a307f3f6220be330abd81d17035108ef4765222c8e71bcf79b55571c17c4ae1a2e49d935bc3f562004af129e38a2eff22a44f51ada56b993c812d297006b8bb3edf87b0d97d059b5346161cee164cf3b2cd90eb9a45b807dfd1bb0262872add1072475ad36245bed188ed87f0a79c61a965d6e8ddfb49868ab061766ced62593d85724f0319f983988105073f9286e139c90828c183ce6d93d8a3f21c53592643da0d026806f29acdc898874984899fabd757767746e79248"]}]}, 0x360}, 0x1, 0x0, 0x0, 0x8000}, 0x20008042) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) writev$auto(r4, &(0x7f0000000340)={0x0, 0x18}, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x4b564d04, 0x1, 0x8003}]}) ioctl$auto_UI_SET_FFBIT(r4, 0x4004556b, 0x0) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2\b\x00\x00\x00\x00\x00\x00\x00E2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf2]\xabq\t\x91\xe69\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe91\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaa\x00\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000001340), 0x2, 0x0) unlink$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00') 3m43.635463048s ago: executing program 1 (id=492): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe7a, 0x34f, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1d, 0x2, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat2$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x6, 0x746e06da, 0x9}, 0xb) open_tree_attr$auto(r1, &(0x7f00000001c0)='./file0\x00', 0xffffff68, &(0x7f0000000200)={0x8, 0x5, 0x8, @inferred=r0}, 0x82d4) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010025bf7000fbdbdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_proc_environ_operations_base(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/14/chip_name\x00', 0xb40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4138, 0x102a) 3m28.389479863s ago: executing program 32 (id=492): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe7a, 0x34f, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1d, 0x2, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat2$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x6, 0x746e06da, 0x9}, 0xb) open_tree_attr$auto(r1, &(0x7f00000001c0)='./file0\x00', 0xffffff68, &(0x7f0000000200)={0x8, 0x5, 0x8, @inferred=r0}, 0x82d4) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010025bf7000fbdbdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) syz_genetlink_get_family_id$auto_hsr(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_proc_environ_operations_base(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/14/chip_name\x00', 0xb40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4138, 0x102a) 2m41.245889117s ago: executing program 0 (id=632): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0x10, 0x2, 0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = socketpair$auto(0x1, 0x5, 0x3b, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) kexec_load$auto(0x5b50, 0x2, 0x0, 0xe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x318, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xba, 0x84, 0x0, 0x1, [@typed={0x4, 0x9}, @generic="c2175dcc0f1a4185e788a2773372740625105d4d8a112b18c1a46ba70dd6572264755c5c1bf6afdaebffd41566c0ffe902249451bfaeaf57f9d4", @typed={0x7, 0x13c, 0x0, 0x0, @str='=,\x00'}, @typed={0x48, 0xa9, 0x0, 0x0, @binary="1c3d96e2d4e00b4907772a970d5ef39efe3475a907e6db9280c57cad1d97ba5b1ec0820c4f2daf7c81b6703fcf0f26b34f3783dbd73e390d4230c074001368c4564ad508"}, @generic="117b", @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0xc, 0x141, 0x0, 0x0, @u64=0x101}]}, @generic="c12561c76329a574e6e51550bdb9bb13899a"]}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xddb}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x401}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f4a152d85ffd2d7efee7f6b388d2e506e5374e9b9b0b085"}, @NL80211_ATTR_MBSSID_ELEMS={0x208, 0x133, 0x0, 0x1, [@nested={0x201, 0xae, 0x0, 0x1, [@typed={0xe8, 0x115, 0x0, 0x0, @binary="5ea750fcbe62640508241e5a6728751268c1f54bddab4dec9f2dcf55947e0a58747c49cc61901bc158cf6eb5eea0ffa1b46c68ba1bf3992a88d2f9a094b0da55e2ee4fb78a873397f84d70c1cdc9a38e35f1c01b18f64702ad49f7a4b76f90092ab4bd6a876886aaf4ad08bbba2cb235a092588e7725b9a1f165ff6ca3d2d7638689b2220fa7b377ad5e57b260945a0066bdacdcad1ca710b3e125ace906c43adb7f1fa32641e4ff5851a48ccf11afbbc4e8c858d211e5e56b434ab4eeb519c5eec0663539103f0c202ad755cbf74b369ce96aede5d474f4dd7a78ca7c7024c195b91238"}, @nested={0x4, 0xfa}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x97, 0x0, 0x0, @uid}, @nested={0x4, 0x126}, @generic="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"]}]}]}, 0x318}}, 0x10) 2m39.838621724s ago: executing program 0 (id=636): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = socketpair$auto(0x1, 0x5, 0x3b, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) kexec_load$auto(0x5b50, 0x2, 0x0, 0xe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x318, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xba, 0x84, 0x0, 0x1, [@typed={0x4, 0x9}, @generic="c2175dcc0f1a4185e788a2773372740625105d4d8a112b18c1a46ba70dd6572264755c5c1bf6afdaebffd41566c0ffe902249451bfaeaf57f9d4", @typed={0x7, 0x13c, 0x0, 0x0, @str='=,\x00'}, @typed={0x48, 0xa9, 0x0, 0x0, @binary="1c3d96e2d4e00b4907772a970d5ef39efe3475a907e6db9280c57cad1d97ba5b1ec0820c4f2daf7c81b6703fcf0f26b34f3783dbd73e390d4230c074001368c4564ad508"}, @generic="117b", @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0xc, 0x141, 0x0, 0x0, @u64=0x101}]}, @generic="c12561c76329a574e6e51550bdb9bb13899a"]}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xddb}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x401}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f4a152d85ffd2d7efee7f6b388d2e506e5374e9b9b0b085"}, @NL80211_ATTR_MBSSID_ELEMS={0x208, 0x133, 0x0, 0x1, [@nested={0x201, 0xae, 0x0, 0x1, [@typed={0xe8, 0x115, 0x0, 0x0, @binary="5ea750fcbe62640508241e5a6728751268c1f54bddab4dec9f2dcf55947e0a58747c49cc61901bc158cf6eb5eea0ffa1b46c68ba1bf3992a88d2f9a094b0da55e2ee4fb78a873397f84d70c1cdc9a38e35f1c01b18f64702ad49f7a4b76f90092ab4bd6a876886aaf4ad08bbba2cb235a092588e7725b9a1f165ff6ca3d2d7638689b2220fa7b377ad5e57b260945a0066bdacdcad1ca710b3e125ace906c43adb7f1fa32641e4ff5851a48ccf11afbbc4e8c858d211e5e56b434ab4eeb519c5eec0663539103f0c202ad755cbf74b369ce96aede5d474f4dd7a78ca7c7024c195b91238"}, @nested={0x4, 0xfa}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x97, 0x0, 0x0, @uid}, @nested={0x4, 0x126}, @generic="ca4590f90025182ecb9fae42bdec37b708aa59b4c3b56662b4556adfaf4559d8382af274092fc2b083ad64b0c76934d493c39c1457bf9d2f8b7e140805a3b674fe8d14e24e5165e935fdc4e2b1009409e74c06ef30d5b91b7b24d854f3d2d639abc11e2d26de2691360633d87fe68286d311a7e9e370313ea0cbef0c6d91a7231ca57bf7be0fddeb36f77ea538bc3e4f6e1500e9f49a2e87785c8529e4735353315dc5262e4d75013546fca80efd3a8a49884e630757af14aeab904fac379e9a51605ee0cc2ede7da843ada053c98255878e5306303718b2c6522c543527cb6f75632f36be77b3a884b7c8f4a851fdf9617b21b3f721dca07157613152"]}]}]}, 0x318}}, 0x10) 2m38.451015382s ago: executing program 0 (id=638): close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x102, 0x6, 0x801, 0x5, 0x0}) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xc) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYBLOB="200026bd7000ffdbdf25050000000500060004b7d591b41a18b5d790000000050c0000000000000800090000010000080009000400"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0xc001) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf25040000002d0011"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) 2m36.742049621s ago: executing program 0 (id=648): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = socketpair$auto(0x1, 0x5, 0x3b, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) kexec_load$auto(0x5b50, 0x2, 0x0, 0xe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x318, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xba, 0x84, 0x0, 0x1, [@typed={0x4, 0x9}, @generic="c2175dcc0f1a4185e788a2773372740625105d4d8a112b18c1a46ba70dd6572264755c5c1bf6afdaebffd41566c0ffe902249451bfaeaf57f9d4", @typed={0x7, 0x13c, 0x0, 0x0, @str='=,\x00'}, @typed={0x48, 0xa9, 0x0, 0x0, @binary="1c3d96e2d4e00b4907772a970d5ef39efe3475a907e6db9280c57cad1d97ba5b1ec0820c4f2daf7c81b6703fcf0f26b34f3783dbd73e390d4230c074001368c4564ad508"}, @generic="117b", @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0xc, 0x141, 0x0, 0x0, @u64=0x101}]}, @generic="c12561c76329a574e6e51550bdb9bb13899a"]}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xddb}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x401}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f4a152d85ffd2d7efee7f6b388d2e506e5374e9b9b0b085"}, @NL80211_ATTR_MBSSID_ELEMS={0x208, 0x133, 0x0, 0x1, [@nested={0x201, 0xae, 0x0, 0x1, [@typed={0xe8, 0x115, 0x0, 0x0, @binary="5ea750fcbe62640508241e5a6728751268c1f54bddab4dec9f2dcf55947e0a58747c49cc61901bc158cf6eb5eea0ffa1b46c68ba1bf3992a88d2f9a094b0da55e2ee4fb78a873397f84d70c1cdc9a38e35f1c01b18f64702ad49f7a4b76f90092ab4bd6a876886aaf4ad08bbba2cb235a092588e7725b9a1f165ff6ca3d2d7638689b2220fa7b377ad5e57b260945a0066bdacdcad1ca710b3e125ace906c43adb7f1fa32641e4ff5851a48ccf11afbbc4e8c858d211e5e56b434ab4eeb519c5eec0663539103f0c202ad755cbf74b369ce96aede5d474f4dd7a78ca7c7024c195b91238"}, @nested={0x4, 0xfa}, @typed={0x8, 0x5d, 0x0, 0x0, @fd}, @typed={0x8, 0x97, 0x0, 0x0, @uid}, @nested={0x4, 0x126}, @generic="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"]}]}]}, 0x318}}, 0x10) 2m35.538208628s ago: executing program 0 (id=643): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x700, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) r3 = socket(0xa, 0x1, 0x84) close_range$auto(r3, 0xfffffffffffff000, 0xfff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 2m32.794843216s ago: executing program 0 (id=649): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(r1, r0, 0xfff) mincore$auto(0x80000000, 0xfffffffffffffffc, 0x0) socket(0x10, 0x2, 0x4) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x218000, 0x41, 0x8}, 0x18) getpgid$auto(0xffffffffffffffff) prctl$auto(0x3e, 0xfffffffffffffffe, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 2m32.372434393s ago: executing program 2 (id=651): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = socketpair$auto(0x1, 0x5, 0x3b, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) kexec_load$auto(0x5b50, 0x2, 0x0, 0xe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x318, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xba, 0x84, 0x0, 0x1, [@typed={0x4, 0x9}, @generic="c2175dcc0f1a4185e788a2773372740625105d4d8a112b18c1a46ba70dd6572264755c5c1bf6afdaebffd41566c0ffe902249451bfaeaf57f9d4", @typed={0x7, 0x13c, 0x0, 0x0, @str='=,\x00'}, @typed={0x48, 0xa9, 0x0, 0x0, @binary="1c3d96e2d4e00b4907772a970d5ef39efe3475a907e6db9280c57cad1d97ba5b1ec0820c4f2daf7c81b6703fcf0f26b34f3783dbd73e390d4230c074001368c4564ad508"}, @generic="117b", @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0xc, 0x141, 0x0, 0x0, @u64=0x101}]}, @generic="c12561c76329a574e6e51550bdb9bb13899a"]}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xddb}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x401}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f4a152d85ffd2d7efee7f6b388d2e506e5374e9b9b0b085"}, @NL80211_ATTR_MBSSID_ELEMS={0x208, 0x133, 0x0, 0x1, [@nested={0x201, 0xae, 0x0, 0x1, [@typed={0xe8, 0x115, 0x0, 0x0, @binary="5ea750fcbe62640508241e5a6728751268c1f54bddab4dec9f2dcf55947e0a58747c49cc61901bc158cf6eb5eea0ffa1b46c68ba1bf3992a88d2f9a094b0da55e2ee4fb78a873397f84d70c1cdc9a38e35f1c01b18f64702ad49f7a4b76f90092ab4bd6a876886aaf4ad08bbba2cb235a092588e7725b9a1f165ff6ca3d2d7638689b2220fa7b377ad5e57b260945a0066bdacdcad1ca710b3e125ace906c43adb7f1fa32641e4ff5851a48ccf11afbbc4e8c858d211e5e56b434ab4eeb519c5eec0663539103f0c202ad755cbf74b369ce96aede5d474f4dd7a78ca7c7024c195b91238"}, @nested={0x4, 0xfa}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x97, 0x0, 0x0, @uid}, @nested={0x4, 0x126}, @generic="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"]}]}]}, 0x318}}, 0x10) 2m31.176188407s ago: executing program 2 (id=655): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = getpid() process_vm_readv$auto(r0, 0x0, 0x1, 0x0, 0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x8c) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r1) close_range$auto(0x0, r1, 0x2) close_range$auto(0x2, 0x8, 0x0) (fail_nth: 6) 2m30.860953612s ago: executing program 2 (id=657): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r4, 0x5220, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = socketpair$auto(0x1, 0x5, 0x3b, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) kexec_load$auto(0x5b50, 0x2, 0x0, 0xe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x318, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xba, 0x84, 0x0, 0x1, [@typed={0x4, 0x9}, @generic="c2175dcc0f1a4185e788a2773372740625105d4d8a112b18c1a46ba70dd6572264755c5c1bf6afdaebffd41566c0ffe902249451bfaeaf57f9d4", @typed={0x7, 0x13c, 0x0, 0x0, @str='=,\x00'}, @typed={0x48, 0xa9, 0x0, 0x0, @binary="1c3d96e2d4e00b4907772a970d5ef39efe3475a907e6db9280c57cad1d97ba5b1ec0820c4f2daf7c81b6703fcf0f26b34f3783dbd73e390d4230c074001368c4564ad508"}, @generic="117b", @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0xc, 0x141, 0x0, 0x0, @u64=0x101}]}, @generic="c12561c76329a574e6e51550bdb9bb13899a"]}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xddb}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x401}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f4a152d85ffd2d7efee7f6b388d2e506e5374e9b9b0b085"}, @NL80211_ATTR_MBSSID_ELEMS={0x208, 0x133, 0x0, 0x1, [@nested={0x201, 0xae, 0x0, 0x1, [@typed={0xe8, 0x115, 0x0, 0x0, @binary="5ea750fcbe62640508241e5a6728751268c1f54bddab4dec9f2dcf55947e0a58747c49cc61901bc158cf6eb5eea0ffa1b46c68ba1bf3992a88d2f9a094b0da55e2ee4fb78a873397f84d70c1cdc9a38e35f1c01b18f64702ad49f7a4b76f90092ab4bd6a876886aaf4ad08bbba2cb235a092588e7725b9a1f165ff6ca3d2d7638689b2220fa7b377ad5e57b260945a0066bdacdcad1ca710b3e125ace906c43adb7f1fa32641e4ff5851a48ccf11afbbc4e8c858d211e5e56b434ab4eeb519c5eec0663539103f0c202ad755cbf74b369ce96aede5d474f4dd7a78ca7c7024c195b91238"}, @nested={0x4, 0xfa}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x97, 0x0, 0x0, @uid}, @nested={0x4, 0x126}, @generic="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"]}]}]}, 0x318}}, 0x10) 2m29.778429598s ago: executing program 2 (id=659): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) close_range$auto(0x2, 0x8, 0x0) listen$auto(0x3, 0x81) 2m28.839747109s ago: executing program 2 (id=661): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x700, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) r3 = socket(0xa, 0x1, 0x84) close_range$auto(r3, 0xfffffffffffff000, 0xfff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 2m28.382662107s ago: executing program 3 (id=662): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = socketpair$auto(0x1, 0x5, 0x3b, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) kexec_load$auto(0x5b50, 0x2, 0x0, 0xe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x318, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xba, 0x84, 0x0, 0x1, [@typed={0x4, 0x9}, @generic="c2175dcc0f1a4185e788a2773372740625105d4d8a112b18c1a46ba70dd6572264755c5c1bf6afdaebffd41566c0ffe902249451bfaeaf57f9d4", @typed={0x7, 0x13c, 0x0, 0x0, @str='=,\x00'}, @typed={0x48, 0xa9, 0x0, 0x0, @binary="1c3d96e2d4e00b4907772a970d5ef39efe3475a907e6db9280c57cad1d97ba5b1ec0820c4f2daf7c81b6703fcf0f26b34f3783dbd73e390d4230c074001368c4564ad508"}, @generic="117b", @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0xc, 0x141, 0x0, 0x0, @u64=0x101}]}, @generic="c12561c76329a574e6e51550bdb9bb13899a"]}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xddb}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x401}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f4a152d85ffd2d7efee7f6b388d2e506e5374e9b9b0b085"}, @NL80211_ATTR_MBSSID_ELEMS={0x208, 0x133, 0x0, 0x1, [@nested={0x201, 0xae, 0x0, 0x1, [@typed={0xe8, 0x115, 0x0, 0x0, @binary="5ea750fcbe62640508241e5a6728751268c1f54bddab4dec9f2dcf55947e0a58747c49cc61901bc158cf6eb5eea0ffa1b46c68ba1bf3992a88d2f9a094b0da55e2ee4fb78a873397f84d70c1cdc9a38e35f1c01b18f64702ad49f7a4b76f90092ab4bd6a876886aaf4ad08bbba2cb235a092588e7725b9a1f165ff6ca3d2d7638689b2220fa7b377ad5e57b260945a0066bdacdcad1ca710b3e125ace906c43adb7f1fa32641e4ff5851a48ccf11afbbc4e8c858d211e5e56b434ab4eeb519c5eec0663539103f0c202ad755cbf74b369ce96aede5d474f4dd7a78ca7c7024c195b91238"}, @nested={0x4, 0xfa}, @typed={0x8, 0x5d, 0x0, 0x0, @fd}, @typed={0x8, 0x97, 0x0, 0x0, @uid}, @nested={0x4, 0x126}, @generic="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"]}]}]}, 0x318}}, 0x10) 2m26.817167266s ago: executing program 2 (id=664): close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xc) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200026bd7000ffdbdf25050000000500060004b7d591b41a18b5d790000000050c0000000000000800090000010000080009000400"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0xc001) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf25040000002d0011"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) 2m26.815631719s ago: executing program 3 (id=665): close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x102, 0x6, 0x801, 0x5, 0x0}) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xc) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200026bd7000ffdbdf25050000000500060004b7d591b41a18b5d790000000050c0000000000000800090000010000080009000400"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0xc001) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf25040000002d0011"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) 2m26.192211487s ago: executing program 3 (id=668): close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x102, 0x6, 0x801, 0x5, 0x0}) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xc) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0xc001) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf25040000002d0011"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) 2m25.670008422s ago: executing program 3 (id=670): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r4, 0x5220, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = socketpair$auto(0x1, 0x5, 0x3b, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) kexec_load$auto(0x5b50, 0x2, 0x0, 0xe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x318, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xba, 0x84, 0x0, 0x1, [@typed={0x4, 0x9}, @generic="c2175dcc0f1a4185e788a2773372740625105d4d8a112b18c1a46ba70dd6572264755c5c1bf6afdaebffd41566c0ffe902249451bfaeaf57f9d4", @typed={0x7, 0x13c, 0x0, 0x0, @str='=,\x00'}, @typed={0x48, 0xa9, 0x0, 0x0, @binary="1c3d96e2d4e00b4907772a970d5ef39efe3475a907e6db9280c57cad1d97ba5b1ec0820c4f2daf7c81b6703fcf0f26b34f3783dbd73e390d4230c074001368c4564ad508"}, @generic="117b", @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0xc, 0x141, 0x0, 0x0, @u64=0x101}]}, @generic="c12561c76329a574e6e51550bdb9bb13899a"]}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xddb}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x401}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f4a152d85ffd2d7efee7f6b388d2e506e5374e9b9b0b085"}, @NL80211_ATTR_MBSSID_ELEMS={0x208, 0x133, 0x0, 0x1, [@nested={0x201, 0xae, 0x0, 0x1, [@typed={0xe8, 0x115, 0x0, 0x0, @binary="5ea750fcbe62640508241e5a6728751268c1f54bddab4dec9f2dcf55947e0a58747c49cc61901bc158cf6eb5eea0ffa1b46c68ba1bf3992a88d2f9a094b0da55e2ee4fb78a873397f84d70c1cdc9a38e35f1c01b18f64702ad49f7a4b76f90092ab4bd6a876886aaf4ad08bbba2cb235a092588e7725b9a1f165ff6ca3d2d7638689b2220fa7b377ad5e57b260945a0066bdacdcad1ca710b3e125ace906c43adb7f1fa32641e4ff5851a48ccf11afbbc4e8c858d211e5e56b434ab4eeb519c5eec0663539103f0c202ad755cbf74b369ce96aede5d474f4dd7a78ca7c7024c195b91238"}, @nested={0x4, 0xfa}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x97, 0x0, 0x0, @uid}, @nested={0x4, 0x126}, @generic="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"]}]}]}, 0x318}}, 0x10) 2m24.745083877s ago: executing program 3 (id=673): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x700, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) r3 = socket(0xa, 0x1, 0x84) close_range$auto(r3, 0xfffffffffffff000, 0xfff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 2m23.083221755s ago: executing program 3 (id=676): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r2, 0x5220, 0x0) 2m17.555384934s ago: executing program 33 (id=649): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(r1, r0, 0xfff) mincore$auto(0x80000000, 0xfffffffffffffffc, 0x0) socket(0x10, 0x2, 0x4) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x218000, 0x41, 0x8}, 0x18) getpgid$auto(0xffffffffffffffff) prctl$auto(0x3e, 0xfffffffffffffffe, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 2m11.713475297s ago: executing program 34 (id=664): close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xc) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200026bd7000ffdbdf25050000000500060004b7d591b41a18b5d790000000050c0000000000000800090000010000080009000400"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0xc001) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf25040000002d0011"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) 2m8.075873411s ago: executing program 5 (id=704): socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x5, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x2, 0x1, 0x0) semctl$auto(0x201, 0xfffffffd, 0x3, 0x400000) setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0x100008) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, 0x0, 0x55) ioctl$auto(0x3, 0x800005411, 0x38) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x1000) socket(0x15, 0x5, 0x0) unshare$auto(0x40000080) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/021/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0x8ffff, 0x5, &(0x7f0000000040), 0xc694, 0x3, 0x80005, @stream_id=0x2, 0x20047, 0xc, 0x0}) ioctl$auto_USBDEVFS_REAPURB32(r0, 0x4004550c, &(0x7f0000000300)=0x10003fe) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) 2m7.964999695s ago: executing program 35 (id=676): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r2, 0x5220, 0x0) 2m6.421609522s ago: executing program 5 (id=707): close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x102, 0x6, 0x801, 0x5, 0x0}) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xc) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(0x0, r2) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200026bd7000ffdbdf25050000000500060004b7d591b41a18b5d790000000050c0000000000000800090000010000080009000400"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0xc001) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf25040000002d0011"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) 2m5.503387879s ago: executing program 5 (id=710): close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x102, 0x6, 0x801, 0x5, 0x0}) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xc) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0xc001) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf25040000002d0011"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) 2m4.79216536s ago: executing program 5 (id=712): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = socketpair$auto(0x1, 0x5, 0x3b, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) kexec_load$auto(0x5b50, 0x2, 0x0, 0xe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x318, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xba, 0x84, 0x0, 0x1, [@typed={0x4, 0x9}, @generic="c2175dcc0f1a4185e788a2773372740625105d4d8a112b18c1a46ba70dd6572264755c5c1bf6afdaebffd41566c0ffe902249451bfaeaf57f9d4", @typed={0x7, 0x13c, 0x0, 0x0, @str='=,\x00'}, @typed={0x48, 0xa9, 0x0, 0x0, @binary="1c3d96e2d4e00b4907772a970d5ef39efe3475a907e6db9280c57cad1d97ba5b1ec0820c4f2daf7c81b6703fcf0f26b34f3783dbd73e390d4230c074001368c4564ad508"}, @generic="117b", @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0xc, 0x141, 0x0, 0x0, @u64=0x101}]}, @generic="c12561c76329a574e6e51550bdb9bb13899a"]}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xddb}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x401}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f4a152d85ffd2d7efee7f6b388d2e506e5374e9b9b0b085"}, @NL80211_ATTR_MBSSID_ELEMS={0x208, 0x133, 0x0, 0x1, [@nested={0x201, 0xae, 0x0, 0x1, [@typed={0xe8, 0x115, 0x0, 0x0, @binary="5ea750fcbe62640508241e5a6728751268c1f54bddab4dec9f2dcf55947e0a58747c49cc61901bc158cf6eb5eea0ffa1b46c68ba1bf3992a88d2f9a094b0da55e2ee4fb78a873397f84d70c1cdc9a38e35f1c01b18f64702ad49f7a4b76f90092ab4bd6a876886aaf4ad08bbba2cb235a092588e7725b9a1f165ff6ca3d2d7638689b2220fa7b377ad5e57b260945a0066bdacdcad1ca710b3e125ace906c43adb7f1fa32641e4ff5851a48ccf11afbbc4e8c858d211e5e56b434ab4eeb519c5eec0663539103f0c202ad755cbf74b369ce96aede5d474f4dd7a78ca7c7024c195b91238"}, @nested={0x4, 0xfa}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x97, 0x0, 0x0, @uid}, @nested={0x4, 0x126}, @generic="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"]}]}]}, 0x318}}, 0x10) 2m3.567582948s ago: executing program 5 (id=714): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) r0 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x218d41, 0x0) mmap$auto(0x1000000000000, 0x0, 0x4000000000df, 0x17, r0, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) select$auto(0xffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x44) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x113, 0xff, r2, 0x2008000) recvmmsg$auto(r1, 0x0, 0x2, 0x9, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r3) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010325b57000fbdbdf250a0000040000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event2\x00', 0x101700, 0x0) ioctl$auto_EVIOCGREP(r5, 0x80084503, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) 2m1.772793272s ago: executing program 5 (id=716): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, 0x0, 0x0) r2 = socket(0x8, 0x1, 0x33) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(0xffffffffffffffff, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000740)={0xfffffffffffffffc, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x360, r0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x8}, @NL80211_ATTR_MESH_CONFIG={0x342, 0x23, 0x0, 0x1, [@nested={0x26e, 0x12e, 0x0, 0x1, [@nested={0x4, 0x9b}, @generic="4b9da7d76b15189619124be718fb6483d748f2b7213e8770f6232ef8b319793024f1aa9f7b983b253b71ceee4dc4b3fd61ba6e03abc0614443c3ff2951e429bdc3b503bb63cc377e103b74334b738cf3159a6e573659b48176cefb3962989bdd8d955bfb8fda176651a1d542d6120d2bcfafa2365629b92bf5ef027350765a1cefb010398d1385f1faef3f35d38adf7a447267c13b2ba2a455bdd22dd11f8fb01cee08e69f0a6f6e0c2ec1afca9574c25db058", @nested={0x4, 0x44}, @typed={0x14, 0x150, 0x0, 0x0, @ipv6=@loopback}, @generic="75a3c3e492a30ab7f68ac1b80cf9fe7f56f7f55f89368c8566c7198db5e2c4659965d41b958a9734b8fb97bb16a84903218bc8a744bd969693bf2ba4470ea49ec867d65e459ee2cdbfc3d138644f25aa83551bc9c950fa1168ac7d7b4598f0c712c68bcfb8a16e4198fe25574feb5c0af84fcc95e39d444e7538ba1c", @generic="4a6e9c71eb3504a0f744973c134920023cc8bfc7de2ea09be9f932c4928b6956bb8409fe9cc1be9ec1b0885c2875113bb6605ceec7f982a8", @generic="d130c04f66651be4506979e13d7508bdee8c4a2f3c256940e18a7bf6f080f19321950ef3561eca5433ebe058e799f4ab906e2fe47a83544c6f5e5714a99e9ff2d6c31d80b10c323215e4e17ccd8efd4b62cbffe0999836a21a7cca1a591e880db18c76cd013df0da187e82a0c7a158ee96e0d4197fec963555fd9696afbdc9e7e61ab74d5cf40863e9935424d547633aa842d1918dc5420d082abde191bec3d192b1d8d7208050880912cfe531e5567e3eb3daaac9d400f21aab1f7a8b19237b7ec28e697db3bd15be5996821929387f296e686b9b10b584b407054850880f3ffbbfeb9112b95d"]}, @generic="949c13abf5b77d14f5371d4424d8338c8c0f753c598a307f3f6220be330abd81d17035108ef4765222c8e71bcf79b55571c17c4ae1a2e49d935bc3f562004af129e38a2eff22a44f51ada56b993c812d297006b8bb3edf87b0d97d059b5346161cee164cf3b2cd90eb9a45b807dfd1bb0262872add1072475ad36245bed188ed87f0a79c61a965d6e8ddfb49868ab061766ced62593d85724f0319f983988105073f9286e139c90828c183ce6d93d8a3f21c53592643da0d026806f29acdc898874984899fabd757767746e79248"]}]}, 0x360}, 0x1, 0x0, 0x0, 0x8000}, 0x20008042) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x5, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x4b564d04, 0x1, 0x8003}]}) ioctl$auto_UI_SET_FFBIT(r3, 0x4004556b, 0x0) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2\b\x00\x00\x00\x00\x00\x00\x00E2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf2]\xabq\t\x91\xe69\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe91\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaa\x00\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000001340), 0x2, 0x0) unlink$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00') 1m57.686435792s ago: executing program 7 (id=705): mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = open(0x0, 0x22240, 0x154) bpf$auto(0x5, &(0x7f0000000100)=@iter_create={r0, 0x5d62}, 0x111) 1m57.307728274s ago: executing program 7 (id=724): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r4, 0x5220, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = socketpair$auto(0x1, 0x5, 0x3b, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) kexec_load$auto(0x5b50, 0x2, 0x0, 0xe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x318, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xba, 0x84, 0x0, 0x1, [@typed={0x4, 0x9}, @generic="c2175dcc0f1a4185e788a2773372740625105d4d8a112b18c1a46ba70dd6572264755c5c1bf6afdaebffd41566c0ffe902249451bfaeaf57f9d4", @typed={0x7, 0x13c, 0x0, 0x0, @str='=,\x00'}, @typed={0x48, 0xa9, 0x0, 0x0, @binary="1c3d96e2d4e00b4907772a970d5ef39efe3475a907e6db9280c57cad1d97ba5b1ec0820c4f2daf7c81b6703fcf0f26b34f3783dbd73e390d4230c074001368c4564ad508"}, @generic="117b", @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0xc, 0x141, 0x0, 0x0, @u64=0x101}]}, @generic="c12561c76329a574e6e51550bdb9bb13899a"]}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xddb}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x401}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f4a152d85ffd2d7efee7f6b388d2e506e5374e9b9b0b085"}, @NL80211_ATTR_MBSSID_ELEMS={0x208, 0x133, 0x0, 0x1, [@nested={0x201, 0xae, 0x0, 0x1, [@typed={0xe8, 0x115, 0x0, 0x0, @binary="5ea750fcbe62640508241e5a6728751268c1f54bddab4dec9f2dcf55947e0a58747c49cc61901bc158cf6eb5eea0ffa1b46c68ba1bf3992a88d2f9a094b0da55e2ee4fb78a873397f84d70c1cdc9a38e35f1c01b18f64702ad49f7a4b76f90092ab4bd6a876886aaf4ad08bbba2cb235a092588e7725b9a1f165ff6ca3d2d7638689b2220fa7b377ad5e57b260945a0066bdacdcad1ca710b3e125ace906c43adb7f1fa32641e4ff5851a48ccf11afbbc4e8c858d211e5e56b434ab4eeb519c5eec0663539103f0c202ad755cbf74b369ce96aede5d474f4dd7a78ca7c7024c195b91238"}, @nested={0x4, 0xfa}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x97, 0x0, 0x0, @uid}, @nested={0x4, 0x126}, @generic="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"]}]}]}, 0x318}}, 0x10) 1m56.030018912s ago: executing program 7 (id=729): socket$nl_generic(0x10, 0x3, 0x10) timer_settime$auto(0x0, 0x5, &(0x7f00000000c0)={{0x48, 0x79}, {0x6, 0x80000001}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000100)=@phonet={0x23, 0xf3, 0x4, 0x3}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x2000c801}, 0x8840) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20010090) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b0050000", @ANYRES16=r4, @ANYBLOB="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"], 0x5b0}}, 0x24004045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty43\x00', 0x80102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x80000000000000, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17) 1m46.56851828s ago: executing program 36 (id=716): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, 0x0, 0x0) r2 = socket(0x8, 0x1, 0x33) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(0xffffffffffffffff, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000740)={0xfffffffffffffffc, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x360, r0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x8}, @NL80211_ATTR_MESH_CONFIG={0x342, 0x23, 0x0, 0x1, [@nested={0x26e, 0x12e, 0x0, 0x1, [@nested={0x4, 0x9b}, @generic="4b9da7d76b15189619124be718fb6483d748f2b7213e8770f6232ef8b319793024f1aa9f7b983b253b71ceee4dc4b3fd61ba6e03abc0614443c3ff2951e429bdc3b503bb63cc377e103b74334b738cf3159a6e573659b48176cefb3962989bdd8d955bfb8fda176651a1d542d6120d2bcfafa2365629b92bf5ef027350765a1cefb010398d1385f1faef3f35d38adf7a447267c13b2ba2a455bdd22dd11f8fb01cee08e69f0a6f6e0c2ec1afca9574c25db058", @nested={0x4, 0x44}, @typed={0x14, 0x150, 0x0, 0x0, @ipv6=@loopback}, @generic="75a3c3e492a30ab7f68ac1b80cf9fe7f56f7f55f89368c8566c7198db5e2c4659965d41b958a9734b8fb97bb16a84903218bc8a744bd969693bf2ba4470ea49ec867d65e459ee2cdbfc3d138644f25aa83551bc9c950fa1168ac7d7b4598f0c712c68bcfb8a16e4198fe25574feb5c0af84fcc95e39d444e7538ba1c", @generic="4a6e9c71eb3504a0f744973c134920023cc8bfc7de2ea09be9f932c4928b6956bb8409fe9cc1be9ec1b0885c2875113bb6605ceec7f982a8", @generic="d130c04f66651be4506979e13d7508bdee8c4a2f3c256940e18a7bf6f080f19321950ef3561eca5433ebe058e799f4ab906e2fe47a83544c6f5e5714a99e9ff2d6c31d80b10c323215e4e17ccd8efd4b62cbffe0999836a21a7cca1a591e880db18c76cd013df0da187e82a0c7a158ee96e0d4197fec963555fd9696afbdc9e7e61ab74d5cf40863e9935424d547633aa842d1918dc5420d082abde191bec3d192b1d8d7208050880912cfe531e5567e3eb3daaac9d400f21aab1f7a8b19237b7ec28e697db3bd15be5996821929387f296e686b9b10b584b407054850880f3ffbbfeb9112b95d"]}, @generic="949c13abf5b77d14f5371d4424d8338c8c0f753c598a307f3f6220be330abd81d17035108ef4765222c8e71bcf79b55571c17c4ae1a2e49d935bc3f562004af129e38a2eff22a44f51ada56b993c812d297006b8bb3edf87b0d97d059b5346161cee164cf3b2cd90eb9a45b807dfd1bb0262872add1072475ad36245bed188ed87f0a79c61a965d6e8ddfb49868ab061766ced62593d85724f0319f983988105073f9286e139c90828c183ce6d93d8a3f21c53592643da0d026806f29acdc898874984899fabd757767746e79248"]}]}, 0x360}, 0x1, 0x0, 0x0, 0x8000}, 0x20008042) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x5, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x4b564d04, 0x1, 0x8003}]}) ioctl$auto_UI_SET_FFBIT(r3, 0x4004556b, 0x0) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2\b\x00\x00\x00\x00\x00\x00\x00E2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf2]\xabq\t\x91\xe69\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe91\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaa\x00\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000001340), 0x2, 0x0) unlink$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00') 1m40.948188142s ago: executing program 37 (id=729): socket$nl_generic(0x10, 0x3, 0x10) timer_settime$auto(0x0, 0x5, &(0x7f00000000c0)={{0x48, 0x79}, {0x6, 0x80000001}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000100)=@phonet={0x23, 0xf3, 0x4, 0x3}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x2000c801}, 0x8840) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20010090) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b0050000", @ANYRES16=r4, @ANYBLOB="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"], 0x5b0}}, 0x24004045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty43\x00', 0x80102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x80000000000000, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17) 31.445461975s ago: executing program 8 (id=950): close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xc) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) socket(0x1, 0x1, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x14d27e, 0x56) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xfff) copy_file_range$auto(r0, 0x0, r0, &(0x7f0000000080)=0x8, 0x2, 0x0) 30.732922036s ago: executing program 8 (id=954): close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x102, 0x6, 0x801, 0x5, 0x0}) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xc) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200026bd7000ffdbdf25050000000500060004b7d591b41a18b5d790000000050c0000000000000800090000010000080009000400"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0xc001) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf25040000002d0011"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) 27.828048731s ago: executing program 8 (id=970): clock_settime$auto(0xfffffffe, 0x0) prctl$auto(0x23, 0x80000000000a, 0x80000001, 0x0, 0x0) memfd_create$auto(0x0, 0x4) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) socket$auto(0x80000000, 0x497e, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000300)={0x6f8, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x6d9, 0xe, "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"}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x81}]}, 0x6f8}}, 0x40080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r6, &(0x7f0000000440)="1100000000000000000000000000010000", 0x11) getsockopt$auto_SO_DEBUG(r6, 0x1, 0x1, &(0x7f0000000100)='},:(.!/\x00', &(0x7f00000001c0)) r7 = getpid() r8 = setfsuid$auto(0xee01) setresuid$auto(0x0, r8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000001f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001f40)={0x14e0, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_CQM={0x36d, 0x5e, 0x0, 0x1, [@nested={0xfc, 0x137, 0x0, 0x1, [@typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@empty}, @typed={0xe8, 0x93, 0x0, 0x0, @binary="c7fb6d2aea8a9abb530998d2e3db97ab33b3353c0d213d2cca202662c077b3282e9cd1b82fbdb14d282e7c14d4043e729e848f8d3ff951a016aa52f04eeaf8c7b655a4d5627518fe03f6bcf0eca939a70903115252bec95076f0dba6cf2a6e16a95472472e11fd7a12f7cb23151afc14982e5639e4ba3d51b8e8be0d820c10695b7ebd6504b4ba2565803df940e3514034daca36d4e3aa57863346f28678dbd14238af8e9da77c1b68240f9b18cb785c8d655fb1eaf5ec27b58518d83a3832e6d33a1a4fc4efe0b6ea4adaf26f4e80deb0a95d67e585ecbbe3a3ab28a0c287c350524ba2"}, @typed={0x8, 0xa2, 0x0, 0x0, @pid=r7}]}, @generic="0c7bca135190d9ab29869a42a0b8325aa184c13dcbfd025d00ce8ed964bdba50d3a0f412d7599356c5cc79a20da377aeb1c5b355822032de3d90830dafdf0c7f4785afd7a4ddbc4f102acc38e4e0478378f772678789afbfb2b15a1981a23266e0a0305af035d9a33b727ce5cf6b552ee7c1eda2698bc7bebb3fdc0e1e1e25b3bbd518f759148dc552077bbed05c7f9269886acddc5aec0cdf01bca8b73b7e39383e06b2ffd7172d5dd4f6cc016638e6d69f27b839076e", @typed={0x5, 0xd0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x146, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="17c3f700f16ac22990636f47f0656f6b6936fc8a1a311cc455d80867b107ee05e7f9cdd618c2e567d7ecf79d31299e454638c353025f02993e34f49f359cae1d1331b7825f8a74589ed21b6bf747a9252fed8098c8060701628dea85a58d8050d1b0db4714d70e61993df7505679e7b251b63920a95758d755aebd9b840fae0921c213776a4b0aac279a66c35342d4d69c2e8d774dec61452cacf3c1091e8e81c0ffed25ea42cf900834b407ddd40572209af6d976d80aef5f2d28f64148ea7d16990f5b5bdddd37", @typed={0x8, 0x81, 0x0, 0x0, @uid=r8}, @generic="a628948c7a1e2e056a527b0dfa36b28f18abe1527d8e6ccfceffff4bcb81b8895328329cbf360938b2dd30306bad7ed61a33bbcda75632fbd8d568c61be4e204369afb563b49f34b897af9c6a6e82fd748c47bd71b6ea3f5797c4859c0c22a1d8f44c97cd017820f005ba1a3088f6debaca719ace433ee08ed36bc8a0ab6a37e7a4527018645c2a135e9a39e924155021d2da840fa0c90bd1d7a4dc883b5dcd3da7ad50b1279c247835ee799b7f72d7b783199985a1fc822c045f662eb7090b5cd947b7b20d2c02f69d61eb2647d6b65facf"]}, @NL80211_ATTR_CSA_IES={0x111c, 0xb9, 0x0, 0x1, [@nested={0x10a1, 0x1f, 0x0, 0x1, [@generic="83762722cf3353b0cf177f0dacf2316636b2de6efe30116667f43b2d2ef5d4e77bf9d46456813e521ed1d5b66aae0cbee315d7bc133fd792d5d466190dc13abcda0d28221a46b5bedf6bc29b466f5d38ab9d364b26615e7c8dd485c253871192bb377f1c56f0e4cf8ecaba8f76b983e8760d1a4c7cc67bdb744f66e2e23b1afff0af49896d71a69b76ab4f025c41157da0925ee3cf09efdff0", @nested={0x4, 0x149}, @generic="a938244aa4fe98c96c15b86b030a9784705a3e4d1e2cdebcf3f7d5130f3b335af9d77f8696223b94af78a7a143516a5e7c66abc2ca3874aa58112f4d7bd1c084b1f4b63d3f676b517300e727849fe17095e4ca018e7d4ee32d79c323b46779f4960ef0bad52dbd55bc043b4f4741eca24d1c886f088ebb327730e66870c7cdf063a3072443a8bbd6f74362f9f5b9e1efdc321f31467924dca8a7d9f75b389d20f2d18af1124943254db04fcdcac58bcfb3068315968ce6d9357bd572537a80711172223ca3d1a2ff21684dd4f4c37fc65f88054471ae621ce11775f02b4852e718f6e86e861872fae6fb526d3db6583c70a6e6412c088caf6a481a5fc9681b81e71f105c3401edba52235d8516cc5d16ea12ff402e8702cf63686cf3b4f65620fe6a21e5364e0326816ecff081b331add741303f49c140cbd978f477b8c6616ab91e09b3523723205172be148069daaeba6e7fc0f3e3e6e5979b016e6d4640175a39835c42e47f6b10d6b9bd2f4424966fe3d7746fb20098d092104dc90989700135b53f663609336411c8408738e98e355a06f295d35d896a72be83cbb5e84bc5fbe584afb1df1faba5483a500a9386521826df97736e6fbfd12777f09af9de80831d0323427e18406b2db3e051ab91d779665e69d2c676e79d6121384a45be197d59dbfbdb5c6edac52c4dac3e882a79edcb4e8793daadb7c0097a9057fd0efa5011a9dd7277eae815e551aaefca7afe74f4951f8789fe4d0d5bdda26cbd42e578ddb9cfa44086b8d975864031bdd1fb72ba87c819891e26721d197aee24d7484eec7f42a6035649790a535a88d0514aaaa58dc9f1568bb02f315876be7e84e7dfb824be8cac52fb4f06057804cab0719887a18920a17263e6e9c9f9639f1d6eee6a6d97ab46af107733539f336806d6acf77f78dae06245945e441248bd9b82eb97455a0025d189529a4322ad267d308ffc7401fe940d996ec8fda1c9fe2a9442d3fb0c55c82a74fa216eb8dc3d46fa09f22691de74f64826d49d7bae410e35df9eaa0725a9beb9499657da1a3921f138afa05420b70415b3bc8885495f7afc04dede98cbb9285e068ed3401b27b0147e66a835c44cad65bd8738cc2b60dcec20b19867c187aa679ae14fa021321ccaeabd4f6832c0229d2dc9a1ce9218d5c8e4e040a03b14701978df5bcfd22b957d2e901888ce556d9e63d8d4bc7609b8705b06d98fb7aba8ae0eb44825d4d46896e61fe7abc15c10bb6743bafcce24c91a937ebef08d4723e033d66a7c2b10775f9e2eb42fd776202805efec1a019e2124e05f49b79bfb32d503a8deadecf7780a01ac8b2840e5bd6c8bc0078962c480b7b3ec3f58816aa5e3532cf841c6606d0d6bb643ad0ded99bd8448ea78414d3e7bb049585c9b12d80811675cd6653c76693cd2337e64ae133178cc620dc365fe1cd6bd5e51333f63aa5eee0c9219d0b19322e37651063b78f9857d7e6e39faa833328189eab4dd8c199371688a77bd3855537f1b6a2d376e48c8bb1a99e5df4c9a24c5b82ac5a19be8ca7a76e057bd91c3933268d47be9cb3123f370b3cde125e68fd86e8bffb93e8383b583c386f0072c65f1266018b5f9b509eb57b4e217bae1749fef8beb4714ea30ed83ecb9a01f3bd41a47d77aab6e95fe4c5059a10358c64b1e705a322dc09933594a74eb52e8cbc96e293b0d26ab61075c1f9c2c71de57c3266b18d593e10c7390390b541336193e54755ffaf3cd8bcc1c265be1e4ce5c78d94deff4bcfe11f0d8e71de04724ea732fc1333dfe586c665579a49301be6200812c33a3363866cbbbee0f3341958e194bbe5ce640d9d2725b90d6914365f3671ef0cb1a31af731af3365bab7ff4b1265913685fab26b3ed30ec17cb86f317f3fd864013ecf1b7de1f9634d306d08449c41ad9e2c9b64ea55200c03fd2b996a172ca348da347d1bff7338bda7df6a34c370d32d7ad1efc0abc81ae2462dc28defd58e7e7c31c9397598b78e7ffe1a59fc308224c0ee542b4d1bc16048e68041c15bb82ebeac5e775591c23843681875664a63fb09fcb24710715c07ea3c343d2a3fde0e7b6d5ba164f82f4719508c577aad12d74e64e48502e8c082f1d2dc998fc4503a71dd400623798516c59436c8a2d08256614e40400dcf3e8bb026c044abde75c2e6fd35b154503669b0b0bc00e8caa6c1960a3c427d24551d3b4f8487a58a340c68c242cff6b9d5636ff51d1aaaacbfdb8b4ee33bb056c77a8e9fba4fa7eb6ae7a38b3371b4907515342ef2fea277bebef271e6984402c5a9ad123a742a7164e184674153db2e51990f066db7a18c4d16f059ccc4f3e656d8683b12825d522c20f64c6b16d7346f96b5db72fa7f968861f560be54fb2f270583399066b58eecdc3e7f6b0bd2ab114d39652fb3685e9366bb61ce9dae50ce904aa1c105fc4efa6f8ee224fd9f5cb9cb186d02835f8031696e06bdea56d04650b2b767c656635bd7489d17e36d31a46a84f5902e4dfd3bfaf15b2d34db2913954c51f8e8afb873b5326ae185e4b51de3ba4cd367374f8f483dad1dab835e22fd77a63cfe679a580fffa6d165460de996409cd379df0b89e349418f14925c67f3b045bcaabf899c0bab7c5df0ca2234dbfccd46ed4bcb2f3add2a5198d94ee9a5312a4f0b1165a1e21288de925734f609c30603cf20004fd8ef218e770cd88765cf6e4cdf96ae3de021e78b7c0859911ec7a34d782383d816d3518b3e25a8b117f5f75ab2d2e3a7c72100dea05e6e6c57729b8e3cb8531d0977a369b03bdeaf1e68c2cf46e01b976d9b388dce00e71e766fa4e68486df7c75316ea2d0b5ba3effe8eaeae258de0ebd9b374033831e6eb64edd0153f6d8982cb5acc8550f2ea1ed5105376189f61bfaa74fc272c69d61570d54d76f3303b37da1f4a201f740cd081fee8a0d97055e0ab5894e72a3a2a53c5df3fda79b8a61a674e42bd45e1690eb792d26533e3f45fbb08957a28e27633d87e71e6f7b31e00d59fbbc6bcff8bde4f2cd11f2cbb19e062802eba5e90fb8aa65ed3b27c5b83747fc4ecb5bc6ac423149579db949640cb8ab21f17520e24be76adc88e78c5689b92f15234bd2cfd41fbe81f2f5638e6b8b9216d33fde9acde536f8e5fd2a8192aa3907a922b324181979bd1fa8be1d34a160b8f734de8d67be14c68a60c32d3297c767fd81a467bf76a1823733e6a30072c19c858a152540f4db6bd56a78e13ff42e599c3b52aa23f1ffef33b6d2e3a4c69c10b89b00206beb4270c8afc01d6cd76c65dd70d3852dac08ce6ad3be3d73326fd6e2315ea10bd5652261d98dd86ecc017373a552e9f357f3b5ca541af751ba438cc78916027125e1195b74407a3a3756edce22dba1bcbf8f80dfbe17eef712683b71a110dddc6831d62449324b09cbb335be6f041c0d204092dba2b22dc836eecdb41159b04282ce1cc16cb4d34745fa3a4683c188d60c3d17773871286235358d05ed7e07abd0dcf57f4eb092b938a5e3bfac8ec84fff1f85f3f752dc73a52317a9f057b93ddb1f8d7c3fb8fdf623c2ff20041d55f3372c51a6211ef11d647f52e3f5db35768729ff0a5ab7cec9e3d45cdaab32c64d46ec262eb84e10a861050cf9fa99cf01a68d7e1bec19ffed1c69f5d0e469bf3ed4ae11b7b8cb678b080ffa33ee57e20b9d50ef52f1a32ab2a4a102b7a7fb8da0e4b04004caa79c9609f341a6f6b3c1904234f519b12ca31407670be1d6b7b7efc22b288ad56a6c64d187295084b04cf8ca1456f002c1cb6c99170a3d68e1ddd5fc56bbd3bb5e9055bf5501b85211a9485b244e3a772d23c43d1b1aa20227fa9bcbaff47fffabfadf07df41dcc4ab34c66de34b86f27a5125bc20e1e8c5e63bfcae9dfef83b005ea8e14b9199a8bc3762a5ec4aadc9bf9a147fe3fe63709c99ea7722bd36c5a3c5b69155b46440e6694d5e13a5492277a8ba4c79a29eb6c5bf5525092cf47dd9234a5bfaa79cb935f0bb843fc2134939d0bae168ae2fbd1ea1e88b539d26ca094e915dc5612abf71d17d53ab38727ad60dff42700d7bd8461758ad2f881349a4b3ad7431368cccdd3c827c5095aa8dbbd780b4639f8d09a0d7b3903168bbfca4d169a0281fa6e20723933232f3c85ae2d743d14764aa2419dde8f1988f2aae40350dcc7ff94b8c19eda33b1ec8856183bd5c5732c8a71b3c15013c10eea2556e8ede07c9e2a3b804a9107ce50b68c069d63225e59d74b86667f445fec2f9aed161638de7a292f9a3c2942e74b2383a861a1a5c270a009db4c967b338b7ed6fe777c0f33da80fcd20ef2cb893e419fb98fb1bb0cb9c4835d9cc657a759aedba4ad9ddefc97f900cce6180322a887bb500926bf04faa541b7175ffcb0a23c97625ad75ee09129e77664c8cf808dfdcefc80f72544cf5654805651899a54159916be3627ea553f3571dbc9e82ac29d2cb086e9771d11bd1bf931a837e927f4df89e544885b16d8a26c8a27e310e5d54c5ec81edd39608f410a145f84143faac93b27ddf53cb7b430216156b39e0eb70ddd8f2d9bedf27a13719bad2638b23833cfe29c75fa8d9cf6adcdc5736313aafcef882963513abb95b6ff46b4b956fd0d33cdea7b95f462224f56f22089ceed5cb6a4e0a7a98251b74c789befaea587d86cadbd96f5def5c1246fd248c01733f1a83abb4dc1ddfba27b7bcaadcad03d3c5f66802fb02a860e36a902a58c5fc8d580b70960ed1a2457638bb101e2112b37c03b973a781d9431052d42bdc05a7ed79003a1d69dc6c833b1140c3afa53fa580a58ea0c818b1465ba152c32c4efe73d13a262fdc11341ac90662d1a7af90a7bbee52ca82196dc517b04e9eb340a5c887c95945a123d11aa8c8a13dd1de35276e147defb334c0b865e21e99a379c6658291b1b04f51375399197ec29ac1f435258176771ae55be48e73ac2722f935a14f148ede3aef25d36032806c88aeed2744a06222be44ba9dc08f0336ae3f6dbac3aa70afff1df97a3bf2ee60ba87c78d15f0780a7a73d3a125627ac4ddb36fca014427330c3804fa88274839456aa3d89d9961b38ebeb187bec0d8399fd815d44d9c289de8887760d75b5ee6191bbf9b6eb97efe8da1649be938dcd994d0595d49961e05aaa18276f7e9ba876493f307d4f0d13d5b11dc39b41a3df95783cf3b4e7bc13f7c5450e7101806dd38b72ca8cebb0805e95bb140d93a86950c201b45b84e4a430a2c7d79369db00998d70a2bee354f374ec3c25870f555a936a1ab24ef6d86d22cb8aa08cddb0aa83ee4d357d165f42055a3548e6145b7f16eb494bf3d9418e84836c71b7798f71ab992472e4fa35d148f98794cac12b0c17ad5f3b303c69e45c8c748cb3f0677547a98ec017d3179c46b7a50fb80516e2841a608956618da36e992251acad034de400146acc82b1b76dbd5f76fc7648e8e6a700a72d1202f96c72a781cf7b33c13df0fa8e9011c43d1fd3eba9c66367d677307f18b05acc3f986a2cce96362f7c7c3ed4de018156f8d638a0da4cdf50e3688d7c31d9b80b5bd4b3acc03f160c50aa66b679521b67ebc3224b54451b0326f93354474b43f4106d79b913789944aa4c61ee3974961c1f1d4e37f9dcc1ab98c1f40c4833c1842b913bb56fd69c1b8f55e76473bca6e0e4efaddfef5ba109e26e72d68a481f795d04199be1d84c4275f90ff5c50ad905eab01a5fbdedbc637aa5b6f6acef7a8e90e4860a322155d40929faffd51d781a6518a997faebd4d902ade410e6ea32ef1c925a2cdea150f13f8ea35db2"]}, @nested={0x6d, 0xa6, 0x0, 0x1, [@generic="5a285b156f94665f1b967a257c1172d57974f133342edeb71c8389c0ae9da533cba7c9371cc32efe6b8e69f44a737ff4a95178b8db73e7d6a53e24bde27d58b33b75f243f586bc5688495dc162e43913cb060a6fd34347c0cc28ad4c9aa54d2cc4fa5214a446744a98"]}, @typed={0x4, 0x77}]}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x29, 0xba, "8a9740d55adcaefe50b1797cb10892da185b79bad7aa34bb51f0dc0fdd6ee03d6375f9a0d8"}, @NL80211_ATTR_KEY_DATA={0x14, 0x7, "9238fbc3514aef7e368d78f2f326c8bd"}]}, 0x14e0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 26.434313199s ago: executing program 8 (id=966): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 25.131344066s ago: executing program 8 (id=969): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, 0xfdfdffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video6\x00', 0x1600, 0x0) poll$auto(&(0x7f0000000480)={r2, 0xffff, 0x29}, 0x6, 0x8) (async) poll$auto(&(0x7f0000000480)={r2, 0xffff, 0x29}, 0x6, 0x8) r4 = socketcall$auto(0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) (async) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, 0x0) (async) ioctl$auto_IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) 23.888304646s ago: executing program 8 (id=971): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000200)='/-\xc4-\'(])\x00', 0x8, 0x3) write$auto(0x3, 0x0, 0x1) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) sysfs$auto(0x2, 0xd, 0x0) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x12, 0x1, "5e1f970f497f9f23d63e72850177"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$auto(0x3dbcb68f, 0x7ff, 0xffb, 0x8000000008011, 0x3, 0x0) clone$auto(0x5, 0x8, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1, 0x1, 0x0, 0x402, 0xdd16) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_TRANSMIT(r4, 0xc0386105, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x68641, 0x0) setreuid$auto(0x0, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8) 8.739628703s ago: executing program 38 (id=971): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000200)='/-\xc4-\'(])\x00', 0x8, 0x3) write$auto(0x3, 0x0, 0x1) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) sysfs$auto(0x2, 0xd, 0x0) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x12, 0x1, "5e1f970f497f9f23d63e72850177"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$auto(0x3dbcb68f, 0x7ff, 0xffb, 0x8000000008011, 0x3, 0x0) clone$auto(0x5, 0x8, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1, 0x1, 0x0, 0x402, 0xdd16) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_TRANSMIT(r4, 0xc0386105, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x68641, 0x0) setreuid$auto(0x0, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8) 6.747888188s ago: executing program 4 (id=1010): mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401c2, 0x2081, 0x3b, 0x7ffc, 0x1ffde, 0x8001, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3004, 0x9, 0x6, 0x10002, 0x80, 0x400, 0xa9, 0x7, 0x1ffc, 0x8203, 0x400, 0x2, 0x1, 0x0, 0x40, 0x5, 0x2, [0x7249, 0xa9f, 0x0, 0x1000000000000000, 0x0, 0x180, 0x20000000002, 0x0, 0x0, 0x200000000000000, 0xfc6a, 0x7, 0x10000, 0x40000000000, 0x0, 0x400000000000, 0x80000000000000, 0x0, 0xffffffffff7ffffc, 0x5, 0x0, 0x2, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x400000000000002, 0xfffffffffffffffc, 0x3, 0x1, 0x5, 0xfffffffffffffffc, 0x4]}, 0x1fe, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, 0x0, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x81, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x28, 0x5, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0x7, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xd0) r1 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/apparmor/exec\x00', 0x101002, 0x0) write$auto_proc_pid_attr_operations_base(r1, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) 6.747742598s ago: executing program 9 (id=1011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x703d27, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) 6.443560552s ago: executing program 9 (id=1013): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r4, 0x5220, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = socketpair$auto(0x1, 0x5, 0x3b, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) kexec_load$auto(0x5b50, 0x2, 0x0, 0xe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x318, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xba, 0x84, 0x0, 0x1, [@typed={0x4, 0x9}, @generic="c2175dcc0f1a4185e788a2773372740625105d4d8a112b18c1a46ba70dd6572264755c5c1bf6afdaebffd41566c0ffe902249451bfaeaf57f9d4", @typed={0x7, 0x13c, 0x0, 0x0, @str='=,\x00'}, @typed={0x48, 0xa9, 0x0, 0x0, @binary="1c3d96e2d4e00b4907772a970d5ef39efe3475a907e6db9280c57cad1d97ba5b1ec0820c4f2daf7c81b6703fcf0f26b34f3783dbd73e390d4230c074001368c4564ad508"}, @generic="117b", @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0xc, 0x141, 0x0, 0x0, @u64=0x101}]}, @generic="c12561c76329a574e6e51550bdb9bb13899a"]}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xddb}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x401}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f4a152d85ffd2d7efee7f6b388d2e506e5374e9b9b0b085"}, @NL80211_ATTR_MBSSID_ELEMS={0x208, 0x133, 0x0, 0x1, [@nested={0x201, 0xae, 0x0, 0x1, [@typed={0xe8, 0x115, 0x0, 0x0, @binary="5ea750fcbe62640508241e5a6728751268c1f54bddab4dec9f2dcf55947e0a58747c49cc61901bc158cf6eb5eea0ffa1b46c68ba1bf3992a88d2f9a094b0da55e2ee4fb78a873397f84d70c1cdc9a38e35f1c01b18f64702ad49f7a4b76f90092ab4bd6a876886aaf4ad08bbba2cb235a092588e7725b9a1f165ff6ca3d2d7638689b2220fa7b377ad5e57b260945a0066bdacdcad1ca710b3e125ace906c43adb7f1fa32641e4ff5851a48ccf11afbbc4e8c858d211e5e56b434ab4eeb519c5eec0663539103f0c202ad755cbf74b369ce96aede5d474f4dd7a78ca7c7024c195b91238"}, @nested={0x4, 0xfa}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x97, 0x0, 0x0, @uid}, @nested={0x4, 0x126}, @generic="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"]}]}]}, 0x318}}, 0x10) 4.825993142s ago: executing program 4 (id=1014): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r4, 0x5220, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = socketpair$auto(0x1, 0x5, 0x3b, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) kexec_load$auto(0x5b50, 0x2, 0x0, 0xe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x318, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xba, 0x84, 0x0, 0x1, [@typed={0x4, 0x9}, @generic="c2175dcc0f1a4185e788a2773372740625105d4d8a112b18c1a46ba70dd6572264755c5c1bf6afdaebffd41566c0ffe902249451bfaeaf57f9d4", @typed={0x7, 0x13c, 0x0, 0x0, @str='=,\x00'}, @typed={0x48, 0xa9, 0x0, 0x0, @binary="1c3d96e2d4e00b4907772a970d5ef39efe3475a907e6db9280c57cad1d97ba5b1ec0820c4f2daf7c81b6703fcf0f26b34f3783dbd73e390d4230c074001368c4564ad508"}, @generic="117b", @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0xc, 0x141, 0x0, 0x0, @u64=0x101}]}, @generic="c12561c76329a574e6e51550bdb9bb13899a"]}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xddb}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x401}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f4a152d85ffd2d7efee7f6b388d2e506e5374e9b9b0b085"}, @NL80211_ATTR_MBSSID_ELEMS={0x208, 0x133, 0x0, 0x1, [@nested={0x201, 0xae, 0x0, 0x1, [@typed={0xe8, 0x115, 0x0, 0x0, @binary="5ea750fcbe62640508241e5a6728751268c1f54bddab4dec9f2dcf55947e0a58747c49cc61901bc158cf6eb5eea0ffa1b46c68ba1bf3992a88d2f9a094b0da55e2ee4fb78a873397f84d70c1cdc9a38e35f1c01b18f64702ad49f7a4b76f90092ab4bd6a876886aaf4ad08bbba2cb235a092588e7725b9a1f165ff6ca3d2d7638689b2220fa7b377ad5e57b260945a0066bdacdcad1ca710b3e125ace906c43adb7f1fa32641e4ff5851a48ccf11afbbc4e8c858d211e5e56b434ab4eeb519c5eec0663539103f0c202ad755cbf74b369ce96aede5d474f4dd7a78ca7c7024c195b91238"}, @nested={0x4, 0xfa}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x97, 0x0, 0x0, @uid}, @nested={0x4, 0x126}, @generic="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"]}]}]}, 0x318}}, 0x10) 4.356845292s ago: executing program 9 (id=1015): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000200)={0x9, 0x3, 0xfffffffd, 0x7e16, 0x9, "9c0210df35fcefe400cf718ca5ef8772c6508f61073d7a8dd50c5c2fd1bd65ece3aae595010000000300000080f10fa66b1ea2fc2642fb826e6ce0bb"}) 4.316012589s ago: executing program 6 (id=1016): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x1, 0x9, 0x7, 0x5, 0x6, 0x8, 0x7, 0x8787, 0x9, 0x9, 0xffff, 0xffffffffffff3eb9, 0x200000000001, 0xb4, 0x7ffffffffffffd, 0x8, 0x10007, 0x7, 0x100, 0x0, 0x3, 0x4, 0x203, 0x9, 0x87, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x7, 0x6, 0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x10000, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10000000000, 0x0, 0x1, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x0, 0x0, 0x0, 0xff]}, 0x81, 0x968a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x1, 0x0, 0x10) readv$auto(0x3, &(0x7f0000001100)={0x0, 0x400000000000fffe}, 0x1) r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.007278282s ago: executing program 9 (id=1017): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto_SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x48000) sendmsg$auto_TCP_METRICS_CMD_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000407000000fe00df24020008030000ffffddff"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4048) 3.601164944s ago: executing program 9 (id=1018): r0 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x100000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x701, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1a000, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) timerfd_create$auto(0x1, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2902, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 3.428799994s ago: executing program 4 (id=1019): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto(0xffffffffffffffff, 0x200, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x81) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x7, 0x98, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8000000000000002, 0x4000000000df, 0x11, 0xffffffffffffffff, 0x64b3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) accept4$auto(r1, 0x0, 0x0, 0x3) socket(0x18, 0xa, 0x1) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0xb8, 0x8, 0x0, 0x3ff) connect$auto(0x3, &(0x7f00000018c0)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r3 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r3, 0x3) r4 = bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)=@iter_create={r2, 0x100}, 0x2) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000280), r3) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1900001f1319bb3706beb5a9dfb7c9a7c0483d515da004471718373b465b139a2f33a35cffb069438b773fc36091be13ef36997ced1f69ab05bc3a2840800253da397c316924653287200e723baa3827a27090a4c005c1a71fb468cb184877779510aa56634fae139d4e8b9b2217b1c696ec89e15535753bab76e2b021bfe658a637753d2d4a10ea08e6259919e652c2b9f1d09f24fa70770586d986b926e7fc09489fb602ed571146e835d0601ee04d0cfc", @ANYRES16, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x2000c044}, 0x24040000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x83e, 0x1, 0x0, 0x2, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) 3.125889438s ago: executing program 6 (id=1020): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r4, 0x5220, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = socketpair$auto(0x1, 0x5, 0x3b, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) kexec_load$auto(0x5b50, 0x2, 0x0, 0xe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x318, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xba, 0x84, 0x0, 0x1, [@typed={0x4, 0x9}, @generic="c2175dcc0f1a4185e788a2773372740625105d4d8a112b18c1a46ba70dd6572264755c5c1bf6afdaebffd41566c0ffe902249451bfaeaf57f9d4", @typed={0x7, 0x13c, 0x0, 0x0, @str='=,\x00'}, @typed={0x48, 0xa9, 0x0, 0x0, @binary="1c3d96e2d4e00b4907772a970d5ef39efe3475a907e6db9280c57cad1d97ba5b1ec0820c4f2daf7c81b6703fcf0f26b34f3783dbd73e390d4230c074001368c4564ad508"}, @generic="117b", @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0xc, 0x141, 0x0, 0x0, @u64=0x101}]}, @generic="c12561c76329a574e6e51550bdb9bb13899a"]}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xddb}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x401}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f4a152d85ffd2d7efee7f6b388d2e506e5374e9b9b0b085"}, @NL80211_ATTR_MBSSID_ELEMS={0x208, 0x133, 0x0, 0x1, [@nested={0x201, 0xae, 0x0, 0x1, [@typed={0xe8, 0x115, 0x0, 0x0, @binary="5ea750fcbe62640508241e5a6728751268c1f54bddab4dec9f2dcf55947e0a58747c49cc61901bc158cf6eb5eea0ffa1b46c68ba1bf3992a88d2f9a094b0da55e2ee4fb78a873397f84d70c1cdc9a38e35f1c01b18f64702ad49f7a4b76f90092ab4bd6a876886aaf4ad08bbba2cb235a092588e7725b9a1f165ff6ca3d2d7638689b2220fa7b377ad5e57b260945a0066bdacdcad1ca710b3e125ace906c43adb7f1fa32641e4ff5851a48ccf11afbbc4e8c858d211e5e56b434ab4eeb519c5eec0663539103f0c202ad755cbf74b369ce96aede5d474f4dd7a78ca7c7024c195b91238"}, @nested={0x4, 0xfa}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x97, 0x0, 0x0, @uid}, @nested={0x4, 0x126}, @generic="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"]}]}]}, 0x318}}, 0x10) 2.646400095s ago: executing program 4 (id=1021): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) ioctl$auto_tracing_buffers_fops_trace(r4, 0x5220, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = socketpair$auto(0x1, 0x5, 0x3b, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) kexec_load$auto(0x5b50, 0x2, 0x0, 0xe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x318, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xba, 0x84, 0x0, 0x1, [@typed={0x4, 0x9}, @generic="c2175dcc0f1a4185e788a2773372740625105d4d8a112b18c1a46ba70dd6572264755c5c1bf6afdaebffd41566c0ffe902249451bfaeaf57f9d4", @typed={0x7, 0x13c, 0x0, 0x0, @str='=,\x00'}, @typed={0x48, 0xa9, 0x0, 0x0, @binary="1c3d96e2d4e00b4907772a970d5ef39efe3475a907e6db9280c57cad1d97ba5b1ec0820c4f2daf7c81b6703fcf0f26b34f3783dbd73e390d4230c074001368c4564ad508"}, @generic="117b", @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x4, 0xe0}, @typed={0xc, 0x141, 0x0, 0x0, @u64=0x101}]}, @generic="c12561c76329a574e6e51550bdb9bb13899a"]}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xddb}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x401}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f4a152d85ffd2d7efee7f6b388d2e506e5374e9b9b0b085"}, @NL80211_ATTR_MBSSID_ELEMS={0x208, 0x133, 0x0, 0x1, [@nested={0x201, 0xae, 0x0, 0x1, [@typed={0xe8, 0x115, 0x0, 0x0, @binary="5ea750fcbe62640508241e5a6728751268c1f54bddab4dec9f2dcf55947e0a58747c49cc61901bc158cf6eb5eea0ffa1b46c68ba1bf3992a88d2f9a094b0da55e2ee4fb78a873397f84d70c1cdc9a38e35f1c01b18f64702ad49f7a4b76f90092ab4bd6a876886aaf4ad08bbba2cb235a092588e7725b9a1f165ff6ca3d2d7638689b2220fa7b377ad5e57b260945a0066bdacdcad1ca710b3e125ace906c43adb7f1fa32641e4ff5851a48ccf11afbbc4e8c858d211e5e56b434ab4eeb519c5eec0663539103f0c202ad755cbf74b369ce96aede5d474f4dd7a78ca7c7024c195b91238"}, @nested={0x4, 0xfa}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x97, 0x0, 0x0, @uid}, @nested={0x4, 0x126}, @generic="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"]}]}]}, 0x318}}, 0x10) 2.512782283s ago: executing program 9 (id=1022): r0 = socket(0x21, 0x80000, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000280)=""/40, 0x28) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x40, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x3, 0x7, 0x3, 0x0, "b3bd0158703f66ca16dbbcd4f408f376ed818ebaa0a3dd3019f645e7eee63412"}) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x1e, 0x1, 0x0) getsockopt$auto_SO_BUF_LOCK(r3, 0x9, 0x48, 0x0, 0x0) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r4, 0x0, 0x401006, 0x4015, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x17) munlock$auto(0xf, 0x6) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000240)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8894}, 0x40) 1.811062115s ago: executing program 6 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_settime$auto(0x0, 0x5, &(0x7f00000000c0)={{0x8, 0x10004}, {0x9, 0x800000010}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000012c0), 0xffffffffffffffff) socket(0x2c, 0x3, 0x0) bind$auto(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, 0x5) sendmsg$auto_OVS_FLOW_CMD_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, r4, 0x1, 0x70fd2d, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) r5 = setfsuid$auto(0xee00) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8) r7 = setfsuid$auto(0xee01) setresuid$auto(r5, r7, r5) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="6424264d724ef4e2b77011cbcf34e30100000000000080d1a82060b16990a89791900ca53746e810cc6e3f230c126992634e77df70e42917a27c19300c39664f3fa710551868b917c6b0aacbee40a17b0c266f901600000000000000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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"], 0x3dc}, 0x1, 0x0, 0x0, 0x20048085}, 0x880) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000004900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000048c0)={&(0x7f0000004940)={0x2764, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x2748, 0x2, 0x0, 0x1, [@typed={0x14, 0x40, 0x0, 0x0, @ipv6=@private1}, @nested={0x344, 0x11a, 0x0, 0x1, [@generic, @typed={0x6, 0x3c, 0x0, 0x0, @str='^\x00'}, @typed={0xc, 0x38, 0x0, 0x0, @u64=0xfaac}, @nested={0xf1, 0x29, 0x0, 0x1, [@typed={0x6a, 0x19, 0x0, 0x0, @binary="66d33f1ab0dfe7e1e7ebb06046745753ba9e29e23aafea6d8a60a5c23da4f9fc4c1d2c319e11a5d0df51b1b9a5fe5eb06b981e517532fcd33781f7270b50ed1df991bac2990af0215ead6ea1c26c0294c075f089d1f47d24660eadfef00eb9021f55d59cce61"}, @generic="afe0df42d7f7a3b8c7459d25c03cf61528116f57dc1f4960a4cfdef934ae23dbe7efb61b803256b5fcb084e06ced150af21fdf66674a99de6d7edaa45bec2569a43c3ce7a14b619290550aefa57a66727ab49beee49b5017cc5d14be28b4843ce89fae4a7c882314b514f1b79d77bd2bef483631c1d8d66977e49bb8ebb72548bf"]}, @nested={0x10c, 0xee, 0x0, 0x1, [@nested={0x4, 0x44}, @nested={0x4, 0xfd}, @nested={0x4, 0xb1}, @generic="48901d3e65c58d70a08076beb2af318f773a3b0888622c14e68bb3b053baa50f1395d161fe8c79b45450a85a", @generic="bd53fa05a0ce0c5c5017426fc0b35f567561d895525bf43c0838f73c8bb15af9d56afc891b4057f87341d0b6ed74b0c44ae5e9cc7bbb8f73db35bf828e8b2cdd86e9139f427cb243e0253655a4edb66037f37c1199ed6d297a2ad6c7c899b245ae80425cd9186afed0a53a7f41d559a97ec4819533f3b9aafc3888569db2a190552d8e7aef73ae26fae5bf992dc17f8ffb85cffed8ebbaa606688329f809c27b0621701bf09eed61232de1bbf8166929b37d1a7130da523eaea20224702ae66b0798fe4ef299723546514266ef940276"]}, @generic="194f940150b869aff3f1c2b9b4f7e6c0e9bf0b1e88eca50af31683a6f6eba8893d188debdac818b1451851d6750db2f09cc1e10dd75558733492b7a1eda6aa5835732f9032f34ea895474225c21f09a9afafda321a32ec751fe5597b2d392e153ca3159f", @generic="92458f15fc9e8fcbd96bfa0bf98634b58a5e645f7e101eef309aabd49ae8d05f950e150da6943e7e9b822e9f6ab3a7bb46bd18545b7f326b921b8953a64208e141d136f44f453176123691a1a0f1509b3ad861cc4c43b68b5ecb8b45434563690bbbb33d1f60b6ed8f063bd95d1d7fda7ce92f681b2b623bd00555acbc0b4e3ad3bbc416d9e7beae6dc2f38a103492797a1a8be66e0b79038e8757d097680fc304522a2a20b479c715af95d8b81505cd5b6790697fe5a33f1cf1ab97e287ffd140c2decea8eeb5f1"]}, @typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x58d}, @generic="e6ce17213498300a37ea4a52a1942fa0ad327d1d94781f00ff49c915fb9d70d301a0211dafeba699837e1f8e546c3a8253cdf8c4f6a8f1491ddc3d5c34bea88fbdf8f16c23711dd7ce0cf72b3a85a2503d6715a81b4a8163655db5de70bbb07212490ac9300b178dd0027f6de4aedf10443c0a6ccd97682a40c0c1728fe92efe7622628671227aba7cabfbb2d5d7701e2de10b731fb5294441ebc29710d0a6a30b0dab06993e76f6eb6393da318860473f62005fe73716d199d0d0defdf4fd1e5a2296c82c29decaa8b43ae23837843d5838026429b6971e1b4274579f38fb637f5a76d6746532", @nested={0x11d0, 0x6e, 0x0, 0x1, [@nested={0x4, 0x4}, @nested={0x11c0, 0xf0, 0x0, 0x1, [@generic="98224b98090454359ab2c198faf09d6ad1649e9442207afe68c6c28fd2430184cf371f4f5ba8d9e49ba6af5c93b635c29041518aa15323c2823854a3abce008d5852204e5ca2e1e6715a1cb85983b0edfc8cebc31709a884bfec8477e63be79a73d88a6697a73f59163f938350e59a73c28a8fcb235c2f7d91051c1cde1cc0ec058611c661227fdbc8185e4adfeb86333ea2acb17c98ea50206bf3a7b931faa35bb98166af25e6188cc297afaa78057ba5ced6fbe63c4c24947d3a8997", @generic="6718bf2c1366d1451a0a6fb974e9faecb1b4823c8f3195d142934eb0f91e8d6482bbb6fe5be20d0e90d66db1d99ad5422d7e14d8799e80163a69755be81a1f90436dda402768953c31f374adbda2e9192fcd699cda6ff4e838104e39282156018321f9a0e5fb8a29f159897b44ca2ac16e8e433dd7474de3d7b22955527f5ebf00a8cf3c64696cd5089b8a2a19b880f02a19342d26b1fa541b0412bda5002d09226fbb7bf50b58", @typed={0x12, 0x79, 0x0, 0x0, @binary="b18a13afaf66a02f3f9224c2c221"}, @typed={0x8, 0xde, 0x0, 0x0, @ipv4=@multicast2}, @generic="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", @generic="285a0f7a7a72f53cd382b4c85b98e4413357054088453fd43e17022defbcd83defe595b427b1eaf28ce002b868a735cc560c80f10e4229dfaa1f9194"]}, @typed={0x8, 0xf8, 0x0, 0x0, @fd=r3}]}, @typed={0xd, 0xf6, 0x0, 0x0, @str='/dev/kvm\x00'}, @nested={0x100c, 0xc3, 0x0, 0x1, [@nested={0x4, 0x32}, @nested={0x4, 0x131}, @generic="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"]}, @generic="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"]}]}, 0x2764}, 0x1, 0x0, 0x0, 0x12}, 0x4000000) close_range$auto(0x2, 0xffffffffffffffff, 0x200800) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ptrace$auto_PTRACE_SETREGS(0xd, 0x0, 0x7, 0x14000000000) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000580), r0) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000002500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000024c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="a0080000", @ANYRES16=r9, @ANYBLOB="000126bd7000fbdbdf251b0000000600b500000000007d117d800800cb00", @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="62c6616b2a9e23fe82e0b833197c6df39b6fe5446f09c91618e44227ba04d6e13590c68d282d35aa45bd56deeb5f7f9d05de2d94351f3f6339b5e9e93599e6b4794a2e2971d29dbc12df9aca78651128e3de70cce1d94077579cf972758183db1f03b2d4d24591af8e1704d23fbc4203dea0e76547c27db9fd40abceeb8475512f6401c3149ec794cefd7f52b4be06ba4823ffcf9adb4212cee22070033ee94bc6db5ceb8ccf13336f3323b34992ce9bf415a8556dd4b85ef4b65750b814002300ff0100000000000000000000000000010000000004006c00"], 0x11a0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) sendmsg$auto_NL80211_CMD_SET_BEACON(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000328bd7000ffdbdf250e0000131f00fe0027d6d06b53a82a60a0760207b38058608e314a9c1a2de51118c8f1009d0819ce2670578e4ddd2a1631f24423ebc50e7c9c5bfc928d07e61153c7cb6710b506e12629b63dd3ed3a023cf4105d16a81dd96ff6fa1c1a398f57db41b119a66ae07b132e537b1f2590c63aa7c34904b1b96a29e8bdfec9f20d5fb48b7e28829b11280a17b39d618b01ee4d101df74ed4d0ae5b5599104f9d41b562bcd74b426e08af"], 0x34}, 0x1, 0x0, 0x0, 0x404c840}, 0x2000c800) pwrite64$auto(r6, &(0x7f00000002c0)=':\x00', 0x2, 0xa) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) r10 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto(0x3, 0xae41, r10) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [{0x277, 0x3}]}) 1.479554407s ago: executing program 4 (id=1024): mmap$auto(0x500, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = open(0x0, 0x22240, 0x154) bpf$auto(0x5, &(0x7f0000000100)=@iter_create={r0, 0x5d62}, 0x103) 1.471034242s ago: executing program 6 (id=1025): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001140)=""/4093, 0xffd) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) 1.182101628s ago: executing program 4 (id=1026): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) pwrite64$auto(r1, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99?\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xad\x83\x13\x82\xdfT\x916;CL\"\x81\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2SZ\xf6\x8d\xdb\xcb\r\xcaN_\xa6h\xe2\xf9*w_\x84\xb8\x1aY>%:\xad9\xb8\x87\xfc\x85\x90\xfaB\xb6\xe3I\x18$\x1f\xc1YG\x94\xec\x82\xb7b[8n(\xd1Y\a\x04w\xd53\xce\xee\xdbw\xb0\xd4\xae\x0f\xce\x8e+\xaa\xcf\x86\xcd@~\xe0', 0x638, 0x3) ioctl$auto_TCFLSH2(r0, 0x540b, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0xa00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) mbind$auto(0x2000, 0x800000100000004, 0x100000000, 0x0, 0x1003, 0x2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x20, r4, 0x27c9d9d5b13b6c03, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x2}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) ioctl$auto_SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f00000000c0)="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") connect$auto(r0, &(0x7f0000000040)=@l2={0x1f, 0x401, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x2}, 0x7e) 408.361413ms ago: executing program 6 (id=1027): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0xa000, 0x800000000000007f, 0x1ff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) seccomp$auto(0x3, 0x0, 0x0) 0s ago: executing program 6 (id=1028): msgsnd$auto(0x100000, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xc0680, 0x0) r1 = setfsgid$auto(0xee01) quotactl_fd$auto(r0, 0x401, r1, &(0x7f00000001c0)="d225e2ba7e813f00c536c91ac36ddd2acb3ec90a4225ec33b5dbc866d2cc43b0988c9652ef8af38044942adb846922d4211049b691323def2453b898fef74e6a3bd6ba2a103dffb81da2f5953cdb2a90672f4cfbc75668f457c202b9d3697ce6eb880a0cfc8fe749631a81917a6bcaf412c98a8e15b709c6f46d9996be07b213876b7a87beedc62c4b001bd35964d83ab1aaa5a6a4276f284a2d0f3635d537d16920fe9be941fbc0f6878dfaa4601d44ca26c2e3c53a7f848f1aa8e8b1577971922cb7dde7c98a8dfc3c0a8444a8e4c144c3e92381908e2a534f9c75cc02d8bf481c2d7d0654c780e49e23b35567") ioctl$auto_SOUND_MIXER_WRITE_RECSRC2(r0, 0xc0044dff, &(0x7f00000005c0)="07d5") r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x303, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) getdents64$auto(r2, &(0x7f0000000140)={0x3, 0xfffffffffffffff8, 0x4b, 0x5, "fa4856f13df8a6a53a85d01df327976561755d7fa1e9ee5ee8ce69d1da7f18deda7123bb21a62f2b7c7514eace0358bc152fa84ead757bfc3979a967fe381bb61abbf3d6c379066d1cb2e103f890d48b6d29fd"}, 0x30c7259d) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0x100000001, 0xeb1, 0x401, 0xffffffffffffffff) eventfd2$auto(0x7, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sysfs$auto(0x2, 0x49, 0x0) r3 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80102, 0x0) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f0000002200)={@sival_int=0x3, @inferred=r3, 0x5, @_sigev_thread={&(0x7f0000000140)=&(0x7f0000000100)=0x57, &(0x7f0000001200)="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"}}, &(0x7f0000002240)=0x9) r4 = fsopen$auto(0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000000)={0x0, 0xff, 0x4, 0xa, "124cd9ff0f4543aafbd9aa4dc48f18f29444e59ebc7d6045f8900481f394916a"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/fcloop/ctl/del_remote_port\x00', 0xa001, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r5, 0x5453, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) kernel console output (not intermixed with test programs): : 249 > 1 [ 91.032394][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.043699][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.045316][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.052190][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.063656][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.073051][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.074823][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.089760][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.092053][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.106975][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.118427][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.124715][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.127479][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.140454][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.150920][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.164529][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.174283][ T4947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.190664][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.199959][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.961026][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.968641][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.975966][ T5628] bridge_slave_0: entered allmulticast mode [ 92.984015][ T5628] bridge_slave_0: entered promiscuous mode [ 93.032586][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.040081][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.048446][ T5628] bridge_slave_1: entered allmulticast mode [ 93.055901][ T5628] bridge_slave_1: entered promiscuous mode [ 93.063591][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.070983][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.078304][ T5629] bridge_slave_0: entered allmulticast mode [ 93.085646][ T5629] bridge_slave_0: entered promiscuous mode [ 93.136692][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.143916][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.151375][ T5629] bridge_slave_1: entered allmulticast mode [ 93.158880][ T5629] bridge_slave_1: entered promiscuous mode [ 93.190131][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.198350][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.205662][ T4947] Bluetooth: hci3: command tx timeout [ 93.206242][ T5630] bridge_slave_0: entered allmulticast mode [ 93.218996][ T5630] bridge_slave_0: entered promiscuous mode [ 93.250389][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.257746][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.265134][ T5631] bridge_slave_0: entered allmulticast mode [ 93.272927][ T5631] bridge_slave_0: entered promiscuous mode [ 93.279304][ T4947] Bluetooth: hci1: command tx timeout [ 93.279312][ T50] Bluetooth: hci2: command tx timeout [ 93.289299][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.292478][ T4947] Bluetooth: hci0: command tx timeout [ 93.302038][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.310121][ T5630] bridge_slave_1: entered allmulticast mode [ 93.317899][ T5630] bridge_slave_1: entered promiscuous mode [ 93.328629][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.340883][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.350659][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.358036][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.365235][ T5631] bridge_slave_1: entered allmulticast mode [ 93.374487][ T5631] bridge_slave_1: entered promiscuous mode [ 93.396595][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.408926][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.482596][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.517478][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.530550][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.541834][ T5628] team0: Port device team_slave_0 added [ 93.550410][ T5629] team0: Port device team_slave_0 added [ 93.558760][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.583657][ T5628] team0: Port device team_slave_1 added [ 93.592053][ T5629] team0: Port device team_slave_1 added [ 93.669669][ T5630] team0: Port device team_slave_0 added [ 93.689670][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.696670][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.722713][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.738043][ T5631] team0: Port device team_slave_0 added [ 93.745907][ T5630] team0: Port device team_slave_1 added [ 93.752549][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.759611][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.786155][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.811987][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.819581][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.846229][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.862948][ T5631] team0: Port device team_slave_1 added [ 93.893377][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.900691][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.927311][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.979418][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.986469][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.012769][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.025769][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.032875][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.059290][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.071459][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.080262][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.106360][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.119089][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.126092][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.152098][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.212927][ T5629] hsr_slave_0: entered promiscuous mode [ 94.219944][ T5629] hsr_slave_1: entered promiscuous mode [ 94.260114][ T5628] hsr_slave_0: entered promiscuous mode [ 94.266794][ T5628] hsr_slave_1: entered promiscuous mode [ 94.273490][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 94.279629][ T5628] Cannot create hsr debugfs directory [ 94.359130][ T5630] hsr_slave_0: entered promiscuous mode [ 94.365611][ T5630] hsr_slave_1: entered promiscuous mode [ 94.372068][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 94.377944][ T5630] Cannot create hsr debugfs directory [ 94.390890][ T5631] hsr_slave_0: entered promiscuous mode [ 94.397884][ T5631] hsr_slave_1: entered promiscuous mode [ 94.404172][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 94.410295][ T5631] Cannot create hsr debugfs directory [ 94.929630][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.950378][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.960550][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.974828][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.983276][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.998790][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.006861][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.017115][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.106372][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.123893][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.132367][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.143392][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.151593][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.164436][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.173118][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.184619][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.288688][ T4947] Bluetooth: hci3: command tx timeout [ 95.296638][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.310003][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.331309][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.341844][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.356515][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.364841][ T4947] Bluetooth: hci0: command tx timeout [ 95.369236][ T50] Bluetooth: hci1: command tx timeout [ 95.371150][ T5643] Bluetooth: hci2: command tx timeout [ 95.389989][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.399812][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.410691][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.508972][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.521235][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.538660][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.549979][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.558910][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.572376][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.582422][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.594978][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.699162][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.752235][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.764055][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.786822][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.794580][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.834495][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.841704][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.875766][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.907652][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.914892][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.952574][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.959779][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.980499][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.023638][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.072632][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.103468][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.121986][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.129320][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.151091][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.158290][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.200838][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.208103][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.239289][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.246574][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.235847][ T24] cfg80211: failed to load regulatory.db [ 97.325580][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.360174][ T5643] Bluetooth: hci3: command tx timeout [ 97.418886][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.438263][ T5643] Bluetooth: hci0: command tx timeout [ 97.439198][ T50] Bluetooth: hci2: command tx timeout [ 97.449493][ T4947] Bluetooth: hci1: command tx timeout [ 97.639776][ T5629] veth0_vlan: entered promiscuous mode [ 97.694769][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.710873][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.718526][ T5628] veth0_vlan: entered promiscuous mode [ 97.729590][ T5629] veth1_vlan: entered promiscuous mode [ 97.769008][ T5628] veth1_vlan: entered promiscuous mode [ 97.858568][ T5631] veth0_vlan: entered promiscuous mode [ 97.867104][ T5629] veth0_macvtap: entered promiscuous mode [ 97.906685][ T5629] veth1_macvtap: entered promiscuous mode [ 97.915097][ T5631] veth1_vlan: entered promiscuous mode [ 97.926307][ T5630] veth0_vlan: entered promiscuous mode [ 97.950204][ T5628] veth0_macvtap: entered promiscuous mode [ 97.961185][ T5630] veth1_vlan: entered promiscuous mode [ 97.976848][ T5628] veth1_macvtap: entered promiscuous mode [ 98.015872][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.045184][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.054929][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.095344][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.108593][ T1125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.119388][ T1125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.135544][ T5631] veth0_macvtap: entered promiscuous mode [ 98.147115][ T1125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.156598][ T1125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.171825][ T5631] veth1_macvtap: entered promiscuous mode [ 98.180364][ T1125] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.190985][ T1125] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.200949][ T3387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.211797][ T5630] veth0_macvtap: entered promiscuous mode [ 98.222519][ T3387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.251705][ T5630] veth1_macvtap: entered promiscuous mode [ 98.346461][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.376160][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.391330][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.419985][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.453949][ T1125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.463524][ T1125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.490424][ T1125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.499777][ T1125] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.522985][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.539146][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.554505][ T1125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.566646][ T1125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.589593][ T1125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.599032][ T1125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.620585][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.630419][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.703076][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.707059][ T3387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.720203][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.733038][ T3387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.874533][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.904840][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.914768][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.082308][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.110240][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.183789][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.212882][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.249533][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.267609][ T5788] syz.0.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 99.278817][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.439111][ T4947] Bluetooth: hci3: command tx timeout [ 99.517591][ T50] Bluetooth: hci1: command tx timeout [ 99.518569][ T5643] Bluetooth: hci2: command tx timeout [ 99.523224][ T4947] Bluetooth: hci0: command tx timeout [ 99.887177][ T5797] sysfs_service_op_store: Client not running :-5: [ 100.031007][ T5801] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.681092][ T5807] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 101.036747][ T5814] process 'syz.2.8' launched './file0' with NULL argv: empty string added [ 102.810582][ T5847] Zero length message leads to an empty skb [ 104.014358][ T5859] mmap: syz.3.19 (5859) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.098084][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 105.158618][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 105.457119][ T5877] futex_wake_op: syz.0.25 tries to shift op by -2048; fix this program [ 107.436665][ T5911] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.929010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 114.178258][ T6016] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.647226][ T6075] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 119.466620][ T4947] Bluetooth: hci2: unexpected event 0x10 length: 124 > 1 [ 119.468248][ T4947] Bluetooth: hci2: hardware error 0x00 [ 121.677465][ T4947] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 123.241512][ T6149] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 123.687094][ T4947] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 124.893578][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.83'. [ 125.759180][ T5643] Bluetooth: hci1: command 0x2016 tx timeout [ 127.242359][ T6219] bond0: invalid ARP target specified [ 127.465328][ T6219] nbd: socks must be embedded in a SOCK_ITEM attr [ 127.524130][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 127.596050][ T6219] block nbd0: shutting down sockets [ 127.837414][ T5643] Bluetooth: hci1: command 0x2016 tx timeout [ 128.732592][ T6243] syz.0.94 uses obsolete (PF_INET,SOCK_PACKET) [ 129.574524][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'. [ 130.734558][ T6264] ubi0: attaching mtd0 [ 130.880268][ T6264] ubi0: scanning is finished [ 130.904874][ T6264] ubi0: empty MTD device detected [ 132.094885][ T6264] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 132.105864][ T6264] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 132.199233][ T6264] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 132.253720][ T6264] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 132.464960][ T6264] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 132.586207][ T6264] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 132.596560][ T6264] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1451239894 [ 132.633131][ T6264] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 132.786221][ T6289] ubi0: background thread "ubi_bgt0d" started, PID 6289 [ 132.805136][ T6273] ubi0: detaching mtd0 [ 132.942012][ T6273] ubi0: mtd0 is detached [ 133.044423][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.052163][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.235674][ T6328] syz.3.110 (6328) used greatest stack depth: 19720 bytes left [ 138.703107][ T6369] FAULT_INJECTION: forcing a failure. [ 138.703107][ T6369] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.720811][ T6369] CPU: 0 UID: 0 PID: 6369 Comm: syz.3.119 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.720852][ T6369] Tainted: [L]=SOFTLOCKUP [ 138.720861][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.720878][ T6369] Call Trace: [ 138.720887][ T6369] [ 138.720903][ T6369] dump_stack_lvl+0x100/0x190 [ 138.720939][ T6369] should_fail_ex.cold+0x5/0xa [ 138.720966][ T6369] ? prepare_alloc_pages+0x16d/0x5f0 [ 138.721010][ T6369] should_fail_alloc_page+0xeb/0x140 [ 138.721042][ T6369] prepare_alloc_pages+0x1f0/0x5f0 [ 138.721078][ T6369] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 138.721121][ T6369] ? __pfx_is_bpf_text_address+0x1/0x10 [ 138.721157][ T6369] ? is_bpf_text_address+0x8a/0x1a0 [ 138.721193][ T6369] ? bpf_ksym_find+0x124/0x1c0 [ 138.721219][ T6369] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 138.721257][ T6369] ? is_bpf_text_address+0x94/0x1a0 [ 138.721292][ T6369] ? kernel_text_address+0x8d/0x100 [ 138.721319][ T6369] ? __kernel_text_address+0xd/0x30 [ 138.721344][ T6369] ? unwind_get_return_address+0x59/0xa0 [ 138.721378][ T6369] ? arch_stack_walk+0xa6/0xf0 [ 138.721412][ T6369] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 138.721492][ T6369] ? stack_depot_save_flags+0x27/0x9d0 [ 138.721537][ T6369] ? stack_trace_save+0x8e/0xc0 [ 138.721575][ T6369] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.721615][ T6369] ? policy_nodemask+0xed/0x4f0 [ 138.721654][ T6369] alloc_pages_mpol+0x1fb/0x540 [ 138.721686][ T6369] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 138.721724][ T6369] alloc_pages_noprof+0x1a/0x160 [ 138.721759][ T6369] kimage_alloc_pages+0x72/0x380 [ 138.721805][ T6369] kimage_alloc_control_pages+0x157/0xa20 [ 138.721851][ T6369] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 138.721921][ T6369] do_kexec_load+0x275/0x810 [ 138.721973][ T6369] ? __pfx_do_kexec_load+0x10/0x10 [ 138.722016][ T6369] ? _copy_from_user+0x59/0xd0 [ 138.722044][ T6369] __x64_sys_kexec_load+0x1bf/0x230 [ 138.722088][ T6369] do_syscall_64+0x10b/0xf80 [ 138.722127][ T6369] ? clear_bhb_loop+0x40/0x90 [ 138.722158][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.722183][ T6369] RIP: 0033:0x7f12ee79ce59 [ 138.722203][ T6369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.722234][ T6369] RSP: 002b:00007f12ef5ba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 138.722258][ T6369] RAX: ffffffffffffffda RBX: 00007f12eea15fa0 RCX: 00007f12ee79ce59 [ 138.722275][ T6369] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 138.722290][ T6369] RBP: 00007f12ee832d6f R08: 0000000000000000 R09: 0000000000000000 [ 138.722305][ T6369] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 138.722320][ T6369] R13: 00007f12eea16038 R14: 00007f12eea15fa0 R15: 00007ffd147cce18 [ 138.722351][ T6369] [ 138.723342][ T6369] kexec: Could not allocate control_code_buffer [ 139.074010][ T6371] random: crng reseeded on system resumption [ 140.290635][ T6381] netlink: 334 bytes leftover after parsing attributes in process `syz.1.122'. [ 140.366181][ T6386] netlink: 334 bytes leftover after parsing attributes in process `syz.1.122'. [ 142.643424][ T6409] netlink: 338 bytes leftover after parsing attributes in process `syz.1.126'. [ 142.994863][ T6411] netlink: 338 bytes leftover after parsing attributes in process `syz.1.126'. [ 146.456048][ T6461] netlink: 354 bytes leftover after parsing attributes in process `syz.3.135'. [ 149.995510][ T4947] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 149.995559][ T4947] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 150.013186][ T4947] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 150.013247][ T4947] Bluetooth: hci3: Unknown advertising packet type: 0x1e [ 150.022477][ T4947] Bluetooth: hci3: Unknown advertising packet type: 0x5b [ 150.033279][ T4947] Bluetooth: hci3: Unknown advertising packet type: 0x52 [ 150.042746][ T4947] Bluetooth: hci3: Malformed LE Event: 0x0d [ 150.541538][ T29] audit: type=1400 audit(1779280114.220:2): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6511 comm="syz.1.147" [ 151.657811][ T6526] netlink: 334 bytes leftover after parsing attributes in process `syz.3.150'. [ 154.412702][ T6559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.156'. [ 156.453600][ T6587] netlink: zone id is out of range [ 156.492475][ T6587] netlink: zone id is out of range [ 156.626755][ T6587] netlink: zone id is out of range [ 156.647469][ T6587] netlink: zone id is out of range [ 156.663197][ T6587] netlink: zone id is out of range [ 156.676241][ T6587] netlink: zone id is out of range [ 156.713094][ T6587] netlink: zone id is out of range [ 156.790797][ T6587] netlink: zone id is out of range [ 156.822161][ T6587] netlink: zone id is out of range [ 157.102950][ T6587] netlink: zone id is out of range [ 162.422575][ T6660] warning: `syz.3.170' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 170.977870][ T6771] tc_dump_action: action bad kind [ 172.143273][ T6776] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.183229][ T6776] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 172.312409][ T6776] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 172.403603][ T6776] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.450556][ T6776] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.581851][ T6776] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.628857][ T6776] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.668633][ T6776] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 172.723326][ T6776] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 173.357491][ T4947] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.580081][ T6797] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 174.477657][ T4947] Bluetooth: hci1: command 0x2016 tx timeout [ 174.639598][ T4947] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.437797][ T4947] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.558806][ T4947] Bluetooth: hci1: command 0x2016 tx timeout [ 176.719778][ T4947] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.518089][ T4947] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.075094][ T6847] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 178.647573][ T4947] Bluetooth: hci1: command 0x2016 tx timeout [ 178.797388][ T4947] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.449267][ T6886] FAULT_INJECTION: forcing a failure. [ 181.449267][ T6886] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 181.482305][ T6886] CPU: 1 UID: 0 PID: 6886 Comm: syz.2.215 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.482359][ T6886] Tainted: [L]=SOFTLOCKUP [ 181.482370][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.482390][ T6886] Call Trace: [ 181.482402][ T6886] [ 181.482417][ T6886] dump_stack_lvl+0x100/0x190 [ 181.482472][ T6886] should_fail_ex.cold+0x5/0xa [ 181.482526][ T6886] ? prepare_alloc_pages+0x16d/0x5f0 [ 181.482573][ T6886] should_fail_alloc_page+0xeb/0x140 [ 181.484021][ T6886] prepare_alloc_pages+0x1f0/0x5f0 [ 181.484071][ T6886] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 181.484127][ T6886] ? __pfx_is_bpf_text_address+0x1/0x10 [ 181.484176][ T6886] ? is_bpf_text_address+0x8a/0x1a0 [ 181.484223][ T6886] ? bpf_ksym_find+0x124/0x1c0 [ 181.484259][ T6886] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 181.484307][ T6886] ? is_bpf_text_address+0x94/0x1a0 [ 181.484355][ T6886] ? kernel_text_address+0x8d/0x100 [ 181.484391][ T6886] ? __kernel_text_address+0xd/0x30 [ 181.484425][ T6886] ? unwind_get_return_address+0x59/0xa0 [ 181.484472][ T6886] ? arch_stack_walk+0xa6/0xf0 [ 181.484514][ T6886] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 181.484592][ T6886] ? stack_depot_save_flags+0x27/0x9d0 [ 181.484634][ T6886] ? stack_trace_save+0x8e/0xc0 [ 181.484686][ T6886] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.484740][ T6886] ? policy_nodemask+0xed/0x4f0 [ 181.484783][ T6886] alloc_pages_mpol+0x1fb/0x540 [ 181.484824][ T6886] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 181.484886][ T6886] alloc_pages_noprof+0x1a/0x160 [ 181.484933][ T6886] kimage_alloc_pages+0x72/0x380 [ 181.484987][ T6886] kimage_alloc_control_pages+0x157/0xa20 [ 181.485049][ T6886] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 181.485113][ T6886] do_kexec_load+0x275/0x810 [ 181.485172][ T6886] ? __pfx_do_kexec_load+0x10/0x10 [ 181.485231][ T6886] ? _copy_from_user+0x59/0xd0 [ 181.485271][ T6886] __x64_sys_kexec_load+0x1bf/0x230 [ 181.485330][ T6886] do_syscall_64+0x10b/0xf80 [ 181.485383][ T6886] ? clear_bhb_loop+0x40/0x90 [ 181.485427][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.485461][ T6886] RIP: 0033:0x7f9851d9ce59 [ 181.485505][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.485539][ T6886] RSP: 002b:00007f9852cf9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 181.485570][ T6886] RAX: ffffffffffffffda RBX: 00007f9852015fa0 RCX: 00007f9851d9ce59 [ 181.485592][ T6886] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 181.485610][ T6886] RBP: 00007f9851e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 181.485629][ T6886] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 181.485648][ T6886] R13: 00007f9852016038 R14: 00007f9852015fa0 R15: 00007fff0c271008 [ 181.485698][ T6886] [ 181.909229][ T6886] kexec: Could not allocate control_code_buffer [ 181.960206][ T6886] random: crng reseeded on system resumption [ 186.767174][ T6939] FAULT_INJECTION: forcing a failure. [ 186.767174][ T6939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 186.826352][ T6939] CPU: 0 UID: 0 PID: 6939 Comm: syz.1.228 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.826408][ T6939] Tainted: [L]=SOFTLOCKUP [ 186.826421][ T6939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.826441][ T6939] Call Trace: [ 186.826452][ T6939] [ 186.826465][ T6939] dump_stack_lvl+0x100/0x190 [ 186.826509][ T6939] should_fail_ex.cold+0x5/0xa [ 186.826548][ T6939] ? prepare_alloc_pages+0x16d/0x5f0 [ 186.826593][ T6939] should_fail_alloc_page+0xeb/0x140 [ 186.826638][ T6939] prepare_alloc_pages+0x1f0/0x5f0 [ 186.826689][ T6939] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 186.826749][ T6939] ? lock_acquire+0x1b1/0x370 [ 186.826781][ T6939] ? find_held_lock+0x2b/0x80 [ 186.826825][ T6939] ? clockevents_program_event+0x23e/0x820 [ 186.826864][ T6939] ? clockevents_program_event+0x23e/0x820 [ 186.826904][ T6939] ? is_bpf_text_address+0x94/0x1a0 [ 186.826959][ T6939] ? ktime_get+0x9f/0x320 [ 186.827015][ T6939] ? ktime_get+0x1a4/0x320 [ 186.827067][ T6939] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 186.827123][ T6939] ? lapic_next_event+0x10/0x20 [ 186.827166][ T6939] ? clockevents_program_event+0x1ef/0x820 [ 186.827219][ T6939] ? __pfx_clockevents_program_event+0x10/0x10 [ 186.827262][ T6939] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 186.827305][ T6939] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 186.827355][ T6939] ? do_raw_spin_unlock+0x145/0x1e0 [ 186.828314][ T6939] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.828372][ T6939] ? policy_nodemask+0xed/0x4f0 [ 186.828414][ T6939] alloc_pages_mpol+0x1fb/0x540 [ 186.828641][ T6939] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 186.828692][ T6939] alloc_pages_noprof+0x1a/0x160 [ 186.828752][ T6939] kimage_alloc_pages+0x72/0x380 [ 186.828807][ T6939] kimage_alloc_control_pages+0x157/0xa20 [ 186.828868][ T6939] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 186.828931][ T6939] do_kexec_load+0x275/0x810 [ 186.828991][ T6939] ? __pfx_do_kexec_load+0x10/0x10 [ 186.829050][ T6939] ? _copy_from_user+0x59/0xd0 [ 186.829090][ T6939] __x64_sys_kexec_load+0x1bf/0x230 [ 186.829159][ T6939] do_syscall_64+0x10b/0xf80 [ 186.829213][ T6939] ? clear_bhb_loop+0x40/0x90 [ 186.829255][ T6939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.829291][ T6939] RIP: 0033:0x7f90cc59ce59 [ 186.829319][ T6939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.829353][ T6939] RSP: 002b:00007f90cd4be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 186.829381][ T6939] RAX: ffffffffffffffda RBX: 00007f90cc815fa0 RCX: 00007f90cc59ce59 [ 186.829404][ T6939] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 186.829425][ T6939] RBP: 00007f90cc632d6f R08: 0000000000000000 R09: 0000000000000000 [ 186.829445][ T6939] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 186.829465][ T6939] R13: 00007f90cc816038 R14: 00007f90cc815fa0 R15: 00007ffc899d8c48 [ 186.829508][ T6939] [ 187.348848][ T6939] kexec: Could not allocate control_code_buffer [ 187.436603][ T6939] random: crng reseeded on system resumption [ 187.544237][ T6949] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 192.996497][ T4947] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 194.490309][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.501125][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.040368][ T4947] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.922737][ T7046] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 196.821775][ T7053] netlink: 354 bytes leftover after parsing attributes in process `syz.0.248'. [ 197.121232][ T4947] Bluetooth: hci3: command 0x0c1a tx timeout [ 199.445698][ T7088] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 201.667890][ T7106] netlink: 338 bytes leftover after parsing attributes in process `syz.3.264'. [ 201.740545][ T7106] netlink: 338 bytes leftover after parsing attributes in process `syz.3.264'. [ 205.421770][ T7149] netlink: 338 bytes leftover after parsing attributes in process `syz.0.282'. [ 208.100034][ T7172] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 208.619413][ T7184] sysfs_service_op_store: Client not running :-5: [ 209.519447][ T7203] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 211.177282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 214.220369][ T7250] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 220.028300][ T7318] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 222.643032][ T7348] netlink: 338 bytes leftover after parsing attributes in process `syz.3.322'. [ 223.547797][ T7361] netlink: 338 bytes leftover after parsing attributes in process `syz.2.326'. [ 224.380367][ T7374] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 225.179152][ T7380] netlink: 338 bytes leftover after parsing attributes in process `syz.0.330'. [ 225.346497][ T7386] netlink: 338 bytes leftover after parsing attributes in process `syz.2.339'. [ 225.528508][ T7381] netlink: 338 bytes leftover after parsing attributes in process `syz.0.330'. [ 225.618744][ T7384] netlink: 338 bytes leftover after parsing attributes in process `syz.2.339'. [ 226.546666][ T7398] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=4294967104 (137438947328 ns) > initial count (6624 ns). Using initial count to start timer. [ 227.382443][ T7410] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 228.881859][ T7431] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 229.412980][ T7438] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 230.134975][ T7446] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 230.908142][ T7457] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 231.184393][ T7463] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 231.330645][ T7461] netlink: 338 bytes leftover after parsing attributes in process `syz.1.349'. [ 231.723203][ T7461] netlink: 338 bytes leftover after parsing attributes in process `syz.1.349'. [ 231.891916][ T7481] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input14 [ 233.342759][ T7497] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input16 [ 233.454675][ T7494] netlink: 338 bytes leftover after parsing attributes in process `syz.0.355'. [ 233.531638][ T7494] netlink: 338 bytes leftover after parsing attributes in process `syz.0.355'. [ 234.188379][ T7521] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input17 [ 234.245623][ T7522] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input18 [ 235.022557][ T7530] ubi0: attaching mtd0 [ 235.061076][ T7530] ubi0: scanning is finished [ 235.088655][ T7530] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 235.419009][ T7541] netlink: 338 bytes leftover after parsing attributes in process `syz.1.365'. [ 235.497464][ T7541] netlink: 338 bytes leftover after parsing attributes in process `syz.1.365'. [ 235.604795][ T7530] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 236.183359][ T7551] netlink: 338 bytes leftover after parsing attributes in process `syz.0.367'. [ 236.256688][ T7551] netlink: 338 bytes leftover after parsing attributes in process `syz.0.367'. [ 238.259392][ T7571] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 238.982494][ T7577] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 239.441932][ T7594] FAULT_INJECTION: forcing a failure. [ 239.441932][ T7594] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 239.532721][ T7594] CPU: 0 UID: 0 PID: 7594 Comm: syz.2.374 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.532771][ T7594] Tainted: [L]=SOFTLOCKUP [ 239.532782][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.532812][ T7594] Call Trace: [ 239.532823][ T7594] [ 239.532834][ T7594] dump_stack_lvl+0x100/0x190 [ 239.532874][ T7594] should_fail_ex.cold+0x5/0xa [ 239.532914][ T7594] _copy_from_user+0x2e/0xd0 [ 239.532949][ T7594] core_sys_select+0x472/0xbb0 [ 239.532996][ T7594] ? __pfx_core_sys_select+0x10/0x10 [ 239.533033][ T7594] ? get_pid_task+0xfc/0x250 [ 239.533090][ T7594] ? get_pid_task+0x106/0x250 [ 239.533166][ T7594] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 239.533203][ T7594] ? kernel_write+0x663/0x6c0 [ 239.533239][ T7594] ? __fget_files+0x215/0x3d0 [ 239.533280][ T7594] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 239.533318][ T7594] kern_select+0x1d0/0x280 [ 239.533359][ T7594] ? __pfx_kern_select+0x10/0x10 [ 239.533401][ T7594] ? __pfx_ksys_write+0x10/0x10 [ 239.533455][ T7594] __x64_sys_select+0xbd/0x160 [ 239.533491][ T7594] ? do_syscall_64+0x90/0xf80 [ 239.533540][ T7594] ? lockdep_hardirqs_on+0x78/0x100 [ 239.533588][ T7594] do_syscall_64+0x10b/0xf80 [ 239.533638][ T7594] ? clear_bhb_loop+0x40/0x90 [ 239.533677][ T7594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.533710][ T7594] RIP: 0033:0x7f9851d9ce59 [ 239.533736][ T7594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.533767][ T7594] RSP: 002b:00007f9852c96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 239.533797][ T7594] RAX: ffffffffffffffda RBX: 00007f9852016270 RCX: 00007f9851d9ce59 [ 239.533818][ T7594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 239.533836][ T7594] RBP: 00007f9852c96090 R08: 0000000000000000 R09: 0000000000000000 [ 239.533855][ T7594] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 239.533875][ T7594] R13: 00007f9852016308 R14: 00007f9852016270 R15: 00007fff0c271008 [ 239.533917][ T7594] [ 239.788594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 240.076753][ T7580] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input19 [ 241.720142][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 242.184463][ T7626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.381'. [ 242.237486][ T7604] netlink: 178 bytes leftover after parsing attributes in process `syz.1.377'. [ 243.904102][ T7639] netlink: 338 bytes leftover after parsing attributes in process `syz.0.385'. [ 243.954915][ T7639] netlink: 338 bytes leftover after parsing attributes in process `syz.0.385'. [ 245.002259][ T7661] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 245.433523][ T7670] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 245.490344][ T7672] netlink: 322 bytes leftover after parsing attributes in process `syz.1.391'. [ 246.388876][ T7676] netlink: 338 bytes leftover after parsing attributes in process `syz.1.392'. [ 246.753616][ T7678] netlink: 338 bytes leftover after parsing attributes in process `syz.1.392'. [ 247.781236][ C0] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0ee5a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 247.806577][ C0] Call Trace: [ 247.812964][ C0] [ 247.818120][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 247.832534][ C0] ? sched_clock+0x38/0x60 [ 247.838069][ C0] ? sched_clock_cpu+0x6c/0x570 [ 247.846456][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 247.853111][ C0] mce_cpu_restart+0xd5/0x1f0 [ 247.862847][ C0] __flush_smp_call_function_queue+0x281/0x960 [ 247.873471][ C0] __sysvec_call_function_single+0x83/0x440 [ 247.881814][ C0] sysvec_call_function_single+0x9e/0xc0 [ 247.897240][ C0] [ 247.901468][ C0] [ 247.905948][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 247.916359][ C0] RIP: 0010:write_comp_data+0x40/0x90 [ 247.925131][ C0] Code: 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 87 d4 16 00 00 85 c0 74 f1 8b 87 b0 16 00 00 <83> f8 03 75 e6 48 8b 87 b8 16 00 00 8b bf b4 16 00 00 48 8b 30 48 [ 247.958078][ C0] RSP: 0018:ffffc90003c777d0 EFLAGS: 00000246 [ 247.969207][ C0] RAX: 0000000000000002 RBX: 0000000000000007 RCX: ffffffff82b755d5 [ 247.980134][ C0] RDX: 0000000000000007 RSI: 0000000000000000 RDI: ffff88803031bd80 [ 247.992710][ C0] RBP: 0000000000000010 R08: 0000000000000005 R09: 0000000000000000 [ 248.006093][ C0] R10: 0000000000000007 R11: 0000000000000000 R12: ffffffff8cf4a3c9 [ 248.018379][ C0] R13: 000000008cf4a3bf R14: ffffffff8cf4a3d0 R15: 0000041ff8286433 [ 248.031549][ C0] ? kernfs_name_hash+0xd5/0x150 [ 248.039529][ C0] kernfs_name_hash+0xd5/0x150 [ 248.046918][ C0] kernfs_find_ns+0x117/0x600 [ 248.052941][ C0] kernfs_remove_by_name_ns+0x5f/0x120 [ 248.061219][ C0] remove_files+0x96/0x1c0 [ 248.066334][ C0] sysfs_remove_group+0x8b/0x1b0 [ 248.073159][ C0] sysfs_remove_groups+0x60/0xb0 [ 248.080668][ C0] device_remove_attrs+0x203/0x290 [ 248.087164][ C0] ? __pfx_device_remove_attrs+0x10/0x10 [ 248.093402][ C0] device_del+0x36e/0x9b0 [ 248.098851][ C0] ? __pfx_device_del+0x10/0x10 [ 248.104764][ C0] ? netdev_unregister_kobject+0x2da/0x540 [ 248.114216][ C0] unregister_netdevice_many_notify+0x179e/0x24f0 [ 248.121446][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 248.130735][ C0] ? bond_net_exit_rtnl+0xff/0x3a0 [ 248.136766][ C0] ? mutex_is_locked+0x17/0x60 [ 248.145252][ C0] ops_undo_list+0x8ff/0xab0 [ 248.151287][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 248.158002][ C0] ? ops_init+0x2fa/0x5f0 [ 248.162926][ C0] setup_net+0x1fa/0x3a0 [ 248.172061][ C0] ? __pfx_setup_net+0x10/0x10 [ 248.177791][ C0] ? mutex_init_lockdep+0xf1/0x120 [ 248.187929][ C0] copy_net_ns+0x46f/0x7c0 [ 248.193075][ C0] create_new_namespaces+0x3ea/0xac0 [ 248.200676][ C0] unshare_nsproxy_namespaces+0xf2/0x220 [ 248.208377][ C0] ksys_unshare+0x438/0xab0 [ 248.213358][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 248.222361][ C0] ? xfd_validate_state+0x129/0x190 [ 248.231121][ C0] __x64_sys_unshare+0x31/0x40 [ 248.237979][ C0] do_syscall_64+0x10b/0xf80 [ 248.245911][ C0] ? clear_bhb_loop+0x40/0x90 [ 248.255357][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.262759][ C0] RIP: 0033:0x7f70e9d9ce59 [ 248.269246][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.306607][ C0] RSP: 002b:00007f70eac09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 248.318362][ C0] RAX: ffffffffffffffda RBX: 00007f70ea016180 RCX: 00007f70e9d9ce59 [ 248.328019][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 248.337215][ C0] RBP: 00007f70e9e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 248.346593][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.356635][ C0] R13: 00007f70ea016218 R14: 00007f70ea016180 R15: 00007fffc3a793a8 [ 248.366398][ C0] [ 249.534378][ T7697] FAULT_INJECTION: forcing a failure. [ 249.534378][ T7697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.595424][ T7697] CPU: 1 UID: 0 PID: 7697 Comm: syz.0.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.595472][ T7697] Tainted: [L]=SOFTLOCKUP [ 249.595483][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.595502][ T7697] Call Trace: [ 249.595511][ T7697] [ 249.595523][ T7697] dump_stack_lvl+0x100/0x190 [ 249.595562][ T7697] should_fail_ex.cold+0x5/0xa [ 249.595600][ T7697] _copy_to_user+0x32/0xd0 [ 249.595635][ T7697] simple_read_from_buffer+0xcb/0x170 [ 249.595676][ T7697] proc_fail_nth_read+0x1af/0x230 [ 249.595727][ T7697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.595788][ T7697] ? rw_verify_area+0xce/0x6d0 [ 249.595820][ T7697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.595870][ T7697] vfs_read+0x1e4/0xb30 [ 249.595912][ T7697] ? __pfx_vfs_read+0x10/0x10 [ 249.595947][ T7697] ? __fget_files+0x215/0x3d0 [ 249.595993][ T7697] ? __fget_files+0x21f/0x3d0 [ 249.596041][ T7697] ksys_read+0x12a/0x250 [ 249.596076][ T7697] ? __pfx_ksys_read+0x10/0x10 [ 249.596115][ T7697] ? rcu_is_watching+0x12/0xc0 [ 249.596156][ T7697] do_syscall_64+0x10b/0xf80 [ 249.596206][ T7697] ? clear_bhb_loop+0x40/0x90 [ 249.596245][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.596277][ T7697] RIP: 0033:0x7f70e9d5d68e [ 249.596303][ T7697] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 249.596333][ T7697] RSP: 002b:00007f70eac4afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.596362][ T7697] RAX: ffffffffffffffda RBX: 00007f70eac4b6c0 RCX: 00007f70e9d5d68e [ 249.596383][ T7697] RDX: 000000000000000f RSI: 00007f70eac4b0a0 RDI: 0000000000000006 [ 249.596403][ T7697] RBP: 00007f70eac4b090 R08: 0000000000000000 R09: 0000000000000000 [ 249.596421][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.596468][ T7697] R13: 00007f70ea016038 R14: 00007f70ea015fa0 R15: 00007fffc3a793a8 [ 249.596510][ T7697] [ 250.455492][ T7713] FAULT_INJECTION: forcing a failure. [ 250.455492][ T7713] name failslab, interval 1, probability 0, space 0, times 1 [ 250.573040][ T7713] CPU: 0 UID: 0 PID: 7713 Comm: syz.1.401 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.573090][ T7713] Tainted: [L]=SOFTLOCKUP [ 250.573101][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.573125][ T7713] Call Trace: [ 250.573136][ T7713] [ 250.573148][ T7713] dump_stack_lvl+0x100/0x190 [ 250.573187][ T7713] should_fail_ex.cold+0x5/0xa [ 250.573228][ T7713] ? tomoyo_realpath_from_path+0xb6/0x690 [ 250.573277][ T7713] should_failslab+0xc2/0x120 [ 250.573317][ T7713] __kmalloc_noprof+0xe0/0x850 [ 250.573346][ T7713] ? kfree+0x1dd/0x6c0 [ 250.573399][ T7713] tomoyo_realpath_from_path+0xb6/0x690 [ 250.573466][ T7713] tomoyo_path_number_perm+0x23c/0x580 [ 250.573502][ T7713] ? tomoyo_path_number_perm+0x22e/0x580 [ 250.573541][ T7713] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 250.573618][ T7713] ? find_held_lock+0x2b/0x80 [ 250.573660][ T7713] ? __fget_files+0x215/0x3d0 [ 250.573695][ T7713] ? hook_file_ioctl_common+0x149/0x410 [ 250.573733][ T7713] ? __fget_files+0x215/0x3d0 [ 250.573778][ T7713] ? __fget_files+0x21f/0x3d0 [ 250.573823][ T7713] security_file_ioctl+0xd3/0x230 [ 250.573862][ T7713] __x64_sys_ioctl+0xb7/0x210 [ 250.573898][ T7713] do_syscall_64+0x10b/0xf80 [ 250.573948][ T7713] ? clear_bhb_loop+0x40/0x90 [ 250.573987][ T7713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.574020][ T7713] RIP: 0033:0x7f90cc59ce59 [ 250.574046][ T7713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.574077][ T7713] RSP: 002b:00007f90cd47c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.574106][ T7713] RAX: ffffffffffffffda RBX: 00007f90cc816180 RCX: 00007f90cc59ce59 [ 250.574128][ T7713] RDX: 0000000000000001 RSI: 0000000000004b32 RDI: 0000000000000007 [ 250.574147][ T7713] RBP: 00007f90cd47c090 R08: 0000000000000000 R09: 0000000000000000 [ 250.574166][ T7713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.574185][ T7713] R13: 00007f90cc816218 R14: 00007f90cc816180 R15: 00007ffc899d8c48 [ 250.574227][ T7713] [ 250.574241][ T7713] ERROR: Out of memory at tomoyo_realpath_from_path. [ 252.234624][ T7736] netlink: 338 bytes leftover after parsing attributes in process `syz.1.407'. [ 252.310988][ T7736] netlink: 338 bytes leftover after parsing attributes in process `syz.1.407'. [ 252.810763][ T7750] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 255.168478][ T7781] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input22 [ 255.615994][ T7787] netlink: 338 bytes leftover after parsing attributes in process `syz.2.412'. [ 255.669418][ T7787] netlink: 338 bytes leftover after parsing attributes in process `syz.2.412'. [ 255.789391][ T7788] netlink: 338 bytes leftover after parsing attributes in process `syz.1.413'. [ 255.805967][ T7794] FAULT_INJECTION: forcing a failure. [ 255.805967][ T7794] name failslab, interval 1, probability 0, space 0, times 0 [ 255.846411][ T7788] netlink: 338 bytes leftover after parsing attributes in process `syz.1.413'. [ 255.868520][ T7794] CPU: 0 UID: 0 PID: 7794 Comm: syz.0.415 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.868557][ T7794] Tainted: [L]=SOFTLOCKUP [ 255.868564][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.868581][ T7794] Call Trace: [ 255.868588][ T7794] [ 255.868597][ T7794] dump_stack_lvl+0x100/0x190 [ 255.868626][ T7794] should_fail_ex.cold+0x5/0xa [ 255.868656][ T7794] should_failslab+0xc2/0x120 [ 255.868687][ T7794] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 255.868730][ T7794] ? alloc_empty_file+0x5b/0x1c0 [ 255.868773][ T7794] alloc_empty_file+0x5b/0x1c0 [ 255.868810][ T7794] alloc_file_pseudo+0x13a/0x230 [ 255.868848][ T7794] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 255.868888][ T7794] ? alloc_fd+0x476/0x790 [ 255.868921][ T7794] sock_alloc_file+0x50/0x210 [ 255.868997][ T7794] __sys_socket+0x1c0/0x260 [ 255.869033][ T7794] ? fput+0x79/0x100 [ 255.869065][ T7794] ? __pfx___sys_socket+0x10/0x10 [ 255.869104][ T7794] ? ksys_write+0x1ac/0x250 [ 255.869130][ T7794] ? __pfx_ksys_write+0x10/0x10 [ 255.869162][ T7794] __x64_sys_socket+0x72/0xb0 [ 255.869182][ T7794] ? lockdep_hardirqs_on+0x78/0x100 [ 255.869223][ T7794] do_syscall_64+0x10b/0xf80 [ 255.869293][ T7794] ? clear_bhb_loop+0x40/0x90 [ 255.869331][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.869364][ T7794] RIP: 0033:0x7f70e9d9ce59 [ 255.869392][ T7794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.869413][ T7794] RSP: 002b:00007f70eac4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 255.869435][ T7794] RAX: ffffffffffffffda RBX: 00007f70ea015fa0 RCX: 00007f70e9d9ce59 [ 255.869449][ T7794] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 255.869463][ T7794] RBP: 00007f70eac4b090 R08: 0000000000000000 R09: 0000000000000000 [ 255.869476][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.869512][ T7794] R13: 00007f70ea016038 R14: 00007f70ea015fa0 R15: 00007fffc3a793a8 [ 255.869551][ T7794] [ 256.221678][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.243155][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.941384][ T7819] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 258.683635][ T7832] netlink: 330 bytes leftover after parsing attributes in process `syz.0.424'. [ 258.726364][ T7832] \: renamed from lo (while UP) [ 259.125508][ T7842] netlink: 338 bytes leftover after parsing attributes in process `syz.2.426'. [ 259.185545][ T7842] netlink: 338 bytes leftover after parsing attributes in process `syz.2.426'. [ 259.210195][ T7845] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input23 [ 261.101426][ T7864] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 261.229218][ T7873] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 263.380209][ T7901] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[7901] [ 263.668559][ T7867] Process accounting resumed [ 264.302665][ T7918] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input24 [ 264.910620][ T7930] FAULT_INJECTION: forcing a failure. [ 264.910620][ T7930] name failslab, interval 1, probability 0, space 0, times 0 [ 264.956658][ T7930] CPU: 0 UID: 0 PID: 7930 Comm: syz.2.444 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.956707][ T7930] Tainted: [L]=SOFTLOCKUP [ 264.956718][ T7930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.956737][ T7930] Call Trace: [ 264.956747][ T7930] [ 264.956759][ T7930] dump_stack_lvl+0x100/0x190 [ 264.956801][ T7930] should_fail_ex.cold+0x5/0xa [ 264.956864][ T7930] should_failslab+0xc2/0x120 [ 264.956901][ T7930] __kmalloc_cache_noprof+0x7a/0x6f0 [ 264.956947][ T7930] ? do_kimage_alloc_init+0x40/0x320 [ 264.957009][ T7930] do_kimage_alloc_init+0x40/0x320 [ 264.957057][ T7930] do_kexec_load+0x11b/0x810 [ 264.957112][ T7930] ? __pfx_do_kexec_load+0x10/0x10 [ 264.957167][ T7930] ? _copy_from_user+0x59/0xd0 [ 264.957208][ T7930] __x64_sys_kexec_load+0x1bf/0x230 [ 264.957262][ T7930] do_syscall_64+0x10b/0xf80 [ 264.957312][ T7930] ? clear_bhb_loop+0x40/0x90 [ 264.957350][ T7930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.957382][ T7930] RIP: 0033:0x7f9851d9ce59 [ 264.957416][ T7930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.957446][ T7930] RSP: 002b:00007f9852cb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 264.957475][ T7930] RAX: ffffffffffffffda RBX: 00007f9852016180 RCX: 00007f9851d9ce59 [ 264.957496][ T7930] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000200000000007 [ 264.957515][ T7930] RBP: 00007f9852cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 264.957533][ T7930] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 264.957550][ T7930] R13: 00007f9852016218 R14: 00007f9852016180 R15: 00007fff0c271008 [ 264.957588][ T7930] [ 264.978842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 265.629453][ T7934] netlink: 338 bytes leftover after parsing attributes in process `syz.3.445'. [ 265.765107][ T7938] netlink: 338 bytes leftover after parsing attributes in process `syz.3.445'. [ 268.613670][ T7984] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 270.374286][ T7995] netlink: 338 bytes leftover after parsing attributes in process `syz.3.457'. [ 270.640182][ T7997] netlink: 338 bytes leftover after parsing attributes in process `syz.3.457'. [ 271.349408][ T8011] FAULT_INJECTION: forcing a failure. [ 271.349408][ T8011] name failslab, interval 1, probability 0, space 0, times 0 [ 271.429145][ T8011] CPU: 0 UID: 0 PID: 8011 Comm: syz.2.461 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.429182][ T8011] Tainted: [L]=SOFTLOCKUP [ 271.429191][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 271.429205][ T8011] Call Trace: [ 271.429212][ T8011] [ 271.429221][ T8011] dump_stack_lvl+0x100/0x190 [ 271.429257][ T8011] should_fail_ex.cold+0x5/0xa [ 271.429287][ T8011] should_failslab+0xc2/0x120 [ 271.429314][ T8011] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 271.429352][ T8011] ? mm_alloc+0x1c/0xd0 [ 271.429387][ T8011] mm_alloc+0x1c/0xd0 [ 271.429416][ T8011] alloc_bprm+0x2af/0x710 [ 271.429443][ T8011] do_execveat_common.isra.0+0x19c/0x580 [ 271.429470][ T8011] ? do_getname+0x191/0x390 [ 271.429507][ T8011] __x64_sys_execve+0x93/0xd0 [ 271.429535][ T8011] do_syscall_64+0x10b/0xf80 [ 271.429616][ T8011] ? clear_bhb_loop+0x40/0x90 [ 271.429656][ T8011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.429696][ T8011] RIP: 0033:0x7f9851d9ce59 [ 271.429714][ T8011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.429736][ T8011] RSP: 002b:00007f9852cd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 271.429762][ T8011] RAX: ffffffffffffffda RBX: 00007f9852016090 RCX: 00007f9851d9ce59 [ 271.429777][ T8011] RDX: 0000200000001300 RSI: 0000000000000000 RDI: 0000200000000040 [ 271.429791][ T8011] RBP: 00007f9852cd8090 R08: 0000000000000000 R09: 0000000000000000 [ 271.429810][ T8011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.429829][ T8011] R13: 00007f9852016128 R14: 00007f9852016090 R15: 00007fff0c271008 [ 271.429858][ T8011] [ 272.451848][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 272.609439][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 273.327172][ T8026] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input25 [ 274.680559][ T8040] netlink: 338 bytes leftover after parsing attributes in process `syz.1.467'. [ 274.728197][ T8044] netlink: 338 bytes leftover after parsing attributes in process `syz.1.467'. [ 276.517534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 288.024951][ T8144] netlink: 338 bytes leftover after parsing attributes in process `syz.0.483'. [ 288.152381][ T8144] netlink: 338 bytes leftover after parsing attributes in process `syz.0.483'. [ 290.473252][ T8161] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input26 [ 291.136371][ T8170] netlink: 338 bytes leftover after parsing attributes in process `syz.0.488'. [ 291.571338][ T8169] netlink: 338 bytes leftover after parsing attributes in process `syz.0.488'. [ 291.617599][ T8174] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input27 [ 292.243745][ T8188] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input28 [ 293.107000][ T8196] netlink: 338 bytes leftover after parsing attributes in process `syz.2.493'. [ 293.421192][ T8197] netlink: 338 bytes leftover after parsing attributes in process `syz.2.493'. [ 293.704272][ T8202] Process accounting paused [ 295.916254][ T7547] syz.3.363 (7547) used greatest stack depth: 19528 bytes left [ 297.054929][ T8232] netlink: 338 bytes leftover after parsing attributes in process `syz.0.498'. [ 297.085661][ T8232] netlink: 338 bytes leftover after parsing attributes in process `syz.0.498'. [ 297.860865][ T8241] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input29 [ 299.393676][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'. [ 299.774462][ T8264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.503'. [ 300.479461][ T8269] netlink: 338 bytes leftover after parsing attributes in process `syz.3.505'. [ 300.490480][ T7555] syz.3.363 (7555) used greatest stack depth: 19392 bytes left [ 300.549008][ T8272] netlink: 338 bytes leftover after parsing attributes in process `syz.3.505'. [ 300.667763][ T8276] hub 1-0:1.0: USB hub found [ 300.679093][ T8276] hub 1-0:1.0: 1 port detected [ 301.836018][ T8286] netlink: 338 bytes leftover after parsing attributes in process `syz.2.509'. [ 301.904127][ T8286] netlink: 338 bytes leftover after parsing attributes in process `syz.2.509'. [ 302.192654][ T8292] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input30 [ 303.967046][ T8312] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input31 [ 304.320441][ T8320] netlink: 338 bytes leftover after parsing attributes in process `syz.2.514'. [ 304.365479][ T8320] netlink: 338 bytes leftover after parsing attributes in process `syz.2.514'. [ 305.150443][ T8333] netlink: 338 bytes leftover after parsing attributes in process `syz.0.519'. [ 305.418107][ T8332] netlink: 338 bytes leftover after parsing attributes in process `syz.0.519'. [ 307.893712][ T4947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.910282][ T4947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.928870][ T4947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.946983][ T4947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.972384][ T4947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.242792][ T8374] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input32 [ 308.387883][ T8361] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 308.954841][ T8386] netlink: 338 bytes leftover after parsing attributes in process `syz.2.529'. [ 309.322671][ T8384] netlink: 338 bytes leftover after parsing attributes in process `syz.2.529'. [ 309.444573][ T8389] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input33 [ 310.077804][ T4947] Bluetooth: hci4: command tx timeout [ 310.880746][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.890594][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.905375][ T8364] bridge_slave_0: entered allmulticast mode [ 310.947035][ T8364] bridge_slave_0: entered promiscuous mode [ 310.993034][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.021040][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.039802][ T8364] bridge_slave_1: entered allmulticast mode [ 311.075433][ T8364] bridge_slave_1: entered promiscuous mode [ 311.288283][ T8364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.459204][ T8364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.902675][ T8364] team0: Port device team_slave_0 added [ 312.084250][ T8364] team0: Port device team_slave_1 added [ 312.162823][ T4947] Bluetooth: hci4: command tx timeout [ 312.624840][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.634408][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.673369][ T8364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.819634][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.839114][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.898056][ T8364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.161283][ T8364] hsr_slave_0: entered promiscuous mode [ 313.173380][ T8364] hsr_slave_1: entered promiscuous mode [ 313.188974][ T8364] debugfs: 'hsr0' already exists in 'hsr' [ 313.198703][ T8364] Cannot create hsr debugfs directory [ 314.237384][ T4947] Bluetooth: hci4: command tx timeout [ 314.392192][ T8364] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 314.481993][ T8364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.523028][ T8364] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 314.589567][ T8364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.631087][ T8364] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 314.700840][ T8364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.721909][ T8364] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 314.748804][ T8364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.966208][ T8447] netlink: 338 bytes leftover after parsing attributes in process `syz.3.541'. [ 315.004072][ T8442] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input34 [ 315.052493][ T8447] netlink: 338 bytes leftover after parsing attributes in process `syz.3.541'. [ 315.130692][ T8364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.212116][ T8364] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.244806][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.254501][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.331811][ T3387] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.342441][ T3387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.874965][ T8459] netlink: 338 bytes leftover after parsing attributes in process `syz.0.542'. [ 315.910136][ T8459] netlink: 338 bytes leftover after parsing attributes in process `syz.0.542'. [ 316.319663][ T4947] Bluetooth: hci4: command tx timeout [ 317.124157][ T8485] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input35 [ 317.362552][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.371252][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.842556][ T8364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.701616][ T8500] Device name cannot be null; rc = [-22] [ 318.921930][ T8364] veth0_vlan: entered promiscuous mode [ 318.974619][ T8364] veth1_vlan: entered promiscuous mode [ 319.116806][ T8364] veth0_macvtap: entered promiscuous mode [ 319.185268][ T8364] veth1_macvtap: entered promiscuous mode [ 319.331051][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.384865][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.449281][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.479710][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.510999][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.546898][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.953321][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.006168][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.158580][ T8525] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input36 [ 320.222189][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.263423][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.239895][ T8545] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input37 [ 322.056961][ T8559] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input38 [ 322.544040][ T8568] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input39 [ 324.185746][ T8584] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input40 [ 325.996264][ T8611] netlink: 338 bytes leftover after parsing attributes in process `syz.2.568'. [ 327.294635][ T8624] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 327.712160][ T8618] Device name cannot be null; rc = [-22] [ 327.926906][ T8574] Process accounting resumed [ 328.867409][ T8632] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input41 [ 329.493738][ T8643] netlink: 338 bytes leftover after parsing attributes in process `syz.2.575'. [ 329.826665][ T8648] netlink: 338 bytes leftover after parsing attributes in process `syz.4.576'. [ 329.950724][ T8648] netlink: 338 bytes leftover after parsing attributes in process `syz.4.576'. [ 330.321984][ T8655] netlink: 338 bytes leftover after parsing attributes in process `syz.3.578'. [ 330.750935][ T8652] netlink: 338 bytes leftover after parsing attributes in process `syz.3.578'. [ 330.981664][ T8664] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input42 [ 331.205128][ T8671] netlink: 338 bytes leftover after parsing attributes in process `syz.4.580'. [ 332.434496][ T8697] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input43 [ 332.564266][ T8700] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input44 [ 333.067337][ T8685] Device name cannot be null; rc = [-22] [ 334.423044][ T8719] netlink: 338 bytes leftover after parsing attributes in process `syz.4.591'. [ 334.452492][ T8719] netlink: 338 bytes leftover after parsing attributes in process `syz.4.591'. [ 335.750615][ T8735] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input45 [ 336.146451][ T8737] netlink: 338 bytes leftover after parsing attributes in process `syz.2.600'. [ 336.235381][ T8741] netlink: 338 bytes leftover after parsing attributes in process `syz.2.600'. [ 336.360204][ T8740] netlink: 338 bytes leftover after parsing attributes in process `syz.4.592'. [ 336.912878][ T8746] netlink: 338 bytes leftover after parsing attributes in process `syz.0.594'. [ 338.065502][ T8759] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input46 [ 340.883858][ T8781] netlink: 338 bytes leftover after parsing attributes in process `syz.4.602'. [ 340.929841][ T8781] netlink: 338 bytes leftover after parsing attributes in process `syz.4.602'. [ 345.630372][ T8813] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input47 [ 347.863192][ T8831] netlink: 338 bytes leftover after parsing attributes in process `syz.2.612'. [ 349.213270][ T8843] netlink: 338 bytes leftover after parsing attributes in process `syz.0.614'. [ 349.304735][ T8847] netlink: 338 bytes leftover after parsing attributes in process `syz.0.614'. [ 357.102488][ T8934] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input50 [ 358.594084][ T8938] Process accounting paused [ 359.232615][ T8951] netlink: 338 bytes leftover after parsing attributes in process `syz.0.648'. [ 359.266768][ T8951] netlink: 338 bytes leftover after parsing attributes in process `syz.0.648'. [ 364.430550][ T8998] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input52 [ 367.776579][ T9036] netlink: 338 bytes leftover after parsing attributes in process `syz.3.662'. [ 367.878766][ T9036] netlink: 338 bytes leftover after parsing attributes in process `syz.3.662'. [ 370.276118][ T9065] netlink: 342 bytes leftover after parsing attributes in process `syz.3.670'. [ 370.860072][ T9072] netlink: 338 bytes leftover after parsing attributes in process `syz.4.672'. [ 370.883531][ T9072] netlink: 338 bytes leftover after parsing attributes in process `syz.4.672'. [ 373.142260][ T9090] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input53 [ 374.374116][ T9105] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input54 [ 378.412032][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.424583][ T5643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.440332][ T5643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.455498][ T5643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.464675][ T5643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.805915][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.814745][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.940479][ T9140] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input55 [ 379.515844][ T9154] netlink: 342 bytes leftover after parsing attributes in process `syz.4.691'. [ 379.549939][ T9154] netlink: 342 bytes leftover after parsing attributes in process `syz.4.691'. [ 379.789367][ T9131] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.800559][ T9131] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.811656][ T9131] bridge_slave_0: entered allmulticast mode [ 379.824949][ T9131] bridge_slave_0: entered promiscuous mode [ 379.841722][ T9131] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.853972][ T9131] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.875910][ T9131] bridge_slave_1: entered allmulticast mode [ 379.889563][ T9131] bridge_slave_1: entered promiscuous mode [ 379.949387][ T9131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.967531][ T9131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.042441][ T9131] team0: Port device team_slave_0 added [ 380.054306][ T9131] team0: Port device team_slave_1 added [ 380.114789][ T9131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.123319][ T9131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.172992][ T9131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.213238][ T9131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.225549][ T9131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.274839][ T9131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.358790][ T9131] hsr_slave_0: entered promiscuous mode [ 380.367989][ T9131] hsr_slave_1: entered promiscuous mode [ 380.380979][ T9131] debugfs: 'hsr0' already exists in 'hsr' [ 380.388368][ T9131] Cannot create hsr debugfs directory [ 380.557411][ T5643] Bluetooth: hci5: command tx timeout [ 381.037678][ T9131] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 381.068488][ T9131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.083810][ T9131] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 381.099170][ T9131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.116401][ T9131] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 381.152078][ T9131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 381.178811][ T9131] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 381.194640][ T9131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.355466][ T9131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.406873][ T9131] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.455633][ T3387] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.466115][ T3387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.495619][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.505056][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.433558][ T9131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.638596][ T5643] Bluetooth: hci5: command tx timeout [ 382.960444][ T9131] veth0_vlan: entered promiscuous mode [ 382.990935][ T9200] netlink: 338 bytes leftover after parsing attributes in process `syz.4.695'. [ 383.005414][ T9131] veth1_vlan: entered promiscuous mode [ 383.070947][ T9131] veth0_macvtap: entered promiscuous mode [ 383.083740][ T9131] veth1_macvtap: entered promiscuous mode [ 383.113109][ T9131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.133157][ T9131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.181098][ T1125] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.192166][ T1125] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.207591][ T1125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.220336][ T1125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.464344][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.489273][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.570438][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.584790][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.274468][ T9213] netlink: 342 bytes leftover after parsing attributes in process `syz.4.697'. [ 384.306478][ T9213] netlink: 342 bytes leftover after parsing attributes in process `syz.4.697'. [ 384.532560][ T4947] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 384.549812][ T4947] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 384.570554][ T4947] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 384.590120][ T4947] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 384.603736][ T4947] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 384.717901][ T4947] Bluetooth: hci5: command tx timeout [ 385.658818][ T9229] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 386.730283][ T4947] Bluetooth: hci6: command tx timeout [ 386.792040][ T9245] netlink: 338 bytes leftover after parsing attributes in process `syz.5.702'. [ 386.805457][ T4947] Bluetooth: hci5: command tx timeout [ 386.919746][ T9245] netlink: 338 bytes leftover after parsing attributes in process `syz.5.702'. [ 387.055247][ T9250] netlink: 338 bytes leftover after parsing attributes in process `syz.4.703'. [ 387.095723][ T9250] netlink: 338 bytes leftover after parsing attributes in process `syz.4.703'. [ 387.107552][ T9214] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.118729][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.128043][ T9214] bridge_slave_0: entered allmulticast mode [ 387.152060][ T9214] bridge_slave_0: entered promiscuous mode [ 387.169978][ T9214] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.189339][ T9214] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.200999][ T9214] bridge_slave_1: entered allmulticast mode [ 387.211846][ T9214] bridge_slave_1: entered promiscuous mode [ 387.269200][ T9214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.294742][ T9214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.364544][ T9214] team0: Port device team_slave_0 added [ 387.377659][ T9214] team0: Port device team_slave_1 added [ 387.429303][ T9214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.438256][ T9214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.487683][ T9214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.504474][ T9214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.515427][ T9214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.554137][ T9214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.734282][ T9214] hsr_slave_0: entered promiscuous mode [ 387.748273][ T9214] hsr_slave_1: entered promiscuous mode [ 387.787373][ T9214] debugfs: 'hsr0' already exists in 'hsr' [ 387.799107][ T9214] Cannot create hsr debugfs directory [ 388.239596][ T9255] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 388.384196][ T9260] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input56 [ 388.419468][ T5643] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 388.448409][ T5643] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 388.463388][ T5643] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 388.476709][ T5643] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 388.487524][ T5643] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 388.808420][ T4947] Bluetooth: hci6: command tx timeout [ 389.075595][ T9214] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 389.093696][ T9214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.105200][ T9214] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 389.119319][ T9214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.129108][ T9214] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 389.146871][ T9214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.156116][ T9214] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 389.175647][ T9214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.549826][ T9284] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input57 [ 389.745313][ T9214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.913301][ T9214] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.026895][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.039569][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.115842][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.124899][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.201084][ T9298] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input58 [ 390.420770][ T9264] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.437743][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.450708][ T9264] bridge_slave_0: entered allmulticast mode [ 390.462612][ T9264] bridge_slave_0: entered promiscuous mode [ 390.479525][ T9264] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.487774][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.495764][ T9264] bridge_slave_1: entered allmulticast mode [ 390.507289][ T9264] bridge_slave_1: entered promiscuous mode [ 390.558293][ T4947] Bluetooth: hci7: command tx timeout [ 390.677694][ T9264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.702173][ T9264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.807621][ T9312] netlink: 338 bytes leftover after parsing attributes in process `syz.4.711'. [ 390.861364][ T9264] team0: Port device team_slave_0 added [ 390.877475][ T4947] Bluetooth: hci6: command tx timeout [ 390.892499][ T9264] team0: Port device team_slave_1 added [ 391.017394][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.026184][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.065008][ T9264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.082126][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.095246][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.135155][ T9264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.184028][ T9317] netlink: 338 bytes leftover after parsing attributes in process `syz.5.712'. [ 391.284824][ T9316] netlink: 338 bytes leftover after parsing attributes in process `syz.5.712'. [ 391.312475][ T9264] hsr_slave_0: entered promiscuous mode [ 391.322750][ T9264] hsr_slave_1: entered promiscuous mode [ 391.333019][ T9264] debugfs: 'hsr0' already exists in 'hsr' [ 391.341471][ T9264] Cannot create hsr debugfs directory [ 392.608570][ T9264] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 392.637932][ T4947] Bluetooth: hci7: command tx timeout [ 392.665335][ T9264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.683166][ T9264] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 392.711046][ T9264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.739345][ T9264] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 392.790687][ T9264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.953282][ T9264] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 392.966998][ T4947] Bluetooth: hci6: command tx timeout [ 393.003694][ T9264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 393.174791][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.714'. [ 393.391438][ T9214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.511119][ T9345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.715'. [ 393.578076][ T9264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.664000][ T9264] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.728804][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.739280][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.814920][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.826581][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.380282][ T9214] veth0_vlan: entered promiscuous mode [ 394.415239][ T9214] veth1_vlan: entered promiscuous mode [ 394.590140][ T9214] veth0_macvtap: entered promiscuous mode [ 394.619525][ T9214] veth1_macvtap: entered promiscuous mode [ 394.703292][ T9214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.717472][ T4947] Bluetooth: hci7: command tx timeout [ 394.810347][ T9214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.892166][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.944315][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.981593][ T146] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.017297][ T146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.401146][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.457451][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.537084][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.561161][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.646735][ T9264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.249530][ T9375] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input59 [ 396.303974][ T9361] netlink: 178 bytes leftover after parsing attributes in process `syz.4.717'. [ 396.541548][ T9264] veth0_vlan: entered promiscuous mode [ 396.569839][ T9264] veth1_vlan: entered promiscuous mode [ 396.704897][ T9264] veth0_macvtap: entered promiscuous mode [ 396.750557][ T9264] veth1_macvtap: entered promiscuous mode [ 396.798491][ T4947] Bluetooth: hci7: command tx timeout [ 396.844104][ T9392] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input60 [ 396.859982][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.929271][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.201493][ T1125] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.229490][ T81] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.291220][ T9397] netlink: 338 bytes leftover after parsing attributes in process `syz.4.720'. [ 397.305683][ T9396] netlink: 338 bytes leftover after parsing attributes in process `syz.4.720'. [ 397.328047][ T81] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.338700][ T81] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.669118][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.713369][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.821539][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.846703][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.236056][ T9404] netlink: 338 bytes leftover after parsing attributes in process `syz.6.722'. [ 398.270612][ T9404] netlink: 338 bytes leftover after parsing attributes in process `syz.6.722'. [ 398.681202][ T9416] netlink: 338 bytes leftover after parsing attributes in process `syz.7.724'. [ 398.833973][ T9415] netlink: 338 bytes leftover after parsing attributes in process `syz.7.724'. [ 400.073840][ T9430] netlink: 338 bytes leftover after parsing attributes in process `syz.6.728'. [ 400.120046][ T9430] netlink: 338 bytes leftover after parsing attributes in process `syz.6.728'. [ 401.313122][ T9446] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 401.890786][ T9458] netlink: 338 bytes leftover after parsing attributes in process `syz.6.734'. [ 401.941042][ T9458] netlink: 338 bytes leftover after parsing attributes in process `syz.6.734'. [ 402.983881][ T9466] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 403.815944][ T9474] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input61 [ 404.394018][ T9487] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 405.554209][ T9498] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 405.760227][ T9501] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 407.999527][ T9532] netlink: 338 bytes leftover after parsing attributes in process `syz.4.753'. [ 408.015686][ T9532] netlink: 338 bytes leftover after parsing attributes in process `syz.4.753'. [ 409.470470][ T9552] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input62 [ 409.739098][ T5643] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 409.756260][ T5643] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 409.771168][ T5643] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 409.785708][ T5643] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 409.796110][ T5643] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 411.066136][ T9544] Process accounting resumed [ 411.676686][ T9555] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.701338][ T9555] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.716537][ T9555] bridge_slave_0: entered allmulticast mode [ 411.730822][ T9555] bridge_slave_0: entered promiscuous mode [ 411.783811][ T9555] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.795077][ T9555] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.822236][ T9555] bridge_slave_1: entered allmulticast mode [ 411.844520][ T9555] bridge_slave_1: entered promiscuous mode [ 411.920538][ T5643] Bluetooth: hci8: command tx timeout [ 412.215045][ T9555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.257823][ T9555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.385714][ T9555] team0: Port device team_slave_0 added [ 412.425224][ T9555] team0: Port device team_slave_1 added [ 412.669549][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.669569][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.669599][ T9555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.695630][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.695650][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.695680][ T9555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.063458][ T9555] hsr_slave_0: entered promiscuous mode [ 413.064888][ T9555] hsr_slave_1: entered promiscuous mode [ 413.065861][ T9555] debugfs: 'hsr0' already exists in 'hsr' [ 413.065894][ T9555] Cannot create hsr debugfs directory [ 413.414201][ T9605] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input63 [ 413.998022][ T5643] Bluetooth: hci8: command tx timeout [ 415.328602][ T4947] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 415.344508][ T4947] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 415.354625][ T4947] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 415.375124][ T4947] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 415.406252][ T4947] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 415.523486][ T9555] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 415.626004][ T9555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.672988][ T9555] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 415.730994][ T9555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.806963][ T9555] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 415.853215][ T9555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.869449][ T9555] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 415.898204][ T9555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.082495][ T5643] Bluetooth: hci8: command tx timeout [ 416.187049][ T9555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.276204][ T9555] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.333291][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.342124][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.405494][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.416652][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.603988][ T9641] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 416.791797][ T9642] netlink: 338 bytes leftover after parsing attributes in process `syz.4.773'. [ 416.819086][ T9642] netlink: 338 bytes leftover after parsing attributes in process `syz.4.773'. [ 416.998258][ T9650] netlink: 338 bytes leftover after parsing attributes in process `syz.6.768'. [ 417.062945][ T9650] netlink: 338 bytes leftover after parsing attributes in process `syz.6.768'. [ 417.438987][ T5643] Bluetooth: hci9: command tx timeout [ 417.952654][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.965615][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.980709][ T9621] bridge_slave_0: entered allmulticast mode [ 417.991159][ T9621] bridge_slave_0: entered promiscuous mode [ 418.014813][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.035955][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.066221][ T9621] bridge_slave_1: entered allmulticast mode [ 418.100281][ T9621] bridge_slave_1: entered promiscuous mode [ 418.166541][ T5643] Bluetooth: hci8: command tx timeout [ 418.300868][ T9555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.335852][ T9621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.386108][ T9621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.561248][ T9621] team0: Port device team_slave_0 added [ 418.611773][ T9621] team0: Port device team_slave_1 added [ 418.745916][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.768206][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.855825][ T9621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.904834][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.942689][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.986088][ T9621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.115084][ T9621] hsr_slave_0: entered promiscuous mode [ 419.135048][ T9621] hsr_slave_1: entered promiscuous mode [ 419.151018][ T9621] debugfs: 'hsr0' already exists in 'hsr' [ 419.170588][ T9621] Cannot create hsr debugfs directory [ 419.221415][ T9682] netlink: 338 bytes leftover after parsing attributes in process `syz.4.772'. [ 419.312297][ T9682] netlink: 338 bytes leftover after parsing attributes in process `syz.4.772'. [ 419.517319][ T5643] Bluetooth: hci9: command tx timeout [ 419.646276][ T9555] veth0_vlan: entered promiscuous mode [ 419.769751][ T9555] veth1_vlan: entered promiscuous mode [ 419.929460][ T9555] veth0_macvtap: entered promiscuous mode [ 419.954152][ T9555] veth1_macvtap: entered promiscuous mode [ 420.062867][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.211084][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.362894][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.383647][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.444231][ T9700] netlink: 338 bytes leftover after parsing attributes in process `syz.6.776'. [ 420.492703][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.515298][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.587648][ T9621] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 420.628811][ T9621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.668632][ T9699] netlink: 338 bytes leftover after parsing attributes in process `syz.6.776'. [ 420.764834][ T9621] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 420.817780][ T9621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.995077][ T9621] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 421.043178][ T9621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.113437][ T9621] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 421.146358][ T9621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.208669][ T9587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.228209][ T9587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.492002][ T9587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.535442][ T9587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.597727][ T5643] Bluetooth: hci9: command tx timeout [ 421.801470][ T9621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.896851][ T9621] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.942777][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.954182][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.030864][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.040072][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.485835][ T9719] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 423.543925][ T9734] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input64 [ 423.677551][ T5643] Bluetooth: hci9: command tx timeout [ 424.342480][ T9756] netlink: 338 bytes leftover after parsing attributes in process `syz.6.784'. [ 424.403318][ T9756] netlink: 338 bytes leftover after parsing attributes in process `syz.6.784'. [ 424.486388][ T9621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.605465][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.8.785'. [ 425.883189][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz.8.785'. [ 425.985287][ T9621] veth0_vlan: entered promiscuous mode [ 426.034579][ T9621] veth1_vlan: entered promiscuous mode [ 426.463274][ T9621] veth0_macvtap: entered promiscuous mode [ 426.585721][ T9621] veth1_macvtap: entered promiscuous mode [ 427.402172][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.503558][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.749542][ T35] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.804495][ T35] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.881755][ T35] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.926747][ T9798] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input65 [ 427.972423][ T3387] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.619578][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.657256][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.902186][ T9815] netlink: 342 bytes leftover after parsing attributes in process `syz.6.795'. [ 428.938103][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.992127][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.198934][ T9814] netlink: 342 bytes leftover after parsing attributes in process `syz.6.795'. [ 429.799691][ T9822] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input66 [ 430.877007][ T9844] netlink: 338 bytes leftover after parsing attributes in process `syz.8.800'. [ 431.146187][ T9842] netlink: 338 bytes leftover after parsing attributes in process `syz.8.800'. [ 431.334874][ T9848] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 432.080454][ T9557] Bluetooth: hci4: command 0x0406 tx timeout [ 432.467010][ T9862] ubi0: attaching mtd0 [ 432.523077][ T9862] ubi0: scanning is finished [ 432.552253][ T9862] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 432.954052][ T9864] netlink: 338 bytes leftover after parsing attributes in process `syz.8.803'. [ 432.985138][ T9862] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 433.027435][ T9864] netlink: 338 bytes leftover after parsing attributes in process `syz.8.803'. [ 433.040911][ T9873] netlink: 342 bytes leftover after parsing attributes in process `syz.4.805'. [ 433.587033][ T9881] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input67 [ 435.390320][ T9895] netlink: 338 bytes leftover after parsing attributes in process `syz.8.811'. [ 435.436448][ T9895] netlink: 338 bytes leftover after parsing attributes in process `syz.8.811'. [ 436.735829][ T9913] netlink: 342 bytes leftover after parsing attributes in process `syz.8.813'. [ 437.320080][ T9912] netlink: 342 bytes leftover after parsing attributes in process `syz.8.813'. [ 437.346281][ T9916] FAULT_INJECTION: forcing a failure. [ 437.346281][ T9916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.420313][ T9916] CPU: 1 UID: 0 PID: 9916 Comm: syz.9.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.420365][ T9916] Tainted: [L]=SOFTLOCKUP [ 437.420377][ T9916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.420401][ T9916] Call Trace: [ 437.420412][ T9916] [ 437.420424][ T9916] dump_stack_lvl+0x100/0x190 [ 437.420466][ T9916] should_fail_ex.cold+0x5/0xa [ 437.420511][ T9916] _copy_from_iter+0x1f4/0x1690 [ 437.420557][ T9916] ? __asan_memset+0x23/0x50 [ 437.420613][ T9916] ? __pfx__copy_from_iter+0x10/0x10 [ 437.420680][ T9916] ? __pfx___alloc_skb+0x10/0x10 [ 437.420736][ T9916] netlink_sendmsg+0x808/0xda0 [ 437.420798][ T9916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.420869][ T9916] ? __import_iovec+0x1d2/0x640 [ 437.420910][ T9916] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 437.420979][ T9916] ____sys_sendmsg+0x9e1/0xb70 [ 437.421036][ T9916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.421094][ T9916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.421145][ T9916] ? preempt_schedule_thunk+0x16/0x30 [ 437.421207][ T9916] ? try_to_wake_up+0x5f6/0x1900 [ 437.421262][ T9916] ___sys_sendmsg+0x190/0x1e0 [ 437.421320][ T9916] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.421374][ T9916] ? futex_private_hash_put+0x107/0x1c0 [ 437.421455][ T9916] __sys_sendmsg+0x170/0x220 [ 437.421499][ T9916] ? __pfx___sys_sendmsg+0x10/0x10 [ 437.421541][ T9916] ? __x64_sys_futex+0x34f/0x4d0 [ 437.421593][ T9916] ? rcu_is_watching+0x12/0xc0 [ 437.421640][ T9916] do_syscall_64+0x10b/0xf80 [ 437.421695][ T9916] ? clear_bhb_loop+0x40/0x90 [ 437.421738][ T9916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.421774][ T9916] RIP: 0033:0x7f745f19ce59 [ 437.421804][ T9916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.421837][ T9916] RSP: 002b:00007f746002f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.421879][ T9916] RAX: ffffffffffffffda RBX: 00007f745f415fa0 RCX: 00007f745f19ce59 [ 437.421902][ T9916] RDX: 0000000020040080 RSI: 0000200000004240 RDI: 0000000000000008 [ 437.421923][ T9916] RBP: 00007f745f232d6f R08: 0000000000000000 R09: 0000000000000000 [ 437.421943][ T9916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.421961][ T9916] R13: 00007f745f416038 R14: 00007f745f415fa0 R15: 00007ffcd08f4d18 [ 437.422000][ T9916] [ 438.828765][ T9934] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input68 [ 440.259263][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.271865][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.142433][ T9947] Process accounting paused [ 441.245090][ T9955] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input69 [ 441.695193][ T9962] netlink: 338 bytes leftover after parsing attributes in process `syz.4.823'. [ 441.781955][ T9962] netlink: 338 bytes leftover after parsing attributes in process `syz.4.823'. [ 443.858132][ T9989] netlink: 342 bytes leftover after parsing attributes in process `syz.6.828'. [ 445.116731][ T9985] hub 1-0:1.0: USB hub found [ 445.249277][ T9985] hub 1-0:1.0: 1 port detected [ 446.994609][T10021] netlink: 338 bytes leftover after parsing attributes in process `syz.4.835'. [ 447.110189][T10025] netlink: 338 bytes leftover after parsing attributes in process `syz.4.835'. [ 447.646576][T10028] netlink: 338 bytes leftover after parsing attributes in process `syz.9.837'. [ 448.016165][T10032] netlink: 338 bytes leftover after parsing attributes in process `syz.9.837'. [ 450.150597][T10055] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input70 [ 456.294526][T10117] netlink: 338 bytes leftover after parsing attributes in process `syz.8.858'. [ 456.790482][T10122] netlink: 338 bytes leftover after parsing attributes in process `syz.4.860'. [ 456.905850][T10122] netlink: 338 bytes leftover after parsing attributes in process `syz.4.860'. [ 461.882425][T10177] netlink: 338 bytes leftover after parsing attributes in process `syz.6.872'. [ 464.131179][T10213] ubi0: attaching mtd0 [ 464.186938][T10213] ubi0: scanning is finished [ 464.215663][T10213] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 464.579760][T10213] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 465.443634][T10225] hub 1-0:1.0: USB hub found [ 465.546704][T10225] hub 1-0:1.0: 1 port detected [ 466.566937][T10245] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input71 [ 469.727747][T10290] netlink: 338 bytes leftover after parsing attributes in process `syz.9.899'. [ 469.891664][T10290] netlink: 338 bytes leftover after parsing attributes in process `syz.9.899'. [ 470.626149][T10299] netlink: 338 bytes leftover after parsing attributes in process `syz.4.900'. [ 470.976818][T10300] netlink: 338 bytes leftover after parsing attributes in process `syz.4.900'. [ 471.092812][T10307] netlink: 330 bytes leftover after parsing attributes in process `syz.9.903'. [ 471.458570][T10311] futex_wake_op: syz.8.902 tries to shift op by -2048; fix this program [ 471.500217][T10297] Process accounting resumed [ 477.105469][T10375] netlink: 330 bytes leftover after parsing attributes in process `syz.8.920'. [ 483.377030][T10465] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 483.658297][T10474] FAULT_INJECTION: forcing a failure. [ 483.658297][T10474] name fail_futex, interval 1, probability 0, space 0, times 1 [ 483.692959][T10474] CPU: 0 UID: 0 PID: 10474 Comm: syz.9.947 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.693006][T10474] Tainted: [L]=SOFTLOCKUP [ 483.693016][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.693033][T10474] Call Trace: [ 483.693043][T10474] [ 483.693054][T10474] dump_stack_lvl+0x100/0x190 [ 483.693092][T10474] should_fail_ex.cold+0x5/0xa [ 483.693128][T10474] get_futex_key+0x295/0x1510 [ 483.693164][T10474] ? __pfx_get_futex_key+0x10/0x10 [ 483.693192][T10474] ? lock_acquire+0x1b1/0x370 [ 483.693232][T10474] futex_wake+0xea/0x530 [ 483.693281][T10474] ? __pfx_futex_wake+0x10/0x10 [ 483.693320][T10474] ? exit_mm_release+0x19/0x30 [ 483.693377][T10474] do_futex+0x32b/0x350 [ 483.693414][T10474] ? __pfx_do_futex+0x10/0x10 [ 483.693447][T10474] ? __might_fault+0xc5/0x140 [ 483.693501][T10474] mm_release+0x24a/0x2f0 [ 483.693536][T10474] do_exit+0x707/0x2af0 [ 483.693625][T10474] ? __pfx_do_exit+0x10/0x10 [ 483.693674][T10474] ? do_raw_spin_lock+0x128/0x260 [ 483.693711][T10474] ? find_held_lock+0x2b/0x80 [ 483.693754][T10474] ? get_signal+0x7e5/0x2210 [ 483.693795][T10474] do_group_exit+0xd5/0x2a0 [ 483.693841][T10474] get_signal+0x20ff/0x2210 [ 483.693884][T10474] ? __lock_acquire+0x4a5/0x2630 [ 483.693912][T10474] ? __pfx_get_signal+0x10/0x10 [ 483.693950][T10474] ? do_futex+0x192/0x350 [ 483.693983][T10474] arch_do_signal_or_restart+0x91/0x7a0 [ 483.694028][T10474] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 483.694079][T10474] ? __fget_files+0x21f/0x3d0 [ 483.694113][T10474] ? rcu_is_watching+0x12/0xc0 [ 483.694151][T10474] exit_to_user_mode_loop+0x8b/0x4f0 [ 483.694177][T10474] ? rcu_is_watching+0x12/0xc0 [ 483.694220][T10474] do_syscall_64+0x6f2/0xf80 [ 483.694269][T10474] ? clear_bhb_loop+0x40/0x90 [ 483.694306][T10474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.694339][T10474] RIP: 0033:0x7f745f19ce59 [ 483.694367][T10474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.694397][T10474] RSP: 002b:00007f746002f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 483.694427][T10474] RAX: fffffffffffffe00 RBX: 00007f745f415fa8 RCX: 00007f745f19ce59 [ 483.694449][T10474] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f745f415fa8 [ 483.694468][T10474] RBP: 00007f745f415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 483.694488][T10474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.694504][T10474] R13: 00007f745f416038 R14: 00007ffcd08f4c30 R15: 00007ffcd08f4d18 [ 483.694541][T10474] [ 487.220407][T10518] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 488.304680][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.8.970'. [ 494.597295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 495.451719][T10629] smpboot: CPU 1 is now offline [ 495.588890][T10636] FAULT_INJECTION: forcing a failure. [ 495.588890][T10636] name failslab, interval 1, probability 0, space 0, times 0 [ 495.641187][T10636] CPU: 0 UID: 0 PID: 10636 Comm: syz.4.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.641225][T10636] Tainted: [L]=SOFTLOCKUP [ 495.641232][T10636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.641247][T10636] Call Trace: [ 495.641254][T10636] [ 495.641263][T10636] dump_stack_lvl+0x100/0x190 [ 495.641293][T10636] should_fail_ex.cold+0x5/0xa [ 495.641322][T10636] should_failslab+0xc2/0x120 [ 495.641350][T10636] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 495.641392][T10636] ? __alloc_skb+0x140/0x710 [ 495.641423][T10636] __alloc_skb+0x140/0x710 [ 495.641447][T10636] ? __alloc_skb+0x5b7/0x710 [ 495.641471][T10636] ? __pfx___alloc_skb+0x10/0x10 [ 495.641506][T10636] __pskb_copy_fclone+0xf2/0xdb0 [ 495.641552][T10636] ? find_held_lock+0x2b/0x80 [ 495.641584][T10636] ? __might_fault+0xc5/0x140 [ 495.641624][T10636] tipc_msg_reassemble+0x34d/0x4f0 [ 495.641662][T10636] ? __pfx_tipc_msg_reassemble+0x10/0x10 [ 495.641697][T10636] ? __might_fault+0x111/0x140 [ 495.641738][T10636] ? lockdep_init_map_type+0x5c/0x250 [ 495.641767][T10636] tipc_mcast_xmit+0x56b/0xfc0 [ 495.641804][T10636] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 495.641835][T10636] ? skb_put+0x138/0x180 [ 495.641895][T10636] ? tipc_send_group_bcast+0x76b/0xa20 [ 495.641919][T10636] tipc_send_group_bcast+0x76b/0xa20 [ 495.641954][T10636] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 495.641983][T10636] ? __pfx_woken_wake_function+0x10/0x10 [ 495.642015][T10636] ? aa_label_sk_perm+0x194/0x5f0 [ 495.642059][T10636] __tipc_sendmsg+0x4a3/0x1ad0 [ 495.642096][T10636] ? __pfx___tipc_sendmsg+0x10/0x10 [ 495.642126][T10636] ? __lock_acquire+0x4a5/0x2630 [ 495.642147][T10636] ? __lock_acquire+0x4a5/0x2630 [ 495.642175][T10636] ? __lock_acquire+0x4a5/0x2630 [ 495.642215][T10636] ? __local_bh_enable_ip+0x9e/0x120 [ 495.642249][T10636] tipc_sendmsg+0x4f/0x70 [ 495.642279][T10636] ____sys_sendmsg+0x9e1/0xb70 [ 495.642315][T10636] ? __pfx_tipc_sendmsg+0x10/0x10 [ 495.642348][T10636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.642389][T10636] ? __pfx__kstrtoull+0x10/0x10 [ 495.642426][T10636] ___sys_sendmsg+0x190/0x1e0 [ 495.642466][T10636] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.642517][T10636] ? find_held_lock+0x2b/0x80 [ 495.642570][T10636] __sys_sendmmsg+0x205/0x430 [ 495.642603][T10636] ? __pfx___sys_sendmmsg+0x10/0x10 [ 495.642641][T10636] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 495.642675][T10636] ? fput+0x79/0x100 [ 495.642708][T10636] ? ksys_write+0x1ac/0x250 [ 495.642734][T10636] ? __pfx_ksys_write+0x10/0x10 [ 495.642766][T10636] __x64_sys_sendmmsg+0x9c/0x100 [ 495.642804][T10636] ? lockdep_hardirqs_on+0x78/0x100 [ 495.642841][T10636] do_syscall_64+0x10b/0xf80 [ 495.642878][T10636] ? clear_bhb_loop+0x40/0x90 [ 495.642908][T10636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.642932][T10636] RIP: 0033:0x7f786539ce59 [ 495.642951][T10636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.642974][T10636] RSP: 002b:00007f786621b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 495.642995][T10636] RAX: ffffffffffffffda RBX: 00007f7865616090 RCX: 00007f786539ce59 [ 495.643011][T10636] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 495.643025][T10636] RBP: 00007f786621b090 R08: 0000000000000000 R09: 0000000000000000 [ 495.643039][T10636] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.643052][T10636] R13: 00007f7865616128 R14: 00007f7865616090 R15: 00007fff9cbc35b8 [ 495.643082][T10636] [ 496.225880][T10640] device-mapper: ioctl: Invalid ioctl structure: name , dev 3000000000 [ 496.306706][T10640] FAULT_INJECTION: forcing a failure. [ 496.306706][T10640] name failslab, interval 1, probability 0, space 0, times 0 [ 496.326485][T10640] CPU: 0 UID: 0 PID: 10640 Comm: syz.6.980 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.326527][T10640] Tainted: [L]=SOFTLOCKUP [ 496.326536][T10640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 496.326551][T10640] Call Trace: [ 496.326558][T10640] [ 496.326567][T10640] dump_stack_lvl+0x100/0x190 [ 496.326600][T10640] should_fail_ex.cold+0x5/0xa [ 496.326631][T10640] should_failslab+0xc2/0x120 [ 496.326661][T10640] __kmalloc_cache_noprof+0x7a/0x6f0 [ 496.326699][T10640] ? ring_buffer_read_start+0x149/0x450 [ 496.326740][T10640] ring_buffer_read_start+0x149/0x450 [ 496.326783][T10640] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 496.326815][T10640] ? lockdep_init_map_type+0x5c/0x250 [ 496.326843][T10640] ? ring_buffer_overruns+0x14e/0x1a0 [ 496.326873][T10640] __tracing_open+0x74e/0xa80 [ 496.326905][T10640] tracing_open+0x26b/0x4d0 [ 496.326934][T10640] do_dentry_open+0x6d8/0x1660 [ 496.326965][T10640] ? __pfx_tracing_open+0x10/0x10 [ 496.326998][T10640] vfs_open+0x82/0x3f0 [ 496.327041][T10640] path_openat+0x208c/0x31a0 [ 496.327086][T10640] ? __pfx_path_openat+0x10/0x10 [ 496.327133][T10640] do_file_open+0x20e/0x430 [ 496.327168][T10640] ? __pfx_do_file_open+0x10/0x10 [ 496.327221][T10640] ? alloc_fd+0x476/0x790 [ 496.327255][T10640] ? do_getname+0x191/0x390 [ 496.327296][T10640] do_sys_openat2+0x10d/0x1e0 [ 496.327335][T10640] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.327378][T10640] ? __fget_files+0x21f/0x3d0 [ 496.327413][T10640] __x64_sys_openat+0x12d/0x210 [ 496.327461][T10640] ? __pfx___x64_sys_openat+0x10/0x10 [ 496.327507][T10640] ? rcu_is_watching+0x12/0xc0 [ 496.327542][T10640] do_syscall_64+0x10b/0xf80 [ 496.327582][T10640] ? clear_bhb_loop+0x40/0x90 [ 496.327612][T10640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.327637][T10640] RIP: 0033:0x7f4f4339ce59 [ 496.327658][T10640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.327683][T10640] RSP: 002b:00007f4f44211028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 496.327706][T10640] RAX: ffffffffffffffda RBX: 00007f4f43615fa0 RCX: 00007f4f4339ce59 [ 496.327723][T10640] RDX: 1a6b75d638828712 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 496.327739][T10640] RBP: 00007f4f43432d6f R08: 0000000000000000 R09: 0000000000000000 [ 496.327842][T10640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.327857][T10640] R13: 00007f4f43616038 R14: 00007f4f43615fa0 R15: 00007ffc2aa3cf78 [ 496.327896][T10640] [ 496.713399][T10630] mtrr: base(0xfffffff2fffffff2000) is not aligned on a size(0xfffffff2000) boundary [ 498.136442][ T5643] Bluetooth: hci9: unexpected subevent 0x01 length: 123 > 18 [ 500.293624][T10689] nbd: must specify a size in bytes for the device [ 500.736816][T10693] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 500.781276][T10695] netlink: 342 bytes leftover after parsing attributes in process `syz.9.993'. [ 501.094515][T10694] netlink: 342 bytes leftover after parsing attributes in process `syz.9.993'. [ 501.695015][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.709346][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.893975][T10705] Process accounting paused [ 503.763766][ T9557] Bluetooth: hci5: command 0x0406 tx timeout [ 503.824917][T10733] nbd: must specify a size in bytes for the device [ 506.962948][ T5643] Bluetooth: hci6: command 0x0406 tx timeout [ 507.164577][T10780] Format for adding new port is "id [perm_addr]" (uint MAC). [ 507.251112][T10783] Format for adding new port is "id [perm_addr]" (uint MAC). [ 507.445383][T10787] input: jJǸ-9%vJ86 as /devices/virtual/input/input73 [ 507.509526][T10784] Format for adding new port is "id [perm_addr]" (uint MAC). [ 507.966661][ T5643] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 507.982264][ T5643] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 507.992137][ T5643] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 508.016815][ T5643] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 508.028619][ T5643] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 508.303286][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.134505][T10805] nbd: must specify at least one socket [ 510.158138][ T5643] Bluetooth: hci7: command tx timeout [ 510.648999][T10793] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.669788][T10823] netlink: 342 bytes leftover after parsing attributes in process `syz.9.1013'. [ 510.724966][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.779303][T10793] bridge_slave_0: entered allmulticast mode [ 510.833612][T10793] bridge_slave_0: entered promiscuous mode [ 510.919192][T10793] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.950463][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.986792][T10793] bridge_slave_1: entered allmulticast mode [ 511.023663][T10793] bridge_slave_1: entered promiscuous mode [ 511.176354][T10838] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1014'. [ 511.196545][T10793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.312777][T10793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.617454][T10793] team0: Port device team_slave_0 added [ 511.704439][T10793] team0: Port device team_slave_1 added [ 511.952985][T10793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.999834][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.178637][T10793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.237826][ T5643] Bluetooth: hci7: command tx timeout [ 512.305428][T10793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.381777][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.529142][T10793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.883124][T10793] hsr_slave_0: entered promiscuous mode [ 512.941679][T10793] hsr_slave_1: entered promiscuous mode [ 512.973195][T10793] debugfs: 'hsr0' already exists in 'hsr' [ 512.996306][T10793] Cannot create hsr debugfs directory [ 513.055803][T10858] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1020'. [ 513.136255][T10858] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1020'. [ 513.382953][T10864] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1021'. [ 514.317850][ T5643] Bluetooth: hci7: command tx timeout [ 514.897298][T10793] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.511806][T10793] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.764372][ T30] INFO: task syz-executor:5628 blocked for more than 142 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 515.816607][ T30] Tainted: G L syzkaller #0 [ 515.861397][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.916613][ T30] task:syz-executor state:D stack:23000 pid:5628 tgid:5628 ppid:1 task_flags:0x400140 flags:0x00080002 [ 515.991245][ T30] Call Trace: [ 516.021443][ T30] [ 516.048645][ T30] __schedule+0x1295/0x67a0 [ 516.113700][ T30] ? __pfx___schedule+0x10/0x10 [ 516.159610][ T30] ? find_held_lock+0x2b/0x80 [ 516.221119][ T30] ? schedule+0x2bf/0x390 [ 516.259930][ T30] schedule+0xdd/0x390 [ 516.289614][ T30] schedule_preempt_disabled+0x13/0x30 [ 516.337014][ T30] __mutex_lock+0xced/0x1b10 [ 516.373248][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 516.400180][ T5643] Bluetooth: hci7: command tx timeout [ 516.413993][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 516.443087][ T30] ? net_generic+0xea/0x2a0 [ 516.480530][ T30] ? net_generic+0xea/0x2a0 [ 516.499313][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 516.538971][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 516.566624][ T30] nfsd_umount+0x3b/0x60 [ 516.599417][ T30] deactivate_locked_super+0xc1/0x1b0 [ 516.634445][ T30] deactivate_super+0xe7/0x110 [ 516.661107][ T30] cleanup_mnt+0x21f/0x450 [ 516.686779][ T30] task_work_run+0x150/0x240 [ 516.707160][ T30] ? __pfx_task_work_run+0x10/0x10 [ 516.730836][ T30] ? rcu_is_watching+0x12/0xc0 [ 516.754424][ T30] exit_to_user_mode_loop+0x107/0x4f0 [ 516.778005][ T30] ? rcu_is_watching+0x12/0xc0 [ 516.791992][ T30] do_syscall_64+0x6f2/0xf80 [ 516.810578][ T30] ? clear_bhb_loop+0x40/0x90 [ 516.815353][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.837920][ T30] RIP: 0033:0x7f70e9d9e097 [ 516.842408][ T30] RSP: 002b:00007fffc3a78618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 516.867875][ T30] RAX: 0000000000000000 RBX: 00007f70e9e321ca RCX: 00007f70e9d9e097 [ 516.883980][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc3a786d0 [ 516.907544][ T30] RBP: 00007fffc3a786d0 R08: 00007fffc3a796d0 R09: 00000000ffffffff [ 516.927234][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc3a79760 [ 516.947920][ T30] R13: 00007f70e9e321ca R14: 000000000005890f R15: 00007fffc3a797a0 [ 516.968682][ T30] [ 516.971953][ T30] INFO: task syz-executor:5629 blocked for more than 143 seconds. [ 517.044966][ T30] Tainted: G L syzkaller #0 [ 517.086989][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.102543][ T30] task:syz-executor state:D stack:22888 pid:5629 tgid:5629 ppid:1 task_flags:0x400140 flags:0x00080002 [ 517.116631][ T30] Call Trace: [ 517.122319][ T30] [ 517.129203][ T30] __schedule+0x1295/0x67a0 [ 517.133935][ T30] ? __pfx___schedule+0x10/0x10 [ 517.139758][ T30] ? find_held_lock+0x2b/0x80 [ 517.144642][ T30] ? schedule+0x2bf/0x390 [ 517.150868][ T30] schedule+0xdd/0x390 [ 517.155867][ T30] schedule_preempt_disabled+0x13/0x30 [ 517.166452][ T30] __mutex_lock+0xced/0x1b10 [ 517.172827][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 517.180431][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 517.190408][ T30] ? net_generic+0xea/0x2a0 [ 517.196811][ T30] ? net_generic+0xea/0x2a0 [ 517.204529][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 517.213226][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 517.219080][ T30] nfsd_umount+0x3b/0x60 [ 517.232332][ T30] deactivate_locked_super+0xc1/0x1b0 [ 517.238564][ T30] deactivate_super+0xe7/0x110 [ 517.243983][ T30] cleanup_mnt+0x21f/0x450 [ 517.249930][ T30] task_work_run+0x150/0x240 [ 517.254664][ T30] ? __pfx_task_work_run+0x10/0x10 [ 517.261237][ T30] ? rcu_is_watching+0x12/0xc0 [ 517.266340][ T30] exit_to_user_mode_loop+0x107/0x4f0 [ 517.275630][ T30] ? rcu_is_watching+0x12/0xc0 [ 517.282383][ T30] do_syscall_64+0x6f2/0xf80 [ 517.290265][ T30] ? clear_bhb_loop+0x40/0x90 [ 517.295721][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.305025][ T30] RIP: 0033:0x7f9851d9e097 [ 517.310536][ T30] RSP: 002b:00007fff0c270278 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 517.322422][ T30] RAX: 0000000000000000 RBX: 00007f9851e321ca RCX: 00007f9851d9e097 [ 517.334841][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0c270330 [ 517.344048][ T30] RBP: 00007fff0c270330 R08: 00007fff0c271330 R09: 00000000ffffffff [ 517.352866][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0c2713c0 [ 517.362224][ T30] R13: 00007f9851e321ca R14: 000000000005a08a R15: 00007fff0c271400 [ 517.371588][ T30] [ 517.418288][ T30] INFO: task syz-executor:5630 blocked for more than 144 seconds. [ 517.458888][ T30] Tainted: G L syzkaller #0 [ 517.485304][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.537421][ T30] task:syz-executor state:D stack:23656 pid:5630 tgid:5630 ppid:1 task_flags:0x400140 flags:0x00080002 [ 517.590257][ T30] Call Trace: [ 517.614424][ T30] [ 517.632580][ T30] __schedule+0x1295/0x67a0 [ 517.652807][ T30] ? __pfx___schedule+0x10/0x10 [ 517.669111][ T30] ? find_held_lock+0x2b/0x80 [ 517.686440][ T30] ? schedule+0x2bf/0x390 [ 517.703600][ T30] schedule+0xdd/0x390 [ 517.719888][ T30] schedule_preempt_disabled+0x13/0x30 [ 517.748770][ T30] __mutex_lock+0xced/0x1b10 [ 517.759060][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 517.782913][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 517.807935][ T30] ? net_generic+0xea/0x2a0 [ 517.836251][ T30] ? net_generic+0xea/0x2a0 [ 517.867250][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 517.879246][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 517.893612][ T30] nfsd_umount+0x3b/0x60 [ 517.910460][ T30] deactivate_locked_super+0xc1/0x1b0 [ 517.929901][ T30] deactivate_super+0xe7/0x110 [ 517.953316][ T30] cleanup_mnt+0x21f/0x450 [ 517.969988][ T30] task_work_run+0x150/0x240 [ 517.984039][ T30] ? __pfx_task_work_run+0x10/0x10 [ 518.003000][ T30] ? rcu_is_watching+0x12/0xc0 [ 518.024228][ T30] exit_to_user_mode_loop+0x107/0x4f0 [ 518.031569][ T30] ? rcu_is_watching+0x12/0xc0 [ 518.036437][ T30] do_syscall_64+0x6f2/0xf80 [ 518.041544][ T30] ? clear_bhb_loop+0x40/0x90 [ 518.053506][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.060494][ T30] RIP: 0033:0x7f12ee79e097 [ 518.065033][ T30] RSP: 002b:00007ffd147cc088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 518.076204][ T30] RAX: 0000000000000000 RBX: 00007f12ee8321ca RCX: 00007f12ee79e097 [ 518.088669][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd147cc140 [ 518.099527][ T30] RBP: 00007ffd147cc140 R08: 00007ffd147cd140 R09: 00000000ffffffff [ 518.110613][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd147cd1d0 [ 518.119181][ T30] R13: 00007f12ee8321ca R14: 000000000005af54 R15: 00007ffd147cd210 [ 518.128133][ T30] [ 518.166319][ T30] [ 518.166319][ T30] Showing all locks held in the system: [ 518.233931][ T30] 1 lock held by khungtaskd/30: [ 518.270134][ T30] #0: ffffffff8e7e5420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 518.307504][ T30] 4 locks held by kworker/u8:2/35: [ 518.330564][ T30] #0: ffff88801c6ae140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 518.367174][ T30] #1: ffffc90000ab7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 518.397558][ T30] #2: ffffffff905f7f08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 518.415778][ T30] #3: ffffffff90610c60 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 518.437227][ T30] 3 locks held by kworker/u8:4/57: [ 518.448882][ T30] #0: ffff8880349e4940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 518.479094][ T30] #1: ffffc900015e7d08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 518.507488][ T30] #2: ffffffff90610c60 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 518.537486][ T30] 3 locks held by kworker/u8:12/3387: [ 518.542952][ T30] #0: ffff88813fe9c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 518.580203][ T30] #1: ffffc9000792fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 518.611800][ T30] #2: ffffffff90610c60 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 518.642431][ T30] 2 locks held by dhcpcd/5291: [ 518.653833][ T30] #0: ffffffff905e0a20 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ca/0x6b0 [ 518.669286][ T30] #1: ffffffff90610c60 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xcf/0xa70 [ 518.679502][ T30] 2 locks held by getty/5387: [ 518.684747][ T30] #0: ffff8880394af0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 518.695659][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 518.707350][ T30] 2 locks held by syz-executor/5628: [ 518.713180][ T30] #0: ffff88802a2b80d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 518.731278][ T30] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 518.743857][ T30] 2 locks held by syz-executor/5629: [ 518.749574][ T30] #0: ffff888069ff60d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 518.760526][ T30] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 518.774168][ T30] 2 locks held by syz-executor/5630: [ 518.781161][ T30] #0: ffff88807ddd00d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 518.791966][ T30] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 518.801995][ T30] 2 locks held by syz.1.492/8191: [ 518.808121][ T30] #0: ffffffff906bf148 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.816402][ T30] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 518.829505][ T30] 2 locks held by syz-executor/9131: [ 518.834871][ T30] #0: ffff88802dd480d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 518.850966][ T30] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 518.861025][ T30] 2 locks held by syz.7.729/9428: [ 518.870576][ T30] #0: ffffffff906bf148 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.880859][ T30] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 518.892978][ T30] 4 locks held by syz.9.949/10481: [ 518.898723][ T30] #0: ffff888076478ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 518.908919][ T30] #1: ffff8880764780b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 518.919994][ T30] #2: ffffffff908978e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 518.933061][ T30] #3: ffff88807b6d3af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 518.942878][ T30] 2 locks held by syz.8.971/10592: [ 518.949822][ T30] #0: ffffffff906bf148 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.963757][ T30] #1: ffffffff8ec62340 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 518.978648][ T30] 9 locks held by syz-executor/10793: [ 518.984111][ T30] #0: ffff888038a10410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 518.993780][ T30] #1: ffff88807c2b4080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 519.005778][ T30] #2: ffff88802a1cee18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 519.016337][ T30] #3: ffffffff8fb81480 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 519.030385][ T30] #4: ffff8880791a8128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 519.042746][ T30] #5: ffff88802be0f258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 519.053327][ T30] #6: ffffffff90610c60 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x19e/0x970 [ 519.064217][ T30] #7: ffff88802e6ccdc8 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xd49/0x24f0 [ 519.083273][ T30] #8: ffffffff8e7f0f68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 519.094717][ T30] 3 locks held by syz.4.1026/10878: [ 519.100377][ T30] #0: ffff88805b0ecea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 519.112083][ T30] #1: ffff88805b0ec0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 519.125653][ T30] #2: ffffffff908978e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 519.139339][ T30] 1 lock held by syz.6.1028/10890: [ 519.144637][ T30] #0: ffffffff90610c60 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 519.193094][ T30] [ 519.211558][ T30] ============================================= [ 519.211558][ T30] [ 519.241017][ T30] NMI backtrace for cpu 0 [ 519.241041][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 519.241074][ T30] Tainted: [L]=SOFTLOCKUP [ 519.241082][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 519.241096][ T30] Call Trace: [ 519.241105][ T30] [ 519.241114][ T30] dump_stack_lvl+0x100/0x190 [ 519.241144][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 519.241174][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 519.241200][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 519.241234][ T30] sys_info+0x141/0x190 [ 519.241262][ T30] watchdog+0xcb1/0x1030 [ 519.241302][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 519.241337][ T30] ? __pfx_watchdog+0x10/0x10 [ 519.241372][ T30] ? __kthread_parkme+0x18c/0x230 [ 519.241408][ T30] ? kthread+0x13a/0x450 [ 519.241435][ T30] ? __pfx_watchdog+0x10/0x10 [ 519.241468][ T30] kthread+0x370/0x450 [ 519.241487][ T30] ? __pfx_kthread+0x10/0x10 [ 519.241509][ T30] ret_from_fork+0x72b/0xd50 [ 519.241535][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 519.241562][ T30] ? __switch_to+0x800/0x1100 [ 519.241595][ T30] ? __switch_to_asm+0x39/0x70 [ 519.241626][ T30] ? __pfx_kthread+0x10/0x10 [ 519.241648][ T30] ret_from_fork_asm+0x1a/0x30 [ 519.241692][ T30] [ 519.391298][T10793] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.523335][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 519.530254][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 519.540981][ T30] Tainted: [L]=SOFTLOCKUP [ 519.545368][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 519.555495][ T30] Call Trace: [ 519.558796][ T30] [ 519.561784][ T30] dump_stack_lvl+0x100/0x190 [ 519.566520][ T30] vpanic+0x552/0x970 [ 519.570983][ T30] ? __pfx_vpanic+0x10/0x10 [ 519.575636][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 519.581934][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 519.588260][ T30] panic+0xd1/0xe0 [ 519.592017][ T30] ? __pfx_panic+0x10/0x10 [ 519.596477][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 519.602769][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 519.608975][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 519.615272][ T30] ? watchdog.cold+0x1ec/0x234 [ 519.620083][ T30] ? watchdog+0xcc1/0x1030 [ 519.624544][ T30] watchdog.cold+0x1fd/0x234 [ 519.629289][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 519.635138][ T30] ? __pfx_watchdog+0x10/0x10 [ 519.639858][ T30] ? __kthread_parkme+0x18c/0x230 [ 519.644939][ T30] ? kthread+0x13a/0x450 [ 519.649223][ T30] ? __pfx_watchdog+0x10/0x10 [ 519.653928][ T30] kthread+0x370/0x450 [ 519.658030][ T30] ? __pfx_kthread+0x10/0x10 [ 519.662750][ T30] ret_from_fork+0x72b/0xd50 [ 519.667451][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 519.672611][ T30] ? __switch_to+0x800/0x1100 [ 519.677512][ T30] ? __switch_to_asm+0x39/0x70 [ 519.682340][ T30] ? __pfx_kthread+0x10/0x10 [ 519.687054][ T30] ret_from_fork_asm+0x1a/0x30 [ 519.691886][ T30] [ 519.695009][ T30] Kernel Offset: disabled [ 519.699369][ T30] Rebooting in 86400 seconds..