last executing test programs: 3m44.555481939s ago: executing program 0 (id=1168): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/block/nbd8/mq/0/cpu_list\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000e80)=""/193, 0xc1) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={"28b13843229fc5933892f0319dab89188d6c313dfb8a128b194e2608b57eb1cb", 0xfff, 0x0, 0x4, 0x2, 0x4, 0xffffffffffffffff}) capget$auto(&(0x7f0000000080)={0x8, 0x0}, &(0x7f0000000240)={0x0, 0x7bb, 0x6}) sendmsg$auto_NL80211_CMD_SET_BEACON(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x354, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x18}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_KEY={0x317, 0x50, 0x0, 0x1, [@generic, @nested={0x4, 0x121}, @generic="8ef6fe405107b2b5c57ef40fda5c769cc2e05d8c392c2739820aab1a86fa7e628fb75477f23fdfb0b703abcae3dfedf000c606a0cfedf44da66ed9892661f0", @nested={0x36, 0x61, 0x0, 0x1, [@typed={0x8, 0x120, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x2c}, @generic="a4fe", @typed={0xc, 0x1d, 0x0, 0x0, @u64}, @nested={0x4, 0x61}, @typed={0x8, 0x43, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x155, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xd9}]}, @nested={0x1fb, 0xb2, 0x0, 0x1, [@generic="e6f98cedb7208d17e2bb2bdea5a2ca86276faa82ffb2ad916a5350827cffd2506dfe6b552e671daf6500f49361932c41a1423e770a7015f34b3afd313be3d0e0b6acd5f9a5c7be1a6c81b245c0295a936f41d4ace92db9927d38b8d0e4f0a8375bfd086486efc597bdf34a39ee5a86f7c1b45fba9b687b3b1e917f682623b4e05e009898376d47a784181d1b027f8de1e40a8a081ca35178a0d6e6d1e63de0452acb1239a4d38e64fe1fd3b4c364c18929b09fe2a6038ca099f9af6d31221a4cdfc74db3a28b6eb3ef4ced36fbc89fca785f67d88898ef1a3e5a2f089e", @generic="7251d342ee2684e913527979b5a3668b8a642d3b2d066982013bbeb1f2", @generic="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"]}, @typed={0x8, 0x101, 0x0, 0x0, @u32=0x9}, @nested={0x94, 0x39, 0x0, 0x1, [@generic="f2eb92b339e4e583c1c5cabeab55b10e104782b38d13028d6a76a0b29be85c7ac54883a0211101ae4f4c8cd88a67efe508dac19388323b3859c6fe2d5f797b4f6df2e349cdf198ec0477eba8fe9e769646dbe87c25860d63b41957faf9a63772265581d6161db5596ada39f9653dbafd7cdf9a2e08c42fbd102196666bfecec172146450fd783903", @nested={0x4, 0xb3}, @nested={0x4, 0x155}]}]}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xd}]}, 0x354}, 0x1, 0x0, 0x0, 0x2400a846}, 0x10) 3m44.382864966s ago: executing program 0 (id=1171): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo$auto(r2, r1, 0xb, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x3, 0x5, @_sigchld={0x0, 0x0, 0xceb, 0x8, 0x4}}}) r3 = prctl$auto(0x3e, 0x800000000001, r1, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110) ioctl$auto_FICLONE(r4, 0x40049409, r4) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r5 = prctl$auto(0x29206, 0x1, 0x4, 0x6, 0x8) mmap$auto(0x2, 0x1, 0x8000000000000003, 0x8000000000000010, r5, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0xfffffffe, 0x85, 0x20e, 0x9, "660e00d9e9756f22fdffa188f5f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0x42, 0x3, 0x4, 0x6, 0x9, 0xffffffffffffffff, 0x9, 0x3, 0x101, 0x101, 0x22, 0x4, 0x6, 0x4, 0x7, 0xf, 0x1ff, 0x1, 0x400, 0x8, 0x5, 0x2, 0xe294, 0xa2, 0x8, 0x100000000, 0x2, 0x8, 0xae, 0xaeb, 0x3, 0x8, 0x5, 0x8, 0xfffffffffffffffe, 0x10000, 0x55e2, 0x7, 0x4, 0xe, 0xffffffffffffffff, 0x6, 0x9, 0x14f3, 0x1ff, 0x1, 0x8000000006e7, 0x3, 0x8, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x2f79f1d9, 0x0, 0x401, 0x9, 0x6, 0x100000001, 0xffffffff, 0x0, 0x8001, 0x4000005, 0x5ed4, 0x1, 0x7, 0x80000000, 0x962, 0x5, 0xfffffffffffffffe, 0x8, 0xfffffffffffffff7, 0x401, 0x1, 0x3e44, 0x8, 0x4, 0x9, 0x1, 0xc98c, 0x68, 0x2, 0x6, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x55, 0x8, 0x30, 0x3, 0x7ff, 0x3, 0x5, 0x0, 0x726, 0x7fffffff, 0x1000, 0x10000, 0x0, 0x4, 0x1, 0xbf, 0x2, 0x4, 0x0, 0x7, 0x1, 0x3f, 0x6, 0x9, 0x8000, 0xffff, 0x7, 0x80000000000140, 0x0, 0xc7dd, 0xfc05, 0x0, 0x4, 0x6, 0x8, 0x3, 0x0, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b232c1d35a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x426a2, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r7 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) splice$auto(0xffffffffffffffff, &(0x7f00000007c0)=0x5, r3, &(0x7f0000000800)=0x7, 0xffff, 0x400) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r7, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) fanotify_init$auto(0x9, 0x14) r8 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000600), r7) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="00022bbd7000fedbdf2501000000b00001800c004a0006000000000000008d000d8004e552c1a4ba53141732b8a8c90ea2720983140bedfb422d692d558e9e16eee03851bc923bb6aa1c1ce1078112368b3044115bd2a4072ee4e68f053070060f6c14299e033ea712026318cce676a205dedad26aa35c9ad0c61209f8e441594df4b9ad67f62baf4e9c036ba3cb0b4c6d40c8284b375b643840a52dc25338b752051cf3a3c300000008000c00090000000800b9800400e780"], 0xc4}, 0x1, 0x0, 0x0, 0x40005}, 0x8090) 3m43.391510389s ago: executing program 0 (id=1173): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400c2c2", @ANYBLOB="000129bd7000fddbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) ioctl$auto(r0, 0x8922, 0x24) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r2, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/2t\x00', 0xb00, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r4, 0x5, 0x0) getdents$auto(r4, &(0x7f00000004c0)={0x100, 0x7fffffffffffffff, 0x4}, 0x62d4) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x646502, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram14\x00', 0x44ee02, 0x0) fsconfig$auto_HIDEPID_NO_ACCESS(r5, 0x6, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', &(0x7f00000002c0)="e74d92f191b485eaf56ee335d933ef7cbd3dbf36456cd078243f1b6e5160a9031e1c8af79af3cbea78a1ff5ba6afae2a91b9d2df1482c6432d26fb20f6ec7137643c7ffdfa3a94019487165a574501a05f40ac9d574a1b8f9d67febe6f6913071e923fbaa138e157790feedaf9c0e90db128174544136ea20dc18d2f1bba543dafdaa7cd7ac8d94f7427870702d4654f3002c9d38a015f34edd563d6f16fde3ef35831ac801174487a", 0x1) 3m41.601973862s ago: executing program 0 (id=1178): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo$auto(r2, r1, 0xb, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x3, 0x5, @_sigchld={0x0, 0x0, 0xceb, 0x8, 0x4}}}) r3 = prctl$auto(0x3e, 0x800000000001, r1, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110) ioctl$auto_FICLONE(r4, 0x40049409, r4) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r5 = prctl$auto(0x29206, 0x1, 0x4, 0x6, 0x8) mmap$auto(0x2, 0x1, 0x8000000000000003, 0x8000000000000010, r5, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0xfffffffe, 0x85, 0x20e, 0x9, "660e00d9e9756f22fdffa188f5f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0x42, 0x3, 0x4, 0x6, 0x9, 0xffffffffffffffff, 0x9, 0x3, 0x101, 0x101, 0x22, 0x4, 0x6, 0x4, 0x7, 0xf, 0x1ff, 0x1, 0x400, 0x8, 0x5, 0x2, 0xe294, 0xa2, 0x8, 0x100000000, 0x2, 0x8, 0xae, 0xaeb, 0x3, 0x8, 0x5, 0x8, 0xfffffffffffffffe, 0x10000, 0x55e2, 0x7, 0x4, 0xe, 0xffffffffffffffff, 0x6, 0x9, 0x14f3, 0x1ff, 0x1, 0x8000000006e7, 0x3, 0x8, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x2f79f1d9, 0x0, 0x401, 0x9, 0x6, 0x100000001, 0xffffffff, 0x0, 0x8001, 0x4000005, 0x5ed4, 0x1, 0x7, 0x80000000, 0x962, 0x5, 0xfffffffffffffffe, 0x8, 0xfffffffffffffff7, 0x401, 0x1, 0x3e44, 0x8, 0x4, 0x9, 0x1, 0xc98c, 0x68, 0x2, 0x6, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x55, 0x8, 0x30, 0x3, 0x7ff, 0x3, 0x5, 0x0, 0x726, 0x7fffffff, 0x1000, 0x10000, 0x0, 0x4, 0x1, 0xbf, 0x2, 0x4, 0x0, 0x7, 0x1, 0x3f, 0x6, 0x9, 0x8000, 0xffff, 0x7, 0x80000000000140, 0x0, 0xc7dd, 0xfc05, 0x0, 0x4, 0x6, 0x8, 0x3, 0x0, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b232c1d35a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x426a2, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r7 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) splice$auto(0xffffffffffffffff, &(0x7f00000007c0)=0x5, r3, &(0x7f0000000800)=0x7, 0xffff, 0x400) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r7, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) fanotify_init$auto(0x9, 0x14) r8 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000600), r7) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYRES16=r8, @ANYBLOB="00022bbd7000fedbdf2501000000b00001800c004a0006000000000000008d000d8004e552c1a4ba53141732b8a8c90ea2720983140bedfb422d692d558e9e16eee03851bc923bb6aa1c1ce1078112368b3044115bd2a4072ee4e68f053070060f6c14299e033ea712026318cce676a205dedad26aa35c9ad0c61209f8e441594df4b9ad67f62baf4e9c036ba3cb0b4c6d40c8284b375b643840a52dc25338b752051cf3a3c300000008000c00090000000800b9800400e780"], 0xc4}, 0x1, 0x0, 0x0, 0x40005}, 0x8090) 3m40.446430965s ago: executing program 0 (id=1184): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8200, 0x6, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7k\x00\x00\x00\x00X\xb9\x0e\x11\xfb\x00\x00\x00\x00&!\x8f-\xfb\xea=\xc0\\\xec\xe7D\xe5V\xf1b\xa0\x9a\xa1\x88\xb4\x96\xf5\\\xad4\t\xca\x03\xe4\x15\v]\x00'/58, 0x82) socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, 0x0, 0x2) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf25030000000810030003020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600070001000000060007000600000008000300"], 0x68}, 0x1, 0x0, 0x0, 0x44014}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m39.888618778s ago: executing program 0 (id=1187): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) r4 = socket(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003d40)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x1}, @ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c65ec00) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 3m24.690715223s ago: executing program 32 (id=1187): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) r4 = socket(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003d40)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x1}, @ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c65ec00) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2m41.334346733s ago: executing program 4 (id=1459): unshare$auto(0x40000080) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r0, 0x8) 2m40.8436915s ago: executing program 4 (id=1462): close_range$auto(0x2, 0x8, 0x0) getpid() mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0xa, 0x801, 0x84) r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c349813d3eed18775d2c317601df5cca4a9e05e2fde000000", @ANYRES16=r0, @ANYBLOB="79a327bd7000fbdbdf252000000005000f0050000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/softnet_stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 3) 2m39.589962599s ago: executing program 4 (id=1467): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x163340, 0x2a) socket(0x2a, 0x2, 0x1) ioctl$auto(0x3, 0x10, 0xfffffffffffff4e0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop4/hctx0/tags_bitmap\x00', 0x101800, 0x0) (async) r5 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop4/hctx0/tags_bitmap\x00', 0x101800, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r5, &(0x7f00000001c0)=""/70, 0x46) (async) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r5, &(0x7f00000001c0)=""/70, 0x46) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000240)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="080027bd7000fddbdf2569000000060065000900000006004f01090000001700130013c366f9244357d432f6e44cc4bf4e5878fe5d00080002002f247b0005006000080000000500a3000200000045001f00ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e90000005c007580ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e35af6d0f2356f99129b14dfb3c040f557f81b08003800000400000800e600", @ANYRES32=r2, @ANYBLOB="05008a00080042000500f600071a0000000bc38e66a8950ee3ab259a4dffde2016f61a9d1a71fdd267b60e8be22f016b650bbcaa453fb002bcf118f0e96d4b6248efe1352050bde81bcec7d7d37591a1304ff17feb"], 0x108}, 0x1, 0x0, 0x0, 0x91}, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x2402, 0x0) write$auto(r6, &(0x7f0000000cc0)='\x00\xad\xe8\xc7.\xf0\xb0f\xd2\x02\x00>\x00\xae\x1a\x13I_{\xe8\n\xd4n\x9f\xae\xed\xcd6\x9f\xf6\x01\x00s\xa6\x03y\x97\x0eR\xb8\xb7\xcc\x83\xb8O\xe5\b_\xd0\xd7\xc0+:\x17\x8d\xf4\t\x00\x00\x00`\xdb\x80E|X\xc3\xa4H\xb9\xd8\x03*\x9c\x00\x00\x00\x00\x00\x00\x00[\x1a\fX[\xb8\x91M\xdb\xe7\xdc6w\xb1\x8b9\x9a\x9a\xf9c\x95)b\xff\x80\xd5\xbb\xc9+Ed\xa16?\xab<\xee\x8b\x18\xe6\xf3a]1OZ\x9e\xa9\xb2;H\xbcn}n\xca\x0e\x0e\xd8\xce_2\xe2\xb1@\x8dy\v\xc3\xacH\x9a\t\x8e\xa1g\xa2?\x89\x01\xb9\xf1\xbb%[\xf1L<\xd8\x8c\xd9\x1f\x9e\xfe\xbf\xb2\x95\xb6Y\xba\xaf\'a\xe2\xc3\x9a$c\xad\x82\x13\x1e\xbc\xf3\x1f.\xef\x1es\xb0\xf2I$\x02\x0e\xc8\xf0\x8b\xc7\xd8\x9c\x04\xa6[\xe2Q\xd6\x13\xa8[\xbcP,\xadS\x7f}/>\x13\xbe\\\x8cq(\x06\xdb4', 0x4) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000029c0)={0xb70, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REKEY_DATA={0x2b9, 0x7a, 0x0, 0x1, [@generic="f8bf7da670828cc89e5fcf22a05571af5eb22b42cfd13ab6b0fa9df83d70a979996091ccd74bd34616", @generic="c3bce308d171c90cba8bb672", @nested={0xc3, 0x62, 0x0, 0x1, [@generic="38761d17319d795f75c39a8c340322eb4b9aefd2423f6b9bc498d5b3c9f488102ed6607a2e6631e8b9346f36a75b2cdcd834e79f513d3757e56c431fd42eb1a689b56081774a690dad153b9c5562509acece94207ca9bbbcb7979096ce205b224be06f02473355397f1b27a1876fb3edaf9119aea84423cb2f9f14a903f91e50ce086904831d1fe516edafb08ec928984697b12c163873c1de24c34a43baffce336277b7f75abe8b4acdb64e50be091a2e6ba0c3dd3c19e8029ce57f7d4152"]}, @nested={0x5f, 0x86, 0x0, 0x1, [@nested={0x4, 0x71}, @typed={0x4, 0xa4}, @generic, @generic="155a149570f6", @typed={0x8, 0x2d, 0x0, 0x0, @fd=r6}, @generic="4d5a05afd97f83266003d552dfa209a2a51fffc26850451c16caac930023f4504f3e590eedc32d950a7af5a8d8dfdda53fad16ee8442a432c96e1a04649b985f29", @nested={0x4, 0x7a}]}, @nested={0x15c, 0xac, 0x0, 0x1, [@nested={0x4, 0x11}, @nested={0x151, 0x19, 0x0, 0x1, [@typed={0x14, 0x78, 0x0, 0x0, @ipv6=@remote}, @generic="f4804701c9c8d5f673062fe1ea48006dfe223bfb512f51b9fff85b7b38c902451d7f75c98cbe70e0f083bae1399dad166f6098b8d54258029038dce6474fa7771d0b4d3dec08b61968cfa119cb44ce1e154f7e6357a6308d59e3448d035c1beb2d17fe86ac73756b55d7b54c2a4c7e3ef4ac9a0dc3240dce8c607116176baa", @typed={0x8, 0x126, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0x75, 0x0, 0x0, @u64=0x9}, @typed={0xc, 0x3e, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x8, 0x114, 0x0, 0x1, [@nested={0x4, 0x57}]}, @nested={0x49, 0x1b, 0x0, 0x1, [@generic="e8d246cf88cb3c2d2c54934083d2d0b34c8dc1cc7b9155f8c1e7bdf74d1d9602410604bbbefaee281532f00e4e24d73aa841583ec1ab3d5687ae23c8c1", @nested={0x4, 0x4d}, @nested={0x4, 0x78}]}, @generic="99602ae5c78bb56187be25745a54d2930031b81499a6bde49055fd62b0a55355db5e621bf5f791283178846a091a8a427d8f50e3dde7956a7759a4ba4a9eae36b265020162c2"]}]}]}, @NL80211_ATTR_PMKID={0xb1, 0x55, "44dfa66f5f9962ee10e36b21b5b913763a6dcb3428d3d74257be4d47e3b657f7c6a36391fcccddf3c28f526e1a213b8970b1b77172d31611094fc50b057629690b396ff6fcd5ad2ca77baec09c660fc70183242717590d1ebe29895ff4da34a44858569b5c73365227cc9edf7d68d8d2d1e4b52a7cb5a0786600aef08550bc94674bba7492a0164f871fd90da7bb5c8e7779dff3431028577c67fa10b4e4206fdaf2e6d27306b2ea0fba2ac7a7"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_KEY_DATA={0x7, 0x7, "97c78a"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_IE={0x79f, 0x2a, "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"}, @NL80211_ATTR_MAC_MASK={0x2f, 0xd7, "94d655f1aa78ece36c3012fe8d04bd352b5c5548a6542882601312bc43664967017fd6f04f82ed735776a4"}]}, 0xb70}, 0x1, 0x0, 0x0, 0xc800}, 0x40000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(r0, &(0x7f0000000300)={{0x0, 0x6, &(0x7f0000000280)={0x0, 0x1ff}, 0xc, &(0x7f00000001c0), 0xc, 0x3}, 0x5a57}, 0xd, 0x3, 0x0) syz_genetlink_get_family_id$auto_ila(0x0, r0) close_range$auto(0x2, 0x8, 0x0) 2m39.377324268s ago: executing program 4 (id=1468): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) readv$auto(0x3, 0x0, 0x1) ioctl$auto(r0, 0x8922, 0x24) connect$auto(0x3, 0x0, 0x55) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r1, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x44ee02, 0x0) fsconfig$auto_HIDEPID_NO_ACCESS(0xffffffffffffffff, 0x6, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', &(0x7f00000002c0)="e74d92f191b485eaf56ee335d933ef7cbd3dbf36456cd078243f1b6e5160a9031e1c8af79af3cbea78a1ff5ba6afae2a91b9d2df1482c6432d26fb20f6ec7137643c7ffdfa3a94019487165a574501a05f40ac9d574a1b8f9d67febe6f6913071e923fbaa138e157790feedaf9c0e90db128174544136ea20dc18d2f1bba543dafdaa7cd7ac8d94f7427870702d4654f3002c9d38a015f34edd563d6f16fde3ef35831ac", 0x1) 2m38.788723378s ago: executing program 4 (id=1472): r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x54) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000240)='nfsd\x00', 0x10400, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mkdir$auto(&(0x7f0000000140)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', 0xc) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xffa6}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.net/\f\x00\x00\x00\x00', 0xa3) 2m38.628428002s ago: executing program 4 (id=1474): write$auto_cpu_latency_qos_fops_qos(0xffffffffffffffff, &(0x7f00000000c0)="4d46f158ba101c8c2d9356700b866489eff04b4760b3539b045b1af49ea855e368af3d1e6e1f4357d9e208a8ed480f4eff72480ed222ec48dbb1c4c6d0fd8e8a7b798aa8066160cb78be83de9b691f6907f58b4f87e18d4d420de6c18f156d749715ddbf8127891d08247d8c919da0fbb26ace2399e1c632f1e2b0c8ffe8ce7dc7b80b98438f066bd662d0d89bd610fc61883c13fe44afc3e67b91241c5cf586c524a2687925", 0xa6) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) ioctl$auto_tracing_buffers_fops_trace(0xffffffffffffffff, 0x5220, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 2m27.96835817s ago: executing program 3 (id=1521): close_range$auto(0x2, 0x8, 0x0) getpid() mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0xa, 0x801, 0x84) r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c349813d3eed18775d2c317601df5cca4a9e05e2fde000000", @ANYRES16=r0, @ANYBLOB="79a327bd7000fbdbdf252000000005000f0050000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/softnet_stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 6) 2m27.310472965s ago: executing program 3 (id=1524): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x4000, 0x124) socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) unshare$auto(0x40000080) mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7ffe) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) socket(0x2c, 0x2, 0xa) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd40, 0x1, 0x948f, 0x5, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0xa, 0x8, 0x6]}, 0x0) 2m26.316756228s ago: executing program 3 (id=1529): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x8, 0x2000000000002) r0 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r0, 0xc0085504, &(0x7f0000000140)={0x7, 0x9, 0x1801, "93b4a143efce7ec157d23ec0eb349cf782c49269a39db11c5a161be4744a0bfa8bcce2d1771e470d4c2723"}) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mkdir$auto(&(0x7f0000000040)='./cgroup\x00', 0x6) mmap$auto(0x0, 0x3000c, 0x4000000000df, 0x4000eb1, 0x401, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000080)='./cgroup\x00') pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x2, 0x0, 0x10000005, 0x8001, 0x6, 0xac, 0x2000009, 0x6, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x8000001000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) 2m25.287259492s ago: executing program 3 (id=1532): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x3a) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "2c55000000ac5600"}, 0x66) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8200, 0x6, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7k\x00\x00\x00\x00X\xb9\x0e\x11\xfb\x00\x00\x00\x00&!\x8f-\xfb\xea=\xc0\\\xec\xe7D\xe5V\xf1b\xa0\x9a\xa1\x88\xb4\x96\xf5\\\xad4\t\xca\x03\xe4\x15\v]\x00'/58, 0x82) socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x6, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b4b, r2) mmap$auto(0x0, 0x40005, 0x400000000000e2, 0x20074fb, r1, 0x28000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x2, 0xa, 0x0, 0x60049) socket(0x18, 0x1, 0xfffffffe) socket(0xa, 0x4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) r3 = pipe$auto(0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4089, 0xff9) write$auto(0x1, 0x0, 0x80000000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x3, 0xfb9) 2m24.369775104s ago: executing program 3 (id=1537): close_range$auto(0x2, 0x8, 0x0) getpid() mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0xa, 0x801, 0x84) r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c349813d3eed18775d2c317601df5cca4a9e05e2fde000000", @ANYRES16=r0, @ANYBLOB="79a327bd7000fbdbdf252000000005000f0050000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty1\x00', 0x0, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000180)) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000100)="17") syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/softnet_stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r3, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r3, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m23.909244096s ago: executing program 3 (id=1539): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ptrace$auto(0x6, 0x1, 0x3, 0x180000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x40100, 0x0) read$auto_proc_pagemap_operations_internal(r0, &(0x7f0000001540)=""/209, 0xd1) socket$nl_generic(0x11, 0x3, 0x10) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x9}, 0x3) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) syz_clone3(&(0x7f0000000380)={0x4100, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x2c}, &(0x7f0000000240)=""/116, 0x74, &(0x7f00000002c0)=""/24, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6}, 0x58) shmctl$auto_IPC_RMID(0x2, 0x0, 0x0) semctl$auto(0x5, 0xfff, 0x7fffffff, 0x14e8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'tunl0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r6, 0x2f}, 0x22) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) nanosleep$auto(0x0, 0x0) 2m23.439847558s ago: executing program 33 (id=1474): write$auto_cpu_latency_qos_fops_qos(0xffffffffffffffff, &(0x7f00000000c0)="4d46f158ba101c8c2d9356700b866489eff04b4760b3539b045b1af49ea855e368af3d1e6e1f4357d9e208a8ed480f4eff72480ed222ec48dbb1c4c6d0fd8e8a7b798aa8066160cb78be83de9b691f6907f58b4f87e18d4d420de6c18f156d749715ddbf8127891d08247d8c919da0fbb26ace2399e1c632f1e2b0c8ffe8ce7dc7b80b98438f066bd662d0d89bd610fc61883c13fe44afc3e67b91241c5cf586c524a2687925", 0xa6) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) ioctl$auto_tracing_buffers_fops_trace(0xffffffffffffffff, 0x5220, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 2m8.730896216s ago: executing program 34 (id=1539): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ptrace$auto(0x6, 0x1, 0x3, 0x180000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x40100, 0x0) read$auto_proc_pagemap_operations_internal(r0, &(0x7f0000001540)=""/209, 0xd1) socket$nl_generic(0x11, 0x3, 0x10) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x9}, 0x3) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) syz_clone3(&(0x7f0000000380)={0x4100, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x2c}, &(0x7f0000000240)=""/116, 0x74, &(0x7f00000002c0)=""/24, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6}, 0x58) shmctl$auto_IPC_RMID(0x2, 0x0, 0x0) semctl$auto(0x5, 0xfff, 0x7fffffff, 0x14e8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'tunl0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r6, 0x2f}, 0x22) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) nanosleep$auto(0x0, 0x0) 2m5.002654504s ago: executing program 2 (id=1613): close_range$auto(0x2, 0x8, 0x0) getpid() mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0xa, 0x801, 0x84) r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c349813d3eed18775d2c317601df5cca4a9e05e2fde000000", @ANYRES16=r0, @ANYBLOB="79a327bd7000fbdbdf252000000005000f0050000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/softnet_stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x11) 2m4.611434893s ago: executing program 2 (id=1615): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400c2c2", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) ioctl$auto(r0, 0x8922, 0x24) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r2, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/2t\x00', 0xb00, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r4, 0x5, 0x0) getdents$auto(r4, &(0x7f00000004c0)={0x100, 0x7fffffffffffffff, 0x4}, 0x62d4) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x646502, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram14\x00', 0x44ee02, 0x0) fsconfig$auto_HIDEPID_NO_ACCESS(r5, 0x6, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', &(0x7f00000002c0)="e74d92f191b485eaf56ee335d933ef7cbd3dbf36456cd078243f1b6e5160a9031e1c8af79af3cbea78a1ff5ba6afae2a91b9d2df1482c6432d26fb20f6ec7137643c7ffdfa3a94019487165a574501a05f40ac9d574a1b8f9d67febe6f6913071e923fbaa138e157790feedaf9c0e90db128174544136ea20dc18d2f1bba543dafdaa7cd7ac8d94f7427870702d4654f3002c9d38a015f34edd563d6f16fde3ef35831ac801174487a", 0x1) 2m3.178600986s ago: executing program 2 (id=1620): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) unshare$auto(0x40000080) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r0, 0x8) 2m2.518495085s ago: executing program 2 (id=1622): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x8, 0x2000000000002) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(&(0x7f0000000040)='./cgroup\x00', 0x6) mmap$auto(0x0, 0x3000c, 0x4000000000df, 0x4000eb1, 0x401, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000080)='./cgroup\x00') pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x2, 0x0, 0x10000005, 0x8001, 0x6, 0xac, 0x2000009, 0x6, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x8000001000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) 2m2.019106032s ago: executing program 2 (id=1625): close_range$auto(0x2, 0x8, 0x0) getpid() mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0xa, 0x801, 0x84) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c349813d3eed18775d2c317601df5cca4a9e05e2fde000000", @ANYRES16=r1, @ANYBLOB="79a327bd7000fbdbdf252000000005000f0050000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000300), r0) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf8, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wlan0\x00'}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x6}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xfff}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_LLC_SDP={0xa8, 0x13, 0x0, 0x1, [@nested={0xa2, 0x14, 0x0, 0x1, [@generic="3d9a93e6097c3c56c3b1bc8f56d4fe07f02b24940121b4269ebc36a2713e6df304e6d64452850e23a19a56479329be93c416a92b037c2189ec9e7d3219cf342d8ddb119bd4e4a41428404ef3376a1d811083c2f67c00ea682e59a1b5dca22ed8082fe87c0d7970e6f9de69834fffeee110b8c5e97d08761a32e614843438d6bbabe2ea79533de51d10e6cd65406f1d61f45dc8288e79c63460d1e6924608"]}]}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xc55}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc080}, 0x840) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/softnet_stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r4, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r4, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m1.580941789s ago: executing program 2 (id=1626): r0 = openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x1, &(0x7f0000000040)='\'\x0e\x00', &(0x7f0000000080)="c8707d279c4b0c7ef0888b915d03eacba37d10ee2759e48679323aa486499c56eb7278e1db745dd5543105bb8a14178dc3a8601804b62f06ab8f53932962bf204a76a190a1653eee9460c2af913dcd96218673932575af26c94787160c3a398013257224f5f4c6043f03430c00051e4387c5db066eac431181cfd30802cab5a8734556fdc0738dcd15f6c20b71f59d8785e5aa7f7a18e14eabc9555ec15ae2401946b5c37845546b731fee3343befc9a6d8c4dcd40cb908e9dcafc89e10c25b27e69018c17ea0955e15bef0cf8a0adcaddac15494bdbd111976a557d8c645e125ffd3405f09e30764ed0ec51c9e578b6420fba0863d2737db8960c03ebfb61760a91f4c4c634785f4fc7805184d829c9017417b9f30695b1bc81648859d3925c1f1155998d3562083c1e66cd1150a71f1e29d30f1b855ccf46fb814ebf8cce61cefb2e1372dd6233cd73a5da73bde251ba2750f75e5b147585e79a99b0406d2572600b0ae5a3ead8221fb73a2b100054b55463726d9862b64e7b7d96bf50d15b5e73b7b2af6d8d1530ae2f3755cca99c980b01f909eaa32c114294213bf5fef78f4e88a91d4b1eea319cd1b91bd9fc3d054fcfc9bb1b26e2805671c2c3350e29bee5f8630c7400cb6996f2569f253323d894adc8ddc6b84a96af77b94f63e42f7b852f15f375b9fcfa37951b55dc4d38f1678c9255420c48607756e7c473a4e4c0b33a8f324b0ed2208ea4580243e864e2ac7c4e753bbb63cc158143c95891e15dd866b13987871e97ab51e49a043648b55b878b344933697b53738e593d4cc338ffa7db10750f501a161c15b768c8d63abc29651948b8cbf9db5b5a1abf5daac1384fec426ada04fe1179f89d9b0b11a2824f3364ca2a630a5dc43d83c867ecc62e353fe7cb6eb6e8533607abd6dd9403bf8bbb69de7339a58341589914ecf4133a9ca35f48d9388dd3f2265e098c1f7e03e2ad1fcc72e732b9b2def4555a0f637774c4be821f66e5c46272c7e17996ee99eb670f5085819a3d9ef42055cea7692e916d3c6b94ce4059bbe8aeeceb6a152505a92dd5c464c650965775371c667fa72b05d8a9ae7f674eab99a6c10d11710d807b5ac3daab9d1c17856527f566cde43994397e909cbebb227ae376236f8d7321b18c0a981e89ed29de48f9179646ea60782a64bf813a68a53c74d2f38fd2f3080bad83f2c8e72719081118ded3682e81ef9a92a80892792ddf3343895e1fd9f142f3d71c9686629ad2cb2ff82b22f81bdc69c7d26682712ad58e2be785169a3d50c5439ab5b16aa1f5947938ac9032d2fe98cc1241ad4a5eb5167c66a71c6331fbff73be5f20276da366cc2efe808a0dc75109a59407e9f4deeff4a91063c6eae15d20396ee1625a21c2993dd809a54c9ad49c65b530c974f4c1caf267b36b279b58e097a611d47af7deade47ab89dcf22f54bbff6009709b131727522b54e71e720ff8b2ed6d9106ecfb5eacbf66a718def5b8e43428f72b7ab994bcdfa7bad165bf2c8264c367471ddc8a59ff4bd881426460793561f087fbb953109fed27db6bb37ac1ff8905069b019b7b4420d823b57bb5512568b7f1c4bf97cc17fe47df62a55f5741e14bcf638c525e637858a2aca7af6b342d74634d70278ae86a9844f259c304eb9f6008412dbef2085be754dc5d494b5cbce7f585e5d507269ba98ec4651970c1d08a57875732627df6c4f7465d978bc70991f0a3f72ddd180cfbd72917b6db0f1cb2778a656e1703e9805d1accbd722c1186a05f8a02d41979461b57948d60b3972220e09adbf05a1500e86e33118257904fbd9006acd627e9a4beeef6733f2b0b376fd068b82d89a29122f6a406570f2384cd84f494bd865e2d180dd74dd2981e184930d7940b4fc8ce9e981efc0097f071f235ec833bbc5f967b6e9ebabcde3ec777eb7d7fbb0b029d7555f69b6146ea32af62abd2b28c2c388dcfe3167f32f6d11e544415f4aa6b879b775bbf2b32f408fa06c5c34b25958361734629980a16bb68f2eef98be98e722aeb4e41e6bb65e337456066ac2138ec922d1b89c7bdce4d690713d30b8a1eaaa327eef5a2a854ae8d8bcfed24601d0ae434b816fff1f0a6ceb39379e00ca9cac273964e1f0211ca0b5a48edcf70a7ce9ca154680898c630efe7f304cbe746a93fa818c8983569728398a6f55db68d34b0dfaa291384ce7a761a52f694eec8b629cf894fc3adba49265f2b09be69e840b6f50a3ae47d34d5a0f718d21547eb17da51d432a0ef3f5d5455effe1f320232741ca1995d2ddfafffdd04243eb59941b5d02a9e1ac65ec9ea8f02cfab1fe2110f854ea988dee7f12f9ac14892192335078388d75a982a225bc7e8f0f5ac553cfd4a93de23fe9a3b26c6912fb2870e26d5d5d3bf5efa0a9eb71245ff89691169ddde5600416fc07c8e38e0dbaacd095c921de26caf2075c00228aedffaf9d1ee1d5887463783f4240209ee1e50acb8bfa79bd4235b2d6663f44edb2e525aa4febd2c46ab29be621a0b39094ae61b67fcaaf9fa9fb4b570cbc6d5bcfa3b6780c57da4b1998a68cfb0f9dadb1973447b847b1e6735f01d26cf1e6d48300e91daafef3186544ee05021d38bbd320da7fa456b73b27c670603e5353af9eceb8e9df66f6edf34f63801603def31d0482432eaa0b73e23e0fd6d9d3ff689ea5c186a4820bc4359b915fdbeaa433730494db11517b38ba5b8ac63a576242f7edee0464b32eec15b6f68a06363236be440be6af3d51c46a46614708c710359dcec022d89856480808d9dc1728a2492010a8c0686bfc479c7572ba26fdf2a0b9367d705972c753461afa6018414563e937a56716d656907b2792b9cee3ad7dd2943e6202a22fdb57c3d61e8cf56d3386717e0cccfda0b7e2d569fa1996f7b9fa57c2ef7fa29b683c25d7302e9d2daa8b8844a1223fd5c9a6441ef174d4cb9c7ff79805f6fb933256727e0c3e572b1e7283cb85cad23758fa55660ba6b8c1c797cb2b56696f6bfdbbb153d36e3cd283fc5d42227ddae8827777a5faa94f8e4d48f96d568f3ca4ad051b8bf67d3b792ed1ec924ce8417a9fc1707736f241dc55cf59a319e681a11ee7012fd72049c8ef634c6c9f8109d1721623aaec604c943117b2642f0ef0086a5a3c245c46069853788827543e359a002ab46ec67ac018ce43d10fcad161c0e7df2a63f1cc1fa9072adbc9b0c1d1ab54c8f09c9c86d5bfd47244fdf937ea7f9472ba10366b3b4dc078fb0420cf5fff6ad147638009fe1acd2b1d0294aaaae300bbf9d170c2fc240474a72757b8a181c2322f2c333150271ba93b256382f8c7492c1f8460329572ac818ac223ff6fb9d6680949e54b8245dd03972d1a719c96a10b953c87ac59485675f981ab21180f15f907096090db98a227b2d54f7a5725021a1e03a10a46fc3fe47d41259e4023170d06eef8e8640ffd2fbb0a3c4adc59e0e4b07679542afcb075a9d8486f9dbcc9e558616d2b74f967bd1c364c0677f7c4c17aa4c0f03e3fb2369af693d91a64eba96913fd2f456e36f8390fccd749facf9cbb1449b01ef48cd3d7ad201b4c997a4269f09e492e62a1f518df2d64efbec00bbf7aa3d2b80b7e187e2bac3788afeadbd40119fd7c70ea8e391edcb926a80873aa237ba8ab473addd4dd6b00a7f180762eb4f76eb59ddd3af11881ca80f4c7dc2d8f457576b411524ea33c39d9884271bfd95244df124541bfecc5c62f4b11993f27d6dbb9b6cb4e82a4fa1811537976758f551da31343ad37e9014dbd804b3ad13737fdbe85242a6c53f88e5020cc46380f7875d5e27c367d82372132737a8a8b132c5013828280fb41d50f823453364abb1c3116f1947ca10041b7da9b777a382bd0aafdf7f5c4003fb326eefa6f3c66744d107e8c88aba3f085cf7dc76a0635609038a97440238a86f70d51e9bb4013f2068a8d74c3e577f093a1bc6b817b714111e7111dc6ed62b860373561d5e4b6abdbef67ea22317dad399d3ff30927ff30471f96cfe873b68d5c115326d2bde2719d3bc17a8a0ced9eafccc08ed0aad91f801718bdc7b803a1d95375d5bdb779ca151a354b26555048da27b96efafd82f6458e91a08b4145e0bb25c69a1d58fdbf30d4f587e1e850174ea4fc120f7248e5525242a888ebd58fa2a3ce7fb37a6705698825d92f6050cfd6f056994debca99410ee8826306f9a182a7db08db83d3715faf95f08619ae15b371a62340e972d267767a6c678efe4c215ac7f0957f8398bcab439f1fa89a4fb90a4cf0158d40077e940cbd7105ecc98fc6f295d470f52d48f548a6a3fc2dc7d1d46732ce6bb68c4631873de96dbec05f315d8550d9dddf6c85e179dbe223aebed82ffa234f89779b192e1920bc28108653022a9d733afd608d8eccc721828264a50c23c28ed12b21bc2f4d4e61b90db9fb663ad13a9a7769af7ab9b3e0973106c91136e07c321c9cce25b363a480fc7f63d6a449cffe9bf3c1ff7c2fc45f229ae2cdce0ec87b7967dc1b2f64b6c5bb18f6957c893d263f5407ef1fe3790356592297965ce009ac7adf3c362c7e038c09b079990b0cc51dde21202ec323f2be67b1f3eca21aaaa94c1865603e09bea92ec5c51f9ab579c7ef0b89be1a9f78ff9adedb122a66b7bb967a3167ca8bfc93de092b18374e9cb87d547789f4ee8824ebc1396c1f6084217e5b78ca279f3d02d65309bb681927d3be5c231cba8b6d00773acdd5008905ad896a7cd73edb21d6d5add29e3689c4d7871aa5b7c5c4adaedf041b6c31d2d4cb360901cef052a77a90b68fc763d680d8b6ae30f333c6524daf7667e7b6437cab5f7bcd40a71598f8683b2ae71b97280d0b04b848e5e151ba9abf56dfcb49ff45bb8a91e7efe651bb34ed099f8bf03919b42857a53c51547487d8856627625da7576dc5b7d8e61bdda9cff8544dd5ab1fc6af2a638c7cc6deb4c31e74968d020aac6fc1ab6f0904aee32e4b1044a0dadb7d419f47498f200c4d2ad7d492e29bcb1a31b311aaef2e1aa3685e8f8c916c2044bb5361c81a5ad28434a3780401e8ddc766d7db8fed8f0accc6ca15eff2d1e3d1134cffe4d6b5f1747c7649a4daeb8e4939c98aabb8d78f5b3e2a63558422c159cc0a9c7fd92bdae1219de72b7791436b94d817bcb18e3c74d29af0dd26001cc17eafa5cb1d19784ff7e85d331963c7093eec1a60f286b27f0dfcb7c19422e93040f4a823cbc457d097354e36a40ec4273a1ed9040df1d80e9ce9f35206475fd2495759097168b6614010cb2e5d1b5ad6e475a507f55f0e70ed1356a1c2dac656d1277898701821a6bb06d8d17ff247eeec638e080d7946418a6768439429f6cbabecf16fce2b9e91b0fc59d8c01941b7987104fd0f4b3803e3a76011b922efd30951968bad46883d3affbb70963de60081f280dfcba76482feceae85ca1fc6fee7949afe82abf7bbbfb36c2f9a9c1efc37748b08a27fe3b63a9c11fe1da2db99d3f7e32923b8716e365155c90c40b83c8b34d4277b6d09e40c3ad435c8300f97e21dcc0544d579fead3eb95161487e783949d6440820efcc58b250765aec21242c5ba6a5cdf3feed4de3fc41c642ac53ad18338444a29904a2366cd7fb7c95deccf1e39eb2bcd0dc29081bc526d27d69d41847abb1ecf86df00874a2ae36d20906d8a96b59430e84d7d5ca9a1d6e3a412412ce8d3068805dd1a22170f98dfd4ca634486f5ac71305976a33b143dae4805d92dbd7c1895f8c9a50884912dace690e3dad565284d311884acec36e61795c98c12a7da78bef", 0x0) r1 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x7) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001080), 0x340c2, 0x0) r3 = ioctl$auto_UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000010c0)={0xffffff66, 0xe, [{r2, 0x0, 0x5, 0xfffffffffffffffa}, {r0, 0x0, 0xa}]}) ioctl$auto_TIOCMSET2(r5, 0x5418, &(0x7f0000001100)="c32eac22441992c5382dacf9f9956c43a1572b62e9365bedb6075e7d5c4e3d17b0388063889b785e49970caf1f83bba18a61e3693ee72ab6e4ad942cef30a37619e642c64393fc1879e365c42a3bf0564e3c8e05763f11f521389bf10cc21b808f965ebd079e7b36cc359952883918921fd9c67ebdb4376a8039566132d6afef8bbc3af8a3ad2dd7b69c4d4078eba09c667ee6656db0b3dfb445a3b660f4c125dfeb919e35b84b8311599a95c831aa5e0e61cc8363a4f0fab9ed8c75ebebe68f09b6f9657fa07622") read$auto_force_wakeup_fops_hci_vhci(r1, &(0x7f0000001200)=""/169, 0xa9) close_range$auto(r3, r3, 0xa) r6 = waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000001300)={@siginfo_0_0={0x49, 0x7, 0x80000001, @_sigfault={&(0x7f00000012c0)="bc30658c0b61f335f2", @_addr_lsb=0x5}}}, 0x7, &(0x7f0000001380)={{0x40, 0x7}, {0x1ff, 0x4}, 0xe, 0x401, 0xa500000000000000, 0x0, 0xd7c, 0x7, 0xfd, 0xffffffff, 0x7fff, 0x2, 0x9, 0x7, 0x6, 0x3}) r7 = prctl$auto(0x8, 0x2, r6, 0x2, 0x6) ioctl$auto_FIONREAD(r7, 0x541b, 0x7f) write$auto_uinput_fops_uinput(r5, &(0x7f0000001440)="39e5dca811082d1c3876b78b89209ee6c5e5cc96ef7909ffd876dc5d529f8a031625024d7f7e5a5981af4b244329475488f18250c2bbfad44a", 0x39) r8 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000014c0), r1) sendmsg$auto_OVS_METER_CMD_SET(r7, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x18, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x2000c014) ioctl$auto_UI_SET_SNDBIT(r4, 0x4004556a, &(0x7f00000015c0)=0xed) r9 = ioctl$auto_TUNSETPERSIST(r3, 0x400454cb, &(0x7f0000001600)=0x3000000) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001680), r9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r10, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0xf006}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x8084) ioctl$auto_UI_SET_LEDBIT(r4, 0x40045569, &(0x7f0000001780)=0x100) ioctl$auto_EVIOCRMFF(r7, 0x40044581, &(0x7f00000017c0)=0x6) r11 = fsopen$auto(&(0x7f0000001800)='-.-\x9d/\x00', 0xb) write$auto(r11, &(0x7f0000001840)='\x00', 0xb92c) setsockopt$auto_SO_DOMAIN(r4, 0x81, 0x27, &(0x7f0000001880)='-.-\x9d/\x00', 0x61ac) socket(0x6, 0x80000, 0xffff7110) sendmsg$auto_NL80211_CMD_ADD_LINK(r3, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x28, r10, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x40080) ioctl$auto_MEMWRITEOOB64(r3, 0xc0184d15, &(0x7f00000019c0)={0x1, 0x0, 0x0, 0x5}) r12 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001a40), r3) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001a80)={'pimreg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001ac0)={'vcan0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000001f40)={&(0x7f0000001a00), 0xc, &(0x7f0000001f00)={&(0x7f0000001b00)={0x3d0, r12, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MACSEC_ATTR_OFFLOAD={0x10d, 0x9, 0x0, 0x1, [@typed={0xa8, 0x1e, 0x0, 0x0, @binary="b9dfe32c8befa06beae715fa0d28dd9e187db719fa8911b58ee167ea49acbd8a2af1eb5ef1092aaa04bef614f48402232379dcca3dae479ffa331e10d307731413928893ef14293bdd39bc066a270c060f00163ee14b1f631a3ef13a1fc70a4ee0295f36133e22127b423a9f3b3cae8f80c67f1c96365dfda704ef761be40c3f6ca525de8e6aeeaa70d93214781fc451962ec83bd20aa280f435dd7350e4ace7a4c07334"}, @generic="05fc058797bd5f9fc62d9116896faac5a33eb1c2c280d3c861d510cd2cafd4abcafc3c0884fcc5ad27d2ebec03e10177390efb9f5db02965d3f105a902c62c7e7c12cd0b59d87ec3c79411737c3265742db173fb25faa83ec7b517fccc", @typed={0x4, 0x4b}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r13}, @MACSEC_ATTR_RXSC_CONFIG={0x29c, 0x2, 0x0, 0x1, [@generic="104390387618aa9ecf00e77b396cf92c5f4e5d7bd7e20a910cd2f643227fb1547a6ec0d7cb00b37de787cca8f77d643bbf31275d3bfa58d87de59b8bc59af2432fee375ceab1c19bea2ee8856979837e5a42d6112cbf790692983911244a2b08d8868b3b2f536bc914d7ba560a592b77e856b5bad986d9bc2e060d50f5ae4185851fdadd0cc69b3d1aeed3e57a67aacc92d2", @generic="d9829de1291236107df36c2100c78233d3e87e58880b0eb955ec8c9fe62f074cb8894ed86757acc8d4d2bab3eb861334c81decbe7ac3a2b5d958c7b369589fbbe041711038bb717a08901024351436567c01888b21efca16175af3e933b5929fb11d8f131089517cb645372171a5089152f5a9d6de42819627eb1249c7c7770fd1fc1857e5bbfc8513da02f9423ed9960c21d2481672c0", @generic="6a345e9b4bc66b6b9e65fd82d9d1d41b7cb9774b21e64cafe6b9e5d0e43883241c341a", @nested={0x22, 0x13e, 0x0, 0x1, [@generic="6c9da7f7360d13bf745f", @nested={0x4, 0x49}, @typed={0x8, 0x121, 0x0, 0x0, @fd=r2}, @typed={0x7, 0x1, 0x0, 0x0, @str='\'\x0e\x00'}]}, @nested={0xca, 0xde, 0x0, 0x1, [@typed={0x21, 0x67, 0x0, 0x0, @binary="bd5f1246df55ec227d58578b9d832d7da683ba68210111ef397e84b6da"}, @generic="261f3a3039a5f649c376c8294c97b8667a97eab64450ec37b4766c333d8964d9860b2403822bd533551e2bd29a1320a11006a07fa3931e074d1f84f1da676e9cf563aab29418222753f10f8cef0069d6105cd9ea8b04628c85972ef7aa0e8341c0f756d663c2e9be741a56ed8752d8e54b3ffcbdf1ef901f7889", @nested={0x4, 0x3d}, @nested={0x4, 0x11a}, @nested={0x4, 0x3a}, @nested={0x4, 0x12f}, @typed={0xc, 0x153, 0x0, 0x0, @u64=0x8}, @typed={0xc, 0x140, 0x0, 0x0, @u64=0x3ff}]}, @nested={0x5c, 0xa6, 0x0, 0x1, [@typed={0x55, 0x116, 0x0, 0x0, @binary="6e69231bd01bfa6ac2dae2c478462596e69d810ea958eb922f11e2a7dd59f58fd96f23fa87ebab68859207d056d2fa429655032c01cc76bfe41da9f02fd419298ae1e52ec438e231154aea86ea27aaaa64"}]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r14}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x400c000}, 0x40001) 1m46.075693717s ago: executing program 35 (id=1626): r0 = openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x1, &(0x7f0000000040)='\'\x0e\x00', &(0x7f0000000080)="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", 0x0) r1 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x7) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001080), 0x340c2, 0x0) r3 = ioctl$auto_UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000010c0)={0xffffff66, 0xe, [{r2, 0x0, 0x5, 0xfffffffffffffffa}, {r0, 0x0, 0xa}]}) ioctl$auto_TIOCMSET2(r5, 0x5418, &(0x7f0000001100)="c32eac22441992c5382dacf9f9956c43a1572b62e9365bedb6075e7d5c4e3d17b0388063889b785e49970caf1f83bba18a61e3693ee72ab6e4ad942cef30a37619e642c64393fc1879e365c42a3bf0564e3c8e05763f11f521389bf10cc21b808f965ebd079e7b36cc359952883918921fd9c67ebdb4376a8039566132d6afef8bbc3af8a3ad2dd7b69c4d4078eba09c667ee6656db0b3dfb445a3b660f4c125dfeb919e35b84b8311599a95c831aa5e0e61cc8363a4f0fab9ed8c75ebebe68f09b6f9657fa07622") read$auto_force_wakeup_fops_hci_vhci(r1, &(0x7f0000001200)=""/169, 0xa9) close_range$auto(r3, r3, 0xa) r6 = waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000001300)={@siginfo_0_0={0x49, 0x7, 0x80000001, @_sigfault={&(0x7f00000012c0)="bc30658c0b61f335f2", @_addr_lsb=0x5}}}, 0x7, &(0x7f0000001380)={{0x40, 0x7}, {0x1ff, 0x4}, 0xe, 0x401, 0xa500000000000000, 0x0, 0xd7c, 0x7, 0xfd, 0xffffffff, 0x7fff, 0x2, 0x9, 0x7, 0x6, 0x3}) r7 = prctl$auto(0x8, 0x2, r6, 0x2, 0x6) ioctl$auto_FIONREAD(r7, 0x541b, 0x7f) write$auto_uinput_fops_uinput(r5, &(0x7f0000001440)="39e5dca811082d1c3876b78b89209ee6c5e5cc96ef7909ffd876dc5d529f8a031625024d7f7e5a5981af4b244329475488f18250c2bbfad44a", 0x39) r8 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000014c0), r1) sendmsg$auto_OVS_METER_CMD_SET(r7, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x18, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x2000c014) ioctl$auto_UI_SET_SNDBIT(r4, 0x4004556a, &(0x7f00000015c0)=0xed) r9 = ioctl$auto_TUNSETPERSIST(r3, 0x400454cb, &(0x7f0000001600)=0x3000000) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001680), r9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r10, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0xf006}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x8084) ioctl$auto_UI_SET_LEDBIT(r4, 0x40045569, &(0x7f0000001780)=0x100) ioctl$auto_EVIOCRMFF(r7, 0x40044581, &(0x7f00000017c0)=0x6) r11 = fsopen$auto(&(0x7f0000001800)='-.-\x9d/\x00', 0xb) write$auto(r11, &(0x7f0000001840)='\x00', 0xb92c) setsockopt$auto_SO_DOMAIN(r4, 0x81, 0x27, &(0x7f0000001880)='-.-\x9d/\x00', 0x61ac) socket(0x6, 0x80000, 0xffff7110) sendmsg$auto_NL80211_CMD_ADD_LINK(r3, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x28, r10, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x40080) ioctl$auto_MEMWRITEOOB64(r3, 0xc0184d15, &(0x7f00000019c0)={0x1, 0x0, 0x0, 0x5}) r12 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001a40), r3) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001a80)={'pimreg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001ac0)={'vcan0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000001f40)={&(0x7f0000001a00), 0xc, &(0x7f0000001f00)={&(0x7f0000001b00)={0x3d0, r12, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MACSEC_ATTR_OFFLOAD={0x10d, 0x9, 0x0, 0x1, [@typed={0xa8, 0x1e, 0x0, 0x0, @binary="b9dfe32c8befa06beae715fa0d28dd9e187db719fa8911b58ee167ea49acbd8a2af1eb5ef1092aaa04bef614f48402232379dcca3dae479ffa331e10d307731413928893ef14293bdd39bc066a270c060f00163ee14b1f631a3ef13a1fc70a4ee0295f36133e22127b423a9f3b3cae8f80c67f1c96365dfda704ef761be40c3f6ca525de8e6aeeaa70d93214781fc451962ec83bd20aa280f435dd7350e4ace7a4c07334"}, @generic="05fc058797bd5f9fc62d9116896faac5a33eb1c2c280d3c861d510cd2cafd4abcafc3c0884fcc5ad27d2ebec03e10177390efb9f5db02965d3f105a902c62c7e7c12cd0b59d87ec3c79411737c3265742db173fb25faa83ec7b517fccc", @typed={0x4, 0x4b}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r13}, @MACSEC_ATTR_RXSC_CONFIG={0x29c, 0x2, 0x0, 0x1, [@generic="104390387618aa9ecf00e77b396cf92c5f4e5d7bd7e20a910cd2f643227fb1547a6ec0d7cb00b37de787cca8f77d643bbf31275d3bfa58d87de59b8bc59af2432fee375ceab1c19bea2ee8856979837e5a42d6112cbf790692983911244a2b08d8868b3b2f536bc914d7ba560a592b77e856b5bad986d9bc2e060d50f5ae4185851fdadd0cc69b3d1aeed3e57a67aacc92d2", @generic="d9829de1291236107df36c2100c78233d3e87e58880b0eb955ec8c9fe62f074cb8894ed86757acc8d4d2bab3eb861334c81decbe7ac3a2b5d958c7b369589fbbe041711038bb717a08901024351436567c01888b21efca16175af3e933b5929fb11d8f131089517cb645372171a5089152f5a9d6de42819627eb1249c7c7770fd1fc1857e5bbfc8513da02f9423ed9960c21d2481672c0", @generic="6a345e9b4bc66b6b9e65fd82d9d1d41b7cb9774b21e64cafe6b9e5d0e43883241c341a", @nested={0x22, 0x13e, 0x0, 0x1, [@generic="6c9da7f7360d13bf745f", @nested={0x4, 0x49}, @typed={0x8, 0x121, 0x0, 0x0, @fd=r2}, @typed={0x7, 0x1, 0x0, 0x0, @str='\'\x0e\x00'}]}, @nested={0xca, 0xde, 0x0, 0x1, [@typed={0x21, 0x67, 0x0, 0x0, @binary="bd5f1246df55ec227d58578b9d832d7da683ba68210111ef397e84b6da"}, @generic="261f3a3039a5f649c376c8294c97b8667a97eab64450ec37b4766c333d8964d9860b2403822bd533551e2bd29a1320a11006a07fa3931e074d1f84f1da676e9cf563aab29418222753f10f8cef0069d6105cd9ea8b04628c85972ef7aa0e8341c0f756d663c2e9be741a56ed8752d8e54b3ffcbdf1ef901f7889", @nested={0x4, 0x3d}, @nested={0x4, 0x11a}, @nested={0x4, 0x3a}, @nested={0x4, 0x12f}, @typed={0xc, 0x153, 0x0, 0x0, @u64=0x8}, @typed={0xc, 0x140, 0x0, 0x0, @u64=0x3ff}]}, @nested={0x5c, 0xa6, 0x0, 0x1, [@typed={0x55, 0x116, 0x0, 0x0, @binary="6e69231bd01bfa6ac2dae2c478462596e69d810ea958eb922f11e2a7dd59f58fd96f23fa87ebab68859207d056d2fa429655032c01cc76bfe41da9f02fd419298ae1e52ec438e231154aea86ea27aaaa64"}]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r14}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x400c000}, 0x40001) 1m26.110640529s ago: executing program 7 (id=1780): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400c2c2", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) ioctl$auto(r0, 0x8922, 0x24) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x22202, 0x0) pread64$auto(r2, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/2t\x00', 0xb00, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r4, 0x5, 0x0) getdents$auto(r4, &(0x7f00000004c0)={0x100, 0x7fffffffffffffff, 0x4}, 0x62d4) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x646502, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram14\x00', 0x44ee02, 0x0) fsconfig$auto_HIDEPID_NO_ACCESS(r5, 0x6, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', &(0x7f00000002c0)="e74d92f191b485eaf56ee335d933ef7cbd3dbf36456cd078243f1b6e5160a9031e1c8af79af3cbea78a1ff5ba6afae2a91b9d2df1482c6432d26fb20f6ec7137643c7ffdfa3a94019487165a574501a05f40ac9d574a1b8f9d67febe6f6913071e923fbaa138e157790feedaf9c0e90db128174544136ea20dc18d2f1bba543dafdaa7cd7ac8d94f7427870702d4654f3002c9d38a015f34edd563d6f16fde3ef35831ac801174487a", 0x1) 1m24.891343064s ago: executing program 7 (id=1784): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) unshare$auto(0x40000080) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/lru_gen/min_ttl_ms\x00', 0x2ab42, 0x0) pwritev$auto(r2, &(0x7f0000000180)={&(0x7f0000000100), 0x1}, 0x2, 0xa, 0x7fff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000010c0), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0xdd, 0x0, [{0x8ff, 0x4, 0x20000003}]}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r0, 0x8) 1m24.1680842s ago: executing program 7 (id=1787): syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid\x00') ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000040)={0x0, 0x3, 0x8000000000000001, 0x4, 0x5, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/pid_for_children\x00') 1m23.873313991s ago: executing program 7 (id=1788): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/boot_params/data\x00', 0x2c40, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4109, 0x100d) 1m23.64044812s ago: executing program 7 (id=1790): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8200, 0x6, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7k\x00\x00\x00\x00X\xb9\x0e\x11\xfb\x00\x00\x00\x00&!\x8f-\xfb\xea=\xc0\\\xec\xe7D\xe5V\xf1b\xa0\x9a\xa1\x88\xb4\x96\xf5\\\xad4\t\xca\x03\xe4\x15\v]\x00'/58, 0x82) socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, 0x0, 0x2) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf25030000000810030003020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600070001000000060007000600000008000300"], 0x68}, 0x1, 0x0, 0x0, 0x44014}, 0x40090) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m23.007972541s ago: executing program 7 (id=1792): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) readv$auto(0x3, 0x0, 0x1) ioctl$auto(r0, 0x8922, 0x24) connect$auto(0x3, 0x0, 0x255) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/5t\x00', 0x2, 0x0) r3 = pipe2$auto(&(0x7f0000000100)=r2, 0x3) getsockopt$auto(r1, 0x40, 0x3, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/0u\x00', &(0x7f0000000080)=0xfffffffb) pread64$auto(r2, 0x0, 0x0, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040004) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="38010000", @ANYRES16=r5, @ANYBLOB="000129bd7000fddbdf25810000001c007580160048002f6465762f736e642f6d6964694332443000000004005f000800c4000d00000005002f01000000000800a00001000000e300ac00d309beea832c066d89e452eaa5eb4ccb0e776a04c960136b86b97b90af1bc367d8c43404181f1d690e18ac94cb28f4dabce6d01c8f3e0099b58f49ac2fb9990f2381864162dcb0eb52420be298ee04376b05732f32675d9264cfabdda750807aa3f1eeba8b32603f84b68c8b53bd8bfef94440ddf41a6405f2c353edb645523e0e4aaf2a8f2b7fe892be2a8c92aeda4151c57fedae3e26338d51de6812845251711de0cd46826e388251db1f9bfe8de7d612e8a5cb2c4aadd32111561c722f094e98e7da52775f1d235f67687c59f963048be2e904f73c45b2af0663ad10bf000800cb00aa8a0000"], 0x138}, 0x1, 0x0, 0x0, 0x20000d0}, 0x404c000) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) r8 = socket(0x2, 0x3, 0x2) r9 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) ioctl$auto_SG_SCSI_RESET(r9, 0x2284, &(0x7f00000001c0)) setsockopt$auto(r8, 0x0, 0x8, 0xfffffffffffffffc, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x44ee02, 0x0) fsconfig$auto_HIDEPID_NO_ACCESS(0xffffffffffffffff, 0x6, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', &(0x7f00000002c0)="e74d92f191b485eaf56ee335d933ef7cbd3dbf36456cd078243f1b6e5160a9031e1c8af79af3cbea78a1ff5ba6afae2a91b9d2df1482c6432d26fb20f6ec7137643c7ffdfa3a94019487165a574501a05f40ac9d574a1b8f9d67febe6f6913071e923fbaa138e157790feedaf9c0e90db128174544136ea20dc18d2f1bba543dafdaa7cd7ac8d94f7427870702d4654f3002c9d38a015f34edd563d6f16fde3ef35831ac801174487a", 0x1) 1m7.786056936s ago: executing program 36 (id=1792): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) readv$auto(0x3, 0x0, 0x1) ioctl$auto(r0, 0x8922, 0x24) connect$auto(0x3, 0x0, 0x255) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/usb/usbmon/5t\x00', 0x2, 0x0) r3 = pipe2$auto(&(0x7f0000000100)=r2, 0x3) getsockopt$auto(r1, 0x40, 0x3, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/0u\x00', &(0x7f0000000080)=0xfffffffb) pread64$auto(r2, 0x0, 0x0, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040004) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="38010000", @ANYRES16=r5, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x20000d0}, 0x404c000) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) r8 = socket(0x2, 0x3, 0x2) r9 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) ioctl$auto_SG_SCSI_RESET(r9, 0x2284, &(0x7f00000001c0)) setsockopt$auto(r8, 0x0, 0x8, 0xfffffffffffffffc, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x44ee02, 0x0) fsconfig$auto_HIDEPID_NO_ACCESS(0xffffffffffffffff, 0x6, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', &(0x7f00000002c0)="e74d92f191b485eaf56ee335d933ef7cbd3dbf36456cd078243f1b6e5160a9031e1c8af79af3cbea78a1ff5ba6afae2a91b9d2df1482c6432d26fb20f6ec7137643c7ffdfa3a94019487165a574501a05f40ac9d574a1b8f9d67febe6f6913071e923fbaa138e157790feedaf9c0e90db128174544136ea20dc18d2f1bba543dafdaa7cd7ac8d94f7427870702d4654f3002c9d38a015f34edd563d6f16fde3ef35831ac801174487a", 0x1) 23.637482578s ago: executing program 6 (id=2019): r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/msr\x00', 0x4100, 0x0) mmap$auto(0x4000000000000000, 0x2000b, 0xa, 0xeb1, r0, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x81) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 32) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) prctl$auto(0x1, 0x1, 0x0, 0x401, 0xdd16) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) 19.890066795s ago: executing program 6 (id=2038): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/dvb_usb_cxusb/parameters/debug\x00', 0x2e983, 0x0) read$auto(r1, 0x0, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x58890) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r0) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62) getpgid$auto(0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 18.152240375s ago: executing program 6 (id=2048): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400c2c2", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) ioctl$auto(r0, 0x8922, 0x24) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r2, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/2t\x00', 0xb00, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r4, 0x5, 0x0) getdents$auto(r4, 0x0, 0x62d4) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x646502, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram14\x00', 0x44ee02, 0x0) fsconfig$auto_HIDEPID_NO_ACCESS(r5, 0x6, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', &(0x7f00000002c0)="e74d92f191b485eaf56ee335d933ef7cbd3dbf36456cd078243f1b6e5160a9031e1c8af79af3cbea78a1ff5ba6afae2a91b9d2df1482c6432d26fb20f6ec7137643c7ffdfa3a94019487165a574501a05f40ac9d574a1b8f9d67febe6f6913071e923fbaa138e157790feedaf9c0e90db128174544136ea20dc18d2f1bba543dafdaa7cd7ac8d94f7427870702d4654f3002c9d38a015f34edd563d6f16fde3ef35831ac801174487a", 0x1) 16.755493323s ago: executing program 6 (id=2054): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) execveat$auto(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x11000) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000080)=""/75, 0x4b) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000000), r0) socketpair$auto(0x1e, 0x49, 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 16.571949203s ago: executing program 6 (id=2055): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x62a6, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x73) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x2, 0x0) getsockopt$auto(0x6, 0x40000000029, 0x21, 0xfffffffffffffffe, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) 16.416725622s ago: executing program 6 (id=2056): r0 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x106) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabb) mount$auto(&(0x7f00000000c0)='ip6_vti0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x100000003, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x4a802, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) futimesat$auto(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x50}) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) clone$auto(0x20003b43, 0xe86, 0x0, 0x0, 0x2) openat$auto_ep0_operations_inode(0xffffffffffffff9c, 0x0, 0x3a9901, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x169780, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(0x2, 0x14, 0x0, 0xfffffff8) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) ioctl$auto_BLKRRPART2(0xffffffffffffffff, 0x125f, 0x0) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd70941214f9274fcdb10000000000000002ff070004"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 11.546856436s ago: executing program 1 (id=2084): mmap$auto(0xfffffffffffffffc, 0x9, 0x10001, 0x9000000eb1, 0xfffffffffffffffa, 0x8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu0/hotplug/state\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000280)='/\xff\xf2\x00\xc8\xe4\x85;\xe9\xd8\xff\x01S', 0x80000000) write$auto(r1, 0x0, 0x2) fdatasync$auto(0xffffffffffffffff) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) r3 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x383101, 0x0) getsockopt$auto_SO_PEEK_OFF(r3, 0xb6, 0x2a, &(0x7f0000000040)='/sys/kerne\x00\x00\x00\x00bug/Xtdevsim2/heaVdh/brea\x02\x00he\x00\b\x00\x00\x00', &(0x7f00000001c0)=0x1009) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0xc3400, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3dc) getcwd$auto(&(0x7f0000000540)='/sys/devices/\xde\xe7/xot\xfa\xec\x8f\xa4/}tate\x00X\xa0\xf7\xc7\x87\x92\xc9.2\x97R\xf4\xe6s\x00\xcf\x93\x1d\xe0K\xec\xacc$o\xf0\xa8\x93\x93\xe67U\xfb\xe1se\xfewZ\x03\x00\xaf\xc8$\x15\xc7\xd4\xcb\x92\x01\xecsP\x9aSM\xff\xf8\f\xcd3_oZ\x80\xdb\a\xbbY\xb7\xe9`\x1cV\xcdZ\xca\x89\x99#f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r3 = socket(0x18, 0x5, 0x1) ioctl$auto(r3, 0x7, r2) syz_genetlink_get_family_id$auto_smbd_genl(0x0, r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b47, 0x1) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bus/usb/037/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r6, 0x4008af25, &(0x7f0000000000)=0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) 5.287676976s ago: executing program 1 (id=2106): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto(r1, &(0x7f0000000000)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x272) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$auto_VHOST_SET_VRING_KICK2(r3, 0x4008af20, &(0x7f0000000100)={0x6, r2}) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) madvise$auto(0x8b1a, 0x8, 0x2) bind$auto(r2, 0x0, 0x3) unshare$auto(0x20000) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) readv$auto(r4, &(0x7f0000000240)={0x0, 0x101}, 0x9) 4.973312842s ago: executing program 5 (id=2109): socket(0x2d, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2d, 0x3, @empty}, 0x6a) r0 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim3/take_snapshot\x00', 0x28000, 0x0) getsockopt$auto_SO_TIMESTAMPING_OLD(r0, 0xb2, 0x25, &(0x7f0000000200)='/dev/loop6\x00', &(0x7f0000000240)=0xffffff00) r1 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_MARK(r1, 0x6, 0x24, &(0x7f00000001c0)='\\[^:{!$!.-\x00', &(0x7f0000000240)=0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) r2 = prctl$auto(0x3, 0x1002, 0x0, 0x0, 0xfffffffffffffff7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/pcm0c/sub3/xrun_injection\x00', 0x800, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000500), 0x222000, 0x0) statmount$auto(&(0x7f0000000280)={0xe, @raw=0xcd5, 0x6, 0x3, 0x5}, &(0x7f00000002c0)={0x2, 0x8, 0x52, 0x3, 0x9, 0x6, 0x6d, 0x2, 0x0, 0x1000, 0x7, 0x101, 0x100000000, 0xb, 0x96, 0x4526b231, 0xe56a, 0x1, 0x5, 0x8, 0x6, 0xc, 0x80000000, 0x3, 0x6, 0x200, 0x10001, 0x0, 0x4, 0x0, 0xffd2, [0x0, 0x3, 0xda5, 0x401000000000000, 0xbd64, 0x6, 0x6, 0x3, 0xbc1, 0x74, 0x14604bf4, 0x81, 0x1, 0x6, 0x7, 0x2, 0xa, 0x2, 0xffffffffffffffff, 0x1, 0x8, 0x3, 0xffffffffffffffff, 0x2, 0x1c4e, 0x8, 0x4cf, 0x0, 0x4ef, 0x30, 0x719, 0x8000000000000001, 0xffffffffffff8f8b, 0x9, 0x100, 0x4, 0x1d67d864, 0x6, 0x7e, 0x6, 0x1, 0xfd6a, 0x89f1], "456c9c36bf30a877cfef66a477bb9b073a594f6b791b72c0872b0584f2404e06395e6d2b8bf1"}, 0x2, 0xd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '*\x00'}, @OVS_VPORT_ATTR_UPCALL_PID={0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff020}}) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r4 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r4, 0x0, 0xc3) 4.123852246s ago: executing program 5 (id=2110): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) sysfs$auto(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x18, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0), 0xca400, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x1004000000008dd, 0x1000000eb1, r3, 0x0) unshare$auto(0x40000080) readahead$auto(r3, 0x2, 0x10001) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xffffffffffffffff, 0x8000) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/kvm/irq_exits\x00', 0xaa042, 0x0) write$auto(0x3, 0x0, 0x3f00) r4 = clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) wait4$auto(r4, 0x0, 0x80000000, &(0x7f0000000140)={{0x10000, 0x100080}, {0x1, 0x9}, 0x8000000000000000, 0x2, 0x9, 0x10, 0x2, 0x1, 0x5, 0x6, 0x3, 0x800000000000008, 0x4, 0x7, 0x6, 0xb4b9}) 4.061042269s ago: executing program 8 (id=2111): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) read$auto_gpiolib_fops_(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x840, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) (async) mprotect$auto(0x200000000000, 0x806124, 0x8) (async) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000140)={@sival_ptr=0x0, @inferred, 0x2}, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/quirks\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/19, 0x13) (async) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r0) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) (async) r2 = socketpair$auto(0x1000001e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r3, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}, @HWSIM_ATTR_COOKIE={0xc}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0xffffffcc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) (async) readv$auto(0x3, &(0x7f0000000600)={0x0, 0xfdf3}, 0x1da) write$auto(0x3, 0x0, 0xfdf3) (async) ioctl$auto_PPPIOCSCOMPRESS(r2, 0x4010744d, &(0x7f00000000c0)={&(0x7f0000000000)='\x00', 0xf, 0x8}) 3.988019449s ago: executing program 1 (id=2112): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x47, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad199752151699faea53575d94e9e2f930abeb4f1cd2fa58eef0e25b15baeca5f900c19f32e51de1ba99fb4f82871232b30000000000", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0xd11c, 0xb871, 0x6, 0x9ffd, 0x84, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) mmap$auto(0x0, 0x5, 0x3, 0x14, r2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) r4 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) read$auto_sco_debugfs_fops_(r4, &(0x7f0000000140)=""/211, 0xd3) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) mremap$auto(0x0, 0x1, 0x3fd6, 0x0, 0x28) 3.770238849s ago: executing program 8 (id=2113): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0xc000, 0x3d) fchdir$auto(r0) mkdir$auto(&(0x7f0000000040)='./cgroup\x00', 0x6) mmap$auto(0x0, 0x3000c, 0x4000000000df, 0x4000eb1, 0x401, 0x10000) io_uring_setup$auto(0x20, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd0\x00', 0x60043, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYBLOB="01002bbd7000fddb778a254e00001c003180150055009da6b8c2443745ef10de92b9528279a9a0000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20048014) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r2, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_DEL_PMK(r2, 0x0, 0xa040) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000000)={{0xd, 0x8, 0x5, 0x6}, "a04bf46f39edd51588b59731202c07eda4afcffbc3e6cb015bc8b8f22bca543f654b8eb037d0126e2466e0907b97df6faa48fda0355afcdc1e1e856969a4c312fb9b3661a01cd927c147dcb6d14c8015", 0xc96}) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x9, 0x9, 0x3, 0x80}, "477e73797f937be5687680ddec1c45cf8a758fb87cc9fa9b3733fb3092ce744b2c65926cd378e62ea00a888d429187a459c01b4745fe9ce1c02246996a5d875e736477c7708d06000000000000005d51", 0x8}) socket(0x26, 0x0, 0x0) pipe$auto(0x0) socketpair$auto(0x1, 0x40000001, 0x9b9, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) 3.492531997s ago: executing program 8 (id=2114): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x5, 0x1, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = bpf$auto(0x5, &(0x7f00000003c0)=@task_fd_query={0x2, 0x2, 0x80004, 0x0, 0x200000085, 0x7, 0x9, 0x5, 0x8001}, 0x101) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b4d, r1) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000100)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) r3 = timerfd_create$auto(0x8, 0x800) ioctl$auto_MON_IOCX_GET(r3, 0x40189206, 0x0) ioctl$auto_BTRFS_IOC_SCAN_DEV(r3, 0x50009404, &(0x7f0000000480)={@raw=0x80, "468aaaac06a5522e7a57519cfc0d37051aaad800edb3a7b2e38272b61e85bcd334ddf73014419f67f6dcc0c6a2a78115d0510a113a6221d0ae0b13255fe523d46f9286e1f4b28d83baa3495103a0e116b9f832f48dbe8706dc82d7499545e2bf624cc4dd93619464df423c0c8635593a2bf7433b38822e84e9677a740d934d48600b85541a1e9a556d2991a5dac620e57fb01e0a53327e1698402c9896dcec3339bf4f6dfce6adea6a988e19f301f5f69aecee7bde934140d4f1653886733f3fd7d0614bfb96eba00c788bf273dec70724826b0dc9bb6fdda3800052fb3af313eb39dcd98fb72931ce2348133ab481e7042c8abc6651d42fd655b50c33663a1356f4dacb897030236658ea3d3e6987f816a529909c3b6e9cb5a0ea5ca879a258c905fdada0251f1d39742a0ae976932391c98833ff365f97bc343440f7e9e9f2712aa981ee0c3a4a1007ae2b26e39be74b987608153de8983fad2bf3584e88d95dcfb170613b2cad13ade87b3d8068a5763994316a9039f3b4122ac274395df912336324c7cb5fa6a89a87ada92831b327bee98d23d195e450e41b2fc6576a5c8c851940a45f4600b5e63de5b83de3cf3986b0dfbd708487ecb570aff997c09987fc45112efdf7cde15b317a1a9625d687ed62292b60a3427192a7be227448617b0676ff139ead1fe32a50833260abe1964261c0f06100bd22f799e14c5b20ac419ae5709ed7b48f6ed28c2d30de03ca9dcbb4c5c3c612b12358dacb93bb74d8c579fe5d8bacf4d2cc1dec14736793b82fe53d90e894cbb3d2f593542de79500c6bb3f27647ab9ca2b46aed9d37c4b549742d98e5f51b1b55334bc5d39732ae271f5447dae676b62ef914a28018f54a28435d09f2309ed0f2f86640701f9539c826e6aa9720af82fd075d8cd6af64f2e4a1d459d87e99b0eb2bbbfe693cdfca146ad9fdd3fb055508899361fcfa76e2354be79a7fe2c6523828c30d22a9afd461bfd64434152d564ca28c2f6e553d2eb90ca387e935d81e0345bd03f0d68df85e20d417c47c6b5106c023881854259c7129910c93191b4456010c2e75f1e94e4a0e5af5da69d4b6a55b0108de24252bb992f15c303df178880d40b12a06f1dda9aff17af5cae671e29ae4b4da95ac2995a3087c719fb899752cc6fe74e677b7ff10cbfcc4712c69ad61b09ce08aecf992c5077a67939a9901fe052e2400d8fa248720e63fe8f75180e3d72fac7c16b40879b86e1b81d042102daedf2a1a4e71ea782e270c5422626845a914d7e951de4660ba169e0d2a1b46404b6d0b753e9c158f39e33a9c233ac1660e7e6c92eb44839bdb6b41b284894feb38d8e6e5781cbf3062edbe22ad979d06b086d53923f737fb02ecfd37a458a76f5eb3730424ce41ff4efff49f3032a7abc087a673f1b0744cc9a654eddaa06f48731fed9ef9ee54c2bd9b4297892692c9df57a2443edce6b50c56dce2b253820c6600a24a3dcd9b7df4144c1fbacf8e3b24e26a9c646a4c8fd284210fff0d8b1d16d6dc2f1bc3d9fd1309a65c61b6dc2a250a148f94911c152ccaf2e47cfe89170fc5629285b103312c1167d2dc81862ac0d82c044d82d6dfd37d12911419870e80806b53b9931ba86f8128dadefd03eefee615a355c1703e412ca0490f6f91c17aebe351495e4a0a63205e3999ccdfb12de8a4c02a880033182fe855b7786e1d2bd2159f310263d7e3a641c868b382648db8f1ec2f90500c3a652e4cf3a09ff34730967a72fc2e2ea5aa1d9cbaa16004fc2552d7f719602649177e8e501b5e53aa29b4764e162b5e3a9da15a32d329f2aa701a54713f3a4c6d2d7e08e9b15f65c701f15228909cbd09407bfa48fef61e2bd465df68f6da3ef5dd4a143dbe154b4f15c8e894b29b1097a6f08c5105cdbe952f2af1cb9cfd7af9a612b1a0c7b7d848aafc0ddddeaf771b0724d79b22599a2fddf997be3f44049d5c4f594b549ec6ebeaef2de1e722d84ad948091306a47bc36b26078d5f461424e110d1744419caed73cc9d5b44e24c3b159dccb2bcd1426e6b66d05adc234184cab3f8d29bbad4ef41f98dca4f0f21194818dfa7386c454cc84e2c53498c1c360f38120a88e12133b7d3306e1a187e2336b940bf6be639182f19e858c95cd83533a737b800e1bb61f7aa91640c98aa0983b391c911716cd206ccafbac1b1f6b98c4025e372be62db91558261307f9d3a2b501ba076b81fec9c3b2559509bafa9f6782042e05e44c19ed89aadbae6193efa6c8a56d569d5d2e599baa908ff54c6fc84db3cb04e40ce82ce24e0206fbb064c3dabe84381972ffaef2adab493bbcde7f9e72b2d2ebfaac228375559bd3818d97c0a28d99fb3a9468743982e67055c7bd937069e23cb429f8a41db674c591dcb4d7298407e4ec501f3612e776a1f072dfa1acb4bd3e117c0fdfc815e1d4f52ec9d807a58c68bbd0b463700912ee2ae3be93cf93e46ecd5a82c07cf6ef1ebad5eda170f1e77d007596b2901de4869aad38fb8b0513d6124fb70534692c3b008937d310487b20f9406b7c519644fb0d9e1d96b1a373ead4ee7a60da22ea995ad0b44b8d975e74c2bdd7d8522c13ca9f2586853bc307a0f407316ae11777f3149c79332c1b2e54a7a2476dfa41dd13f30ad78cc95b529140f875be7c0c45739f26846b7ae66b2f8c0d8d73f642a6cdce87445275d37a95899215d07cb77619cfc39d232d6213b4a940091912e3f98b30562eda9c83e14eed9723f1c06234f0eac5d082a3cd44cc8ea6d9145eed8e2460f308cee4a5028b6f9c10fc14fcdee75263c05953d14d5f3cf1158bc3bc562aaaba235e8e5092fb276ac39282e337979bbe634fc33adaa1a480bbfb967058316dcbe304e5b28d96543d3e6b67de42a838f48a0427581a39bdc9bcbcb3f79e4487abc8c4fdccf6c91518d84721428956908e2c180a3767c7b659d13f9572e3aef94e51d5f41ba972af3ff1ddb9f4b3f6fe0bb9927cfa279822e6a6b6f676e5fb464e10f5b43a36e573214b5daec3cb7eab2e44f31de17120b1adc3716b972cb10b6429e3a3a6cc99e9a266b486fd3b796f8389fe59e154795f4d456a66857171b93645a252324760ce97cab4f4c1458c7ad71ed447f2213e7c4632ce825057815fb212834ea8b251b4bb89281665e83e8824cdc6521cbe758b1d8fbea75d379bc6d101330c25bd480b5e748be15e8fd8b7427bc5ec284bcc8f8fdefc1569538d5e5851d4b9a6768eca9d24d9b20b36e90e21a30c89ed977ae673735053dd7f321b179536b8e4962bb5cca884d294cc93735184cf6a8a34b19aca7c49513430b3394f21fbabefa63421391a4e3685919d84e7efc2c6db98aae745f281fb9e7a4da4370745978fd13ae8daecdb1f23b2e5847e22203d2f5b2f26df9d9df4f2bfd81dc9c5f59691cb460f2b0e9d9355318681c0b0b67a011a8e56c17ab9e09ac7db9ef608c5c26181498090b82682de78860d326a71bd8187ee021504c4f5d2d538975163e82f9a836237f205afdac8c3f7a8e41d8d6ab9d83e5f422e7f6abd32b6c6cd764399cdb14807a0ee0b761e76065e63f52f951fda67891577876fdaeabf2ee61c1749ce763964b3819f5e4a5a3d522edbf5a2fe720535a4b283c6402f96dd16ef87b18b790617f770884d31c4d196db71e9080643d21dcb586c4129bf774e97af131ffc855b1c5d5dfe2c89cbcb719d9ee53586904bb5dc34b0bf8eb7fe6967ecd5755471ece726b159603e47b2412e3b2e9db2c88e03a5979fd2bd683a914c4220ec34f97048ff27bfdf7d484f6749e1cf2dfe59829fe06ba41077032bd4d396a4d22473cace479f34ad9491c6e7588884c0eafaa32f2746af9d67dabfd51d271facf466fa0f4e73b288c1508167db4581c9a1ba3510fa647047077ace5bd1c8c1333653c2e0c6f7b57ca637a23a4fccd024ee4610964c0a5591e78f2f3da4064762dc80a9fe53c96c49b46664974dba640a6b0cf380968104efb6cbb9ef65b2299e544f27c0bfccc8e8ae7eb8bbabdd42a470000424a6b618e584cc8aa3980e7d0fc64e4f3191573acbd00176b9c95c9b3b6bc915ebfa5a72687f162924c371588bab155be8d9b5e7bbf578c51f0d7475c20dcf58605b760437df7062cad765f31334dd7e5bac2a69349e51db8b161cadab21e6933ac54878f30f31829e88458cbed3337abbb92ea229a1158712c4955d7f6bce5b10c1c99bd327e235fdee9e20149224e27d1b0266d24f4d5e3df73e654e08248cd9adeb68a5479a6d4a2cd1dc1295e8c9611e98f8c6788dfb8e0b8843c24ec5a9835b7fd74f4482d59843158f32a537c7a14e738d330a6e9d62a816c4c8e9cb83bf0218be3e1fedfdb6fa35eaff8ece44e585465ccdb2ad739e0df31ce37792af6aee3e37861a65458531ee771056b808a512b22c365c8b2bee98c7a39de92dd764a819c614b5902f5dd5e1a669b1a42dc86c99b9bdc2bd6958ffb91356feb14aff9a5c7c27ea8c55dc0f9426003b13e64fd1e3c336fbb1073d3bc06dfa5607fb4ab4186b93f415a0723b293ca9307c02f197c47501bfdba31f3d6d7a134e1ee857f06aee30e19f7eeffe990bb1f058b681c21b29d91ada2363391c3bd2dd20288714bbd5243b89deab80182b9948786c8c006dcae6ee9701b72cfbfeda6b1787aacdc2a870c9a362cf25af5a67361894f1238f2c6ce00a692e21c7d5792c4866eee7fd10f40dc943ba8ac7c3b82fe4dad133b5a07f8fa054d8fc7bff8cb9c3de3f4af68d634781094566ce26533639737561a4baddbdbc9f955102126556674e55b0684314c68bc9cff4e029801e932b2b2d15637b7b19277d183aeb1276a425c449718970897cacce0b285867a526710acc63452aa6a34701ba5139960140388c06e9c9480386559f4bb9cf3348a5388da1eee33b946acf6acfd764a8724567fc4c0a2cf418e8ff679095f92628aa07c20dd725e3a8a7bf8b64735b188148b812f8c752094a7ca4fbc92d3070b05c7cd4b17ef073751714f4c82dc34c7fdcb332d47961da17703689fcb9bad20ee6d341d96fec498551b62665822ec536912955babe63544e160857cc42dc679e0ec682f14dd060416c073bf9ef16cbdcbbbe88bc9b5be819fdeb80aad88e94748325fcd743bc05f0431014cda9917519e0bdcef438f4ff5f9355e2aae034b79c1d089dc83d9c4d8263ee71e6b8a8134ba1522e43ec53826878d022b2023979e0bb8aaa0aa53e3b1dfc1abac2280bcffa5590604803e95f90eb2879ef31618f4f0ae54b3f321f25d42e75ee67ef57b960200ae1a6680298ccc4c8a54b7641164da00ed49605c7eeb18141fe20a4ebf7d772a9a21f8afe106ffe83ce208a74972c679889f5bcfd4eba51b9e0bb36278677aba631ed1c11e489168a501e04d7f3c882cd4bf6497b20b6bb8f73f777cc09f1f63ec3abc79fcde90441b4c070331f1dec12eb70e4977d2f717a41740815b988c696db3ec6710ce92018885324895e434948bff5878149801ab4177ca8b3faacfc2ef2bf80b385a9531235c32811c78daed1e05e21a5d509c9c176aa805a6000030cef9bd931aa17c61e7839a970d7f7267285e3e46be323bd51cc9db28ff33dbffbd5a0970885bd26428189e97b42086ecaf10403e0a71c2f807a7b0196b8f69d5f95b38247e6b19dfe69ce9070754c8c4c37f60ae37eb2f341e0df3788b7ba726457451f75516a5e504c27780b911e497d750564b4a5b3b7ff3e205a2176d764f49e73bf0400d410f1059a8b6a6f2cb0"}) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x60, 0x0, 0x1000000000003, 0x40) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) mmap$auto(0x4, 0x6, 0xdf, 0x1d, r0, 0xffffffffffff3cc2) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x58f1, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xfffffffffffffffd, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r4, 0x8, 0xfffffe02) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) 2.829824043s ago: executing program 5 (id=2115): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) r0 = socket(0x1e, 0x5, 0x40) close_range$auto(r0, r0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) getcwd$auto(0x0, 0x7) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x40103, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r1, 0x0, 0x4000002) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) setgroups$auto(0xe32, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 2.591374224s ago: executing program 8 (id=2116): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1a/sun\x00', 0x0, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) read$auto(r0, 0x0, 0x20) syz_clone3(&(0x7f0000000640)={0x108000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0xe3) io_uring_setup$auto(0x6, 0x0) 1.634126643s ago: executing program 5 (id=2117): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x4ad83, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x0, 0x6, 0x7) ioctl$auto(0x3, 0xae43, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4040ae9e, &(0x7f0000000100)={0x2, 0x0, [{0x4, 0x200, 0x4}, {0x7f, 0xb, 0x7fffffff}]}) 1.408739986s ago: executing program 5 (id=2118): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x9, 0x1ff, 0x4, 0x4000000000014, r0, 0xceb) socket(0xa, 0x3, 0x40000073) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x668401, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dmmidi2\x00', 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) cachestat$auto(r1, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0xa001, 0x0) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000080)=@in={0x2, 0x4e20, @local}, 0x1c) 1.396618603s ago: executing program 37 (id=2056): r0 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x106) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabb) mount$auto(&(0x7f00000000c0)='ip6_vti0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x100000003, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x4a802, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) futimesat$auto(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x50}) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) clone$auto(0x20003b43, 0xe86, 0x0, 0x0, 0x2) openat$auto_ep0_operations_inode(0xffffffffffffff9c, 0x0, 0x3a9901, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x169780, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(0x2, 0x14, 0x0, 0xfffffff8) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) ioctl$auto_BLKRRPART2(0xffffffffffffffff, 0x125f, 0x0) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd70941214f9274fcdb10000000000000002ff070004"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 949.033058ms ago: executing program 8 (id=2120): socket(0xa, 0x3, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x7fffffff, 0x0, 0x9) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x101480, 0x0) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) chdir$auto(&(0x7f00000000c0)='./file0\x00') r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x400, 0x0) read$auto(r2, &(0x7f0000000000)='/\x00', 0x6) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) madvise$auto(0x0, 0x1, 0xc) close_range$auto(r0, 0x8, 0x0) ioctl$auto(0x3, 0x800005411, 0x38) 411.934299ms ago: executing program 1 (id=2121): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) sendmsg$auto_ETHTOOL_MSG_MM_SET(r1, 0x0, 0x40) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x800000008000) getsockopt$auto(r0, 0x84, 0x66, 0x0, &(0x7f0000000000)=0x7ffe) 0s ago: executing program 5 (id=2122): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40048c5) lstat$auto(0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) madvise$auto(0xcd17, 0x80, 0x2) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x8031ca, 0x9) mprotect$auto(0x0, 0x806121, 0x8) kernel console output (not intermixed with test programs): 449.244109][T13616] [U] [ 449.305431][T13616] [U] [ 449.308127][T13616] [U] [ 449.310793][T13616] [U] [ 449.313459][T13616] [U] [ 449.328914][T13616] [U] [ 449.331606][T13616] [U] [ 449.334275][T13616] [U] [ 449.336941][T13616] [U] [ 449.362670][T13616] [U] [ 449.365362][T13616] [U] [ 449.368029][T13616] [U] [ 449.370692][T13616] [U] [ 449.387774][T13616] [U] [ 449.390466][T13616] [U] [ 449.393134][T13616] [U] [ 449.395801][T13616] [U] [ 449.421158][T13616] [U] [ 449.423850][T13616] [U] [ 449.426519][T13616] [U] [ 449.429189][T13616] [U] [ 449.462871][T13616] [U] [ 449.465564][T13616] [U] [ 449.468231][T13616] [U] [ 449.470897][T13616] [U] [ 449.504298][T13616] [U] [ 449.506991][T13616] [U] [ 449.509657][T13616] [U] [ 449.512320][T13616] [U] [ 449.524204][T13616] [U] [ 449.526892][T13616] [U] [ 449.529558][T13616] [U] [ 449.532222][T13616] [U] [ 449.579782][T13616] [U] [ 449.582481][T13616] [U] [ 449.585149][T13616] [U] [ 449.587813][T13616] [U] [ 449.706054][T13616] [U] [ 449.784652][ T5830] Bluetooth: hci5: command tx timeout [ 450.415963][T13640] Setting dangerous option i915.mitigations - tainting kernel [ 450.657240][T13640] mtrr: base(0x1000) is not aligned on a size(0x0000) boundary [ 451.488413][T13649] FAULT_INJECTION: forcing a failure. [ 451.488413][T13649] name fail_futex, interval 1, probability 0, space 0, times 0 [ 451.504740][T13649] CPU: 0 UID: 0 PID: 13649 Comm: syz.5.1580 Tainted: G U L syzkaller #0 PREEMPT(full) [ 451.504765][T13649] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 451.504771][T13649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.504780][T13649] Call Trace: [ 451.504785][T13649] [ 451.504791][T13649] dump_stack_lvl+0x100/0x190 [ 451.504816][T13649] should_fail_ex.cold+0x5/0xa [ 451.504834][T13649] get_futex_key+0x295/0x1620 [ 451.504853][T13649] ? __pfx_get_futex_key+0x10/0x10 [ 451.504868][T13649] ? lock_acquire+0x1cf/0x380 [ 451.504892][T13649] futex_wake+0xea/0x530 [ 451.504914][T13649] ? __pfx_futex_wake+0x10/0x10 [ 451.504935][T13649] ? exit_mm_release+0x19/0x30 [ 451.504957][T13649] do_futex+0x32b/0x350 [ 451.504975][T13649] ? __pfx_do_futex+0x10/0x10 [ 451.504991][T13649] ? __might_fault+0xc5/0x140 [ 451.505015][T13649] mm_release+0x24a/0x2f0 [ 451.505029][T13649] do_exit+0x675/0x2aa0 [ 451.505050][T13649] ? __pfx_do_exit+0x10/0x10 [ 451.505068][T13649] ? do_raw_spin_lock+0x128/0x260 [ 451.505087][T13649] ? find_held_lock+0x2b/0x80 [ 451.505109][T13649] ? get_signal+0x7e0/0x21e0 [ 451.505125][T13649] do_group_exit+0xd5/0x2a0 [ 451.505145][T13649] get_signal+0x1ec7/0x21e0 [ 451.505161][T13649] ? __pfx_full_proxy_read+0x10/0x10 [ 451.505186][T13649] ? vfs_read+0x243/0xb30 [ 451.505208][T13649] ? __pfx_get_signal+0x10/0x10 [ 451.505222][T13649] ? __pfx_vfs_read+0x10/0x10 [ 451.505241][T13649] ? find_held_lock+0x2b/0x80 [ 451.505262][T13649] ? __fget_files+0x215/0x3d0 [ 451.505291][T13649] arch_do_signal_or_restart+0x91/0x770 [ 451.505309][T13649] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 451.505332][T13649] ? __x64_sys_pread64+0x196/0x250 [ 451.505357][T13649] exit_to_user_mode_loop+0x86/0x4a0 [ 451.505377][T13649] do_syscall_64+0x668/0xf80 [ 451.505393][T13649] ? clear_bhb_loop+0x40/0x90 [ 451.505411][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.505431][T13649] RIP: 0033:0x7fe46db9c629 [ 451.505443][T13649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.505457][T13649] RSP: 002b:00007fe46eaf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 451.505472][T13649] RAX: fffffffffffffffc RBX: 00007fe46de16090 RCX: 00007fe46db9c629 [ 451.505481][T13649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 451.505489][T13649] RBP: 00007fe46eaf4090 R08: 0000000000000000 R09: 0000000000000000 [ 451.505498][T13649] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 451.505506][T13649] R13: 00007fe46de16128 R14: 00007fe46de16090 R15: 00007ffc65be3c08 [ 451.505525][T13649] [ 452.020415][T13668] FAULT_INJECTION: forcing a failure. [ 452.020415][T13668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.035050][T13668] CPU: 0 UID: 0 PID: 13668 Comm: syz.5.1583 Tainted: G U L syzkaller #0 PREEMPT(full) [ 452.035075][T13668] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 452.035081][T13668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 452.035090][T13668] Call Trace: [ 452.035095][T13668] [ 452.035101][T13668] dump_stack_lvl+0x100/0x190 [ 452.035126][T13668] should_fail_ex.cold+0x5/0xa [ 452.035144][T13668] _copy_to_user+0x32/0xd0 [ 452.035168][T13668] simple_read_from_buffer+0xcb/0x170 [ 452.035190][T13668] proc_fail_nth_read+0x1af/0x230 [ 452.035208][T13668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 452.035225][T13668] ? rw_verify_area+0xce/0x6d0 [ 452.035244][T13668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 452.035259][T13668] vfs_read+0x1e4/0xb30 [ 452.035289][T13668] ? __pfx_vfs_read+0x10/0x10 [ 452.035309][T13668] ? __fget_files+0x215/0x3d0 [ 452.035335][T13668] ? __fget_files+0x21f/0x3d0 [ 452.035361][T13668] ksys_read+0x12a/0x250 [ 452.035381][T13668] ? __pfx_ksys_read+0x10/0x10 [ 452.035407][T13668] do_syscall_64+0x106/0xf80 [ 452.035423][T13668] ? clear_bhb_loop+0x40/0x90 [ 452.035441][T13668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.035456][T13668] RIP: 0033:0x7fe46db5cece [ 452.035469][T13668] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 452.035483][T13668] RSP: 002b:00007fe46eaf3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 452.035497][T13668] RAX: ffffffffffffffda RBX: 00007fe46eaf46c0 RCX: 00007fe46db5cece [ 452.035507][T13668] RDX: 000000000000000f RSI: 00007fe46eaf40a0 RDI: 0000000000000002 [ 452.035516][T13668] RBP: 00007fe46eaf4090 R08: 0000000000000000 R09: 0000000000000000 [ 452.035524][T13668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.035533][T13668] R13: 00007fe46de16128 R14: 00007fe46de16090 R15: 00007ffc65be3c08 [ 452.035552][T13668] [ 452.243050][T13658] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 452.249736][T13658] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 452.256058][T13658] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 452.262102][T13658] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 452.268680][T13658] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 452.274641][T13658] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 452.283352][T13658] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 452.290991][T13658] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 452.297255][T13658] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 452.306128][T13658] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 452.595334][T13676] [U] [ 452.598125][T13676] [U] [ 452.600794][T13676] [U] [ 452.603461][T13676] [U] [ 452.640835][T13676] [U] [ 452.643535][T13676] [U] [ 452.646205][T13676] [U] [ 452.648871][T13676] [U] [ 452.783153][T13676] [U] [ 452.785860][T13676] [U] [ 452.788527][T13676] [U] [ 452.791198][T13676] [U] [ 452.893834][T13676] [U] [ 452.896532][T13676] [U] [ 452.899202][T13676] [U] [ 452.901867][T13676] [U] [ 452.962105][T13676] [U] [ 452.964814][T13676] [U] [ 452.967484][T13676] [U] [ 452.970150][T13676] [U] [ 452.977998][T13686] syz.2.1587 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 453.000920][T13676] [U] [ 453.003610][T13676] [U] [ 453.006282][T13676] [U] [ 453.008947][T13676] [U] [ 453.027683][T13686] FAULT_INJECTION: forcing a failure. [ 453.027683][T13686] name failslab, interval 1, probability 0, space 0, times 0 [ 453.053422][T13676] [U] [ 453.056106][T13676] [U] [ 453.058772][T13676] [U] [ 453.061438][T13676] [U] [ 453.088674][T13686] CPU: 0 UID: 0 PID: 13686 Comm: syz.2.1587 Tainted: G U L syzkaller #0 PREEMPT(full) [ 453.088701][T13686] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 453.088706][T13686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.088716][T13686] Call Trace: [ 453.088721][T13686] [ 453.088727][T13686] dump_stack_lvl+0x100/0x190 [ 453.088755][T13686] should_fail_ex.cold+0x5/0xa [ 453.088773][T13686] should_failslab+0xc2/0x120 [ 453.088797][T13686] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 453.088819][T13686] ? __kernfs_new_node+0xd2/0x960 [ 453.088844][T13686] __kernfs_new_node+0xd2/0x960 [ 453.088866][T13686] ? __pfx___kernfs_new_node+0x10/0x10 [ 453.088890][T13686] ? find_held_lock+0x2b/0x80 [ 453.088912][T13686] ? kernfs_root+0xee/0x2a0 [ 453.088929][T13686] ? kernfs_root+0xee/0x2a0 [ 453.088952][T13686] kernfs_new_node+0x11b/0x1a0 [ 453.088976][T13686] __kernfs_create_file+0x53/0x350 [ 453.088993][T13686] sysfs_add_file_mode_ns+0x207/0x3c0 [ 453.089016][T13686] sysfs_merge_group+0x194/0x340 [ 453.089036][T13686] ? __pfx_sysfs_merge_group+0x10/0x10 [ 453.089058][T13686] ? __pfx_dev_add_physical_location+0x10/0x10 [ 453.089080][T13686] ? bus_to_subsys+0x114/0x150 [ 453.089097][T13686] dpm_sysfs_add+0x237/0x280 [ 453.089119][T13686] device_add+0x9ef/0x1950 [ 453.089142][T13686] ? __pfx_device_add+0x10/0x10 [ 453.089168][T13686] ? lockdep_init_map_type+0x5c/0x250 [ 453.089188][T13686] ? __init_waitqueue_head+0xca/0x150 [ 453.089215][T13686] rfkill_register+0x1ad/0xb30 [ 453.089240][T13686] nfc_register_device+0x11f/0x3e0 [ 453.089257][T13686] nci_register_device+0x7f1/0xb80 [ 453.089281][T13686] ? __pfx_nci_register_device+0x10/0x10 [ 453.089305][T13686] ? lockdep_init_map_type+0x5c/0x250 [ 453.089328][T13686] virtual_ncidev_open+0x141/0x220 [ 453.089343][T13686] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 453.089358][T13686] misc_open+0x26d/0x450 [ 453.089380][T13686] ? __pfx_misc_open+0x10/0x10 [ 453.089401][T13686] chrdev_open+0x234/0x6a0 [ 453.089423][T13686] ? __pfx_apparmor_file_open+0x10/0x10 [ 453.089443][T13686] ? __pfx_chrdev_open+0x10/0x10 [ 453.089466][T13686] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 453.089494][T13686] do_dentry_open+0x6d8/0x1660 [ 453.089515][T13686] ? __pfx_chrdev_open+0x10/0x10 [ 453.089542][T13686] vfs_open+0x82/0x3f0 [ 453.089561][T13686] path_openat+0x208c/0x31a0 [ 453.089581][T13686] ? __pfx_path_openat+0x10/0x10 [ 453.089611][T13686] do_file_open+0x20e/0x430 [ 453.089626][T13686] ? __pfx_do_file_open+0x10/0x10 [ 453.089655][T13686] ? alloc_fd+0x476/0x790 [ 453.089678][T13686] ? do_getname+0x191/0x390 [ 453.089696][T13686] do_sys_openat2+0x10d/0x1e0 [ 453.089714][T13686] ? __pfx_do_sys_openat2+0x10/0x10 [ 453.089732][T13686] ? __fget_files+0x21f/0x3d0 [ 453.089757][T13686] __x64_sys_openat+0x12d/0x210 [ 453.089775][T13686] ? __pfx___x64_sys_openat+0x10/0x10 [ 453.089801][T13686] do_syscall_64+0x106/0xf80 [ 453.089816][T13686] ? clear_bhb_loop+0x40/0x90 [ 453.089835][T13686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.089850][T13686] RIP: 0033:0x7f25c9f9c629 [ 453.089864][T13686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.089878][T13686] RSP: 002b:00007f25cae10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 453.089893][T13686] RAX: ffffffffffffffda RBX: 00007f25ca215fa0 RCX: 00007f25c9f9c629 [ 453.089903][T13686] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 453.089912][T13686] RBP: 00007f25ca032b39 R08: 0000000000000000 R09: 0000000000000000 [ 453.089921][T13686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.089929][T13686] R13: 00007f25ca216038 R14: 00007f25ca215fa0 R15: 00007fff264d8368 [ 453.089950][T13686] [ 453.091627][T13676] [U] [ 453.457878][T13676] [U] [ 453.460546][T13676] [U] [ 453.463210][T13676] [U] [ 453.518379][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 453.911260][T13676] [U] [ 454.345350][ T5830] Bluetooth: hci5: command 0x0c1a tx timeout [ 454.351395][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 454.357538][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 454.363550][T13448] Bluetooth: hci1: command 0x0c1a tx timeout [ 454.370263][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 454.434680][T13713] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 454.809104][T13733] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1595'. [ 454.843863][T13733] FAULT_INJECTION: forcing a failure. [ 454.843863][T13733] name failslab, interval 1, probability 0, space 0, times 0 [ 454.910048][T13733] CPU: 0 UID: 0 PID: 13733 Comm: syz.1.1595 Tainted: G U L syzkaller #0 PREEMPT(full) [ 454.910075][T13733] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 454.910081][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.910090][T13733] Call Trace: [ 454.910095][T13733] [ 454.910101][T13733] dump_stack_lvl+0x100/0x190 [ 454.910127][T13733] should_fail_ex.cold+0x5/0xa [ 454.910145][T13733] should_failslab+0xc2/0x120 [ 454.910168][T13733] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 454.910188][T13733] ? skb_clone+0x190/0x400 [ 454.910211][T13733] skb_clone+0x190/0x400 [ 454.910230][T13733] netlink_deliver_tap+0xaed/0xcc0 [ 454.910252][T13733] netlink_unicast+0x70c/0x870 [ 454.910272][T13733] ? __pfx_netlink_unicast+0x10/0x10 [ 454.910288][T13733] ? __alloc_skb+0x5b7/0x710 [ 454.910309][T13733] netlink_ack+0x655/0xb80 [ 454.910332][T13733] netlink_rcv_skb+0x333/0x420 [ 454.910349][T13733] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 454.910367][T13733] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 454.910392][T13733] ? netlink_deliver_tap+0x1ae/0xcc0 [ 454.910411][T13733] netlink_unicast+0x5aa/0x870 [ 454.910431][T13733] ? __pfx_netlink_unicast+0x10/0x10 [ 454.910448][T13733] ? __pfx___might_resched+0x10/0x10 [ 454.910468][T13733] ? __lock_acquire+0x4a5/0x2630 [ 454.910491][T13733] netlink_sendmsg+0x8b0/0xda0 [ 454.910512][T13733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.910528][T13733] ? __import_iovec+0x1d2/0x640 [ 454.910553][T13733] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 454.910574][T13733] ____sys_sendmsg+0xa54/0xc30 [ 454.910600][T13733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.910622][T13733] ? rcu_is_watching+0x12/0xc0 [ 454.910642][T13733] ? ___sys_sendmsg+0x19d/0x1e0 [ 454.910660][T13733] ? kfree+0x2ec/0x6b0 [ 454.910680][T13733] ___sys_sendmsg+0x190/0x1e0 [ 454.910702][T13733] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.910739][T13733] ? __pfx___might_resched+0x10/0x10 [ 454.910764][T13733] __sys_sendmmsg+0x205/0x430 [ 454.910782][T13733] ? __pfx___sys_sendmmsg+0x10/0x10 [ 454.910804][T13733] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 454.910830][T13733] ? fput+0x79/0x100 [ 454.910845][T13733] ? ksys_write+0x1ac/0x250 [ 454.910866][T13733] ? __pfx_ksys_write+0x10/0x10 [ 454.910890][T13733] __x64_sys_sendmmsg+0x9c/0x100 [ 454.910906][T13733] ? lockdep_hardirqs_on+0x78/0x100 [ 454.910922][T13733] do_syscall_64+0x106/0xf80 [ 454.910943][T13733] ? clear_bhb_loop+0x40/0x90 [ 454.910961][T13733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.910976][T13733] RIP: 0033:0x7fdc8879c629 [ 454.910988][T13733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.911003][T13733] RSP: 002b:00007fdc895ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 454.911017][T13733] RAX: ffffffffffffffda RBX: 00007fdc88a16180 RCX: 00007fdc8879c629 [ 454.911027][T13733] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 454.911036][T13733] RBP: 00007fdc895ac090 R08: 0000000000000000 R09: 0000000000000000 [ 454.911044][T13733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.911053][T13733] R13: 00007fdc88a16218 R14: 00007fdc88a16180 R15: 00007ffdd04f1598 [ 454.911072][T13733] [ 455.351789][T13743] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1597'. [ 455.360990][T13743] \: renamed from lo (while UP) [ 455.500127][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 455.508781][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 455.516633][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 455.564196][T13748] [U] [ 455.566980][T13748] [U] [ 455.569653][T13748] [U] [ 455.572322][T13748] [U] [ 455.598098][T13748] [U] [ 455.600794][T13748] [U] [ 455.603461][T13748] [U] [ 455.606125][T13748] [U] [ 455.609624][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 455.627143][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 455.657512][T13748] [U] [ 455.660205][T13748] [U] [ 455.662873][T13748] [U] [ 455.665537][T13748] [U] [ 455.676426][T13748] [U] [ 455.679112][T13748] [U] [ 455.681779][T13748] [U] [ 455.684445][T13748] [U] [ 455.804230][T13748] [U] [ 455.806934][T13748] [U] [ 455.809603][T13748] [U] [ 455.812270][T13748] [U] [ 455.868342][T13748] [U] [ 455.871041][T13748] [U] [ 455.873707][T13748] [U] [ 455.876377][T13748] [U] [ 455.916087][T13754] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 455.930017][T13748] [U] [ 455.932711][T13748] [U] [ 455.935384][T13748] [U] [ 455.938052][T13748] [U] [ 455.968733][T13748] [U] [ 455.971434][T13748] [U] [ 455.974106][T13748] [U] [ 455.976778][T13748] [U] [ 456.036314][T13748] [U] [ 456.039014][T13748] [U] [ 456.041685][T13748] [U] [ 456.044352][T13748] [U] [ 456.087304][T13748] [U] [ 456.090003][T13748] [U] [ 456.092669][T13748] [U] [ 456.095334][T13748] [U] [ 456.127587][T13748] [U] [ 456.130282][T13748] [U] [ 456.132947][T13748] [U] [ 456.135611][T13748] [U] [ 456.187529][T13748] [U] [ 456.190230][T13748] [U] [ 456.192899][T13748] [U] [ 456.195564][T13748] [U] [ 456.232759][T13748] [U] [ 456.235456][T13748] [U] [ 456.238122][T13748] [U] [ 456.240787][T13748] [U] [ 456.259911][T13745] chnl_net:caif_netlink_parms(): no params data found [ 456.292019][T13748] [U] [ 456.294709][T13748] [U] [ 456.297374][T13748] [U] [ 456.300042][T13748] [U] [ 456.328008][T13748] [U] [ 456.330701][T13748] [U] [ 456.333372][T13748] [U] [ 456.336041][T13748] [U] [ 456.354796][T13748] [U] [ 456.357484][T13748] [U] [ 456.360149][T13748] [U] [ 456.362818][T13748] [U] [ 456.381501][T13748] [U] [ 456.384194][T13748] [U] [ 456.386862][T13748] [U] [ 456.389529][T13748] [U] [ 456.416340][T13745] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.424284][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 456.430320][T13716] Bluetooth: hci4: command 0x0c1a tx timeout [ 456.444910][T13745] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.454420][T13748] [U] [ 456.461325][T13745] bridge_slave_0: entered allmulticast mode [ 456.493830][T13745] bridge_slave_0: entered promiscuous mode [ 456.521717][T13745] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.548594][T13745] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.565173][T13745] bridge_slave_1: entered allmulticast mode [ 456.579771][T13745] bridge_slave_1: entered promiscuous mode [ 456.663108][T13779] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input81 [ 456.739990][T13745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.829654][T13745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.970753][T13745] team0: Port device team_slave_0 added [ 457.010331][T13745] team0: Port device team_slave_1 added [ 457.221324][T13745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.247503][T13790] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input82 [ 457.264279][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.352266][T13745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.455016][T13745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.473740][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.530844][T13745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.705147][ T5828] Bluetooth: hci6: command tx timeout [ 457.748441][T13797] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1607'. [ 457.795700][T13745] hsr_slave_0: entered promiscuous mode [ 457.811625][T13745] hsr_slave_1: entered promiscuous mode [ 457.840913][T13745] debugfs: 'hsr0' already exists in 'hsr' [ 457.861640][T13745] Cannot create hsr debugfs directory [ 458.438313][T13815] [U] [ 458.441100][T13815] [U] [ 458.443767][T13815] [U] [ 458.446433][T13815] [U] [ 458.470544][T13815] [U] [ 458.473247][T13815] [U] [ 458.475916][T13815] [U] [ 458.478590][T13815] [U] [ 458.503789][T13815] [U] [ 458.506487][T13815] [U] [ 458.509157][T13815] [U] [ 458.511823][T13815] [U] [ 458.521076][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 458.527390][T13716] Bluetooth: hci4: command 0x0c1a tx timeout [ 458.548693][T13815] [U] [ 458.551384][T13815] [U] [ 458.554051][T13815] [U] [ 458.556720][T13815] [U] [ 458.571961][T13815] [U] [ 458.574649][T13815] [U] [ 458.577317][T13815] [U] [ 458.579984][T13815] [U] [ 458.600979][T13745] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 458.610924][T13815] [U] [ 458.613608][T13815] [U] [ 458.616278][T13815] [U] [ 458.618948][T13815] [U] [ 458.628384][T13745] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 458.636312][T13815] [U] [ 458.638996][T13815] [U] [ 458.641665][T13815] [U] [ 458.644330][T13815] [U] [ 458.650188][T13745] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 458.657525][T13815] [U] [ 458.660214][T13815] [U] [ 458.662881][T13815] [U] [ 458.665546][T13815] [U] [ 458.672348][T13745] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 458.679676][T13815] [U] [ 458.682358][T13815] [U] [ 458.685023][T13815] [U] [ 458.687689][T13815] [U] [ 458.702737][T13815] [U] [ 458.705422][T13815] [U] [ 458.708092][T13815] [U] [ 458.710761][T13815] [U] [ 458.731932][T13815] [U] [ 458.734627][T13815] [U] [ 458.737295][T13815] [U] [ 458.739962][T13815] [U] [ 458.760320][T13815] [U] [ 458.763009][T13815] [U] [ 458.765679][T13815] [U] [ 458.768348][T13815] [U] [ 458.804610][T13815] [U] [ 458.807303][T13815] [U] [ 458.809971][T13815] [U] [ 458.812641][T13815] [U] [ 458.818743][T13745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.857739][T13815] [U] [ 458.860431][T13815] [U] [ 458.863098][T13815] [U] [ 458.865765][T13815] [U] [ 458.883868][T13745] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.899668][T13815] [U] [ 458.902355][T13815] [U] [ 458.905022][T13815] [U] [ 458.907688][T13815] [U] [ 458.919878][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.926999][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.948644][T13815] [U] [ 458.951331][T13815] [U] [ 458.953999][T13815] [U] [ 458.956664][T13815] [U] [ 458.972998][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.980113][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.002876][T13815] [U] [ 459.005564][T13815] [U] [ 459.008232][T13815] [U] [ 459.010899][T13815] [U] [ 459.035673][T13815] [U] [ 459.038363][T13815] [U] [ 459.041033][T13815] [U] [ 459.043702][T13815] [U] [ 459.091839][T13815] [U] [ 459.094567][T13815] [U] [ 459.097235][T13815] [U] [ 459.099901][T13815] [U] [ 459.149612][T13815] [U] [ 459.152307][T13815] [U] [ 459.154972][T13815] [U] [ 459.157642][T13815] [U] [ 459.181179][T13745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.206132][T13815] [U] [ 459.208830][T13815] [U] [ 459.211498][T13815] [U] [ 459.214166][T13815] [U] [ 459.238692][T13815] [U] [ 459.241379][T13815] [U] [ 459.244044][T13815] [U] [ 459.246710][T13815] [U] [ 459.381970][T13815] [U] [ 459.399600][T13824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1612'. [ 459.639382][T13845] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1614'. [ 459.689434][T13845] FAULT_INJECTION: forcing a failure. [ 459.689434][T13845] name failslab, interval 1, probability 0, space 0, times 0 [ 459.759302][T13845] CPU: 0 UID: 0 PID: 13845 Comm: syz.1.1614 Tainted: G U L syzkaller #0 PREEMPT(full) [ 459.759328][T13845] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 459.759334][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.759343][T13845] Call Trace: [ 459.759347][T13845] [ 459.759353][T13845] dump_stack_lvl+0x100/0x190 [ 459.759380][T13845] should_fail_ex.cold+0x5/0xa [ 459.759397][T13845] should_failslab+0xc2/0x120 [ 459.759421][T13845] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 459.759442][T13845] ? __alloc_skb+0x140/0x710 [ 459.759466][T13845] __alloc_skb+0x140/0x710 [ 459.759479][T13845] ? __alloc_skb+0x5b7/0x710 [ 459.759492][T13845] ? __pfx___alloc_skb+0x10/0x10 [ 459.759512][T13845] netlink_ack+0x117/0xb80 [ 459.759535][T13845] netlink_rcv_skb+0x333/0x420 [ 459.759552][T13845] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 459.759570][T13845] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.759594][T13845] ? netlink_deliver_tap+0x1ae/0xcc0 [ 459.759614][T13845] netlink_unicast+0x5aa/0x870 [ 459.759633][T13845] ? __pfx_netlink_unicast+0x10/0x10 [ 459.759650][T13845] ? __pfx___might_resched+0x10/0x10 [ 459.759670][T13845] ? __lock_acquire+0x4a5/0x2630 [ 459.759693][T13845] netlink_sendmsg+0x8b0/0xda0 [ 459.759713][T13845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.759729][T13845] ? __import_iovec+0x1d2/0x640 [ 459.759753][T13845] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 459.759776][T13845] ____sys_sendmsg+0xa54/0xc30 [ 459.759797][T13845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.759819][T13845] ? rcu_is_watching+0x12/0xc0 [ 459.759840][T13845] ? ___sys_sendmsg+0x19d/0x1e0 [ 459.759859][T13845] ? kfree+0x2ec/0x6b0 [ 459.759878][T13845] ___sys_sendmsg+0x190/0x1e0 [ 459.759900][T13845] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.759937][T13845] ? __pfx___might_resched+0x10/0x10 [ 459.759960][T13845] __sys_sendmmsg+0x205/0x430 [ 459.759978][T13845] ? __pfx___sys_sendmmsg+0x10/0x10 [ 459.760000][T13845] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 459.760026][T13845] ? fput+0x79/0x100 [ 459.760041][T13845] ? ksys_write+0x1ac/0x250 [ 459.760061][T13845] ? __pfx_ksys_write+0x10/0x10 [ 459.760085][T13845] __x64_sys_sendmmsg+0x9c/0x100 [ 459.760101][T13845] ? lockdep_hardirqs_on+0x78/0x100 [ 459.760117][T13845] do_syscall_64+0x106/0xf80 [ 459.760132][T13845] ? clear_bhb_loop+0x40/0x90 [ 459.760149][T13845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.760164][T13845] RIP: 0033:0x7fdc8879c629 [ 459.760177][T13845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.760191][T13845] RSP: 002b:00007fdc895ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 459.760205][T13845] RAX: ffffffffffffffda RBX: 00007fdc88a16180 RCX: 00007fdc8879c629 [ 459.760215][T13845] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 459.760223][T13845] RBP: 00007fdc895ac090 R08: 0000000000000000 R09: 0000000000000000 [ 459.760232][T13845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.760240][T13845] R13: 00007fdc88a16218 R14: 00007fdc88a16180 R15: 00007ffdd04f1598 [ 459.760259][T13845] [ 460.151187][ T5828] Bluetooth: hci6: command tx timeout [ 460.167867][T13745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.508125][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1616'. [ 460.597441][T13863] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1617'. [ 461.127480][T13745] veth0_vlan: entered promiscuous mode [ 461.159283][T13877] netlink: 'syz.1.1619': attribute type 10 has an invalid length. [ 461.169383][T13876] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input83 [ 461.203004][T13745] veth1_vlan: entered promiscuous mode [ 461.272390][T13877] zero sized request [ 461.350929][T13745] veth0_macvtap: entered promiscuous mode [ 461.432182][T13745] veth1_macvtap: entered promiscuous mode [ 461.518601][T13745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.571817][T13745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.722662][T13885] [U] [ 461.725449][T13885] [U] [ 461.728116][T13885] [U] [ 461.730782][T13885] [U] [ 461.773775][ T7774] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.796241][T13883] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1621'. [ 461.810699][T13885] [U] [ 461.813390][T13885] [U] [ 461.816061][T13885] [U] [ 461.818729][T13885] [U] [ 461.821685][ T7774] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.867913][T13885] [U] [ 461.870611][T13885] [U] [ 461.873292][T13885] [U] [ 461.875959][T13885] [U] [ 461.933100][ T1101] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.942256][T13885] [U] [ 461.944936][T13885] [U] [ 461.947602][T13885] [U] [ 461.950271][T13885] [U] [ 461.969609][ T1101] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.993830][T13885] [U] [ 461.993871][T13885] [U] [ 461.993893][T13885] [U] [ 461.993914][T13885] [U] [ 461.994544][T13885] [U] [ 461.994568][T13885] [U] [ 461.994589][T13885] [U] [ 461.994611][T13885] [U] [ 461.994824][T13885] [U] [ 461.994847][T13885] [U] [ 461.994869][T13885] [U] [ 461.994890][T13885] [U] [ 461.994997][T13885] [U] [ 461.995018][T13885] [U] [ 461.995039][T13885] [U] [ 461.995060][T13885] [U] [ 461.995210][T13885] [U] [ 461.995233][T13885] [U] [ 461.995255][T13885] [U] [ 461.995277][T13885] [U] [ 461.995391][T13885] [U] [ 461.995414][T13885] [U] [ 461.995435][T13885] [U] [ 461.995457][T13885] [U] [ 461.995604][T13885] [U] [ 461.995627][T13885] [U] [ 461.995649][T13885] [U] [ 461.995671][T13885] [U] [ 462.002729][T13885] [U] [ 462.002762][T13885] [U] [ 462.002785][T13885] [U] [ 462.002807][T13885] [U] [ 462.002985][T13885] [U] [ 462.003009][T13885] [U] [ 462.003030][T13885] [U] [ 462.003052][T13885] [U] [ 462.003158][T13885] [U] [ 462.003180][T13885] [U] [ 462.003202][T13885] [U] [ 462.003223][T13885] [U] [ 462.003381][T13885] [U] [ 462.003404][T13885] [U] [ 462.003426][T13885] [U] [ 462.003448][T13885] [U] [ 462.003555][T13885] [U] [ 462.003576][T13885] [U] [ 462.003597][T13885] [U] [ 462.003618][T13885] [U] [ 462.003845][T13885] [U] [ 462.003869][T13885] [U] [ 462.003891][T13885] [U] [ 462.003913][T13885] [U] [ 462.004320][T13885] [U] [ 462.004344][T13885] [U] [ 462.004366][T13885] [U] [ 462.004389][T13885] [U] [ 462.004551][T13885] [U] [ 462.004574][T13885] [U] [ 462.004596][T13885] [U] [ 462.004618][T13885] [U] [ 462.004724][T13885] [U] [ 462.004745][T13885] [U] [ 462.004767][T13885] [U] [ 462.004788][T13885] [U] [ 462.019267][T13885] [U] [ 462.019304][T13885] [U] [ 462.019326][T13885] [U] [ 462.019348][T13885] [U] [ 462.019457][T13885] [U] [ 462.019482][T13885] [U] [ 462.019505][T13885] [U] [ 462.019526][T13885] [U] [ 462.019685][T13885] [U] [ 462.019708][T13885] [U] [ 462.019731][T13885] [U] [ 462.019753][T13885] [U] [ 462.019860][T13885] [U] [ 462.019881][T13885] [U] [ 462.019903][T13885] [U] [ 462.019924][T13885] [U] [ 462.020076][T13885] [U] [ 462.020098][T13885] [U] [ 462.020120][T13885] [U] [ 462.020145][T13885] [U] [ 462.020309][T13885] [U] [ 462.020332][T13885] [U] [ 462.020353][T13885] [U] [ 462.020375][T13885] [U] [ 462.020535][T13885] [U] [ 462.020558][T13885] [U] [ 462.020579][T13885] [U] [ 462.020600][T13885] [U] [ 462.020706][T13885] [U] [ 462.020728][T13885] [U] [ 462.020749][T13885] [U] [ 462.020771][T13885] [U] [ 462.020927][T13885] [U] [ 462.020950][T13885] [U] [ 462.020971][T13885] [U] [ 462.020992][T13885] [U] [ 462.021099][T13885] [U] [ 462.021121][T13885] [U] [ 462.021144][T13885] [U] [ 462.021165][T13885] [U] [ 462.032602][T13885] [U] [ 462.032628][T13885] [U] [ 462.032650][T13885] [U] [ 462.032671][T13885] [U] [ 462.032760][T13885] [U] [ 462.032782][T13885] [U] [ 462.032803][T13885] [U] [ 462.053305][T13885] [U] [ 462.144287][ T7774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.144329][ T7774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.184845][T13716] Bluetooth: hci6: command tx timeout [ 462.256775][ T7778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.256791][ T7778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.315244][T13898] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1625'. [ 462.787049][T13894] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 462.787491][T13894] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 462.792111][T13894] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 462.801968][T13894] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 462.802410][T13894] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 462.802679][T13894] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 462.802984][T13894] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 462.803128][T13894] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 462.807364][T13894] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 463.758176][T13929] usb usb36: usbfs: process 13929 (syz.5.1630) did not claim interface 0 before use [ 463.846175][T13928] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1629'. [ 464.174055][T13940] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1631'. [ 464.238538][T13940] FAULT_INJECTION: forcing a failure. [ 464.238538][T13940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.264990][T13716] Bluetooth: hci0: command 0x0c1a tx timeout [ 464.303325][T13940] CPU: 0 UID: 0 PID: 13940 Comm: syz.1.1631 Tainted: G U L syzkaller #0 PREEMPT(full) [ 464.303351][T13940] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 464.303356][T13940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 464.303365][T13940] Call Trace: [ 464.303370][T13940] [ 464.303376][T13940] dump_stack_lvl+0x100/0x190 [ 464.303401][T13940] should_fail_ex.cold+0x5/0xa [ 464.303418][T13940] _copy_from_user+0x2e/0xd0 [ 464.303442][T13940] copy_msghdr_from_user+0x9f/0x4f0 [ 464.303464][T13940] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 464.303488][T13940] ? rcu_is_watching+0x12/0xc0 [ 464.303509][T13940] ? ___sys_sendmsg+0x19d/0x1e0 [ 464.303527][T13940] ? kfree+0x2ec/0x6b0 [ 464.303547][T13940] ___sys_sendmsg+0x106/0x1e0 [ 464.303569][T13940] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.303606][T13940] ? __pfx___might_resched+0x10/0x10 [ 464.303630][T13940] __sys_sendmmsg+0x205/0x430 [ 464.303649][T13940] ? __pfx___sys_sendmmsg+0x10/0x10 [ 464.303671][T13940] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 464.303696][T13940] ? fput+0x79/0x100 [ 464.303711][T13940] ? ksys_write+0x1ac/0x250 [ 464.303732][T13940] ? __pfx_ksys_write+0x10/0x10 [ 464.303755][T13940] __x64_sys_sendmmsg+0x9c/0x100 [ 464.303771][T13940] ? lockdep_hardirqs_on+0x78/0x100 [ 464.303786][T13940] do_syscall_64+0x106/0xf80 [ 464.303802][T13940] ? clear_bhb_loop+0x40/0x90 [ 464.303819][T13940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.303834][T13940] RIP: 0033:0x7fdc8879c629 [ 464.303847][T13940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.303861][T13940] RSP: 002b:00007fdc895ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 464.303876][T13940] RAX: ffffffffffffffda RBX: 00007fdc88a15fa0 RCX: 00007fdc8879c629 [ 464.303885][T13940] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 464.303894][T13940] RBP: 00007fdc895ee090 R08: 0000000000000000 R09: 0000000000000000 [ 464.303902][T13940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 464.303910][T13940] R13: 00007fdc88a16038 R14: 00007fdc88a15fa0 R15: 00007ffdd04f1598 [ 464.303929][T13940] [ 464.854310][ T5828] Bluetooth: hci6: command 0x0c1a tx timeout [ 464.860343][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 464.866582][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 464.872557][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 464.878911][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 464.889060][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 465.191654][T13949] [U] [ 465.194442][T13949] [U] [ 465.197112][T13949] [U] [ 465.199785][T13949] [U] [ 465.216634][T13949] [U] [ 465.219329][T13949] [U] [ 465.221996][T13949] [U] [ 465.224663][T13949] [U] [ 465.248940][T13949] [U] [ 465.251636][T13949] [U] [ 465.254308][T13949] [U] [ 465.256973][T13949] [U] [ 465.272548][T13949] [U] [ 465.275240][T13949] [U] [ 465.277912][T13949] [U] [ 465.280577][T13949] [U] [ 465.296658][T13949] [U] [ 465.299347][T13949] [U] [ 465.302017][T13949] [U] [ 465.304680][T13949] [U] [ 465.319306][T13949] [U] [ 465.321997][T13949] [U] [ 465.324662][T13949] [U] [ 465.327329][T13949] [U] [ 465.364950][T13949] [U] [ 465.367643][T13949] [U] [ 465.370312][T13949] [U] [ 465.372976][T13949] [U] [ 465.388640][T13949] [U] [ 465.391329][T13949] [U] [ 465.393995][T13949] [U] [ 465.396662][T13949] [U] [ 465.409850][T13949] [U] [ 465.412542][T13949] [U] [ 465.415210][T13949] [U] [ 465.417879][T13949] [U] [ 465.432585][T13949] [U] [ 465.435279][T13949] [U] [ 465.437947][T13949] [U] [ 465.440614][T13949] [U] [ 465.451771][T13953] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 465.460247][T13949] [U] [ 465.462926][T13949] [U] [ 465.465591][T13949] [U] [ 465.468261][T13949] [U] [ 465.486721][T13949] [U] [ 465.489411][T13949] [U] [ 465.492077][T13949] [U] [ 465.494744][T13949] [U] [ 465.526167][T13949] [U] [ 465.528866][T13949] [U] [ 465.531533][T13949] [U] [ 465.534200][T13949] [U] [ 465.542958][T13949] [U] [ 465.545644][T13949] [U] [ 465.548312][T13949] [U] [ 465.550979][T13949] [U] [ 465.560782][T13949] [U] [ 465.563468][T13949] [U] [ 465.566135][T13949] [U] [ 465.568802][T13949] [U] [ 465.572099][T13949] [U] [ 465.574773][T13949] [U] [ 465.577437][T13949] [U] [ 465.580099][T13949] [U] [ 465.583444][T13949] [U] [ 465.586121][T13949] [U] [ 465.588787][T13949] [U] [ 465.591452][T13949] [U] [ 465.606315][T13949] [U] [ 465.609001][T13949] [U] [ 465.611667][T13949] [U] [ 465.614332][T13949] [U] [ 465.637222][T13949] [U] [ 465.639912][T13949] [U] [ 465.642579][T13949] [U] [ 465.645243][T13949] [U] [ 465.668378][T13949] [U] [ 465.671078][T13949] [U] [ 465.673745][T13949] [U] [ 465.676410][T13949] [U] [ 465.694382][T13949] [U] [ 465.697075][T13949] [U] [ 465.699741][T13949] [U] [ 465.702407][T13949] [U] [ 465.715667][T13949] [U] [ 465.718353][T13949] [U] [ 465.721020][T13949] [U] [ 465.723683][T13949] [U] [ 465.743443][T13949] [U] [ 465.746127][T13949] [U] [ 465.748792][T13949] [U] [ 465.751454][T13949] [U] [ 465.761205][T13949] [U] [ 465.763887][T13949] [U] [ 465.766555][T13949] [U] [ 465.769221][T13949] [U] [ 465.782799][T13949] [U] [ 465.785489][T13949] [U] [ 465.788155][T13949] [U] [ 465.790821][T13949] [U] [ 465.794362][T13949] [U] [ 465.797039][T13949] [U] [ 465.799704][T13949] [U] [ 465.802367][T13949] [U] [ 465.805668][T13949] [U] [ 465.808346][T13949] [U] [ 465.811011][T13949] [U] [ 465.813677][T13949] [U] [ 465.817566][T13949] [U] [ 465.820243][T13949] [U] [ 465.822909][T13949] [U] [ 465.825573][T13949] [U] [ 465.828868][T13949] [U] [ 465.831542][T13949] [U] [ 465.834206][T13949] [U] [ 465.836872][T13949] [U] [ 465.840117][T13949] [U] [ 465.842792][T13949] [U] [ 465.845457][T13949] [U] [ 465.848123][T13949] [U] [ 465.851517][T13949] [U] [ 465.854191][T13949] [U] [ 465.856859][T13949] [U] [ 465.859524][T13949] [U] [ 465.872112][T13949] [U] [ 465.874797][T13949] [U] [ 465.877465][T13949] [U] [ 465.890173][T13949] [U] [ 465.927921][ T5147] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 466.904749][T13716] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 466.915244][T13716] Bluetooth: hci6: command 0x0c1a tx timeout [ 468.004293][T13981] input: jJǸ- 1 [ 478.467682][T13716] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 478.475268][T13716] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 478.482844][T13716] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 478.492479][T13716] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 479.443127][T14235] chnl_net:caif_netlink_parms(): no params data found [ 479.752784][T14272] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1697'. [ 479.800864][T14235] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.826784][T14235] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.874140][T14235] bridge_slave_0: entered allmulticast mode [ 479.901284][T14235] bridge_slave_0: entered promiscuous mode [ 479.952003][T14235] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.992115][T14235] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.019373][T14281] [U] [ 480.022162][T14281] [U] [ 480.024831][T14281] [U] [ 480.027507][T14281] [U] [ 480.037608][T14235] bridge_slave_1: entered allmulticast mode [ 480.060487][T14235] bridge_slave_1: entered promiscuous mode [ 480.091273][T14281] [U] [ 480.093975][T14281] [U] [ 480.096646][T14281] [U] [ 480.099315][T14281] [U] [ 480.149554][T14281] [U] [ 480.152252][T14281] [U] [ 480.154922][T14281] [U] [ 480.157588][T14281] [U] [ 480.202739][T14235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.227277][T14281] [U] [ 480.229977][T14281] [U] [ 480.232647][T14281] [U] [ 480.235318][T14281] [U] [ 480.258898][T14235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.277612][T14281] [U] [ 480.280293][T14281] [U] [ 480.282960][T14281] [U] [ 480.285624][T14281] [U] [ 480.322406][T14281] [U] [ 480.325106][T14281] [U] [ 480.327776][T14281] [U] [ 480.330444][T14281] [U] [ 480.369874][T14281] [U] [ 480.372576][T14281] [U] [ 480.375246][T14281] [U] [ 480.377912][T14281] [U] [ 480.383580][T14235] team0: Port device team_slave_0 added [ 480.408244][T14235] team0: Port device team_slave_1 added [ 480.427760][T14281] [U] [ 480.430454][T14281] [U] [ 480.433123][T14281] [U] [ 480.435790][T14281] [U] [ 480.473759][T14281] [U] [ 480.476460][T14281] [U] [ 480.479126][T14281] [U] [ 480.481791][T14281] [U] [ 480.511626][T14235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.545033][T14281] [U] [ 480.547740][T14281] [U] [ 480.550409][T14281] [U] [ 480.553076][T14281] [U] [ 480.572745][T14235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.614092][T13716] Bluetooth: hci7: command tx timeout [ 480.620510][T14281] [U] [ 480.623193][T14281] [U] [ 480.625861][T14281] [U] [ 480.628527][T14281] [U] [ 480.660905][T14281] [U] [ 480.663605][T14281] [U] [ 480.666271][T14281] [U] [ 480.668938][T14281] [U] [ 480.694827][T14235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.710332][T14281] [U] [ 480.713031][T14281] [U] [ 480.715701][T14281] [U] [ 480.718366][T14281] [U] [ 480.754274][T14281] [U] [ 480.756966][T14281] [U] [ 480.759636][T14281] [U] [ 480.762302][T14281] [U] [ 480.773437][T14235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.792827][T14235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.835390][T14281] [U] [ 480.914747][T14235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.126598][T14235] hsr_slave_0: entered promiscuous mode [ 481.157433][T14235] hsr_slave_1: entered promiscuous mode [ 481.179786][T14235] debugfs: 'hsr0' already exists in 'hsr' [ 481.201222][T14235] Cannot create hsr debugfs directory [ 481.567989][T14307] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input88 [ 481.799597][T13716] Bluetooth: hci5: unexpected event 0x14 length: 16 > 6 [ 482.227201][T14235] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 482.262709][T14235] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 482.283278][T14235] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 482.313512][T14235] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 482.669020][T13716] Bluetooth: hci7: command tx timeout [ 482.684540][T14331] [U] [ 482.687332][T14331] [U] [ 482.690012][T14331] [U] [ 482.692688][T14331] [U] [ 482.757913][T14331] [U] [ 482.760612][T14331] [U] [ 482.763283][T14331] [U] [ 482.765946][T14331] [U] [ 482.788519][T14235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.810413][T14331] [U] [ 482.813112][T14331] [U] [ 482.815780][T14331] [U] [ 482.818446][T14331] [U] [ 482.849007][T14331] [U] [ 482.851703][T14331] [U] [ 482.854369][T14331] [U] [ 482.857040][T14331] [U] [ 482.880882][T14235] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.899099][T14331] [U] [ 482.901793][T14331] [U] [ 482.904462][T14331] [U] [ 482.907127][T14331] [U] [ 482.944664][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.951739][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.960235][T14331] [U] [ 482.962928][T14331] [U] [ 482.965602][T14331] [U] [ 482.968268][T14331] [U] [ 483.003856][T14331] [U] [ 483.006588][T14331] [U] [ 483.009261][T14331] [U] [ 483.011930][T14331] [U] [ 483.017777][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.024907][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.057125][T14331] [U] [ 483.059827][T14331] [U] [ 483.062497][T14331] [U] [ 483.065168][T14331] [U] [ 483.111906][T14331] [U] [ 483.114613][T14331] [U] [ 483.117280][T14331] [U] [ 483.119946][T14331] [U] [ 483.170003][T14331] [U] [ 483.172711][T14331] [U] [ 483.175378][T14331] [U] [ 483.178061][T14331] [U] [ 483.222361][T14331] [U] [ 483.225062][T14331] [U] [ 483.227738][T14331] [U] [ 483.230405][T14331] [U] [ 483.272148][T14331] [U] [ 483.274849][T14331] [U] [ 483.277521][T14331] [U] [ 483.280186][T14331] [U] [ 483.340447][T14331] [U] [ 483.343146][T14331] [U] [ 483.345814][T14331] [U] [ 483.348478][T14331] [U] [ 483.374381][T14331] [U] [ 483.377077][T14331] [U] [ 483.379743][T14331] [U] [ 483.382409][T14331] [U] [ 483.433916][T14331] [U] [ 483.436625][T14331] [U] [ 483.439292][T14331] [U] [ 483.441960][T14331] [U] [ 483.517276][T14331] [U] [ 483.679317][T14235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.458698][T14235] veth0_vlan: entered promiscuous mode [ 484.513710][T14235] veth1_vlan: entered promiscuous mode [ 484.633419][T14235] veth0_macvtap: entered promiscuous mode [ 484.676895][T14235] veth1_macvtap: entered promiscuous mode [ 484.744180][T13716] Bluetooth: hci7: command tx timeout [ 484.758133][T14235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.802910][T14235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.907371][ T1101] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.926763][ T1101] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.974640][ T1101] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.031923][ T1101] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.154765][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.186098][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.295284][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.334032][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.487500][T14375] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 485.558885][ T30] audit: type=1326 audit(1771730773.836:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14374 comm="syz.5.1714" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe46db9c629 code=0x0 [ 485.908886][T14385] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input89 [ 486.203742][T14388] syz.7.1690 (14388): /proc/14379/oom_adj is deprecated, please use /proc/14379/oom_score_adj instead. [ 486.825525][T13716] Bluetooth: hci7: command tx timeout [ 488.092650][T14430] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1723'. [ 489.407528][T14449] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input90 [ 489.460785][T14460] netlink: 326 bytes leftover after parsing attributes in process `syz.7.1731'. [ 489.768201][T13716] Bluetooth: hci7: unexpected event 0x03 length: 725 > 11 [ 491.254462][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1742'. [ 491.379141][T14505] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1740'. [ 491.490904][T14505] mac80211_hwsim hwsim23 : renamed from wlan0 (while UP) [ 491.584843][T14512] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input91 [ 492.106688][T14521] ksmbd: Unknown IPC event: 12, ignore. [ 492.171063][ T30] audit: type=1800 audit(1771730780.446:8): pid=14522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1747" name="discovery_nqn" dev="configfs" ino=46201 res=0 errno=0 [ 493.203683][T14551] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 493.455994][T14553] Setting dangerous option i915.mitigations - tainting kernel [ 493.994078][T14564] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input92 [ 494.698449][T14578] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1760'. [ 495.178969][T14595] netlink: 146 bytes leftover after parsing attributes in process `syz.6.1765'. [ 495.468925][T14597] zswap: compressor 3PZvvĀ3 ֨@QA xmr>σ not available [ 495.759972][T14599] zswap: compressor query not available [ 496.221847][T14611] Invalid ELF header magic: != ELF [ 497.135912][T14631] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input93 [ 497.353208][T14644] program syz.6.1773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.895807][T14665] binder: 14663:14665 ioctl 40046210 0 returned -14 [ 498.077466][T14671] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1777'. [ 498.924989][T14685] [U] [ 498.927779][T14685] [U] [ 498.930450][T14685] [U] [ 498.933131][T14685] [U] [ 498.997170][T14685] [U] [ 498.999872][T14685] [U] [ 499.002547][T14685] [U] [ 499.005213][T14685] [U] [ 499.073114][T14685] [U] [ 499.075818][T14685] [U] [ 499.078493][T14685] [U] [ 499.081161][T14685] [U] [ 499.129149][T14692] netlink: 322 bytes leftover after parsing attributes in process `syz.1.1782'. [ 499.165024][T14685] [U] [ 499.167725][T14685] [U] [ 499.170396][T14685] [U] [ 499.173064][T14685] [U] [ 499.243660][T14685] [U] [ 499.246364][T14685] [U] [ 499.249033][T14685] [U] [ 499.251701][T14685] [U] [ 499.313159][T14685] [U] [ 499.315863][T14685] [U] [ 499.318540][T14685] [U] [ 499.321207][T14685] [U] [ 499.378177][T14685] [U] [ 499.380877][T14685] [U] [ 499.383546][T14685] [U] [ 499.386218][T14685] [U] [ 499.449836][T14685] [U] [ 499.452541][T14685] [U] [ 499.455211][T14685] [U] [ 499.457876][T14685] [U] [ 499.467990][T14699] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input94 [ 499.530283][T14685] [U] [ 499.532986][T14685] [U] [ 499.535656][T14685] [U] [ 499.538323][T14685] [U] [ 499.599984][T14685] [U] [ 499.602681][T14685] [U] [ 499.605356][T14685] [U] [ 499.608026][T14685] [U] [ 499.684454][T14685] [U] [ 499.687154][T14685] [U] [ 499.689823][T14685] [U] [ 499.692488][T14685] [U] [ 499.797162][T14685] [U] [ 500.295456][T14712] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input95 [ 500.785012][T14719] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input96 [ 501.487029][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.493359][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.605864][T14731] bond0: no command found in slaves file - use +ifname or -ifname [ 502.125524][T14753] [U] [ 502.128312][T14753] [U] [ 502.130980][T14753] [U] [ 502.133644][T14753] [U] [ 502.162791][T14753] [U] [ 502.165504][T14753] [U] [ 502.168173][T14753] [U] [ 502.170845][T14753] [U] [ 502.205584][T14753] [U] [ 502.208281][T14753] [U] [ 502.210951][T14753] [U] [ 502.213616][T14753] [U] [ 502.274215][T14753] [U] [ 502.276915][T14753] [U] [ 502.279585][T14753] [U] [ 502.282253][T14753] [U] [ 502.324089][T14753] [U] [ 502.326787][T14753] [U] [ 502.329453][T14753] [U] [ 502.332120][T14753] [U] [ 502.367327][T14753] [U] [ 502.370026][T14753] [U] [ 502.372693][T14753] [U] [ 502.375360][T14753] [U] [ 502.407275][T14753] [U] [ 502.409970][T14753] [U] [ 502.412638][T14753] [U] [ 502.415304][T14753] [U] [ 502.452091][T14753] [U] [ 502.454788][T14753] [U] [ 502.457458][T14753] [U] [ 502.460124][T14753] [U] [ 502.495793][T14753] [U] [ 502.498491][T14753] [U] [ 502.501158][T14753] [U] [ 502.503828][T14753] [U] [ 502.550969][T14753] [U] [ 502.553672][T14753] [U] [ 502.556344][T14753] [U] [ 502.559013][T14753] [U] [ 502.600540][T14753] [U] [ 502.603241][T14753] [U] [ 502.605907][T14753] [U] [ 502.608573][T14753] [U] [ 502.632990][T14753] [U] [ 502.635692][T14753] [U] [ 502.638360][T14753] [U] [ 502.641031][T14753] [U] [ 502.663339][T14753] [U] [ 502.666031][T14753] [U] [ 502.668699][T14753] [U] [ 502.671362][T14753] [U] [ 502.687160][T14753] [U] [ 502.689855][T14753] [U] [ 502.692522][T14753] [U] [ 502.695186][T14753] [U] [ 502.714347][T14753] [U] [ 502.717035][T14753] [U] [ 502.719702][T14753] [U] [ 502.722367][T14753] [U] [ 502.757688][T14753] [U] [ 502.760389][T14753] [U] [ 502.763057][T14753] [U] [ 502.765721][T14753] [U] [ 502.773489][T14753] [U] [ 502.776183][T14753] [U] [ 502.778849][T14753] [U] [ 502.781515][T14753] [U] [ 502.785426][T14753] [U] [ 502.788103][T14753] [U] [ 502.790770][T14753] [U] [ 502.793436][T14753] [U] [ 502.809555][T14753] [U] [ 502.812242][T14753] [U] [ 502.814912][T14753] [U] [ 502.817576][T14753] [U] [ 502.847483][T14753] [U] [ 502.850179][T14753] [U] [ 502.852847][T14753] [U] [ 502.855514][T14753] [U] [ 502.880840][T14753] [U] [ 502.883529][T14753] [U] [ 502.886198][T14753] [U] [ 502.888867][T14753] [U] [ 502.932742][T14753] [U] [ 502.935436][T14753] [U] [ 502.938103][T14753] [U] [ 502.940773][T14753] [U] [ 503.051211][T14753] [U] [ 503.164638][T14773] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input97 [ 503.337475][T14766] input: jJǸ-9%vJ86 as /devices/virtual/input/input98 [ 505.213645][T14819] [U] [ 505.216440][T14819] [U] [ 505.219106][T14819] [U] [ 505.221773][T14819] [U] [ 505.240460][T14819] [U] [ 505.243160][T14819] [U] [ 505.245835][T14819] [U] [ 505.248499][T14819] [U] [ 505.292221][T14819] [U] [ 505.294921][T14819] [U] [ 505.297589][T14819] [U] [ 505.300257][T14819] [U] [ 505.364919][T14819] [U] [ 505.367618][T14819] [U] [ 505.370284][T14819] [U] [ 505.372954][T14819] [U] [ 505.433411][T14819] [U] [ 505.436112][T14819] [U] [ 505.438781][T14819] [U] [ 505.441448][T14819] [U] [ 505.524979][T14822] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1807'. [ 505.545379][T14819] [U] [ 505.548074][T14819] [U] [ 505.550781][T14819] [U] [ 505.553450][T14819] [U] [ 505.640393][T14819] [U] [ 505.643090][T14819] [U] [ 505.645757][T14819] [U] [ 505.648424][T14819] [U] [ 505.670144][T14828] random: crng reseeded on system resumption [ 505.704779][T14828] Restarting kernel threads ... [ 505.722977][T14819] [U] [ 505.725670][T14819] [U] [ 505.728336][T14819] [U] [ 505.731002][T14819] [U] [ 505.734273][T14828] Done restarting kernel threads. [ 505.801986][T14819] [U] [ 505.804685][T14819] [U] [ 505.807367][T14819] [U] [ 505.810037][T14819] [U] [ 505.817180][T14833] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input99 [ 505.888572][T14819] [U] [ 505.891271][T14819] [U] [ 505.893941][T14819] [U] [ 505.896606][T14819] [U] [ 505.990684][T14819] [U] [ 505.993389][T14819] [U] [ 505.996057][T14819] [U] [ 505.998735][T14819] [U] [ 506.215753][T14819] [U] [ 506.220147][T14841] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 506.285175][T14841] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 506.293710][T14841] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 506.337279][T14842] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1812'. [ 506.369115][T14841] page_type: f5(slab) [ 506.387462][T14841] raw: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 506.431679][T14841] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 506.472322][T14841] head: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 506.515547][T14841] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 506.554191][T14841] head: 00fff00000000003 ffffea0001e10001 00000000ffffffff 00000000ffffffff [ 506.604094][T14841] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 506.639131][T14841] page dumped because: unmovable page [ 506.658011][T14841] page_owner tracks the page as allocated [ 506.681675][T14841] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 57, tgid 57 (kworker/u8:4), ts 91672050307, free_ts 91656617587 [ 506.749004][T14841] post_alloc_hook+0x153/0x170 [ 506.766617][T14841] get_page_from_freelist+0x111d/0x3140 [ 506.782843][T14841] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 506.812880][T14841] alloc_pages_mpol+0x1fb/0x550 [ 506.823119][T14841] new_slab+0x43a/0x6d0 [ 506.842994][T14841] ___slab_alloc+0x2a0/0x850 [ 506.853087][T14841] __kmalloc_node_track_caller_noprof+0x45c/0x850 [ 506.884880][T14841] kmalloc_reserve+0xe8/0x350 [ 506.899355][T14841] __alloc_skb+0x185/0x710 [ 506.914225][T14841] nsim_dev_trap_report_work+0x2af/0xd10 [ 506.938502][T14841] process_one_work+0x9d7/0x1920 [ 506.954745][T14841] worker_thread+0x5da/0xe40 [ 506.967463][T14841] kthread+0x370/0x450 [ 506.982510][T14841] ret_from_fork+0x754/0xd80 [ 506.999195][T14841] ret_from_fork_asm+0x1a/0x30 [ 507.032768][T14841] page last free pid 5195 tgid 5195 stack trace: [ 507.055887][T14841] __free_frozen_pages+0x7e1/0x10d0 [ 507.071240][T14841] qlist_free_all+0x47/0xe0 [ 507.085970][T14841] kasan_quarantine_reduce+0x1a0/0x1f0 [ 507.111741][T14841] __kasan_slab_alloc+0x69/0x90 [ 507.125247][T14841] __kmalloc_noprof+0x2b9/0x850 [ 507.144728][T14841] tomoyo_realpath_from_path+0xb6/0x690 [ 507.150278][T14841] tomoyo_path_perm+0x276/0x460 [ 507.178785][T14841] security_inode_getattr+0x116/0x280 [ 507.197501][T14841] vfs_fstat+0x4b/0xe0 [ 507.201578][T14841] __do_sys_newfstat+0x8b/0x110 [ 507.244716][T14841] do_syscall_64+0x106/0xf80 [ 507.249322][T14841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.525848][T14884] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input100 [ 509.301682][T13716] Bluetooth: hci6: unexpected event 0x04 length: 43 > 10 [ 509.301906][T13716] Bluetooth: hci6: connection err: -111 [ 511.334817][T14936] pim6reg: entered allmulticast mode [ 512.096779][T14931] netlink: 4128 bytes leftover after parsing attributes in process `syz.6.1829'. [ 514.477660][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'. [ 515.436038][T15014] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input101 [ 515.812262][T15018] FAULT_INJECTION: forcing a failure. [ 515.812262][T15018] name failslab, interval 1, probability 0, space 0, times 0 [ 515.882168][T15018] CPU: 0 UID: 0 PID: 15018 Comm: syz.1.1849 Tainted: G U L syzkaller #0 PREEMPT(full) [ 515.882195][T15018] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 515.882201][T15018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.882217][T15018] Call Trace: [ 515.882223][T15018] [ 515.882229][T15018] dump_stack_lvl+0x100/0x190 [ 515.882255][T15018] should_fail_ex.cold+0x5/0xa [ 515.882272][T15018] ? tomoyo_encode2+0xfb/0x3c0 [ 515.882286][T15018] should_failslab+0xc2/0x120 [ 515.882309][T15018] __kmalloc_noprof+0xe0/0x850 [ 515.882330][T15018] ? rcu_is_watching+0x12/0xc0 [ 515.882355][T15018] tomoyo_encode2+0xfb/0x3c0 [ 515.882372][T15018] tomoyo_encode+0x29/0x50 [ 515.882385][T15018] tomoyo_realpath_from_path+0x18c/0x690 [ 515.882405][T15018] tomoyo_check_open_permission+0x2af/0x3c0 [ 515.882428][T15018] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 515.882468][T15018] ? do_raw_spin_lock+0x128/0x260 [ 515.882491][T15018] ? path_get+0x61/0x80 [ 515.882507][T15018] tomoyo_file_open+0x6b/0x90 [ 515.882525][T15018] security_file_open+0xb5/0x1e0 [ 515.882539][T15018] do_dentry_open+0x5aa/0x1660 [ 515.882563][T15018] ? security_inode_permission+0xbf/0x250 [ 515.882588][T15018] vfs_open+0x82/0x3f0 [ 515.882606][T15018] path_openat+0x208c/0x31a0 [ 515.882626][T15018] ? __pfx_path_openat+0x10/0x10 [ 515.882656][T15018] do_file_open+0x20e/0x430 [ 515.882671][T15018] ? __pfx_do_file_open+0x10/0x10 [ 515.882698][T15018] ? alloc_fd+0x476/0x790 [ 515.882722][T15018] ? do_getname+0x191/0x390 [ 515.882741][T15018] do_sys_openat2+0x10d/0x1e0 [ 515.882758][T15018] ? __pfx_do_sys_openat2+0x10/0x10 [ 515.882783][T15018] __x64_sys_openat+0x12d/0x210 [ 515.882806][T15018] ? __pfx___x64_sys_openat+0x10/0x10 [ 515.882831][T15018] do_syscall_64+0x106/0xf80 [ 515.882848][T15018] ? clear_bhb_loop+0x40/0x90 [ 515.882866][T15018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.882880][T15018] RIP: 0033:0x7fdc8879c629 [ 515.882893][T15018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.882908][T15018] RSP: 002b:00007fdc895ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 515.882923][T15018] RAX: ffffffffffffffda RBX: 00007fdc88a15fa0 RCX: 00007fdc8879c629 [ 515.882933][T15018] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 515.882942][T15018] RBP: 00007fdc88832b39 R08: 0000000000000000 R09: 0000000000000000 [ 515.882950][T15018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.882958][T15018] R13: 00007fdc88a16038 R14: 00007fdc88a15fa0 R15: 00007ffdd04f1598 [ 515.882977][T15018] [ 515.882993][T15018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 516.568205][ T5147] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 516.583228][ T5147] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 516.591138][ T5147] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 516.599215][ T5147] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 516.608319][ T5147] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 516.713354][T15018] Process accounting resumed [ 517.081090][T15034] chnl_net:caif_netlink_parms(): no params data found [ 517.166564][T15046] [U] [ 517.169351][T15046] [U] [ 517.172019][T15046] [U] [ 517.174687][T15046] [U] [ 517.201033][T15046] [U] [ 517.203730][T15046] [U] [ 517.206399][T15046] [U] [ 517.209064][T15046] [U] [ 517.252614][T15046] [U] [ 517.255314][T15046] [U] [ 517.257980][T15046] [U] [ 517.260644][T15046] [U] [ 517.334344][T15046] [U] [ 517.337044][T15046] [U] [ 517.339710][T15046] [U] [ 517.342376][T15046] [U] [ 517.361850][T15034] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.380137][T15046] [U] [ 517.382825][T15046] [U] [ 517.385495][T15046] [U] [ 517.388172][T15046] [U] [ 517.402575][T15034] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.447356][T15034] bridge_slave_0: entered allmulticast mode [ 517.454993][T15046] [U] [ 517.457677][T15046] [U] [ 517.460347][T15046] [U] [ 517.463011][T15046] [U] [ 517.483835][T15034] bridge_slave_0: entered promiscuous mode [ 517.499932][T15046] [U] [ 517.502620][T15046] [U] [ 517.505306][T15046] [U] [ 517.507971][T15046] [U] [ 517.513512][T15034] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.531548][T15034] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.544521][T15046] [U] [ 517.547206][T15046] [U] [ 517.549874][T15046] [U] [ 517.552538][T15046] [U] [ 517.563105][T15034] bridge_slave_1: entered allmulticast mode [ 517.587954][T15046] [U] [ 517.590654][T15046] [U] [ 517.593323][T15046] [U] [ 517.595987][T15046] [U] [ 517.604641][T15034] bridge_slave_1: entered promiscuous mode [ 517.642522][T15046] [U] [ 517.645218][T15046] [U] [ 517.647886][T15046] [U] [ 517.650553][T15046] [U] [ 517.711677][T15046] [U] [ 517.714377][T15046] [U] [ 517.717044][T15046] [U] [ 517.719709][T15046] [U] [ 517.726588][T15034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.773927][T15046] [U] [ 517.776631][T15046] [U] [ 517.779302][T15046] [U] [ 517.781968][T15046] [U] [ 517.793901][T15034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.832799][T15046] [U] [ 517.835493][T15046] [U] [ 517.838163][T15046] [U] [ 517.840828][T15046] [U] [ 517.875459][T15046] [U] [ 517.878155][T15046] [U] [ 517.880820][T15046] [U] [ 517.883484][T15046] [U] [ 517.905825][T15034] team0: Port device team_slave_0 added [ 517.921796][T15046] [U] [ 517.924489][T15046] [U] [ 517.927159][T15046] [U] [ 517.929822][T15046] [U] [ 517.938728][T15034] team0: Port device team_slave_1 added [ 517.953330][T15046] [U] [ 517.956014][T15046] [U] [ 517.958680][T15046] [U] [ 517.961344][T15046] [U] [ 517.999430][T15034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.024414][T15034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.064798][T15046] [U] [ 518.165721][T15034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.217541][T15034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.257237][T15034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.338582][T15074] input input102: cannot allocate more than FF_MAX_EFFECTS effects [ 518.374237][T15034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.617959][T15034] hsr_slave_0: entered promiscuous mode [ 518.643879][T15034] hsr_slave_1: entered promiscuous mode [ 518.667507][ T5147] Bluetooth: hci8: command tx timeout [ 518.684716][T15034] debugfs: 'hsr0' already exists in 'hsr' [ 518.712272][T15034] Cannot create hsr debugfs directory [ 519.781833][T15034] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 519.838266][T15034] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 519.914989][T15034] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 519.958954][T15034] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 520.390093][T15123] [U] [ 520.392881][T15123] [U] [ 520.395557][T15123] [U] [ 520.398221][T15123] [U] [ 520.458798][T15123] [U] [ 520.461502][T15123] [U] [ 520.464170][T15123] [U] [ 520.466834][T15123] [U] [ 520.507757][T15034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.515430][T15123] [U] [ 520.518114][T15123] [U] [ 520.520780][T15123] [U] [ 520.523450][T15123] [U] [ 520.578143][T15034] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.586297][T15123] [U] [ 520.588986][T15123] [U] [ 520.591654][T15123] [U] [ 520.594323][T15123] [U] [ 520.620118][T15123] [U] [ 520.622808][T15123] [U] [ 520.625480][T15123] [U] [ 520.628146][T15123] [U] [ 520.649485][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.656592][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.684387][T15123] [U] [ 520.687079][T15123] [U] [ 520.689746][T15123] [U] [ 520.692415][T15123] [U] [ 520.720245][ T7778] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.727362][ T7778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.737861][T15123] [U] [ 520.740554][T15123] [U] [ 520.743222][T15123] [U] [ 520.745889][T15123] [U] [ 520.752779][ T5147] Bluetooth: hci8: command tx timeout [ 520.781948][T15123] [U] [ 520.784634][T15123] [U] [ 520.787307][T15123] [U] [ 520.789974][T15123] [U] [ 520.829852][T15123] [U] [ 520.832549][T15123] [U] [ 520.835216][T15123] [U] [ 520.837880][T15123] [U] [ 520.869092][T15123] [U] [ 520.871789][T15123] [U] [ 520.874460][T15123] [U] [ 520.877132][T15123] [U] [ 520.913342][T15034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 520.925108][T15123] [U] [ 520.927796][T15123] [U] [ 520.930465][T15123] [U] [ 520.933130][T15123] [U] [ 520.952408][T15123] [U] [ 520.955099][T15123] [U] [ 520.957767][T15123] [U] [ 520.960432][T15123] [U] [ 520.966307][T15034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.987946][T15123] [U] [ 520.990631][T15123] [U] [ 520.993304][T15123] [U] [ 520.995971][T15123] [U] [ 521.035026][T15123] [U] [ 521.037730][T15123] [U] [ 521.040403][T15123] [U] [ 521.043071][T15123] [U] [ 521.089698][T15123] [U] [ 521.092401][T15123] [U] [ 521.095070][T15123] [U] [ 521.097736][T15123] [U] [ 521.134761][T15123] [U] [ 521.137461][T15123] [U] [ 521.140128][T15123] [U] [ 521.142793][T15123] [U] [ 521.187961][T15123] [U] [ 521.190660][T15123] [U] [ 521.193325][T15123] [U] [ 521.195989][T15123] [U] [ 521.312750][T15123] [U] [ 521.720111][T15034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.678362][T15034] veth0_vlan: entered promiscuous mode [ 522.712908][T15034] veth1_vlan: entered promiscuous mode [ 522.728215][T15159] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 522.826588][ T5147] Bluetooth: hci8: command tx timeout [ 522.840418][T15034] veth0_macvtap: entered promiscuous mode [ 522.899207][T15034] veth1_macvtap: entered promiscuous mode [ 522.936547][T15163] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input104 [ 523.021549][T15034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.086194][T15034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.176820][ T152] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.216572][ T152] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.266353][ T152] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.317038][ T152] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.565144][T15173] [U] [ 523.567931][T15173] [U] [ 523.570598][T15173] [U] [ 523.573265][T15173] [U] [ 523.622331][T15173] [U] [ 523.625028][T15173] [U] [ 523.627697][T15173] [U] [ 523.630364][T15173] [U] [ 523.642870][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.702834][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.710894][T15173] [U] [ 523.713578][T15173] [U] [ 523.716246][T15173] [U] [ 523.718910][T15173] [U] [ 523.785739][T15173] [U] [ 523.788437][T15173] [U] [ 523.791111][T15173] [U] [ 523.793780][T15173] [U] [ 523.834951][ T7765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.853750][T15173] [U] [ 523.856442][T15173] [U] [ 523.859116][T15173] [U] [ 523.861785][T15173] [U] [ 523.878110][ T7765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.904976][T15173] [U] [ 523.907683][T15173] [U] [ 523.910352][T15173] [U] [ 523.913019][T15173] [U] [ 523.936521][T15183] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1878'. [ 523.946507][T15173] [U] [ 523.949196][T15173] [U] [ 523.951865][T15173] [U] [ 523.954531][T15173] [U] [ 523.992070][T15173] [U] [ 523.994769][T15173] [U] [ 523.997437][T15173] [U] [ 524.000106][T15173] [U] [ 524.047876][T15173] [U] [ 524.050576][T15173] [U] [ 524.053242][T15173] [U] [ 524.055910][T15173] [U] [ 524.092718][T15173] [U] [ 524.095423][T15173] [U] [ 524.098093][T15173] [U] [ 524.100756][T15173] [U] [ 524.159495][T15173] [U] [ 524.162198][T15173] [U] [ 524.164875][T15173] [U] [ 524.167543][T15173] [U] [ 524.244146][T15173] [U] [ 524.246848][T15173] [U] [ 524.249516][T15173] [U] [ 524.252183][T15173] [U] [ 524.311083][T15173] [U] [ 524.313797][T15173] [U] [ 524.316477][T15173] [U] [ 524.319149][T15173] [U] [ 524.475211][T15173] [U] [ 524.904255][ T5147] Bluetooth: hci8: command tx timeout [ 525.714396][T15212] futex_wake_op: syz.8.1884 tries to shift op by -2048; fix this program [ 526.061424][T15218] netlink: 4394 bytes leftover after parsing attributes in process `syz.5.1886'. [ 526.099994][T15220] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1885'. [ 526.201367][T15220] \: renamed from lo (while UP) [ 526.278191][T15223] [U] [ 526.280972][T15223] [U] [ 526.283641][T15223] [U] [ 526.286319][T15223] [U] [ 526.317401][T15221] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 526.343184][T15223] [U] [ 526.345876][T15223] [U] [ 526.348553][T15223] [U] [ 526.351232][T15223] [U] [ 526.389009][T15223] [U] [ 526.391702][T15223] [U] [ 526.394373][T15223] [U] [ 526.397041][T15223] [U] [ 526.448596][T15223] [U] [ 526.451296][T15223] [U] [ 526.453964][T15223] [U] [ 526.456630][T15223] [U] [ 526.493768][T15223] [U] [ 526.496465][T15223] [U] [ 526.499132][T15223] [U] [ 526.501802][T15223] [U] [ 526.545829][T15223] [U] [ 526.548523][T15223] [U] [ 526.551194][T15223] [U] [ 526.553862][T15223] [U] [ 526.599646][T15223] [U] [ 526.602350][T15223] [U] [ 526.605019][T15223] [U] [ 526.607686][T15223] [U] [ 526.651518][T15223] [U] [ 526.654223][T15223] [U] [ 526.656895][T15223] [U] [ 526.659560][T15223] [U] [ 526.704637][T15223] [U] [ 526.707337][T15223] [U] [ 526.710007][T15223] [U] [ 526.712675][T15223] [U] [ 526.765251][T15223] [U] [ 526.767948][T15223] [U] [ 526.770615][T15223] [U] [ 526.773284][T15223] [U] [ 526.824336][T15223] [U] [ 526.827041][T15223] [U] [ 526.829710][T15223] [U] [ 526.832381][T15223] [U] [ 526.887848][T15223] [U] [ 526.890552][T15223] [U] [ 526.893219][T15223] [U] [ 526.895886][T15223] [U] [ 526.944365][T15223] [U] [ 526.947068][T15223] [U] [ 526.949742][T15223] [U] [ 526.952411][T15223] [U] [ 527.005619][T15223] [U] [ 527.008329][T15223] [U] [ 527.010998][T15223] [U] [ 527.013666][T15223] [U] [ 527.171011][T15223] [U] [ 527.244586][T15237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1890'. [ 527.268990][T15242] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1897'. [ 528.256491][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'. [ 529.095847][T15282] netlink: 4394 bytes leftover after parsing attributes in process `syz.6.1899'. [ 529.440175][T15292] [U] [ 529.442968][T15292] [U] [ 529.445636][T15292] [U] [ 529.448304][T15292] [U] [ 529.502790][T15292] [U] [ 529.505495][T15292] [U] [ 529.508165][T15292] [U] [ 529.510831][T15292] [U] [ 529.557048][T15292] [U] [ 529.559774][T15292] [U] [ 529.562442][T15292] [U] [ 529.565111][T15292] [U] [ 529.606635][T15292] [U] [ 529.609334][T15292] [U] [ 529.612003][T15292] [U] [ 529.614668][T15292] [U] [ 529.663716][T15292] [U] [ 529.666417][T15292] [U] [ 529.669088][T15292] [U] [ 529.671756][T15292] [U] [ 529.717006][T15292] [U] [ 529.719703][T15292] [U] [ 529.722374][T15292] [U] [ 529.725047][T15292] [U] [ 529.776349][T15292] [U] [ 529.779049][T15292] [U] [ 529.781715][T15292] [U] [ 529.784381][T15292] [U] [ 529.825448][T15292] [U] [ 529.828152][T15292] [U] [ 529.830821][T15292] [U] [ 529.833487][T15292] [U] [ 529.887763][T15292] [U] [ 529.890462][T15292] [U] [ 529.893132][T15292] [U] [ 529.895798][T15292] [U] [ 529.946915][T15292] [U] [ 529.949613][T15292] [U] [ 529.952283][T15292] [U] [ 529.954951][T15292] [U] [ 530.044356][T15292] [U] [ 530.047066][T15292] [U] [ 530.049738][T15292] [U] [ 530.052406][T15292] [U] [ 530.099800][T15292] [U] [ 530.102503][T15292] [U] [ 530.105176][T15292] [U] [ 530.107847][T15292] [U] [ 530.168759][T15292] [U] [ 530.171458][T15292] [U] [ 530.174126][T15292] [U] [ 530.176793][T15292] [U] [ 530.200462][T15273] ceph: Failed to parse sending metrics switch value 'P^' [ 530.222997][T15292] [U] [ 530.225692][T15292] [U] [ 530.228366][T15292] [U] [ 530.231033][T15292] [U] [ 530.283516][T15292] [U] [ 530.286210][T15292] [U] [ 530.288877][T15292] [U] [ 530.291541][T15292] [U] [ 530.406171][T15292] [U] [ 530.462229][T15300] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input108 [ 530.957383][T15315] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input109 [ 531.830750][T15338] [U] [ 531.833542][T15338] [U] [ 531.836211][T15338] [U] [ 531.838884][T15338] [U] [ 531.927860][T15338] [U] [ 531.930559][T15338] [U] [ 531.933233][T15338] [U] [ 531.935901][T15338] [U] [ 531.994855][T15338] [U] [ 531.997567][T15338] [U] [ 532.000243][T15338] [U] [ 532.002912][T15338] [U] [ 532.056652][T15338] [U] [ 532.059353][T15338] [U] [ 532.062022][T15338] [U] [ 532.064688][T15338] [U] [ 532.123060][T15338] [U] [ 532.125765][T15338] [U] [ 532.128436][T15338] [U] [ 532.131107][T15338] [U] [ 532.204594][T15338] [U] [ 532.207300][T15338] [U] [ 532.209970][T15338] [U] [ 532.212635][T15338] [U] [ 532.271978][T15338] [U] [ 532.274684][T15338] [U] [ 532.277355][T15338] [U] [ 532.280020][T15338] [U] [ 532.354911][T15338] [U] [ 532.357616][T15338] [U] [ 532.360285][T15338] [U] [ 532.362952][T15338] [U] [ 532.395718][T15338] [U] [ 532.398419][T15338] [U] [ 532.401089][T15338] [U] [ 532.403756][T15338] [U] [ 532.455455][T15338] [U] [ 532.458165][T15338] [U] [ 532.460833][T15338] [U] [ 532.463499][T15338] [U] [ 532.485946][T15343] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input110 [ 532.510472][T15338] [U] [ 532.513172][T15338] [U] [ 532.515842][T15338] [U] [ 532.518511][T15338] [U] [ 532.583343][T15338] [U] [ 532.586048][T15338] [U] [ 532.588719][T15338] [U] [ 532.591386][T15338] [U] [ 532.703045][T15338] [U] [ 532.862823][T15349] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input111 [ 533.709833][T15368] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input112 [ 533.918052][T15372] [U] [ 533.920847][T15372] [U] [ 533.923518][T15372] [U] [ 533.926186][T15372] [U] [ 533.983544][T15372] [U] [ 533.986245][T15372] [U] [ 533.988917][T15372] [U] [ 533.991584][T15372] [U] [ 534.022435][T15372] [U] [ 534.025136][T15372] [U] [ 534.027805][T15372] [U] [ 534.030473][T15372] [U] [ 534.054512][T15372] [U] [ 534.057209][T15372] [U] [ 534.059878][T15372] [U] [ 534.062547][T15372] [U] [ 534.077620][T15372] [U] [ 534.080319][T15372] [U] [ 534.083032][T15372] [U] [ 534.085702][T15372] [U] [ 534.116630][T15372] [U] [ 534.119336][T15372] [U] [ 534.122033][T15372] [U] [ 534.124708][T15372] [U] [ 534.153063][T15372] [U] [ 534.155771][T15372] [U] [ 534.158439][T15372] [U] [ 534.161108][T15372] [U] [ 534.198041][T15372] [U] [ 534.200742][T15372] [U] [ 534.203413][T15372] [U] [ 534.206079][T15372] [U] [ 534.248833][T15372] [U] [ 534.251538][T15372] [U] [ 534.254210][T15372] [U] [ 534.256877][T15372] [U] [ 534.321363][T15372] [U] [ 534.324064][T15372] [U] [ 534.326735][T15372] [U] [ 534.329406][T15372] [U] [ 534.383102][T15372] [U] [ 534.385803][T15372] [U] [ 534.388474][T15372] [U] [ 534.391142][T15372] [U] [ 534.436095][T15372] [U] [ 534.438803][T15372] [U] [ 534.441473][T15372] [U] [ 534.444144][T15372] [U] [ 534.487928][T15372] [U] [ 534.490635][T15372] [U] [ 534.493306][T15372] [U] [ 534.495975][T15372] [U] [ 534.550786][T15372] [U] [ 534.553487][T15372] [U] [ 534.556153][T15372] [U] [ 534.558823][T15372] [U] [ 534.608075][T15372] [U] [ 534.610776][T15372] [U] [ 534.613443][T15372] [U] [ 534.616108][T15372] [U] [ 534.670837][T15372] [U] [ 534.673547][T15372] [U] [ 534.676215][T15372] [U] [ 534.678883][T15372] [U] [ 534.763720][T15372] [U] [ 534.766444][T15372] [U] [ 534.769113][T15372] [U] [ 534.771779][T15372] [U] [ 534.937209][T15372] [U] [ 536.360573][T15419] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input113 [ 536.615391][T15425] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input114 [ 537.372406][T15440] [U] [ 537.375199][T15440] [U] [ 537.377871][T15440] [U] [ 537.380538][T15440] [U] [ 537.445403][T15440] [U] [ 537.448116][T15440] [U] [ 537.450783][T15440] [U] [ 537.453449][T15440] [U] [ 537.498760][T15440] [U] [ 537.501461][T15440] [U] [ 537.504128][T15440] [U] [ 537.506803][T15440] [U] [ 537.571672][T15440] [U] [ 537.574375][T15440] [U] [ 537.577047][T15440] [U] [ 537.579714][T15440] [U] [ 537.633665][T15440] [U] [ 537.636364][T15440] [U] [ 537.639032][T15440] [U] [ 537.641700][T15440] [U] [ 537.710176][T15440] [U] [ 537.712881][T15440] [U] [ 537.715554][T15440] [U] [ 537.718220][T15440] [U] [ 537.775744][T15440] [U] [ 537.778444][T15440] [U] [ 537.781109][T15440] [U] [ 537.783774][T15440] [U] [ 537.818364][T15440] [U] [ 537.821059][T15440] [U] [ 537.823727][T15440] [U] [ 537.826393][T15440] [U] [ 537.890472][T15440] [U] [ 537.893181][T15440] [U] [ 537.895850][T15440] [U] [ 537.898515][T15440] [U] [ 537.998875][T15440] [U] [ 538.001573][T15440] [U] [ 538.004255][T15440] [U] [ 538.006929][T15440] [U] [ 538.048521][T15440] [U] [ 538.051225][T15440] [U] [ 538.053892][T15440] [U] [ 538.056557][T15440] [U] [ 538.123675][T15440] [U] [ 538.126379][T15440] [U] [ 538.129053][T15440] [U] [ 538.131720][T15440] [U] [ 538.235120][T15440] [U] [ 540.526556][T15482] [U] [ 540.529349][T15482] [U] [ 540.532016][T15482] [U] [ 540.534683][T15482] [U] [ 540.575795][T15482] [U] [ 540.578494][T15482] [U] [ 540.581163][T15482] [U] [ 540.583829][T15482] [U] [ 540.614583][T15482] [U] [ 540.617277][T15482] [U] [ 540.619945][T15482] [U] [ 540.622610][T15482] [U] [ 540.665802][T15482] [U] [ 540.668494][T15482] [U] [ 540.671164][T15482] [U] [ 540.673829][T15482] [U] [ 540.677977][T15487] vhci_hcd vhci_hcd.3: default hub control req: ff03 v0202 i0002 l8 [ 540.696933][T15488] netlink: 330 bytes leftover after parsing attributes in process `syz.8.1944'. [ 540.709403][T15482] [U] [ 540.712086][T15482] [U] [ 540.714754][T15482] [U] [ 540.717440][T15482] [U] [ 540.734344][T15482] [U] [ 540.737043][T15482] [U] [ 540.739713][T15482] [U] [ 540.742385][T15482] [U] [ 540.774082][T15482] [U] [ 540.776776][T15482] [U] [ 540.779450][T15482] [U] [ 540.782115][T15482] [U] [ 540.797813][T15488] \: renamed from lo (while UP) [ 540.804901][T15482] [U] [ 540.807587][T15482] [U] [ 540.810257][T15482] [U] [ 540.812935][T15482] [U] [ 540.844227][T15482] [U] [ 540.846924][T15482] [U] [ 540.849594][T15482] [U] [ 540.852258][T15482] [U] [ 540.878723][T15482] [U] [ 540.881420][T15482] [U] [ 540.884089][T15482] [U] [ 540.886757][T15482] [U] [ 540.915206][T15482] [U] [ 540.917906][T15482] [U] [ 540.920577][T15482] [U] [ 540.923246][T15482] [U] [ 540.951093][T15482] [U] [ 540.953792][T15482] [U] [ 540.956461][T15482] [U] [ 540.959130][T15482] [U] [ 540.973333][T15482] [U] [ 540.976025][T15482] [U] [ 540.978689][T15482] [U] [ 540.981356][T15482] [U] [ 540.997761][T15482] [U] [ 541.000454][T15482] [U] [ 541.003129][T15482] [U] [ 541.005814][T15482] [U] [ 541.042682][T15482] [U] [ 541.045383][T15482] [U] [ 541.048060][T15482] [U] [ 541.050730][T15482] [U] [ 541.084411][T15482] [U] [ 541.087108][T15482] [U] [ 541.089780][T15482] [U] [ 541.092447][T15482] [U] [ 541.107472][T15482] [U] [ 541.110162][T15482] [U] [ 541.112831][T15482] [U] [ 541.115498][T15482] [U] [ 541.132865][T15482] [U] [ 541.135557][T15482] [U] [ 541.138225][T15482] [U] [ 541.140890][T15482] [U] [ 541.177731][T15482] [U] [ 541.180433][T15482] [U] [ 541.183099][T15482] [U] [ 541.185778][T15482] [U] [ 541.218302][T15482] [U] [ 541.220993][T15482] [U] [ 541.223660][T15482] [U] [ 541.226326][T15482] [U] [ 541.244760][T13892] usb usb40-port2: attempt power cycle [ 541.266145][T15497] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1946'. [ 541.278474][T15482] [U] [ 541.281163][T15482] [U] [ 541.283832][T15482] [U] [ 541.286501][T15482] [U] [ 541.309406][T15482] [U] [ 541.312108][T15482] [U] [ 541.314777][T15482] [U] [ 541.317443][T15482] [U] [ 541.400142][T15482] [U] [ 541.402843][T15482] [U] [ 541.405512][T15482] [U] [ 541.408177][T15482] [U] [ 541.551687][T15482] [U] [ 541.816626][T13892] usb usb40-port2: unable to enumerate USB device [ 542.044661][T15507] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 543.981934][T15534] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 544.024350][T15528] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input115 [ 544.461507][T15546] [U] [ 544.464317][T15546] [U] [ 544.466989][T15546] [U] [ 544.469657][T15546] [U] [ 544.529365][T15546] [U] [ 544.532071][T15546] [U] [ 544.534744][T15546] [U] [ 544.537413][T15546] [U] [ 544.607832][T15546] [U] [ 544.610538][T15546] [U] [ 544.613215][T15546] [U] [ 544.615884][T15546] [U] [ 544.650774][T15546] [U] [ 544.653478][T15546] [U] [ 544.656148][T15546] [U] [ 544.658816][T15546] [U] [ 544.704691][T15546] [U] [ 544.707396][T15546] [U] [ 544.710063][T15546] [U] [ 544.712727][T15546] [U] [ 544.763482][T15546] [U] [ 544.766188][T15546] [U] [ 544.768854][T15546] [U] [ 544.771519][T15546] [U] [ 544.817818][T15546] [U] [ 544.820517][T15546] [U] [ 544.823186][T15546] [U] [ 544.825854][T15546] [U] [ 544.881778][T15546] [U] [ 544.884488][T15546] [U] [ 544.887161][T15546] [U] [ 544.889827][T15546] [U] [ 544.960926][T15546] [U] [ 544.963630][T15546] [U] [ 544.966299][T15546] [U] [ 544.968965][T15546] [U] [ 545.011437][T15546] [U] [ 545.014137][T15546] [U] [ 545.016804][T15546] [U] [ 545.019469][T15546] [U] [ 545.052451][T15546] [U] [ 545.055149][T15546] [U] [ 545.057815][T15546] [U] [ 545.060484][T15546] [U] [ 545.064799][T15549] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input116 [ 545.093912][T15546] [U] [ 545.096610][T15546] [U] [ 545.099276][T15546] [U] [ 545.101941][T15546] [U] [ 545.169949][T15546] [U] [ 545.172646][T15546] [U] [ 545.175316][T15546] [U] [ 545.177982][T15546] [U] [ 545.238616][T15546] [U] [ 545.241316][T15546] [U] [ 545.243985][T15546] [U] [ 545.246651][T15546] [U] [ 545.303046][T15560] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input117 [ 545.328000][T15546] [U] [ 545.330695][T15546] [U] [ 545.333360][T15546] [U] [ 545.336026][T15546] [U] [ 545.364874][T15555] [U] [ 545.367574][T15555] [U] [ 545.370240][T15555] [U] [ 545.372906][T15555] [U] [ 545.398847][T15555] [U] [ 545.401541][T15555] [U] [ 545.404209][T15555] [U] [ 545.406878][T15555] [U] [ 545.475042][T15555] [U] [ 545.477746][T15555] [U] [ 545.480417][T15555] [U] [ 545.483084][T15555] [U] [ 545.535897][T15555] [U] [ 545.538596][T15555] [U] [ 545.541265][T15555] [U] [ 545.543931][T15555] [U] [ 545.604857][T15555] [U] [ 545.607556][T15555] [U] [ 545.610224][T15555] [U] [ 545.612892][T15555] [U] [ 545.719867][T15555] [U] [ 546.757803][T15571] Process accounting paused [ 547.344086][T15598] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input118 [ 547.894733][T15609] [U] [ 547.897527][T15609] [U] [ 547.900202][T15609] [U] [ 547.902873][T15609] [U] [ 547.944336][T15609] [U] [ 547.947043][T15609] [U] [ 547.949717][T15609] [U] [ 547.952386][T15609] [U] [ 548.002893][T15609] [U] [ 548.005600][T15609] [U] [ 548.008274][T15609] [U] [ 548.010942][T15609] [U] [ 548.070484][T15609] [U] [ 548.073188][T15609] [U] [ 548.075861][T15609] [U] [ 548.078530][T15609] [U] [ 548.136706][T15609] [U] [ 548.139410][T15609] [U] [ 548.142086][T15609] [U] [ 548.144752][T15609] [U] [ 548.182441][T15609] [U] [ 548.185143][T15609] [U] [ 548.187810][T15609] [U] [ 548.190476][T15609] [U] [ 548.271511][T15609] [U] [ 548.274196][T15609] [U] [ 548.276864][T15609] [U] [ 548.279531][T15609] [U] [ 548.317577][T15609] [U] [ 548.320281][T15609] [U] [ 548.322951][T15609] [U] [ 548.325624][T15609] [U] [ 548.364197][T15609] [U] [ 548.366902][T15609] [U] [ 548.369570][T15609] [U] [ 548.372236][T15609] [U] [ 548.416442][T15609] [U] [ 548.419146][T15609] [U] [ 548.421812][T15609] [U] [ 548.424477][T15609] [U] [ 548.474926][T15609] [U] [ 548.477627][T15609] [U] [ 548.480294][T15609] [U] [ 548.482959][T15609] [U] [ 548.539720][T15609] [U] [ 548.542420][T15609] [U] [ 548.545088][T15609] [U] [ 548.547753][T15609] [U] [ 548.604855][T15609] [U] [ 548.607555][T15609] [U] [ 548.610221][T15609] [U] [ 548.612887][T15609] [U] [ 548.674336][T15609] [U] [ 548.677036][T15609] [U] [ 548.679705][T15609] [U] [ 548.682381][T15609] [U] [ 548.828631][T15609] [U] [ 549.044752][T15627] futex_wake_op: syz.8.1976 tries to shift op by -2048; fix this program [ 550.835246][T15649] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input119 [ 550.911333][T15646] ima: policy update failed [ 550.943443][ T30] audit: type=1802 audit(1771730839.216:9): pid=15646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.1980" res=0 errno=0 [ 550.968984][T15646] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 551.205610][T15656] bridge0: port 3(team0) entered blocking state [ 551.256806][T15656] bridge0: port 3(team0) entered disabled state [ 551.340046][T15656] team0: entered allmulticast mode [ 551.392810][T15656] team_slave_0: entered allmulticast mode [ 551.422628][T15651] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input120 [ 551.461052][T15656] team_slave_1: entered allmulticast mode [ 551.538542][T15656] team0: entered promiscuous mode [ 551.586670][T15656] team_slave_0: entered promiscuous mode [ 551.638109][T15656] team_slave_1: entered promiscuous mode [ 551.695926][T15656] bridge0: port 3(team0) entered blocking state [ 551.702263][T15656] bridge0: port 3(team0) entered forwarding state [ 552.690280][T11636] NFSD: Failed to start, no listeners configured. [ 552.741515][T15671] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1984'. [ 553.257257][T15685] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1983'. [ 553.352487][T15681] can: request_module (can-proto-5) failed. [ 553.501335][T15694] [U] [ 553.504124][T15694] [U] [ 553.506794][T15694] [U] [ 553.509466][T15694] [U] [ 553.564084][T15694] [U] [ 553.566786][T15694] [U] [ 553.569455][T15694] [U] [ 553.572125][T15694] [U] [ 553.614568][T15694] [U] [ 553.617268][T15694] [U] [ 553.619938][T15694] [U] [ 553.622609][T15694] [U] [ 553.684201][T15694] [U] [ 553.686903][T15694] [U] [ 553.689575][T15694] [U] [ 553.692244][T15694] [U] [ 553.757183][T15694] [U] [ 553.759924][T15694] [U] [ 553.762595][T15694] [U] [ 553.765267][T15694] [U] [ 553.814344][T15694] [U] [ 553.817045][T15694] [U] [ 553.819718][T15694] [U] [ 553.822386][T15694] [U] [ 553.875145][T15694] [U] [ 553.877849][T15694] [U] [ 553.880518][T15694] [U] [ 553.883186][T15694] [U] [ 553.922061][T15694] [U] [ 553.924761][T15694] [U] [ 553.927428][T15694] [U] [ 553.930093][T15694] [U] [ 553.983220][T15694] [U] [ 553.985925][T15694] [U] [ 553.988596][T15694] [U] [ 553.991267][T15694] [U] [ 554.034220][T15694] [U] [ 554.036926][T15694] [U] [ 554.039602][T15694] [U] [ 554.042273][T15694] [U] [ 554.094306][T15694] [U] [ 554.097016][T15694] [U] [ 554.099686][T15694] [U] [ 554.102353][T15694] [U] [ 554.146483][T15694] [U] [ 554.149193][T15694] [U] [ 554.151867][T15694] [U] [ 554.154536][T15694] [U] [ 554.191353][T15694] [U] [ 554.194063][T15694] [U] [ 554.196734][T15694] [U] [ 554.199404][T15694] [U] [ 554.237504][T15694] [U] [ 554.240205][T15694] [U] [ 554.242873][T15694] [U] [ 554.245541][T15694] [U] [ 554.384666][T15694] [U] [ 554.522651][T15710] futex_wake_op: syz.1.1991 tries to shift op by -2048; fix this program [ 554.736013][ T30] audit: type=1400 audit(1771730843.006:10): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=15713 comm="syz.5.1995" [ 555.192775][T15729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1999'. [ 555.631551][T15735] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 556.115514][T15735] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 556.659032][T15735] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 556.753781][T15735] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 556.873155][T15746] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 556.884131][T15735] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 556.940673][T15735] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 556.977163][T15735] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 557.014188][T15735] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 557.035493][T15735] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 557.115404][T15735] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 557.204096][T15735] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 557.226249][T15735] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 557.291542][T15735] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 557.704058][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 557.844085][T15749] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 558.094341][T15772] futex_wake_op: syz.1.2008 tries to shift op by -2048; fix this program [ 558.186093][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 558.192128][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 558.773442][T15787] FAULT_INJECTION: forcing a failure. [ 558.773442][T15787] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 558.818027][T15787] CPU: 0 UID: 0 PID: 15787 Comm: syz.5.2012 Tainted: G U L syzkaller #0 PREEMPT(full) [ 558.818060][T15787] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 558.818067][T15787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 558.818077][T15787] Call Trace: [ 558.818083][T15787] [ 558.818090][T15787] dump_stack_lvl+0x100/0x190 [ 558.818117][T15787] should_fail_ex.cold+0x5/0xa [ 558.818133][T15787] ? prepare_alloc_pages+0x16d/0x5f0 [ 558.818151][T15787] should_fail_alloc_page+0xeb/0x140 [ 558.818176][T15787] prepare_alloc_pages+0x1f0/0x5f0 [ 558.818195][T15787] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 558.818226][T15787] ? stack_trace_save+0x8e/0xc0 [ 558.818249][T15787] ? __pfx_stack_trace_save+0x10/0x10 [ 558.818272][T15787] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 558.818292][T15787] ? stack_depot_save_flags+0x27/0x9d0 [ 558.818320][T15787] ? kasan_save_stack+0x3f/0x50 [ 558.818339][T15787] ? kasan_save_stack+0x30/0x50 [ 558.818359][T15787] ? kasan_save_track+0x14/0x30 [ 558.818379][T15787] ? __kasan_kmalloc+0xaa/0xb0 [ 558.818401][T15787] ? do_file_open+0x20e/0x430 [ 558.818414][T15787] ? do_sys_openat2+0x10d/0x1e0 [ 558.818430][T15787] ? __x64_sys_openat+0x12d/0x210 [ 558.818447][T15787] ? do_syscall_64+0x106/0xf80 [ 558.818463][T15787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.818487][T15787] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 558.818513][T15787] ? policy_nodemask+0xed/0x4f0 [ 558.818539][T15787] alloc_pages_mpol+0x1fb/0x550 [ 558.818565][T15787] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 558.818594][T15787] alloc_pages_noprof+0x131/0x390 [ 558.818618][T15787] get_zeroed_page_noprof+0x18/0xb0 [ 558.818633][T15787] mon_alloc_buff+0xce/0x1b0 [ 558.818654][T15787] ? kasan_save_track+0x14/0x30 [ 558.818676][T15787] mon_bin_open+0x207/0x470 [ 558.818697][T15787] ? __pfx_mon_bin_open+0x10/0x10 [ 558.818718][T15787] chrdev_open+0x234/0x6a0 [ 558.818740][T15787] ? __pfx_apparmor_file_open+0x10/0x10 [ 558.818760][T15787] ? __pfx_chrdev_open+0x10/0x10 [ 558.818783][T15787] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 558.818811][T15787] do_dentry_open+0x6d8/0x1660 [ 558.818833][T15787] ? __pfx_chrdev_open+0x10/0x10 [ 558.818861][T15787] vfs_open+0x82/0x3f0 [ 558.818880][T15787] path_openat+0x208c/0x31a0 [ 558.818901][T15787] ? __pfx_path_openat+0x10/0x10 [ 558.818931][T15787] do_file_open+0x20e/0x430 [ 558.818947][T15787] ? __pfx_do_file_open+0x10/0x10 [ 558.818974][T15787] ? alloc_fd+0x476/0x790 [ 558.819001][T15787] ? do_getname+0x191/0x390 [ 558.819020][T15787] do_sys_openat2+0x10d/0x1e0 [ 558.819037][T15787] ? __pfx_do_sys_openat2+0x10/0x10 [ 558.819056][T15787] ? __fget_files+0x21f/0x3d0 [ 558.819081][T15787] __x64_sys_openat+0x12d/0x210 [ 558.819099][T15787] ? __pfx___x64_sys_openat+0x10/0x10 [ 558.819125][T15787] do_syscall_64+0x106/0xf80 [ 558.819141][T15787] ? clear_bhb_loop+0x40/0x90 [ 558.819159][T15787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.819174][T15787] RIP: 0033:0x7fe46db9c629 [ 558.819189][T15787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.819204][T15787] RSP: 002b:00007fe46eb15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 558.819220][T15787] RAX: ffffffffffffffda RBX: 00007fe46de15fa0 RCX: 00007fe46db9c629 [ 558.819231][T15787] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 558.819241][T15787] RBP: 00007fe46dc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 558.819251][T15787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.819260][T15787] R13: 00007fe46de16038 R14: 00007fe46de15fa0 R15: 00007ffc65be3c08 [ 558.819281][T15787] [ 559.673997][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 559.680003][ T5147] Bluetooth: hci5: command 0x0c1a tx timeout [ 559.687843][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 559.693825][ T5147] Bluetooth: hci6: command 0x0c1a tx timeout [ 559.699910][ T5147] Bluetooth: hci7: command 0x0c1a tx timeout [ 559.706111][ T5147] Bluetooth: hci8: command 0x0c1a tx timeout [ 560.131089][T13716] Bluetooth: hci8: unexpected event 0x3e length: 726 > 260 [ 560.131114][T13716] Bluetooth: hci8: unexpected subevent 0x06 length: 725 > 10 [ 560.790410][T13716] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 561.212979][T15826] netlink: 330 bytes leftover after parsing attributes in process `syz.8.2023'. [ 561.305189][T15826] : renamed from bond_slave_0 (while UP) [ 561.356480][T15826] netlink: 330 bytes leftover after parsing attributes in process `syz.8.2023'. [ 561.787430][T13716] Bluetooth: hci8: command 0x0c1a tx timeout [ 561.793438][T13716] Bluetooth: hci7: command 0x0c1a tx timeout [ 562.565168][T15856] type: 256 invalid [ 562.914621][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.921619][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.024537][T15866] program syz.1.2032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 563.866994][T13716] Bluetooth: hci7: command 0x0c1a tx timeout [ 563.873098][ T5147] Bluetooth: hci8: command 0x0c1a tx timeout [ 564.269298][T15881] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 564.554853][T15889] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 564.694810][T15889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 564.837433][T15889] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 564.890274][T15889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 564.976495][T15889] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 565.110731][T15889] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 565.177485][T15889] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 565.259656][T15897] delete_channel: no stack [ 565.407775][T15889] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 565.450812][T15889] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 565.476593][T15889] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 565.483225][T15916] netlink: 'syz.6.2038': attribute type 27 has an invalid length. [ 565.524202][T15916] netlink: 'syz.6.2038': attribute type 28 has an invalid length. [ 565.555048][T15916] netlink: 'syz.6.2038': attribute type 29 has an invalid length. [ 565.616108][T15916] netlink: 'syz.6.2038': attribute type 30 has an invalid length. [ 565.652362][T15916] netlink: 'syz.6.2038': attribute type 31 has an invalid length. [ 565.693986][T15916] netlink: 'syz.6.2038': attribute type 32 has an invalid length. [ 565.726922][T15916] netlink: 'syz.6.2038': attribute type 33 has an invalid length. [ 565.764105][T15916] netlink: 'syz.6.2038': attribute type 35 has an invalid length. [ 565.806842][T15916] netlink: 'syz.6.2038': attribute type 37 has an invalid length. [ 565.841503][T15916] netlink: 18 bytes leftover after parsing attributes in process `syz.6.2038'. [ 566.584008][T13716] Bluetooth: hci2: command 0x0c1a tx timeout [ 566.590050][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 566.788305][T15956] futex_wake_op: syz.8.2051 tries to shift op by -2048; fix this program [ 566.905258][T13716] Bluetooth: hci1: command 0x0c1a tx timeout [ 566.911297][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 566.989797][T13716] Bluetooth: hci4: command 0x0c1a tx timeout [ 567.144417][T13716] Bluetooth: hci5: command 0x0c1a tx timeout [ 567.413970][T15967] futex_wake_op: syz.5.2060 tries to shift op by -2048; fix this program [ 567.464338][T13716] Bluetooth: hci7: command 0x0c1a tx timeout [ 567.470343][ T5147] Bluetooth: hci6: command 0x0c1a tx timeout [ 567.544984][T13716] Bluetooth: hci8: command 0x0c1a tx timeout [ 568.483420][T15986] FAULT_INJECTION: forcing a failure. [ 568.483420][T15986] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 568.528992][T15986] CPU: 0 UID: 0 PID: 15986 Comm: syz.1.2061 Tainted: G U L syzkaller #0 PREEMPT(full) [ 568.529021][T15986] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 568.529027][T15986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 568.529037][T15986] Call Trace: [ 568.529043][T15986] [ 568.529049][T15986] dump_stack_lvl+0x100/0x190 [ 568.529076][T15986] should_fail_ex.cold+0x5/0xa [ 568.529093][T15986] ? prepare_alloc_pages+0x16d/0x5f0 [ 568.529111][T15986] should_fail_alloc_page+0xeb/0x140 [ 568.529136][T15986] prepare_alloc_pages+0x1f0/0x5f0 [ 568.529155][T15986] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 568.529186][T15986] ? stack_trace_save+0x8e/0xc0 [ 568.529209][T15986] ? __pfx_stack_trace_save+0x10/0x10 [ 568.529232][T15986] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 568.529252][T15986] ? stack_depot_save_flags+0x27/0x9d0 [ 568.529279][T15986] ? kasan_save_stack+0x3f/0x50 [ 568.529299][T15986] ? kasan_save_stack+0x30/0x50 [ 568.529319][T15986] ? kasan_save_track+0x14/0x30 [ 568.529339][T15986] ? __kasan_kmalloc+0xaa/0xb0 [ 568.529361][T15986] ? do_file_open+0x20e/0x430 [ 568.529374][T15986] ? do_sys_openat2+0x10d/0x1e0 [ 568.529390][T15986] ? __x64_sys_openat+0x12d/0x210 [ 568.529407][T15986] ? do_syscall_64+0x106/0xf80 [ 568.529422][T15986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.529441][T15986] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 568.529466][T15986] ? policy_nodemask+0xed/0x4f0 [ 568.529492][T15986] alloc_pages_mpol+0x1fb/0x550 [ 568.529522][T15986] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 568.529552][T15986] alloc_pages_noprof+0x131/0x390 [ 568.529577][T15986] get_zeroed_page_noprof+0x18/0xb0 [ 568.529592][T15986] mon_alloc_buff+0xce/0x1b0 [ 568.529613][T15986] ? kasan_save_track+0x14/0x30 [ 568.529635][T15986] mon_bin_open+0x207/0x470 [ 568.529656][T15986] ? __pfx_mon_bin_open+0x10/0x10 [ 568.529680][T15986] chrdev_open+0x234/0x6a0 [ 568.529702][T15986] ? __pfx_apparmor_file_open+0x10/0x10 [ 568.529722][T15986] ? __pfx_chrdev_open+0x10/0x10 [ 568.529746][T15986] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 568.529774][T15986] do_dentry_open+0x6d8/0x1660 [ 568.529796][T15986] ? __pfx_chrdev_open+0x10/0x10 [ 568.529823][T15986] vfs_open+0x82/0x3f0 [ 568.529843][T15986] path_openat+0x208c/0x31a0 [ 568.529863][T15986] ? __pfx_path_openat+0x10/0x10 [ 568.529893][T15986] do_file_open+0x20e/0x430 [ 568.529908][T15986] ? __pfx_do_file_open+0x10/0x10 [ 568.529936][T15986] ? alloc_fd+0x476/0x790 [ 568.529960][T15986] ? do_getname+0x191/0x390 [ 568.529978][T15986] do_sys_openat2+0x10d/0x1e0 [ 568.529996][T15986] ? __pfx_do_sys_openat2+0x10/0x10 [ 568.530016][T15986] ? __fget_files+0x21f/0x3d0 [ 568.530041][T15986] __x64_sys_openat+0x12d/0x210 [ 568.530059][T15986] ? __pfx___x64_sys_openat+0x10/0x10 [ 568.530085][T15986] do_syscall_64+0x106/0xf80 [ 568.530100][T15986] ? clear_bhb_loop+0x40/0x90 [ 568.530119][T15986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.530135][T15986] RIP: 0033:0x7fdc8879c629 [ 568.530149][T15986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.530163][T15986] RSP: 002b:00007fdc895ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 568.530179][T15986] RAX: ffffffffffffffda RBX: 00007fdc88a15fa0 RCX: 00007fdc8879c629 [ 568.530190][T15986] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 568.530201][T15986] RBP: 00007fdc88832b39 R08: 0000000000000000 R09: 0000000000000000 [ 568.530210][T15986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.530219][T15986] R13: 00007fdc88a16038 R14: 00007fdc88a15fa0 R15: 00007ffdd04f1598 [ 568.530240][T15986] [ 569.290982][T13716] Bluetooth: hci5: command 0x0c1a tx timeout [ 569.310374][T15995] futex_wake_op: syz.5.2063 tries to shift op by -2048; fix this program [ 569.319098][T15996] futex_wake_op: syz.5.2063 tries to shift op by -2048; fix this program [ 569.334004][T15995] futex_wake_op: syz.5.2063 tries to shift op by -2048; fix this program [ 569.342498][T15996] futex_wake_op: syz.5.2063 tries to shift op by -2048; fix this program [ 569.360831][T15995] 0x000000000001-0x000000020000 : "" [ 569.427846][T15995] ftl_cs: FTL header corrupt! [ 570.196626][T16017] futex_wake_op: syz.5.2066 tries to shift op by -2048; fix this program [ 570.783653][T16042] ima: policy update failed [ 570.798799][ T30] audit: type=1802 audit(1771730859.076:11): pid=16042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2073" res=0 errno=0 [ 571.969137][T16062] futex_wake_op: syz.1.2079 tries to shift op by -2048; fix this program [ 572.672353][T16084] [U] [ 572.675153][T16084] [U] [ 572.677823][T16084] [U] [ 572.680489][T16084] [U] [ 572.713482][T16084] [U] [ 572.716188][T16084] [U] [ 572.718855][T16084] [U] [ 572.721521][T16084] [U] [ 572.753476][T16084] [U] [ 572.756170][T16084] [U] [ 572.758839][T16084] [U] [ 572.761505][T16084] [U] [ 572.800372][T16084] [U] [ 572.803070][T16084] [U] [ 572.805741][T16084] [U] [ 572.808425][T16084] [U] [ 572.840340][T16084] [U] [ 572.843042][T16084] [U] [ 572.845709][T16084] [U] [ 572.848385][T16084] [U] [ 572.881816][T16084] [U] [ 572.884520][T16084] [U] [ 572.887191][T16084] [U] [ 572.889859][T16084] [U] [ 572.920306][T16084] [U] [ 572.923011][T16084] [U] [ 572.925682][T16084] [U] [ 572.928349][T16084] [U] [ 572.965676][T16084] [U] [ 572.968382][T16084] [U] [ 572.971049][T16084] [U] [ 572.973718][T16084] [U] [ 572.999054][T16084] [U] [ 573.001818][T16084] [U] [ 573.004491][T16084] [U] [ 573.007161][T16084] [U] [ 573.040513][T16084] [U] [ 573.043212][T16084] [U] [ 573.045882][T16084] [U] [ 573.048551][T16084] [U] [ 573.080988][T16084] [U] [ 573.083695][T16084] [U] [ 573.086364][T16084] [U] [ 573.089037][T16084] [U] [ 573.136379][T16084] [U] [ 573.139091][T16084] [U] [ 573.141758][T16084] [U] [ 573.144428][T16084] [U] [ 573.228775][T16084] [U] [ 573.231478][T16084] [U] [ 573.234154][T16084] [U] [ 573.236818][T16084] [U] [ 573.287079][T16084] [U] [ 573.289777][T16084] [U] [ 573.292448][T16084] [U] [ 573.295116][T16084] [U] [ 573.348143][T16084] [U] [ 573.350848][T16084] [U] [ 573.353515][T16084] [U] [ 573.356181][T16084] [U] [ 573.416471][T16084] [U] [ 573.419172][T16084] [U] [ 573.421839][T16084] [U] [ 573.424507][T16084] [U] [ 573.577987][T16084] [U] [ 575.070272][T16130] futex_wake_op: syz.5.2091 tries to shift op by -2048; fix this program [ 575.450922][T16139] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 575.498017][T16139] FAULT_INJECTION: forcing a failure. [ 575.498017][T16139] name failslab, interval 1, probability 0, space 0, times 0 [ 575.552825][T16139] CPU: 0 UID: 0 PID: 16139 Comm: syz.5.2094 Tainted: G U L syzkaller #0 PREEMPT(full) [ 575.552854][T16139] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 575.552860][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.552871][T16139] Call Trace: [ 575.552876][T16139] [ 575.552883][T16139] dump_stack_lvl+0x100/0x190 [ 575.552911][T16139] should_fail_ex.cold+0x5/0xa [ 575.552929][T16139] should_failslab+0xc2/0x120 [ 575.552953][T16139] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 575.552974][T16139] ? alloc_vfsmnt+0x23/0x6a0 [ 575.552996][T16139] alloc_vfsmnt+0x23/0x6a0 [ 575.553012][T16139] ? __pfx___might_resched+0x10/0x10 [ 575.553033][T16139] clone_mnt+0x4b/0x930 [ 575.553054][T16139] copy_tree+0xfc/0xbf0 [ 575.553067][T16139] ? __pfx_down_write+0x10/0x10 [ 575.553090][T16139] copy_mnt_ns+0x2bd/0xc30 [ 575.553110][T16139] ? create_new_namespaces+0x30/0xac0 [ 575.553125][T16139] ? rcu_is_watching+0x12/0xc0 [ 575.553149][T16139] create_new_namespaces+0xd3/0xac0 [ 575.553164][T16139] ? bpf_lsm_capable+0x9/0x10 [ 575.553177][T16139] ? security_capable+0x80/0x260 [ 575.553199][T16139] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 575.553216][T16139] ksys_unshare+0x455/0xab0 [ 575.553236][T16139] ? __pfx_ksys_unshare+0x10/0x10 [ 575.553261][T16139] __x64_sys_unshare+0x31/0x40 [ 575.553279][T16139] do_syscall_64+0x106/0xf80 [ 575.553296][T16139] ? clear_bhb_loop+0x40/0x90 [ 575.553314][T16139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.553329][T16139] RIP: 0033:0x7fe46db9c629 [ 575.553342][T16139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.553357][T16139] RSP: 002b:00007fe46eb15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 575.553372][T16139] RAX: ffffffffffffffda RBX: 00007fe46de15fa0 RCX: 00007fe46db9c629 [ 575.553382][T16139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 575.553391][T16139] RBP: 00007fe46dc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 575.553400][T16139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.553408][T16139] R13: 00007fe46de16038 R14: 00007fe46de15fa0 R15: 00007ffc65be3c08 [ 575.553428][T16139] [ 576.035662][T16144] ima: policy update failed [ 576.040285][ T30] audit: type=1802 audit(1771730864.316:12): pid=16144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2095" res=0 errno=0 [ 576.774793][T16146] Process accounting resumed [ 578.662212][T16181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2105'. [ 578.702712][T16181] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2105'. [ 578.929218][T16182] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 578.998412][T16189] [U] [ 579.001208][T16189] [U] [ 579.003877][T16189] [U] [ 579.006542][T16189] [U] [ 579.030661][T16189] [U] [ 579.033362][T16189] [U] [ 579.036034][T16189] [U] [ 579.038709][T16189] [U] [ 579.076046][T16191] [U] [ 579.102404][T16194] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 579.235438][T16191] FAULT_INJECTION: forcing a failure. [ 579.235438][T16191] name failslab, interval 1, probability 0, space 0, times 0 [ 579.379501][T16191] CPU: 0 UID: 0 PID: 16191 Comm: syz.1.2106 Tainted: G U L syzkaller #0 PREEMPT(full) [ 579.379531][T16191] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 579.379537][T16191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 579.379546][T16191] Call Trace: [ 579.379553][T16191] [ 579.379559][T16191] dump_stack_lvl+0x100/0x190 [ 579.379587][T16191] should_fail_ex.cold+0x5/0xa [ 579.379605][T16191] should_failslab+0xc2/0x120 [ 579.379629][T16191] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 579.379650][T16191] ? copy_fs_struct+0x49/0x340 [ 579.379669][T16191] ? __pfx_do_futex+0x10/0x10 [ 579.379691][T16191] copy_fs_struct+0x49/0x340 [ 579.379711][T16191] ksys_unshare+0x359/0xab0 [ 579.379730][T16191] ? __pfx_ksys_unshare+0x10/0x10 [ 579.379754][T16191] __x64_sys_unshare+0x31/0x40 [ 579.379772][T16191] do_syscall_64+0x106/0xf80 [ 579.379787][T16191] ? clear_bhb_loop+0x40/0x90 [ 579.379805][T16191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.379821][T16191] RIP: 0033:0x7fdc8879c629 [ 579.379834][T16191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.379850][T16191] RSP: 002b:00007fdc895ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 579.379865][T16191] RAX: ffffffffffffffda RBX: 00007fdc88a15fa0 RCX: 00007fdc8879c629 [ 579.379875][T16191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 579.379884][T16191] RBP: 00007fdc88832b39 R08: 0000000000000000 R09: 0000000000000000 [ 579.379893][T16191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.379902][T16191] R13: 00007fdc88a16038 R14: 00007fdc88a15fa0 R15: 00007ffdd04f1598 [ 579.379921][T16191] [ 581.595104][T16234] ima: policy update failed [ 581.652995][ T30] audit: type=1802 audit(1771730869.928:13): pid=16234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2115" res=0 errno=0 [ 581.723251][T16236] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input124 [ 581.782336][T16236] FAULT_INJECTION: forcing a failure. [ 581.782336][T16236] name failslab, interval 1, probability 0, space 0, times 0 [ 581.838713][T16236] CPU: 0 UID: 0 PID: 16236 Comm: syz.8.2116 Tainted: G U L syzkaller #0 PREEMPT(full) [ 581.838741][T16236] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 581.838747][T16236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 581.838757][T16236] Call Trace: [ 581.838762][T16236] [ 581.838769][T16236] dump_stack_lvl+0x100/0x190 [ 581.838796][T16236] should_fail_ex.cold+0x5/0xa [ 581.838814][T16236] should_failslab+0xc2/0x120 [ 581.838839][T16236] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 581.838859][T16236] ? security_file_alloc+0x34/0x2c0 [ 581.838882][T16236] ? trace_kmem_cache_alloc+0xf3/0x120 [ 581.838903][T16236] security_file_alloc+0x34/0x2c0 [ 581.838927][T16236] init_file+0x95/0x480 [ 581.838944][T16236] alloc_empty_file+0x73/0x1c0 [ 581.838961][T16236] alloc_file_pseudo+0x13a/0x230 [ 581.838979][T16236] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 581.838996][T16236] ? security_inode_init_security_anon+0x7b/0x230 [ 581.839021][T16236] __anon_inode_getfile+0xe8/0x280 [ 581.839060][T16236] ? _copy_to_user+0xaf/0xd0 [ 581.839083][T16236] io_uring_setup.cold+0x19e3/0x1d09 [ 581.839108][T16236] ? __pfx_io_uring_setup+0x10/0x10 [ 581.839127][T16236] ? __pfx_do_futex+0x10/0x10 [ 581.839155][T16236] ? xfd_validate_state+0x129/0x190 [ 581.839187][T16236] __x64_sys_io_uring_setup+0xc2/0x170 [ 581.839205][T16236] do_syscall_64+0x106/0xf80 [ 581.839221][T16236] ? clear_bhb_loop+0x40/0x90 [ 581.839239][T16236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.839255][T16236] RIP: 0033:0x7f56af59c629 [ 581.839269][T16236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.839284][T16236] RSP: 002b:00007f56b051e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 581.839299][T16236] RAX: ffffffffffffffda RBX: 00007f56af815fa0 RCX: 00007f56af59c629 [ 581.839309][T16236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 581.839318][T16236] RBP: 00007f56af632b39 R08: 0000000000000000 R09: 0000000000000000 [ 581.839327][T16236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.839336][T16236] R13: 00007f56af816038 R14: 00007f56af815fa0 R15: 00007ffc89080bb8 [ 581.839355][T16236] [ 582.995250][T13716] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 583.005718][T13716] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 583.027582][T13716] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 583.035210][T13716] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 583.043007][T13716] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 583.717801][T16244] chnl_net:caif_netlink_parms(): no params data found [ 584.046064][T16244] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.091066][T16244] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.143769][T16244] bridge_slave_0: entered allmulticast mode [ 584.171798][T16244] bridge_slave_0: entered promiscuous mode [ 584.202318][T16244] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.241868][T16244] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.269824][T16244] bridge_slave_1: entered allmulticast mode [ 584.299549][T16244] bridge_slave_1: entered promiscuous mode [ 584.412829][T16244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.466891][T16244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.615814][T16244] team0: Port device team_slave_0 added [ 584.653294][T16244] team0: Port device team_slave_1 added [ 584.661709][ T31] INFO: task syz-executor:11956 blocked for more than 143 seconds. [ 584.676148][ T31] Tainted: G U L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 584.712235][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.791551][ T31] task:syz-executor state:D stack:23048 pid:11956 tgid:11956 ppid:1 task_flags:0x400140 flags:0x00080002 [ 584.814412][T16244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.850944][ T31] Call Trace: [ 584.861092][T16244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.887163][ T31] [ 584.890091][ T31] __schedule+0xfee/0x60e0 [ 584.949456][ T31] ? __lock_acquire+0x4a5/0x2630 [ 584.954617][ T31] ? __pfx___schedule+0x10/0x10 [ 584.959465][ T31] ? find_held_lock+0x2b/0x80 [ 585.015716][ T31] ? schedule+0x2bf/0x390 [ 585.020076][ T31] schedule+0xdd/0x390 [ 585.040811][T16244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.073539][ T31] schedule_preempt_disabled+0x13/0x30 [ 585.079021][ T31] __mutex_lock+0xc9a/0x1b90 [ 585.127321][T16244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.134510][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 585.139798][ T31] ? __lock_acquire+0x4a5/0x2630 [ 585.151083][T13716] Bluetooth: hci9: command tx timeout [ 585.190964][T16244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.228797][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 585.256602][ T31] ? net_generic+0xea/0x2a0 [ 585.290686][ T31] ? net_generic+0xea/0x2a0 [ 585.310746][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 585.316053][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 585.350859][T16244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.374018][ T31] nfsd_umount+0x3b/0x60 [ 585.378286][ T31] deactivate_locked_super+0xc1/0x1b0 [ 585.444624][ T31] deactivate_super+0xe7/0x110 [ 585.449424][ T31] cleanup_mnt+0x21f/0x450 [ 585.541365][ T31] task_work_run+0x150/0x240 [ 585.567723][ T31] ? __pfx_task_work_run+0x10/0x10 [ 585.600525][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 585.605921][ T31] do_syscall_64+0x668/0xf80 [ 585.671896][ T31] ? clear_bhb_loop+0x40/0x90 [ 585.676599][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.730464][ T31] RIP: 0033:0x7fd00799d897 [ 585.734902][ T31] RSP: 002b:00007ffc4200add8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 585.785399][ T31] RAX: 0000000000000000 RBX: 00007fd007a31ef0 RCX: 00007fd00799d897 [ 585.820404][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4200ae90 [ 585.828404][ T31] RBP: 00007ffc4200ae90 R08: 00007ffc4200be90 R09: 00000000ffffffff [ 585.901927][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4200bf20 [ 585.909921][ T31] R13: 00007fd007a31ef0 R14: 0000000000067dd6 R15: 00007ffc4200bf60 [ 585.951281][ T31] [ 585.991051][ T31] INFO: task syz.3.1539:13424 blocked for more than 144 seconds. [ 585.998791][ T31] Tainted: G U L syzkaller #0 [ 586.050508][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.059192][ T31] task:syz.3.1539 state:D stack:27400 pid:13424 tgid:13422 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 586.100326][ T31] Call Trace: [ 586.103621][ T31] [ 586.106541][ T31] __schedule+0xfee/0x60e0 [ 586.125416][ T31] ? __lock_acquire+0x4a5/0x2630 [ 586.134027][ T31] ? __pfx___schedule+0x10/0x10 [ 586.138888][ T31] ? find_held_lock+0x2b/0x80 [ 586.143897][ T31] ? schedule+0x2bf/0x390 [ 586.148226][ T31] schedule+0xdd/0x390 [ 586.152538][ T31] schedule_preempt_disabled+0x13/0x30 [ 586.157988][ T31] __mutex_lock+0xc9a/0x1b90 [ 586.163003][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 586.168307][ T31] ? __lock_acquire+0x4a5/0x2630 [ 586.173589][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 586.181167][ T31] ? net_generic+0xea/0x2a0 [ 586.185753][ T31] ? net_generic+0xea/0x2a0 [ 586.190608][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 586.195900][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 586.201229][ T31] nfsd_umount+0x3b/0x60 [ 586.205473][ T31] deactivate_locked_super+0xc1/0x1b0 [ 586.211174][ T31] deactivate_super+0xe7/0x110 [ 586.215938][ T31] cleanup_mnt+0x21f/0x450 [ 586.220627][ T31] task_work_run+0x150/0x240 [ 586.225217][ T31] ? __pfx_task_work_run+0x10/0x10 [ 586.235855][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 586.242203][ T31] do_syscall_64+0x668/0xf80 [ 586.246793][ T31] ? clear_bhb_loop+0x40/0x90 [ 586.251756][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.257642][ T31] RIP: 0033:0x7f66ba19c629 [ 586.262367][ T31] RSP: 002b:00007f66bb059028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 586.271064][ T31] RAX: 0000000000000000 RBX: 00007f66ba415fa0 RCX: 00007f66ba19c629 [ 586.281056][ T31] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000000 [ 586.289024][ T31] RBP: 00007f66ba232b39 R08: 0000000000000000 R09: 0000000000000000 [ 586.297263][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.305390][ T31] R13: 00007f66ba416038 R14: 00007f66ba415fa0 R15: 00007ffcedff3858 [ 586.313608][ T31] [ 586.415942][ T31] [ 586.415942][ T31] Showing all locks held in the system: [ 586.460804][ T31] 1 lock held by khungtaskd/31: [ 586.465666][ T31] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 586.540073][ T31] 5 locks held by kworker/u8:9/1119: [ 586.545379][ T31] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 586.620063][ T31] #1: ffffc90004a1fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 586.666443][ T31] #2: ffffffff905f9650 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 586.719956][ T31] #3: ffffffff90611fa8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 586.729029][ T31] #4: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 586.828620][ T31] 2 locks held by getty/5595: [ 586.837755][ T31] #0: ffff888034acb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 586.870115][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 586.907307][ T31] 2 locks held by syz-executor/5823: [ 586.920407][ T31] #0: ffff88802a2d80e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 586.940472][ T31] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 586.979839][ T31] 2 locks held by syz.1.522/8476: [ 586.984871][ T31] #0: ffff88804b3800e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 587.014116][ T31] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 587.028890][ T31] 2 locks held by syz.0.1187/11636: [ 587.035199][ T31] #0: ffffffff906be130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 587.043564][ T31] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 587.054262][ T31] 2 locks held by syz-executor/11956: [ 587.059622][ T31] #0: ffff888032a0e0e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 587.070241][ T31] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 587.080050][ T31] 2 locks held by syz.3.1539/13424: [ 587.085245][ T31] #0: ffff88802b2620e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 587.095820][ T31] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 587.107875][ T31] 2 locks held by syz-executor/13745: [ 587.113525][ T31] #0: ffff88805dba20e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 587.129327][ T31] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 587.139159][ T31] 3 locks held by kworker/0:4/13892: [ 587.145169][ T31] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 587.155813][ T31] #1: ffffc9000465fd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 587.166185][ T31] #2: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 587.176423][ T31] 2 locks held by syz.7.1792/14744: [ 587.181756][ T31] #0: ffff88803699c0e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 587.192240][ T31] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 587.203621][ T31] 1 lock held by syz.8.2044/15930: [ 587.208731][ T31] #0: ffffffff90611fa8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 587.217960][ T31] 4 locks held by syz-executor/16244: [ 587.224077][T13716] Bluetooth: hci9: command tx timeout [ 587.236216][ T31] #0: ffff888060d68ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 587.245963][ T31] #1: ffff888060d680c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 587.256372][ T31] #2: ffffffff908a9fa8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 587.266529][ T31] #3: ffff88803885b2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 587.276574][ T31] 1 lock held by syz.5.2122/16270: [ 587.281880][ T31] #0: ffffffff90611fa8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 587.335975][ T31] [ 587.338314][ T31] ============================================= [ 587.338314][ T31] [ 587.375679][ T31] NMI backtrace for cpu 0 [ 587.375696][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 587.375719][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 587.375725][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 587.375735][ T31] Call Trace: [ 587.375740][ T31] [ 587.375747][ T31] dump_stack_lvl+0x100/0x190 [ 587.375774][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 587.375797][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 587.375818][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 587.375843][ T31] sys_info+0x141/0x190 [ 587.375861][ T31] watchdog+0xd25/0x1050 [ 587.375880][ T31] ? __pfx_watchdog+0x10/0x10 [ 587.375894][ T31] ? __kthread_parkme+0x18c/0x230 [ 587.375912][ T31] ? kthread+0x13a/0x450 [ 587.375929][ T31] ? __pfx_watchdog+0x10/0x10 [ 587.375941][ T31] kthread+0x370/0x450 [ 587.375959][ T31] ? __pfx_kthread+0x10/0x10 [ 587.375978][ T31] ret_from_fork+0x754/0xd80 [ 587.376001][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 587.376023][ T31] ? __switch_to+0x7b4/0x1120 [ 587.376038][ T31] ? __pfx_kthread+0x10/0x10 [ 587.376057][ T31] ret_from_fork_asm+0x1a/0x30 [ 587.376081][ T31] [ 587.547154][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 587.554019][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 587.564681][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 587.569857][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 587.579892][ T31] Call Trace: [ 587.583167][ T31] [ 587.586096][ T31] dump_stack_lvl+0x100/0x190 [ 587.590778][ T31] vpanic+0x552/0x970 [ 587.594745][ T31] ? __pfx_vpanic+0x10/0x10 [ 587.599238][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 587.605389][ T31] panic+0xd1/0xe0 [ 587.609096][ T31] ? __pfx_panic+0x10/0x10 [ 587.613500][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 587.619644][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 587.625791][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 587.631940][ T31] ? watchdog.cold+0x198/0x1ca [ 587.636691][ T31] ? watchdog+0xd35/0x1050 [ 587.641093][ T31] watchdog.cold+0x1a9/0x1ca [ 587.645679][ T31] ? __pfx_watchdog+0x10/0x10 [ 587.650342][ T31] ? __kthread_parkme+0x18c/0x230 [ 587.655356][ T31] ? kthread+0x13a/0x450 [ 587.659587][ T31] ? __pfx_watchdog+0x10/0x10 [ 587.664248][ T31] kthread+0x370/0x450 [ 587.668304][ T31] ? __pfx_kthread+0x10/0x10 [ 587.672886][ T31] ret_from_fork+0x754/0xd80 [ 587.677470][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 587.682580][ T31] ? __switch_to+0x7b4/0x1120 [ 587.687243][ T31] ? __pfx_kthread+0x10/0x10 [ 587.691823][ T31] ret_from_fork_asm+0x1a/0x30 [ 587.696590][ T31] [ 587.699661][ T31] Kernel Offset: disabled [ 587.703975][ T31] Rebooting in 86400 seconds..