last executing test programs: 2m33.630609974s ago: executing program 1 (id=585): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8a402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_MM_BRK(0x3, 0x7, 0x0, 0x100, 0x85f8) r1 = io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x0, @ANYBLOB="510f0a2b2edea314b08925d126f42d734f6354e8d74626cd1e6cd9c2bad06cf305164c9a7567d5911f87b44d925363284b5f6271af74ac127967c1aecd88f2daf7d15159cf1c930de797840bfdd2cd833372ac04e508b0c40d73ae73cc4f9d469c0c47178a537fd796802cfb45c72d091c1213c52880a5d7f4", @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'ip6erspan0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r5}, @OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xc}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004081}, 0x20040814) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r8 = socket(0x2, 0x1, 0x106) bind$auto(r8, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) futex_wake$auto(&(0x7f0000000300)="9b80c7f5bf4f59431e784ce15c656cdbced2698e83639b682647dc1c479da3c52b1e6013472e79d28748428ab5de9fd97b1506edaea54cf6f9c83090c1efe01d3c80056c88dc3ae6a775c7a91cd22bf68877fb2b70d05813a9a8cd89bbb828c558fac9adb95964", 0x9, 0x8dff, 0x9) r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r9, 0x0, 0x400000000006) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(r2, &(0x7f0000000140)='7\x00D\xa0\x04|P\xd4Ig\x00\x9f\xbdut\x8b\xb4\xd9\x13X++\xd3f\x17d\x94\xf4\x10\x85\xe0Y\x11\xb0Q\xbf\x87\x97\x85\xa1\xb8*L\xf1\x8f\xac\xaa\x1eBxNK\fC]q\x01\xb1\xf5\x03\x14\xe7\xd4\x17!,\xd4w\x88c%\xb2Jx\x1a\x99\f\x83\xbf}Z\x0f\xec\xda\x88\xf9y}\x8d\xfc\xa4\x98\xca\xe9\xe4\x8fO\xdd8\xb24\xc2\x9d\xc2\xac\xfc\x83\xb6R\xde\xb9q\t\xdb\xbeY\xf6\xd7\xa6Bh\xa9\xa3Q\xb6^\r\xef\xfc\xe3\x94^\x13\x13\r\xcah\xb6!ni|Y\x01\xd6\x8fM\xad\xcd\r\xa1\xc9\x1b\xb9O\xbd\xe2K\xbe\x89\xef@\xb94\xcb\x92\xe4\xdbD\x1a\xa9\xe0\xf0H\x1a\xb8\xb9\xe4\xcb\x01&\x1c\xbd\r%\xaa/\xa1\xd5-M\xf0\xe9\x00\xea\x93`t\x15\\dG[~i\x83:\t9\x0e3c\xb4\x05\x7f\x1b\xf8\x00\x00\xd7l\x11\x13w\xfd \xac\xe7\xa3\xbb\x87UF\x01\x0e\x13>\xe2\xc45uO\xab\x9c\xe9\xdf{x\xb0\'\n\xb4F;\xdd\xb89B\xf0\x1b\xd0\xcf\xcb\ba\xd2\x92\xb5\fkot\xa9\xf6\xca\'\xf6_\xc5\xa0\x99\x18\xae%\xd9I`\x8d\x8f\xbf\x00D-\xf2\xf4!\x13mM[\x00\x0f\xf6\xf8\xb2\x05;!\x98\xb9?\x82#*\xb3\xcf\r\xbe1\xe0\x891o\x1a\x97\xbd\xeb;\xd0\xf8\xe6C=\x06{Y*\xe5\xbfD\a~\xe1\xc7\xb0\xa2\xd3\xa9PLX\xac\x1b@@|\xe69\xca\x9dl\xba7\x1b\xccj\xe5w\xab\x16\xed\x01J/\xd70\xbf\xfb\x01\x9c\x88\xe1{\xfb\xf6\x01\xc6!\xd1B\xf5\xd8\xcf\x86D\xb2<\x02\xfa\x15\xbce\xfeN#\x17\xf0\xb3\xcdD\xb83\xa1\xe2\xd3wd\xf6\x00{7\xe7\xf3\f\x1aL\xab2o\xd0\xf0*f\xd9\x11\xef\x01\x13\x9a\xb4', 0x4) userfaultfd$auto(0x1) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r0, 0x80044dfb, &(0x7f0000000300)) futex$auto(&(0x7f0000000000)=0x800, 0x5, 0x9000, &(0x7f0000000080)={0xa9, 0xfffffffffffffffe}, &(0x7f00000000c0)=0x5, 0xf00) 2m33.376139999s ago: executing program 1 (id=586): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_RTC_AIE_ON(r0, 0x7001, 0xe703) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff1e, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24004800) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000500)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a63c8fa7f7d5152d4831f60eade8e3d8a508f6178de4e7e975de72c549dbc7876cb528ba0841788237bfc00dd4eef5") lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x3}, 0x1) write$auto(0xffffffffffffffff, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS1\x00', 0x500, 0x0) ioctl$auto_TIOCMGET2(r2, 0x5415, &(0x7f0000002d00)) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) getsockopt$auto_SO_TXREHASH(r1, 0x5, 0x4a, &(0x7f0000000000)='.!![[&-#\'*T\x00', &(0x7f0000000040)=0x3) ioctl$auto_EXT4_IOC_SETVERSION_OLD(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)="f9c6db73364934578d51601d132b20dd82ae0781f6cb18c55fb7ed811a498af961a2ba35abcb2a9e90cb1318a4e844fa36d450dd94feeb082f1df20f92ccf13a81a57128c3747e32049e83c577e1acbc77ae0592cdbc051382debcaa0dc8ed6a464e67d65d0fe51909b6301747549e056844706522e452069bc58cceba3c6f41643ea20806562e91ca8a2cc01217c98f9dbad36dd49ba0ac6b5eac96f27ca3511f2ead40050e4c") openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x101202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x2, 0x3, 0x100) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth0_to_bond\x00'}) sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/rcutree/parameters/rcu_resched_ns\x00', 0x1a1302, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f00000003c0)='/dev/sequencer2\x00\xe5F\xff\xb95E(7GhId\xa3\xa8\xe9\x9f\x95\xd3\x88\xd2\xbc<1\x14\xa5^\xd2\x9dv\x10\x83]\x9c(\x98\xce\x9aOor_\x9c\xa7\x9e\x93\xe7\b\x82\xefO\x88\xba\x99k\x06\x9c;\a\tF\x1e\xa4T\xef&\x8c\xab\xdf\xb5]\x81\xfdx09m\xb6\xb7\x92g\xbc\xd6\xd3\xbc\xce\x15\xb4\xdb\xf2\xe8\b\"\t\xe9\xe2\x0f\xfd\x1dd\x86\x05\xb49\xf7\x92\xc1iVR\xef\xdb\xf0h\v\xa3\'\xc1\xd5P\x1c?\x92\t\xb4\xc9|\x93M\x92\xae{\x8d\x98\fK\x8e\xfd\fv\xd7+\xf8\x8aU\x92q\xeb\t\xcc\x1d') 2m32.216234536s ago: executing program 1 (id=590): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) writev$auto(r0, &(0x7f0000000100)={&(0x7f0000000280)="8e8873b5f9dd39182ab801a9e417130ff346eab3d41f954d458b276ffab4f6d5b23e", 0x7115}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) socket(0xa, 0x1, 0x84) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/if_inet6\x00', 0x0, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0xc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000840)="13") ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xfffffffffffffffe, 0x8001, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, 0xfffffffffffffffc, 0x1ff, 0x2, 0x9, 0x0, 0x10001, 0x4, 0x4, 0x4}) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r1, 0x2, &(0x7f0000000180)={@siginfo_0_0={0x1000, 0x2e1be50f, 0x2, @_kill={r2, r3}}}, 0x2) 2m30.556795905s ago: executing program 1 (id=593): mmap$auto(0x7, 0x9, 0x3, 0xeb1, 0x7, 0x8000) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) ioctl$auto_FIOQSIZE(r0, 0x5460, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000100)=@link_create={@map_fd=r1, @target_ifindex, 0x10000, 0x101, @netkit={@relative_fd=r1, 0x8}}, 0x10001) socket(0x10, 0x80002, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x40004008) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) r2 = prctl$auto(0xbb, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x9, 0x20006, 0x4000000000df, 0x14, r2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{&(0x7f00000003c0)="7517e335f13ea7144f53148fd68ebaf1a9625a25eefaf2976fd0de76a819420e71685b3b9d218a20c79d6172f295750ede169ad82e7bf2606fbe2afd5c659122ea67c68eb1c138749dae9353523464ee12bc1338a6a81848e4269fe9d4486820b861e8e11257963f0539175ab7aa6aeaa71266698b025c225d2b1c1a06f096aa536006e7d026acf5513d36421522b4212edbbd91c23a683eba11d9716b3f4023f0d3f59af9cca0e2b1e2b410d5a0fd1a2b8c8e5e5f55991ed6536ebb0f9c1442a4c72297d8", 0xffff, &(0x7f0000000380)={&(0x7f0000000140)="4e86ca325b00b93bbd8281e37986643cee1f8988610f877b5b2a07d0b2d18e60fc9fd0e68fadb3ebc2a10a65ebdb75894c430d4d5cbdb8fcd64ac0a8d7a9a4ff", 0x7}, 0x1, &(0x7f0000000240), 0x22a, 0x9}, 0x7}, 0x6, 0x7) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x5, 0x7, 0x48, 0x7ff, 0xf59, 0x7, 0x4ef, 0x6, 0x8, 0x3, 0xb, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x5a7b7e00, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0xb, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x2000000000, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8006, 0x4000000, 0x0, 0x0, 0xfffffffffffffffc, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9e]}, 0x1ff, 0x20000011) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x27, 0x4, 0x3b) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x29, 0x2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) 2m30.051738354s ago: executing program 1 (id=594): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000e1, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7t\b\x00w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x8c)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x14&\x99?\xe6\xe5I\xe2\xae,\x95k \x97\x18VBAo', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdd, 0x9b72, 0xffffffffffffffff, 0x8001) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f00000000c0)=0x474c5) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/178, 0xb2) 2m28.869265492s ago: executing program 1 (id=596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x2f, 0x0, 0x1}, 0x48080) 2m27.572220873s ago: executing program 3 (id=599): mmap$auto(0x7, 0x9, 0x3, 0xeb1, 0x7, 0x8000) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) ioctl$auto_FIOQSIZE(r0, 0x5460, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000100)=@link_create={@map_fd=r1, @target_ifindex, 0x10000, 0x101, @netkit={@relative_fd=r1, 0x8}}, 0x10001) socket(0x10, 0x80002, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x40004008) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) r2 = prctl$auto(0xbb, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x9, 0x20006, 0x4000000000df, 0x14, r2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{&(0x7f00000003c0)="7517e335f13ea7144f53148fd68ebaf1a9625a25eefaf2976fd0de76a819420e71685b3b9d218a20c79d6172f295750ede169ad82e7bf2606fbe2afd5c659122ea67c68eb1c138749dae9353523464ee12bc1338a6a81848e4269fe9d4486820b861e8e11257963f0539175ab7aa6aeaa71266698b025c225d2b1c1a06f096aa536006e7d026acf5513d36421522b4212edbbd91c23a683eba11d9716b3f4023f0d3f59af9cca0e2b1e2b410d5a0fd1a2b8c8e5e5f55991ed6536ebb0f9c1442a4c72297d8", 0xffff, &(0x7f0000000380)={&(0x7f0000000140)="4e86ca325b00b93bbd8281e37986643cee1f8988610f877b5b2a07d0b2d18e60fc9fd0e68fadb3ebc2a10a65ebdb75894c430d4d5cbdb8fcd64ac0a8d7a9a4ff", 0x7}, 0x1, &(0x7f0000000240), 0x22a, 0x9}, 0x7}, 0x6, 0x7) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x5, 0x7, 0x48, 0x7ff, 0xf59, 0x7, 0x4ef, 0x6, 0x8, 0x3, 0xb, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x5a7b7e00, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0xb, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x2000000000, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8006, 0x4000000, 0x0, 0x0, 0xfffffffffffffffc, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9e]}, 0x1ff, 0x20000011) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x27, 0x4, 0x3b) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x29, 0x2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) 2m27.349300187s ago: executing program 3 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x2, 0x5) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x7, 0x7fffffffffffffff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x8fb, 0xeb1, r0, 0x8000) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r3, 0x0, 0x101, 0x103) unshare$auto(0x40000080) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) keyctl$auto(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x100000001) pwritev$auto(r4, &(0x7f0000000180)={0x0, 0x2}, 0x3, 0x5, 0x5) getsockopt$auto_SO_RESERVE_MEM(r4, 0x4, 0x49, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/reset\x00', &(0x7f0000000080)=0x2) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2m26.360562435s ago: executing program 3 (id=602): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000e1, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7t\b\x00w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x8c)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x14&\x99?\xe6\xe5I\xe2\xae,\x95k \x97\x18VBAo', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdd, 0x9b72, 0xffffffffffffffff, 0x8001) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f00000000c0)=0x474c5) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/178, 0xb2) 2m24.224548111s ago: executing program 3 (id=605): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D2\x00', 0x1, 0x0) madvise$auto(0x0, 0xc89, 0x6) prctl$auto(0x3e, 0x100001, 0xffffffffffffffff, 0x1, 0x5dd) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x20800, 0x0) pselect6$auto(0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xffffffff, 0x100000000}, 0x0) futex$auto(0x0, 0x10b, 0x1, 0x0, 0x0, 0xfbfffffa) ioctl$auto(r0, 0x4b65, r0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x200, 0x100000004, 0x200000100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare$auto(0x40000080) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x200, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYBLOB="06182e8e674dead600a130c4797dcdb62efb81fe58ed98818e05f0c16b476cd780e1261e392e6083bd40ac6c94f0d2be5b993c9053db029f5b73326cf6367f1686b8b80238da64680683bd76acc7a24f3ad0f0270c196f3d6a882d5a79adc60c01e99949b0b6924b8a634f7b438df75bf2", @ANYBLOB="e958e86e5bafd39a3f8aa96117ffbe687c"], 0x1ac}, 0x1, 0x0, 0x0, 0x8001}, 0x40) recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000340), 0xfff}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vivid.0/video4linux/v4l-touch6/index\x00', 0xe2100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/45, 0x2d) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) 2m22.69974584s ago: executing program 3 (id=608): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x1940, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000040)=0x74c7) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/178, 0xb2) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x9}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'netpci0\x00'}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r6, 0x0, 0x0) socket(0x2c, 0x3, 0x10000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r7, 0x7fffffffffffffff, 0x400000040000005, 0x4) mmap$auto(0x0, 0xc685, 0x3e, 0x1200000010, r2, 0x4) mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) io_setup$auto(0x7ffe, 0x0) gettid() write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) timer_getoverrun$auto(0xa935) 2m21.612871158s ago: executing program 32 (id=580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x6b}, 0x1, 0x0, 0x0, 0x1}, 0x48080) 2m21.587945887s ago: executing program 3 (id=611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x11, 0x0, 0x0, 0x1}, 0x48080) 2m15.258104812s ago: executing program 4 (id=619): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) writev$auto(r0, &(0x7f0000000100)={&(0x7f0000000280)="8e8873b5f9dd39182ab801a9e417130ff346eab3d41f954d458b276ffab4f6d5b23e17", 0x7115}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) socket(0xa, 0x1, 0x84) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/if_inet6\x00', 0x0, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0xc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000840)="13") ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xfffffffffffffffe, 0x8001, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, 0xfffffffffffffffc, 0x1ff, 0x2, 0x9, 0x0, 0x10001, 0x4, 0x4, 0x4}) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r1, 0x2, &(0x7f0000000180)={@siginfo_0_0={0x1000, 0x2e1be50f, 0x2, @_kill={r2, r3}}}, 0x2) 2m14.218484809s ago: executing program 4 (id=621): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/neigh/sit0/base_reachable_time_ms\x00', 0x42a81, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x8000, 0x200fa9d, 0x1, 0x0, 0x3, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty60\x00', 0x161203, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x20b42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x109601, 0x0) socketpair$auto(0x4004, 0x2, 0xfff, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, r1, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd2/queue/atomic_write_unit_min_bytes\x00', 0x10b140, 0x0) 2m13.737183081s ago: executing program 33 (id=596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x2f, 0x0, 0x1}, 0x48080) 2m13.684691773s ago: executing program 4 (id=623): r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) pwritev$auto(r0, 0x0, 0x2, 0xfffffffffffff274, 0x6) msgget$auto(0xc, 0x77d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x10009, 0x0, 0x1f, 0x9}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)=0x1) sendto$auto(0x3, 0x0, 0x1, 0x101, 0x0, 0x1c) ioctl$auto(0x3, 0x541b, 0x38) syslog$auto(0x3, &(0x7f00000000c0)='..\x00k\xce\xa0\xf5\aI.\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x003\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x94v\xfc\x89\xc1\x16\xe8\xdb\xc6\xd9\xb4l\xefl\x01*\xbe\x884K\xabgH\x94xj\xfb\x17\xa2|}\xf4\xd9-\x9a', 0x5) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0xa2b0) msync$auto(0x0, 0x2000000005, 0x6) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0x3) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000180), 0xffffffffffffffff) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x6, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r2 = socket(0x2, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0x810401e, 0x5, 0xfffffffc, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 2m12.136586367s ago: executing program 4 (id=624): mmap$auto(0x7, 0x9, 0x3, 0xeb1, 0x7, 0x8000) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) ioctl$auto_FIOQSIZE(r0, 0x5460, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) socket(0x10, 0x80002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x40004008) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) r2 = prctl$auto(0xbb, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x9, 0x20006, 0x4000000000df, 0x14, r2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{&(0x7f00000003c0)="7517e335f13ea7144f53148fd68ebaf1a9625a25eefaf2976fd0de76a819420e71685b3b9d218a20c79d6172f295750ede169ad82e7bf2606fbe2afd5c659122ea67c68eb1c138749dae9353523464ee12bc1338a6a81848e4269fe9d4486820b861e8e11257963f0539175ab7aa6aeaa71266698b025c225d2b1c1a06f096aa536006e7d026acf5513d36421522b4212edbbd91c23a683eba11d9716b3f4023f0d3f59af9cca0e2b1e2b410d5a0fd1a2b8c8e5e5f55991ed6536ebb0f9c1442a4c72297d8", 0xffff, &(0x7f0000000380)={&(0x7f0000000140)="4e86ca325b00b93bbd8281e37986643cee1f8988610f877b5b2a07d0b2d18e60fc9fd0e68fadb3ebc2a10a65ebdb75894c430d4d5cbdb8fcd64ac0a8d7a9a4ff", 0x7}, 0x1, &(0x7f0000000240), 0x22a, 0x9}, 0x7}, 0x6, 0x7) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x5, 0x7, 0x48, 0x7ff, 0xf59, 0x7, 0x4ef, 0x6, 0x8, 0x3, 0xb, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x5a7b7e00, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0xb, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x2000000000, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8006, 0x4000000, 0x0, 0x0, 0xfffffffffffffffc, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9e]}, 0x1ff, 0x20000011) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x27, 0x4, 0x3b) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x29, 0x2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) 2m11.44989172s ago: executing program 0 (id=625): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={"ef146f1b61c707b393c30040000000000000000000f871072dcca733d400", 0x3fe, 0x408, 0x7, 0x400001, 0xffff}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x1000000000000000) 2m10.99021462s ago: executing program 4 (id=626): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) (async) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40081) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), r0) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001040)=ANY=[@ANYBLOB="768c2436", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf256d0000008c002a0000236ed4f010a3f7156f61ca87bdab767afa8ed9d14a33285555e8d43c9ea25be9c06e70c47487c16853cf68cdc17dff48bff933497366260d445f60d2acb82db98eee286b221872ffc7bf882796cb0e958c4e6a8cbff550feaa237411a69abe91d86a86e0fe56b8f4bbcee5f9eed43c5a3c90c29532794bc4f3676f639d0f3988972b05eb535257"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0x7, 0x80000001, &(0x7f0000000280)={{0x2, 0x7}, {0x9, 0x400}, 0x10000, 0x7, 0x100000001, 0x2, 0x80, 0xfffffffffffff801, 0x6, 0x1, 0x100000000, 0x9, 0x8, 0x8, 0x4, 0x1}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f000000a240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f000000a200)={&(0x7f0000001f00)=ANY=[@ANYBLOB="f8ffff0dca0a6cef20d3ca91890f63915580a0cfdfd6a2564c9074c1f5716e1ddf58bdbd0dfa9b8e4c087c93d5e3734b28be5edb99e8e6f36c352cf9e9d8357656849c8a9f00daf79306cb27efda11cfe6238c6dc93d89ac5b541e8b926af578873e36085581672fc03f5af30fb7ef60913f907e95eb3a14888596140e54528bcce465a428bc65776e6f173a6929223f3edab3f05d580c359273d93a9ca1b3af0caee01337f9e0b21e4d1284a1227f31232c2f5263daf2826ec558fbf3", @ANYRES32=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="ac7e80680ddb3a21dd756140fa8209a2a96365f1dfbddd7cb88cd534f215de15030e8804325d9baee25d93e49b7cbd941c28da25d4004e2b0742d72e394ebe855f6e4aefebac12c0c0b308ce596419b2fd4ac4d196911b7d3c2eaebeb96e3e642eab5d60fd0ac66b65fc7aefde80f557d3a49b0e5fe57ae5ca95391a7e46cf6b49a83c752baba6762dc306c9a034b61b8e36274913b576cb4f2aae994e55dbb94f753f1ea5750ee63b40e1d95956e26f8cddfba936ef95c35d014d9523910d00c908d0809866f83c82e08983d2cb7e0d6ed417d314fc1fe2814ea914a99341da903942f0556c93c74a856d52509e3eadf871a9ad79769832ba7a967be5bbddb7dedd6df4013e7a9a8fe36d6e20ed476aab76a16bd702534d8f4bba1ec75a2a3923e0ad18db7cd2e08b685fa646305b379b9233a34104002e80040084800800cc00", @ANYRES32=0x0, @ANYBLOB="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"], 0xcec}, 0x1, 0x0, 0x0, 0x800d808}, 0x20040871) write$auto(0x3, 0x0, 0x100000000) (async) write$auto(0x3, 0x0, 0x100000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) (async) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r2, 0x5646, r2) (async) ioctl$auto(r2, 0x5646, r2) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) (async) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000100)='%U{\fb\x00aU\xca\xc9:\xcfZ', 0xffffffff) (async) write$auto(r3, &(0x7f0000000100)='%U{\fb\x00aU\xca\xc9:\xcfZ', 0xffffffff) read$auto(0x3, 0x0, 0x8080) (async) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(r0, 0x94, 0x0, 0x0, 0x56b) setsockopt$auto(0xffffffffffffffff, 0x7, 0x16, 0x0, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00a\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="051000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x48091) read$auto(r4, 0x0, 0x80000000) (async) read$auto(r4, 0x0, 0x80000000) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) 2m10.955540102s ago: executing program 0 (id=627): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r1, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000ff", @ANYRES16=r2, @ANYBLOB="010326bd7000ffdbdf252d000000fae77067"], 0x14}, 0x1, 0x1000000, 0x0, 0x2404c012}, 0x80) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400009, 0x1, 0x11, 0x8000000000000003, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0xa2b0) mmap$auto(0x0, 0x3, 0x2, 0x4f8, 0xfffffffffffffffa, 0x6) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) pread64$auto(r3, 0x0, 0x10001, 0x830) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 2m9.577522539s ago: executing program 0 (id=628): setsockopt$auto_SO_BUSY_POLL(0xffffffffffffffff, 0xd, 0x2e, &(0x7f0000000000)='*\x00', 0xb) r0 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000080)="15b9a18deb262eaf40df578dde9eb17afcbbc1597235b73e9959d4ea60bfc7cdaad0cd5cbdd5fc063107b88cfddbec58e38aca657fe839a969bdeb01af65bbed3ee1ae6354e1ece2507d0acc01f81242a8e4", 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6erspan0\x00', 0x0}) (async) r4 = semctl$auto(0x7, 0x893, 0x40000, 0x40) (async, rerun: 32) shmctl$auto_IPC_RMID(0x9, 0x0, &(0x7f0000000300)={{0x80, 0xee01, 0xee00, 0x9, 0x2, 0x7fff, 0x1}, 0x26f, 0x3, 0x6, 0x8, @inferred, @inferred=0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0)="c27b193985952f8a30b7831b17aaa8e6a89217246b62dde52520cfe8e8af0b80fe6c8f265c3c9e232a936900fa0c75ed5c7d6cdf3870df0fe2a73ba812b81437", &(0x7f0000000200)="b1ced8499f9d391d015d666c0af59a02fec6a6fad413d9bcf8c76cfe289ff4c75065a8c9b328b83d0cee87d4978ae8e82fa45e4e97272df8abe137d78c0e3afd5d88d91db503d9212f6d554acfa2d0f8765c1853f3a856bceb0913f7fdc711356bc3a6930ae6eb8ee18d7d8ded1ad9f5c4cc1c9232b3cef5b2d40dd8e87b122f629e6e9cbb1f0b56a414fbc05fa1137e2e4f86e9975153bc5152fa8603a659a12fb63388931758284866fad91db2ef76f4071023fc0e6c87afdd9cd5eee4ab20fb239bf9958800acedfe71"}) (async, rerun: 32) msgctl$auto_MSG_STAT_ANY(0x71, 0xd, &(0x7f0000000400)={{0x2, 0xee01, 0xee01, 0xd, 0x0, 0xcf2, 0xfff7}, &(0x7f0000000380)=0x81, &(0x7f00000003c0)=0xe1, 0x2, 0x3, 0x9, 0xfb, 0xbf3, 0x0, 0x7, 0x0, @raw=0x7fff, @inferred=0xffffffffffffffff}) statx$auto(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0xa78, 0x7, &(0x7f00000004c0)={0x3, 0x8, 0xffffffffffffffff, 0x7, 0xee00, 0xffffffffffffffff, 0x0, 0x7c, 0xabb, 0xfffffffffffffffb, 0x7, 0xb9, {0x6, 0xfa2}, {0x9, 0x7}, {0x6c, 0x2}, {0xfffffffffffffffd, 0x6}, 0x2, 0x8, 0x8001, 0x4, 0x59, 0xfffffff7, 0x8, 0x0, 0x97, 0x200, 0x9, 0x7fff, [0x1, 0x31b, 0x8000, 0xaf5, 0x6, 0x4, 0x2, 0xf3a, 0x4]}) sendmsg$auto_NL80211_CMD_SET_PMKSA(r1, &(0x7f0000001a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000001a40)={&(0x7f00000005c0)={0x1474, r2, 0x3, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x1344, 0x124, 0x0, 0x1, [@nested={0x20c, 0x83, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @fd=r0}, @generic="2603d024aff9596d89aefc6ef2577260551566f778106298468f2fbd045367afed3f904f392a0c5975675356cf0abdfca0c8632c0a771de9a096347efb87b13e96b0ef256983", @typed={0x8, 0xd8, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x28, 0x0, 0x0, @fd=r0}, @generic="cae4d0379b68f83375702e55a33c7453eb9f9a3a81b5e7bc6d0a973b3f145b5137cca689004c8c835fad0f3339d950a2bc27150513fd8255b5cb2f7aa1cb746ef9c01349bc7926abbc7fac649d1f71eeeb08d5e5e1406c934d062a008e73ed2f9295f94480ef2b428e3afafed9c23dce1dd5c0f3e13e8522f5bf80c17145bb69ab26930f2cdc047c8d3f1fec2d3a6ffab97209122708497c675e26d3ea9a1319fb9c391142bc7deb39c2a7cab7adeb4891e863a45f747ef5beff125743c7480485", @nested={0x4, 0x3b}, @generic="06dd6f9cdf9717cffaa90d911424aa0bd8861a9950a11b9c78f37c066ee6db01685c04411d10f929801e97a9d3203fef3579ba9b5ea0a99f48efea2d0910ba41018706f9e57ffaab31bf6e7b17d0675f95754d928d966e894a5830c5ea7ff3b3de156a5804fc074edcd1e2c771d232258d1ce6dcd2bece50b273a12c81d3d22cfbf69cffa2a003f0103b68e60e06dc5df09b6d90d21f211af7a2e817e2def0f8fc938e0c8729d3b6afe320450c2b575cb3daca3778347fed4b6351f020f2349a1c7e84658de64992df80da31111a7b4ba3942e95d0f82d38dc1cb93574", @typed={0x8, 0xb3, 0x0, 0x0, @pid=r4}]}, @nested={0x106c, 0x87, 0x0, 0x1, [@generic="15836a8ba300cbf6157048e077a4ebc128ecd673f795d86f5ab376a172256020f92efa421ab06ead3acd214b4cdf3aef811af7877e770e97d092c3f685485dd83c378b64b7679cde90fcfed024475eaeb3dcd31163a41e038ca161d58dc128564c3bf70d5ba94ecb9664b2131d4851e0e84bff056a949c10cc2d37689ad379613f910b228259c8fc8ad5ee45badb8f258edd272c3e3028c5a31c8e5813ad3263bf165a1f5dce1384c9dfde35fb8935b97adef3bb94612e5b30c740dfb39105118be577508309675378790fd63c8c7b3f071c47a86252f3080ea47b863e541006536799288e79edbf00c7dcefe7e0e26b38d523bfff9b41bd62779d8cd382df80ef34ee33df8add303a78f4920aee03196de96e059ebcfc673026b2055d62deae68f2a3845f4026c0d2ff13eb2067e45f325071c18a1e35fb19e91480ef3235addce5b745725c7dec066c715b0d554207e5ce4caf0fc34022f9294da0ebc0c0512bb94bbaec640c7a08cdbf71ceb64246eef60e184c4bdfc88632c353bdbd9041cb16550fc0ab962417c513b763460538cfbaa8dc8ae2ee3d4a1d6385b44325e85653c8a720f10f3e30fb208a5f628a044686882d51825c306ba6b29d034b3ba85aa75fc68ec05c24f73069e0e2a4a2417a71f37e2de0f902c0094b2ef757831d281eff26995a4e86961b2ca559f504f3279874c57feb2cc88a383f106fd52b45bd28f516f499b8c041c70483d665615f5b214509ae2b2d715fd048edc043cb1fd3a25d916710d15c62c739c48729ba476ece434e54497ffabb8461d1d7cb1ff711ad94a35820ed9c6cc9b81bd130027c6fd4554669308ee3b9912de3f7c89c588a5059efb0daba55924109c445d781e93e022d424fc4d4672e7f6e31972fd73c74e83829c8baf91995a87d0f33f7ad115bc39ed386ce4367b6dbbb98ffc11e41705a1f5f4326c17e3a49ed87cd13f2d9c52a642b4c3ef59be091d0ad4c88b9d73f3e93e4d7a04ef2941eb9d0e5552b24f459adc95b2bd129522f9804b45b05e1d2859476d7f5dd84d8af4f060a877d11fb504b3d56c220f1a3257340528c59c30a82b7d1949370f6a7686d3a9aa48ea624b0e4897722f5e88881a6b815dc77ed45d371c912167ea6eb6ea685793c83d33c1a4bbfe35b18e001de4e781997300eaf08f6d1c7420880c1977449b2b93757cc346d933f9ade4f130a568c9db0b1f2b05e0735d04761c95cad2438d1fae20a41f956f8acad42ea7c454667272385eadbe2868d827685a766426a8f997c8e098ce6aac247fdb51203aa286c4168a589f61208103004bb4ad32736c9ed42c80410bc0a2e238348baa887e9d9478d651d9310e5519058b9fe689f039f648fcea7cd4d56df2fb768d4245772778d7696f73b49686d75f24fe9ee65e6fb4ab994d49b7a621e59c63327a13b3503492f6fd465c4f76b2f650050ecc3b0d3a2dc90a04993af0953f0c3db9c59067085d64de84d8377734ad447ed19f162895cb71df15f39519fa90c183faf379c9eddfd5aabf23b40e51a31e2affc2e83a86e1d8b58a723cd76bdf40a92b801a8e31eddfff480c24a622df75b1f17188e2df1ff100d13f667b660feb9c09aa59ae57c9c1ab5ad9e8abd097e0aa5b2b60ace90e26af4b81f30dbd60270402cc814415bb9739fb7208903e3359a22dcbcc5f99d44e5155e4c597240bfe774db010a2e928a9a535469acba09ddd9dbfcb24c2fb0c976a320c053351665c0e77dd7d09bcf3bcb429005761f9928d0fe7ca267a56f3a87f1bada1def3cb95906c4aafee6bd68fb052ebbdaa5451a446d708fc302173c0834ffcaf043a92500e0e1bd71fd5b5bb3cfdedd7787a9a2e358fa552aebc5b1fa4241fa4dd39f1cfd991cb1f516e56199f077f3af29958691f1eefe3da6255a0f55fb3d7997a73a2385d46f6ed634c7e096da5ff462092deab2fb263b4288ad8423a5654cc28522e0e3a1bed0a30969ed56e085bf7accdfa4a52e402b1421ff6f57d0f95e6d18215f0b83002f2366c1f019fdaff0f81ede8332d8a012c6fa921040d425b3c99ec185ad2c334863aa4e379673658129baa2884422003adc297495dc4caa6258684bc755214219745236b35286a64dd6ab9c0c272ae7666a175d4558293ac8be1c4f3bd4a8a40ea90e14c47e03c3ea4ef3f7032c2dfa74ec29856d0bc238e9fe288ed4edf55a690a907c5a9c44e41c809c6223697fe55dd58c2a03801d35bca63e127708b06ccdb7625ca8368baa68c3c5ef05ecff03ad40d07a36356ad91208efc8ad332d230287d6942f751af3a8a9fca78a1049854310b2c5682a2989684852cd08860c0197c118d695d2a71dd89696cc0ffad504482d5b275a4c8f32256986e51e54dccbdf08117bab619311de789ffbd15b3a06a99d40f119973dcb25aeec28713c33808431a4fa8790031f87e1c1f9e09dc6ba603a63bb5b4b8ddb1ce128746222e9bde5b678432a427ad6686bd672f0790c2b11a956bd2b6c71b78124d91cdc38ef3e29c2238bfdfc78b33eabf4b67218906e9eabeef32a22ca5c352b0ddb6cdf2e38280676c4d8c1756ef3f3db0269d09f42891ad407207a5c971933e65c4aa04150802c11586d9386945556cf0f11f4aa18113cf2ea4d6310a999a47c1ef5c997fde96aa9cb7f64f0457e572234361ec3f02619c3dfc92e400a3752cefd886ccdbb829e6c66944707a11012ea352603dc36ed5c721318d7ccf5f078b293662babcb1b2d8ff417d2403e5bbaef18d70d521972056321d1a79e0ca885b3c280a6caa8dcde652088f3f6312d2fdbd7db6c626ec30dde281d2cf64fe10c03a1dc825b975e6aa350113cd14c55e9c1cd19916314d107b6e89bfa3bd844818d357e747a3b4e776a47d7281c62af9f025c4eb4d90104245434cbd1222c7cdc6d79649f4cd9d249fa25899d884c86f0cd961f8ee06814527b0ca0246cd7c75c3ea3578a13b8b6dc508859a620aa6ec5cff2837488a8bb978a56b096ce4e5272a60be3ba99b8c11f51b7685126fbf78d9c804b23c40be913f016d7419dd943a7e5f7222b782cfbb6961e7b0d125c8bd3b4f16707512b910ec96fe6b17dc4484f25623dd76fa9ee4fb91b4aa48135b8b667b880652f590beba7c52981ab52474b829c4b043155a0499a9296eb9a47b5a52d3dd2ca2b0db98fa3cd4bb27d5f797ffde45ee76df930dce373fac449cfe577d9129bb186a3c4b991fe9da06ef6b5dccfdf21f55c431de38362492e0c1a51e47c5e91b87b23d88e6984de14f341109cc8739981355d32a91edbc5cef1a90d3dd54d162b5aad13350455701778a42eaf6530b9094bc51f8d95a54e1bfbd5429ece2f1d63b624620d997cf5cb5ea2ce47e1ac2b73b2b16adf22875329490cfa4728192374283764af137bd933ae5c270569095f795bed1160d7c8d84cb091cd1fa94fc8c16e0246cfbdb698d8a52c907130ff92a858d258a26736036d45d21b175e3656e8ef80e6e139077e5a4e1bda35d55c82176219c4b4b7272a19c72aaa6a80b8bb0ef5576f642863c1d7f5d19984a2b6aaa085adac25f5371452538e7164b523e73b1e5a56a3effc4ac7ba3a47980b3f3e477ca1d153ada8d0dedfcab0a5f4a6ed740fcf4880045409e83ab4a004a6fd055b6057013daff177d5462171ec73a4dffcf0f86b10d13c08bb1ed2b611deb2d072c2b817b68616924263cd8eef7c7ec11d1d1dcdd67531a08af43f57cfd44da4979f049ccd5471a5112e0d42d1a42f600575b7d5be13ee597556c5e967c08db86f4dfa815fd59d186280354cf49c88983fe2703f8c6c77ed452477ed0cc201dadc7a24de9758175db98213f15f64b4731a501369e2f817ccd1bc9844c22242f0f0a1b1a03798a258a45645a876b5207f46224c2cb4cb8e69c7f30bd29062a2e4343af00e0582a471d43480a54e7509befccc17bc7595dce891179bdd97c7f3fa56e50caa0fbe39a1ccfc72f1ae518ba56ea1888d7818d72a7b31271632423fab1ec9af18e2139b3fa430f059ce4279c830691ae7a40afaa4f434bfa06ed0d18b4df620d44f84cc00528a044a90247a6456158672a8b524b7003819a95dcf9e741e603b005038bf5faca54523d32e65051fbb77930551328598523fa90b443db09663a860f49ad9bd4a1e6402beb5d7b8121d613085b545b49107aee5b2255692e40501fdd532bb92e81a6616bc3bdf659001dd3178134de2bb5c515bd20b902726ccbaf28c6a4b4116deb6df6ddb46b619280560b3b272d607017d4b1280159adb3433ad037da3db1959c02a7bdf2a64523681c0cbbb1b7c1601c4f1d54d07b216ce25b924ac984a2e6432b33bcd1edbead7cbede4173d94efe7d7a8c60bd3a30887663d44a042f0f1a6db9196ebfd4da07638144146d4733576c974fc84ec1a4ede163fdcdc1f4df782a6245692b70caaa84cc3c44ccf93ba8dd19c55d062c2e1f8e6da1f51850297cbe8bf9d04bc1283eda9bb05a542a89a61454acad133c16676bcb442f6c808cbb9c42b1daf2439a18eceb93230a394db1cd575e17185497acb3418b69c4787185e959d6130e673af01d3d87306d24686287136ea09df7704959daa86e9b85e10c99f22ff026c959ddea279067bc3c097dbc71ea0fb93b60413a9643550cbd4563d4d72e89a18557d4c74c0197b6ae9ff9146cced7dba07de77151818e219d4ff2af224568ac022022a3707b13b786a06c6a8f4d67ebd0e7c9b7702868670e2ea35904e5ee68b1ac554b31b08d3090ae4fc786bf339d0318891853e96e5b7a9a7b61c18ea0642e8e6659b8cd5b9c5b16493603deb498d0ef1b6525c81feed9b902d7e80eee175d06469855ff2f77b0133bee11b01ddafdbdc33068ccfa1e5e7d88aba138c4499642b805e61bf3d9abd3c8b5a32fbef3b712fc1631d3dfe31f51fdf6665995cd5dc5f013dddcdda5348c03108f36cffa504d4eb02241032657febcc4c45644f0ffe327b28a2fcb86e51b14f73aa673cb302f8453f9614df380ddffcde86d377b3a6d366442f1a7b045cdb0522ff973e2cfc5b7f4949f2d50e530466a70308cde24a08bba98d2c66c5d5315086c52fe6b2e7eebc1dc472fd7d8f48bda615cf1c34d63682fc2bb5f85d77e36781a2ce7481664ef901b798acae2263a527f44b1e9d2368095150fab162ceaa6ba8f265f2b858b70c1ebf386d03f31596469c0a092577e5bda43773bf92dc8367d5448bc1857d58caa7c9ff35e86da70f4f7806fe2b5052154747d2a4141a5ea2ffb797795ee84341c03a3dde8a9240e3afb1c4b3fce51a7c8427690d92ec82f17cbc35fc1fb6d445db5d2e52ddea13a8f1a6f7291229f27ea608c952da00e03016161797117675ef306b99c5c13a0b757b915a8b765491c7fe72c7b774142ab471c0f759c02e71077efbcb61031dbb70a383307db1dcfe2f57bc50c51b947b759c910de845e6dfa6662f76e5c4d69ed07285c89c7b4fc69136233f35bd156a10db461063d339eadfe7317c81ccb4b531d9693de6c9feb2c2ba1b330395aeb3aa71157106257c9a7d226a33138661f99d8ffe7c2614ba83ef13d0fbb1d809babd8a1d1ac817a1135dc02abee4a17d1213b5342b17db4ad20ce5af9d0840cc691f7b43b1d730b3e1d753de2c8a4dbbd17abae9bdda62454ddecd96f4028fee25a1219bfb51c1ee9c6dd9062557a8231a01716a9eabcd832059a5ce54aa5410a8f5c3f283a704ee5cf80a75a9ae3ab38a9b44a25bb1fc3cf7d350f0a83482fec666a7768096fda515f4e43c70f8ad93f3", @generic="1ccd351f2faee54bd61fa9", @nested={0x4, 0xe}, @generic, @generic="0761c7bb00e11ce77762084862e8e5377525127ad9c17b9f749505284a0378439d114996aebdc40aa69f2e0f01ad81dda8b9d73170a76ae3257dfc0cacf1415699145bae7a", @typed={0x14, 0xcc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @nested={0x10, 0x29, 0x0, 0x1, [@typed={0x8, 0x66, 0x0, 0x0, @u32=0x5ad}, @nested={0x4, 0xab}]}, @typed={0xc, 0xcc, 0x0, 0x0, @u64=0x80000000}, @nested={0x6f, 0x24, 0x0, 0x1, [@typed={0x8, 0x158, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x153, 0x0, 0x0, @u32=0xe4}, @nested={0x4, 0xbf}, @generic="03a43fdd19bec898558a52db1bba993f7db70e8dce32c7c3e176176c2a7d7b17229a1c4e4903e52f85704e50083c8409650b0b149eb309bd6c40695b3995fe74046e091cbacab6263777ded398f2925c669373e228a920"]}, @typed={0x8, 0x1f, 0x0, 0x0, @u32=0x9}, @nested={0x34, 0x2c, 0x0, 0x1, [@nested={0x4, 0x5}, @nested={0x4, 0xc9}, @nested={0x4, 0x165}, @generic="042b5b607ed394aec3f3bb8a8dab30a1a7e4be0c88892e0b4105f6efd011b6befcf36a72"]}]}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x80}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x1f, 0x24, "e945f031b608653b9ab7dc01b062108957f4bcc2dc056b6a623167"}, @NL80211_ATTR_BSS_SELECT={0xdc, 0xe3, 0x0, 0x1, [@nested={0xd6, 0x12c, 0x0, 0x1, [@typed={0x8, 0xee, 0x0, 0x0, @uid=r5}, @typed={0xc, 0x98, 0x0, 0x0, @u64=0x100}, @typed={0x94, 0x50, 0x0, 0x0, @binary="f04cbc9762e046032e36a708b304cae22dc6d8a67436e5e47eecc4f672c8de4bae779f4ac16ba60530acff290687aef5953dd763fe762b0fa751acfa3ff86c7a22fd5658e39c456146e2186fa0256db1e7444a1dfda530ecfce6551eee0ea89cbf27b8c0b0144e89a24ea3640224d256c7d523d1bd972788561aafa793a1a22e69b81a29d02f1d38f22c94d87c4e9ea4"}, @nested={0x4, 0x51}, @typed={0x8, 0xae, 0x0, 0x0, @uid=r6}, @generic="079666fa78b77c125fb3dae4f992", @nested={0x4, 0x5a}, @typed={0x8, 0x12d, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x23}]}]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MLO_SUPPORT={0x4}]}, 0x1474}, 0x1, 0x0, 0x0, 0x4815}, 0x10) (async, rerun: 32) r9 = bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001ac0)=@token_create={0xded7, r0}, 0xffff) (rerun: 32) mmap$auto_hpet_fops_hpet(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r10, 0x1) (async) lstat$auto(&(0x7f0000001b80)='./file0/../file0\x00', &(0x7f0000001bc0)={0x914, 0x400, 0x7, 0x0, r7, r8, 0x0, 0x80000000, 0x9, 0x9, 0x2, 0x8001, 0x8, 0x9, 0x7fffffffffffffff, 0x5, 0x1}) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001cc0), r9) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000025c0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002580)={&(0x7f0000001d00)={0x874, r11, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, "fb9973d67a1b06d9"}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x7}, @NL80211_ATTR_BEACON_TAIL={0x84a, 0xf, "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"}]}, 0x874}, 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = ioctl$auto_dma_heap_fops_dma_heap(r10, 0xed, &(0x7f0000002600)="d3e08a1735887a36a84832668d1b392c75050740aae98ce2b9ac9037fd4e3aefe88cbf98") (async, rerun: 64) r13 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002680), r9) (rerun: 64) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r10, &(0x7f00000028c0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002880)={&(0x7f00000026c0)={0x190, r13, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x72}, @NL802154_ATTR_WPAN_PHY_CAPS={0x161, 0x18, 0x0, 0x1, [@typed={0xc, 0x93, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@loopback}, @typed={0x5, 0x11f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @nested={0x10, 0x71, 0x0, 0x1, [@typed={0x8, 0x51, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0xe7}]}, @nested={0x14, 0x162, 0x0, 0x1, [@nested={0x4, 0xca}, @nested={0x4, 0x84}, @nested={0x4, 0xf1}, @nested={0x4, 0x70}]}, @generic="69360c27bd2fb64cfc48e8d6c5144617c12d64d0d9f1f02f5d38ceb1681c81bd85eca784657c9389094b4e2e55226831bfa91b0c9ed9e15b29b5acadbf46b6b721024685ac3ab78e9ae0833284aeadea598867e09911ca34b14eed431613d4308548fc9433aa5a9c", @generic="6d1706c7ed5cf5479adf57862877c704c0d3188bc2d442578f6f597f850db8b8bc68403969fc0c2b2c7db9d31240c43a630b45d3e1e356f8b9332104ebe83b00233140612ee5559cd8ae168ab8f990647be11e13ec310f9870a917351cfacacaff89c9c4b497f38d84f05d111a6966c613bb0145036c37f65fb9ff319e0a926cc351b3e14ffc0b841dfd392731ce945774894aa7429e080f1c452389bdb2541336"]}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0xd0}, 0x24004090) (async) r14 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000002940), r1) sendmsg$auto_NFC_CMD_START_POLL(r10, &(0x7f0000002b00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002980)={0x108, r14, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_SE_APDU={0xbb, 0x19, "7b7a66e324ce28d4a577b62db0e34e5b44fa49750f57096d25b74e694498d24b77940e24147a945f3f2d5926ab8d498b87ea3080ef413a79a63448ec3c573655819627a3162489498f70b56e68d8e7b9ca156e60f27fb5822ab5bfdae2906a9e6b53cf5f7311007ff44247f2cfd03b3b76262061978f4e576442ae7f6b87359cacd4cd0ff3401b4873b65abe7d26e67af35abc3fc621cae5a7f95fa19a1714046dc4c92633716e18fbb46e8096b5bbd2ca965402bfa100"}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x40}, @NFC_ATTR_VENDOR_ID={0x8}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0xf0}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xadff}, @NFC_ATTR_RF_MODE={0x5}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) ioctl$auto_SW_SYNC_GET_DEADLINE(r9, 0xc0105702, &(0x7f0000002b40)={0xc, 0x0, r12}) (async) openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002b80)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/id\x00', 0x60400, 0x0) ioctl$auto_RNDADDENTROPY2(r12, 0x40085203, &(0x7f0000002c00)=[0x2, 0x7fff]) (async) setxattr$auto(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)='ip6erspan0\x00', &(0x7f0000002cc0)="fc6e553df58314459bb0714c3626582c452283e02b83f3f3017c9ca40b76", 0x0, 0x4) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002d00), r15) (async, rerun: 64) execve$auto(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002dc0)=&(0x7f0000002d80)='+@\x00', &(0x7f0000002e40)=&(0x7f0000002e00)='ip6erspan0\x00') (async, rerun: 64) sendfile$auto(r10, r10, &(0x7f0000002e80)=0x3501, 0x7) (async) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000002ec0)=@info={r10, 0xf0c, 0x9}, 0x7) 2m9.301576105s ago: executing program 4 (id=629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1f, 0x0, 0x0, 0x1}, 0x48080) 2m9.169897642s ago: executing program 0 (id=630): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) fstat$auto(r0, &(0x7f0000000080)={0x8, 0x5, 0x8, 0x7, 0xee01, 0xee00, 0x0, 0x2, 0x9, 0x404, 0xfffffffffffffffe, 0x8, 0x9, 0x6, 0x0, 0xffffffffffffffff, 0x4}) r1 = pipe2$auto(0x0, 0x80) msgctl$auto_MSG_INFO(0x800, 0xc, 0x0) r2 = setfsgid$auto(0xffffffffffffffff) statx$auto(r1, &(0x7f0000000000)='./file1\x00', 0x4, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, 0x0, r2, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x10000007}, {0x5, 0x1}, 0x200, 0xfffffffc, 0x1, 0x1000401, 0x400000000006, 0x7, 0x6, 0x2, 0x40, 0x6, 0x0, 0xc82, [0x3, 0x10, 0x0, 0x81, 0xd, 0x8001, 0x5, 0x3, 0x9]}) statx$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x2, 0x0) fstat$auto(r0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r3, 0x40187013, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400007f", @ANYRES16=r5, @ANYBLOB="11032cbd700001dcdf251d000000"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x800) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 2m8.454792746s ago: executing program 0 (id=631): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x27fffffffffa, 0x63, 0x0, 0x0, 0x0, 0x8, 0x4, 0x80000008040000a, 0x3, 0x7, 0xc, 0xffffffff80000000, 0x800000000000b, 0x2, 0x240000100103}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xd77, &(0x7f00000002c0)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x9}, 0x3}, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0xa, 0xfffffffd) socket(0x23, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/mpls/conf/batadv0/input\x00', 0x902, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x400440, 0x0) r2 = getpgid(0xffffffffffffffff) r3 = fcntl$auto(r1, 0x24, r2) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x40040) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram11\x00', 0x16fa03, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000580)={{r3, &(0x7f0000000040)="d2f0b664b7bd481034e6db32f730910527da629ff2452d21250953", 0xfffffffe, &(0x7f0000000080)="e7bf60376814a411363f4615575a6aee2c827049e91009c3546b25c5611612e4819dfa1cc5ac52212c9ce59927177adb3837906d7cf756ee35278920dd91a1f9034803b267dcc5f62cd2ffd2339a234ee59c5b8d8797aef67a4dbe70924f2d5d50e67bb89e12998b215508b8dd2f7c051a5a097c57c3a3ca4cf3d6f3fec522950ea2f7a4efd8763bfb14f37da4eedb737cdeffb7b456d39a401628a15a7cb42dce5b328f6d44d033d0ea66158a2ea3bc9509ead6d7bd10f23bc93e4cf91b119a05659f2f0aa5373f6b23b13390ff46bf6413b15f8d8b6930a52d79afea9b09073d4c5a5fa2", 0x401, &(0x7f0000000600)="c5cacc626ba9830f97268bb9ba8953b160f611c379e068f9cb01882a970ec75c2c5e552fc82eff8107031bc2a7c8920e907edd1c55fad54e89a5681d539dd064aaf488e58b3d3849d4b78ef8d8e1eeec6749dd7d096f22976c79588e9cab70083abee0a29ac542b3cd805d7cdc37c721a914abf003a093667faa250c3cf6843480ff4fd2da303f25778bd96a755ab0ab8a2ad91d183d8d4b6abd6538574fdffd58b44a3d79e433ba42", &(0x7f0000000480)=0x80}, {[0x16, 0xfffffffd, 0xb, 0xa087]}, 0x2, 0x5, &(0x7f0000000380)="27fa2a8066a19c94ed0317b1a93b9a56f723b122401ffa974f0ee0ab5c6d0deae87741535079beb4acbc76c4d7fe0004bafc98ebf87a7751eb18e60a90b24b4fa355a3cccaca563711599cda05af6600ea58a342e98fdb8f7f388f44af136bc2966f010dabf382a7a61e5e248367141d22bbb6f29f41417220cb36e34e6b354b6f6fc11b0fab452d9b711e2406afbe8add09c94e063c23aa2b952bea632d7421df9f1ded227e410000000000000009913491310fd6971c39ecb19c29d3164bd29e0d9619019d4aeea0dd9247a327be049d722a87c3616a8a9534e43aa0e4ef5935e080f65bfd4df0e1c0f8b06ea793a4872a"}) sendfile$auto(0x3, r4, 0x0, 0x400000000006) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', &(0x7f0000000140)='nfsd\x00', 0x95f, 0x0) statfs$auto(&(0x7f0000000500)='}[,&*}\x00', &(0x7f0000000180)={0x1, 0x423, 0x8005fc1, 0x4, 0x4, 0x100, 0x8, {[0x9, 0x7f]}, 0x9, 0xfffffffffffffffb, 0xd889, [0xffffffff, 0x8d, 0x1, 0x10001]}) setsockopt$auto_SO_MAX_PACING_RATE(0xffffffffffffffff, 0x6, 0x2f, &(0x7f00000004c0)='@\x00', 0x7af) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) unshare$auto(0x40000080) 2m7.378529646s ago: executing program 0 (id=632): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x1940, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000040)=0x74c7) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/178, 0xb2) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, 0x0, 0x0) socket(0x2c, 0x3, 0x10000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r4, 0x7fffffffffffffff, 0x400000040000005, 0x4) mmap$auto(0x0, 0xc685, 0x3e, 0x1200000010, r2, 0x4) mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mmap$auto(0x400000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) io_setup$auto(0x7ffe, 0x0) gettid() write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) timer_getoverrun$auto(0xa935) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 2m6.307942112s ago: executing program 34 (id=611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x11, 0x0, 0x0, 0x1}, 0x48080) 1m55.368402561s ago: executing program 6 (id=633): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) mmap$auto(0xf307, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = clone$auto(0x5, 0xffffffff, 0x0, 0x0, 0x4) tgkill$auto_SIGCONT(0x0, r1, 0x12) get_robust_list$auto(r1, &(0x7f00000002c0)=&(0x7f0000000240)={{&(0x7f0000000100)}, 0x100, &(0x7f0000000200)}, &(0x7f0000000300)=0xaea) r2 = open(0x0, 0x2041, 0xfa) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) utime$auto(0x0, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) write$auto(r4, 0x0, 0x2) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) write$auto(r5, 0x0, 0x2) close_range$auto(0x2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r2) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="00030000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x300}, 0x1, 0x0, 0x0, 0x40800}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40000, 0x0) getdents$auto(r7, 0x0, 0x802) clock_adjtime$auto(0xfffffffffffffffb, 0x0) 1m54.472294335s ago: executing program 6 (id=643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x3e, 0x0, 0x1}, 0x48080) 1m54.239564866s ago: executing program 35 (id=629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1f, 0x0, 0x0, 0x1}, 0x48080) 1m53.760659952s ago: executing program 5 (id=646): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0042, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0xee25) mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x40, 0x7fffffffffffffff, 0x6) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sysfs$auto(0x2, 0x100000000000039, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) sendmsg$auto_L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) 1m52.45395289s ago: executing program 5 (id=647): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x7, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0x100000001, 0x4, 0x80000000081, 0x8, 0xffffffffffffffff, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3, 0x0) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x9, 0x1, 0x0, 0xb, 0xfffffffffffffffb) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=@task_fd_query={0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x7f, 0xffffffffffffffff, 0x7fffffff, 0x3ff}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x24044830) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec4\x00', 0x10b703, 0x0) r2 = socket(0xa, 0x5, 0x84) fcntl$auto_F_GETOWNER_UIDS(r2, 0x11, 0x89) ioctl$auto_CEC_S_MODE(r1, 0x40046109, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, 0x0, 0x4000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r4, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) writev$auto(r5, &(0x7f0000000340)={0x0, 0x18}, 0x8) r6 = socket(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) io_uring_setup$auto(0x1, 0x0) 1m51.33540085s ago: executing program 36 (id=632): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x1940, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000040)=0x74c7) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/178, 0xb2) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, 0x0, 0x0) socket(0x2c, 0x3, 0x10000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r4, 0x7fffffffffffffff, 0x400000040000005, 0x4) mmap$auto(0x0, 0xc685, 0x3e, 0x1200000010, r2, 0x4) mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mmap$auto(0x400000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) io_setup$auto(0x7ffe, 0x0) gettid() write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) timer_getoverrun$auto(0xa935) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 1m51.274635036s ago: executing program 5 (id=649): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/bond_slave_0/unres_qlen\x00', 0x189302, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x4000) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="013ad7fac400f8dbdf2501fffe0008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)=""/140, 0x8c) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/adsp1\x00', 0x2, 0x0) prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r3, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d566ff59d1b9f5e0eb4d") mmap$auto(0xc8, 0xe2, 0x0, 0xeb1, r2, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x119280, 0x0) getpid() r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x101202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c01, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) 1m48.513402341s ago: executing program 5 (id=650): r0 = socket(0xa, 0x2, 0x88) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x526) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/038/001\x00', 0x88001, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x284980, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) read$auto_fops_init_pkru_pkeys(r1, &(0x7f00000002c0)=""/152, 0x98) writev$auto(r4, 0x0, 0xb) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2ecf23f880ad0fe4bdfb249a2bfa14000000", @ANYRES16=r5, @ANYBLOB="37072dbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bind$auto(r4, &(0x7f0000000180)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x1) mmap$auto(0x0, 0x40008, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xcd, 0x15) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000780)={r4, &(0x7f0000000500)="02fe9dbc6d52c0ed06e4c97b570c9b9dfc3333c05e52b66088acfe7befc013270d85d583179ccf62b519e409964cb8", 0x0, &(0x7f0000000540)="cbfaaeb72183b9bcbd5e40511fffdf8a270bd37a974b0c426aca6feb9e194147327f98c1cabf31fb9e8f83a5a97801c92b38093cc00d07d6cdc0f6ab68d89c7b26f005df18e4021c406ebe18fc61e32228711f6d8c76549d82963a95c9d0c23889c0cbba9479e42d165435b67b01a4be7a2165d2f8434291f1b62e4d94a5f4284af3db2155b47249dc21c2061d93222d1fbae2586728de900500082ae78546cdab65d441a81a3e144fa47e8d067c5bd561fdd792413d357e15981a4d748881f6f966bbeddd73fe07b309de0689a6670e7d57a45adb62a418692ceefa68186a04fc6563", 0x1000, &(0x7f0000000640)="58635f1d12505f", &(0x7f0000000680)=0x10}) r9 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r7) sendmsg$auto_NET_SHAPER_CMD_GROUP(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYRES16=r8, @ANYRES16=r9, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NET_SHAPER_CMD_SET(r1, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r9, @ANYRESHEX=r6, @ANYRES8=r6, @ANYRES8=r3], 0x100}, 0x1, 0x0, 0x0, 0x400000d1}, 0x24000001) fstat$auto(r0, &(0x7f00000006c0)={0x5, 0x1, 0x9, 0x571d0e8d, 0xee01, 0xffffffffffffffff, 0x0, 0x2, 0x7, 0x1000000000000000, 0x6, 0x0, 0x2, 0x6, 0x7, 0x9, 0xf}) memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_TIPC_NL_SOCK_GET(r0, &(0x7f0000002b40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1010104}, 0xc, &(0x7f0000002b00)={&(0x7f0000003240)=ANY=[@ANYBLOB="84140000", @ANYRES8=r10, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="bd26fc61504ee800000004003f0076014a80fe00220025350b64157cb8ca7a2120a2b03a93638b661c312311c638c60009df9285a27b10eb3d604119928145dcb1002871af0741ed4754e46bf59e98798403f8f582fbd585771d4bbe52492397211acbf33712d3ee8593833c3f5b0531defe1df2e4a126d873f8646c8fec0e17daefe5c967ff86744b3d25f0c0894e92f231c312fa9e04911bba1a594b1759c68be6e77acadb6d0e1c6306a95c140200f2a584531b704b05d374e1da03b7d14042f32b492a1c274ea849409a717617d3e7bd8c535da951875a027b8a7516e297b90a1cbc4994a08c22c9b12aee7361dc262fb892c21907a86515cb2a092849dce28ea17c5136d1e4d35fd926b40628c90000b2b5db13a3884e9dcbc5633cc6fc2c829add41dd0161349b6206ba3d6efedee32ef419d68a7da68faa959dedb5ebb3a15a81a1d81add83f2a3d7380e1aea13c4556c6d748c186b5a45cda31fd6f111ee9e373866b62a2eb323c7799eb18017a7207b0142a38aca4f4bc7040035800400e2800000fb0007800800340054d4f519a08f8182689208104a4d34213e12c0ddcdf4272b09f50b197613e221b27f552a802d452f01c7930e1ee07b237e3705a26df4326680f2c056d894c14deb83ac72bf3bcb22bafa344de892ed62b78af4777cce0439b9a67eb492b8bde699f5b79c212b749ab3315dbf06d10a48eaf7db645c23d616375950b5506e7d6318ec4d9babf42a6cc70609bdc133ba703410ebafa03578799f7447d111c5c3cff9ae6a7c9b61967a300f4e4a6e110bf6353e787249acd2602d5726e3d0b08bcfbc6999ba440485a7c9d6bf466e1b1964f76fabff86e56cc90b633189", @ANYRES32=0x0, @ANYBLOB='\b\x00B\x00', @ANYRESDEC=r7, @ANYBLOB="0800d400", @ANYRES32=r7, @ANYRES16], 0x1484}, 0x1, 0x0, 0x0, 0x804}, 0x1) mmap$auto(0xfffffffffffffffc, 0x3fc, 0x5, 0xfff, 0x401, 0x8000) 1m46.851562855s ago: executing program 5 (id=651): openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x1, 0x400000005, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) mremap$auto(0x0, 0x9, 0x3fd6, 0x0, 0x1ffffffa) ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000180)=0x3) io_uring_setup$auto(0x59, 0x0) ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy10/airtime_flags\x00', 0x2641, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = gettid() r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80102, 0x0) write$auto(r1, 0x0, 0x40100000a3d5) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(r1, 0x0, 0xa10) close_range$auto(0x2, 0x8, 0x0) kill$auto(r0, 0x11) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000200), r2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unlink$auto(&(0x7f00000002c0)='}[,&*}\x00') sendmsg$auto_OVS_VPORT_CMD_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf2504000000081f0800", @ANYRES32=0x0, @ANYBLOB="f86f18814ae58bc2d13367adb86d64292801d202cec0a3d422e0f95077eb01314c245affad09b75af55fdb653616fe8c6ab4eac68ffaf22465fae93b0e522f7b9536154c24934aa2471255c16e4973803fbbc7670041b3212fb8b4bcd0ac"], 0x1c}}, 0x10) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES2(0xffffffffffffffff, 0x40184152, &(0x7f00000000c0)={0xd819, &(0x7f0000000100)=0x0, 0x1}) ioctl$auto_LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) semtimedop$auto(0x40, &(0x7f0000000180)={0xbcf, 0x6, 0xfffe}, 0x7, &(0x7f00000001c0)={0x3106}) ioctl$auto_LOOP_CTL_GET_FREE(r4, 0x4c82, r0) 1m46.292121558s ago: executing program 5 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x48, 0x0, 0x1}, 0x48080) 1m39.284566013s ago: executing program 37 (id=643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x3e, 0x0, 0x1}, 0x48080) 1m30.884442767s ago: executing program 38 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x48, 0x0, 0x1}, 0x48080) 51.21806028s ago: executing program 7 (id=690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, r1, 0x1b, 0x70bd25, 0x25dfdbf9, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0xc, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x8, 0x0}}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x48}, 0x1, 0x0, 0x200000000000000, 0x50}, 0x400c880) 50.907973714s ago: executing program 7 (id=693): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xffff, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020006, 0xe1, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0xd, 0x1, 0x0, 0x7, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r3}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 49.992346042s ago: executing program 7 (id=696): mmap$auto(0x7, 0x9, 0x3, 0xeb1, 0x7, 0x8000) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) ioctl$auto_FIOQSIZE(r0, 0x5460, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000100)=@link_create={@map_fd=r1, @target_ifindex, 0x10000, 0x101, @netkit={@relative_fd=r1, 0x8}}, 0x10001) socket(0x10, 0x80002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x40004008) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) r2 = prctl$auto(0xbb, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x9, 0x20006, 0x4000000000df, 0x14, r2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{&(0x7f00000003c0)="7517e335f13ea7144f53148fd68ebaf1a9625a25eefaf2976fd0de76a819420e71685b3b9d218a20c79d6172f295750ede169ad82e7bf2606fbe2afd5c659122ea67c68eb1c138749dae9353523464ee12bc1338a6a81848e4269fe9d4486820b861e8e11257963f0539175ab7aa6aeaa71266698b025c225d2b1c1a06f096aa536006e7d026acf5513d36421522b4212edbbd91c23a683eba11d9716b3f4023f0d3f59af9cca0e2b1e2b410d5a0fd1a2b8c8e5e5f55991ed6536ebb0f9c1442a4c72297d8", 0xffff, &(0x7f0000000380)={&(0x7f0000000140)="4e86ca325b00b93bbd8281e37986643cee1f8988610f877b5b2a07d0b2d18e60fc9fd0e68fadb3ebc2a10a65ebdb75894c430d4d5cbdb8fcd64ac0a8d7a9a4ff", 0x7}, 0x1, &(0x7f0000000240), 0x22a, 0x9}, 0x7}, 0x6, 0x7) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x5, 0x7, 0x48, 0x7ff, 0xf59, 0x7, 0x4ef, 0x6, 0x8, 0x3, 0xb, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x5a7b7e00, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0xb, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x2000000000, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8006, 0x4000000, 0x0, 0x0, 0xfffffffffffffffc, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9e]}, 0x1ff, 0x20000011) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x27, 0x4, 0x3b) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x29, 0x2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) 49.091186617s ago: executing program 7 (id=699): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0xc) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f00000001c0)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x6) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0x7f, 0x7, 0x8, 0x1, @relative_fd=r1, 0xd}, 0x92) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x9}, 0x9, 0x0) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='\'', 0x8001, 0x9}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') umount2$auto(&(0x7f0000000080)='.\x00\x17\xe7\xcbK\x17\xa2\xa0\x9a\xf6\x81\xee\xbfB\x9d\x8cL\xc9 \f\xd5\x1f\xf5\xd0\xe2\xfb\x1bG[\x0e\v\xbcq\xa1(Gz\xd7\x02Viw@\x8c9 \xee\x8a\x04\xe7\xd6\xc5\xc6_\xb2\ndUsI\xd8o\x00\x00\x00\xff\xe4\xed^0\xed\xc5\tg\x91\x87\xb5\xa9\xcd\xde\xf2L\x10VL$\xb3\xd4\x89\x01Y@%v\xa2\a\x98G\xf1\x0eMg\xe1p5u\xb3E\xfc\x1c\xd2-\xe4\\;nQJ', 0x8) 48.648153032s ago: executing program 7 (id=701): r0 = socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000340)={0x14, r2, 0x401, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4830) write$auto(r0, &(0x7f0000000000)='\x17\x00', 0x7fff) 47.344759809s ago: executing program 2 (id=706): sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x22981, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0x8}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/43:160/read_ahead_kb\x00', 0x80000, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0xa802, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r3, 0x44100, r1) io_uring_setup$auto(0x59, 0x0) set_mempolicy$auto(0xa, &(0x7f0000000000)=0x288, 0x3) close_range$auto(r1, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x100000001, 0x7fd, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xf90, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) 46.893456037s ago: executing program 7 (id=708): mmap$auto(0x7, 0x9, 0x3, 0xeb1, 0x7, 0x8000) r0 = socket(0xa, 0x1, 0x84) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) ioctl$auto_FIOQSIZE(r0, 0x5460, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000100)=@link_create={@map_fd=r1, @target_ifindex, 0x10000, 0x101, @netkit={@relative_fd=r1, 0x8}}, 0x10001) socket(0x10, 0x80002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x40004008) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) r2 = prctl$auto(0xbb, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x9, 0x20006, 0x4000000000df, 0x14, r2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{&(0x7f00000003c0)="7517e335f13ea7144f53148fd68ebaf1a9625a25eefaf2976fd0de76a819420e71685b3b9d218a20c79d6172f295750ede169ad82e7bf2606fbe2afd5c659122ea67c68eb1c138749dae9353523464ee12bc1338a6a81848e4269fe9d4486820b861e8e11257963f0539175ab7aa6aeaa71266698b025c225d2b1c1a06f096aa536006e7d026acf5513d36421522b4212edbbd91c23a683eba11d9716b3f4023f0d3f59af9cca0e2b1e2b410d5a0fd1a2b8c8e5e5f55991ed6536ebb0f9c1442a4c72297d8", 0xffff, &(0x7f0000000380)={&(0x7f0000000140)="4e86ca325b00b93bbd8281e37986643cee1f8988610f877b5b2a07d0b2d18e60fc9fd0e68fadb3ebc2a10a65ebdb75894c430d4d5cbdb8fcd64ac0a8d7a9a4ff", 0x7}, 0x1, &(0x7f0000000240), 0x22a, 0x9}, 0x7}, 0x6, 0x7) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x5, 0x7, 0x48, 0x7ff, 0xf59, 0x7, 0x4ef, 0x6, 0x8, 0x3, 0xb, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x5a7b7e00, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0xb, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x2000000000, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8006, 0x4000000, 0x0, 0x0, 0xfffffffffffffffc, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9e]}, 0x1ff, 0x20000011) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x27, 0x4, 0x3b) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x29, 0x2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) 44.787192757s ago: executing program 2 (id=712): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) writev$auto(r0, &(0x7f0000000100)={&(0x7f0000000280)="8e8873b5f9dd39182ab801a9e417130ff346eab3d41f954d458b276ffab4f6d5b23e17c1", 0x7115}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) socket(0xa, 0x1, 0x84) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/if_inet6\x00', 0x0, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0xc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000840)="13") ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xfffffffffffffffe, 0x8001, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, 0xfffffffffffffffc, 0x1ff, 0x2, 0x9, 0x0, 0x10001, 0x4, 0x4, 0x4}) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r1, 0x2, &(0x7f0000000180)={@siginfo_0_0={0x1000, 0x2e1be50f, 0x2, @_kill={r2, r3}}}, 0x2) 40.045601203s ago: executing program 2 (id=720): r0 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/ht40allow_map\x00', 0x181000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/iommufd/parameters/allow_unsafe_interrupts\x00', 0x921081, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000140)=@bpf_attr_3={0x6, 0x0, 0x3, 0x5, 0x80000000, 0x3, 0x1, 0x7, 0xfffffff7, "3d52745cd10272f351b4f35802d3fe82", 0x0, 0xc80, 0xffffffffffffffff, 0x1ff, 0x100000000, 0x3, 0x5, 0x7, 0xfffffff2, 0x2, @attach_btf_obj_fd, 0x3, 0x4, 0x9, 0x0, 0xffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, 0xa) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSETD2(r2, 0x5423, &(0x7f0000000200)="28ed76fa32a3ce4e560b832845ea303f3a6d12aee28de7ce4770b96d594075239f4d5e3e30d5b481a61ffc5c93031e4ab65bbac6c6b6fc03bce215ca58c848269e5ca3a1fa561d601b7edff7d6e4c1292a279297687034c8ebbf89e13bca1248f634c4") r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) (async) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f0000000140)={0xdd}) (async) io_uring_setup$auto(0x100, &(0x7f00000000c0)={0x5, 0x40, 0x0, 0x7bbb, 0x400, 0x1, r0, [0x1000, 0x9, 0x7a], {0x9, 0x2, 0x8, 0x3, 0x5, 0x0, 0x4, 0x2, 0xfffffffffffffffb}, {0x8, 0x9, 0x8, 0x8, 0xffff0001, 0x8, 0xffffff81, 0x7, 0x7}}) open(&(0x7f0000000040)='./file0\x00', 0x182, 0x10) (async) read$auto(r5, &(0x7f0000000080)='+%@\x00', 0x12) 39.5572581s ago: executing program 2 (id=722): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0xc) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x7ff, 0x3, 0x200000) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') umount2$auto(&(0x7f0000000080)='.\x00\x17\xe7\xcbK\x17\xa2\xa0\x9a\xf6\x81\xee\xbfB\x9d\x8cL\xc9 \f\xd5\x1f\xf5\xd0\xe2\xfb\x1bG[\x0e\v\xbcq\xa1(Gz\xd7\x02Viw@\x8c9 \xee\x8a\x04\xe7\xd6\xc5\xc6_\xb2\ndUsI\xd8o\x00\x00\x00\xff\xe4\xed^0\xed\xc5\tg\x91\x87\xb5\xa9\xcd\xde\xf2L\x10VL$\xb3\xd4\x89\x01Y@%v\xa2\a\x98G\xf1\x0eMg\xe1p5u\xb3E\xfc\x1c\xd2-\xe4\\;nQJ', 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000140)={0x7, 0x800, 0x10000, 0x6, 0x6b1f5443, 0x7, 0x3, 0x2, 0x0, 0xfa, 0x4, 0x9, "1d4420967d7e1e70ed7c874cbb6e3503", 0x1, 0x4, 0xf5a, 0x5617, 0x0, 0x8, 0x3c, 0x8, 0xfffffffb, 0xf, 0x6, 0x9, 0xfffffffffffffffe, 0x4, [0x3, 0x8, 0x6, 0x3, 0xf7d0, 0x9, 0x40, 0xb7, 0xa14, 0x100000001, 0x0, 0xe25, 0x74, 0xa]}) 39.044936292s ago: executing program 2 (id=725): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r0, &(0x7f0000003200)={0x0, 0x60, &(0x7f00000031c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010326bd7000ffdbdf252d000000fae77067"], 0x14}, 0x1, 0x1000000, 0xffff0000, 0x2404c012}, 0x80) 36.037870308s ago: executing program 2 (id=730): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x15, 0x5, 0x0) r0 = socket(0x23, 0x80805, 0x0) poll$auto(&(0x7f0000000000)={r0, 0x1, 0x8}, 0x5, 0x400) setsockopt$auto(r1, 0x113, 0x4, 0x0, 0x1) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_ADD_SEALS(r2, 0x409, 0x5) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x4001, 0xff, 0x10000, 0xfffffffb, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xf491, 0x3], {0x3, 0x1000, 0x1000004, 0x1, 0x4, 0x3, 0x100003ff, 0x200003, 0xffff}, {0x4, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0xd, 0x449e, 0x8000000}}) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000000), 0x205ac, &(0x7f0000000100)={&(0x7f0000000200), 0x1f}, 0x5, 0x0, 0x5, 0x4}, 0x20000005}, 0x5, 0xcae) getsockopt$auto(0x4, 0x6, 0x17, 0xfffffffffffffffc, 0x0) 10.959658557s ago: executing program 9 (id=757): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x1940, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000040)=0x74c7) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/178, 0xb2) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, 0x0, 0x0) socket(0x2c, 0x3, 0x10000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r4, 0x7fffffffffffffff, 0x400000040000005, 0x4) mmap$auto(0x0, 0xc685, 0x3e, 0x1200000010, r2, 0x4) mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mmap$auto(0x2100000000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) io_setup$auto(0x7ffe, 0x0) gettid() write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) timer_getoverrun$auto(0xa935) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 7.781566046s ago: executing program 9 (id=759): openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x1, 0x400000005, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) mremap$auto(0x0, 0x9, 0x3fd6, 0x0, 0x1ffffffa) ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000180)=0x3) io_uring_setup$auto(0x59, 0x0) ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy10/airtime_flags\x00', 0x2641, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = gettid() r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80102, 0x0) write$auto(r1, 0x0, 0x40100000a3d5) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(r1, 0x0, 0xa10) close_range$auto(0x2, 0x8, 0x0) kill$auto(r0, 0x11) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000200), r2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unlink$auto(&(0x7f00000002c0)='}[,&*}\x00') sendmsg$auto_OVS_VPORT_CMD_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf250400000008000800", @ANYRES32=0x0, @ANYBLOB="f86f18814ae58bc2d13367adb86d64292801d202cec0a3d422e0f95077eb01314c245affad09b75af55fdb653616fe8c6ab4eac68ffaf22465fae93b0e522f7b9536154c24934aa2471255c16e4973803fbbc7670041b3212fb8b4bcd0ac"], 0x1c}}, 0x10) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES2(0xffffffffffffffff, 0x40184152, &(0x7f00000000c0)={0xd819, &(0x7f0000000100)=0x0, 0x1}) ioctl$auto_LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) semtimedop$auto(0x40, &(0x7f0000000180)={0xbcf, 0x6, 0xfffe}, 0x7, &(0x7f00000001c0)={0x3106}) ioctl$auto_LOOP_CTL_GET_FREE(r4, 0x4c82, r0) 7.362430896s ago: executing program 8 (id=760): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)=@query={@target_ifindex, 0x7, 0xa6ad, 0x6, 0xca4b, @prog_cnt=0x40, 0x0, 0x4, 0x1, 0x644f, 0x2}, 0x122) r1 = openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/hwsim/dfs_simulate_radar\x00', 0x8346, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x2, 0x802, 0x1) mq_open$auto(&(0x7f0000000080)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x101, 0x9, &(0x7f00000000c0)={0x200, 0x1, 0x5}) mmap$auto(0x3, 0x10000, 0x3, 0x15, r0, 0xa9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)={0x424, 0x0, [{0x2, 0x10, 0x133}, {0xd9e, 0x0, 0x1}, {0x3, 0x100, 0x75b28a59}]}) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/i8042/serio1/power/wakeup_abort_count\x00', 0xe0604, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) bind$auto(0x3, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1, 0x2}, 0x68) 7.081226722s ago: executing program 9 (id=761): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xffff, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020006, 0xe1, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0xd, 0x1, 0x0, 0x7, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r3}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 5.431118934s ago: executing program 9 (id=762): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xffff, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020006, 0xe1, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0xd, 0x1, 0x0, 0x7, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r3}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 3.956761287s ago: executing program 9 (id=763): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/bond_slave_0/unres_qlen\x00', 0x189302, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x4000) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="013ad7fac400f8dbdf250100000080000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)=""/140, 0x8c) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/adsp1\x00', 0x2, 0x0) prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r3, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d566ff59d1b9f5e0eb4d") mmap$auto(0xc8, 0xe2, 0x0, 0xeb1, r2, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x119280, 0x0) getpid() r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x101202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c01, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) 3.341550686s ago: executing program 8 (id=764): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0) ioctl$auto_SG_SET_RESERVED_SIZE2(r0, 0x2275, 0x0) 2.934858983s ago: executing program 8 (id=765): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000180)="0a1b9a5c7b00006e163bb154d7886d8edeea371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401910000000000060000023b5d40a", 0x38) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r3 = socket(0x15, 0x801, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) r4 = socket(0x2, 0x3, 0x2) ioctl$auto_BLKGETDISKSEQ(r1, 0x80081280, &(0x7f0000000080)=0xe8) setsockopt$auto(r4, 0x0, 0xc8, 0xfffffffffffffffc, 0xc5) getsockopt$auto(r3, 0x11c, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001280)={{0xffffffffffffffff, &(0x7f0000000040)="84889430c9875217f09f2c15cba294d9586007335ff6f0098363dbdec8e0b3788fdfe354f6e1fbb86f53892225c20c1c86cc42e64f8d07beb6edfd2309a4fa5f740dbee8f1b45bf34d6992718fdc33cea29ac194aeb2c6a89c46dbbcb4278b4fafc4ccb495b76a94b5733c2d1f52864ebf874beb4d847b6305ab9b362ffd2871ac764df5c4f1dec48236e390c5a9df122cbf52c0014999e50aea2ab4ca9310039be9131c301343fd5eef67", 0x1, &(0x7f0000000180)="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", 0x4, 0x0, &(0x7f0000001200)=0x14}, {[0xd, 0x8, 0x4, 0x96]}, 0xffffff2e, 0xffffff81, &(0x7f0000001240)="14b63155769957131bdb701eb64786b233e352ce472abb72"}) read$auto_stat_fops_per_vm_kvm_main(r5, &(0x7f0000001300)=""/92, 0x5c) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0x11, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) r6 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r6, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, r5, 0x800008000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 2.12367842s ago: executing program 8 (id=766): open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) socket(0x29, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) r1 = bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) ioctl$auto_SCSI_IOCTL_DOORLOCK(r1, 0x5380, &(0x7f0000000000)="3f44a8362d6e7dc8b1f3733a1a5162d55336934f09e275d4d8db8cdcb1a1") sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0xfffffffffffffef9, &(0x7f00000016c0)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x4093}, 0x2004c8cd) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) set_mempolicy$auto(0x3c, &(0x7f0000000080)=0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0xa, 0x801, 0x84) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x9, 0x0) setsockopt$auto(r3, 0x10000000084, 0x9, 0x0, 0x9c) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000804) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) sendmmsg$auto(r5, &(0x7f0000000540)={{&(0x7f00000002c0)="79fd8606cc11477bb2d55f2a97dbd7abf17ad8dba081e5ed2a0d1619936877f21f926087d2ef47fc5f69da0190c46f315bd05d5c5749446b2deb2435f0a601bf40d47cb65316af3787c4872d23b90b48f7c1ce1427441c660cd8ba1f0067d261eb0350e7b32ee5592102584f1a6993cc70d504368f140c5fd85b2f9f7e772b476ba907781ec5196c71ac7eb910bf0969d22b20ef47cf9418488c8bd95b95e20c5a04d003f9f5c1cf8c46416d59c1ff9f9b92cc8075de8539bc8ecd09633c792536dc268fc5f3968ebf066f5bdc189bd72f57c5e5378e48c1bebb0bd1973e82babb18ad604da0f2204763", 0x9, &(0x7f0000000440)={&(0x7f00000003c0)="dfc4a86038f318150ea5f20ba08fd180762606d6ee5803103038a1b4940a4dfe90689446235b6e831c4083fbb3863c038364c72c62a7eec4dbf4cc171b42320f5ac87b248c722dbb", 0x91}, 0x4, &(0x7f0000000480), 0x3e}, 0x4c7}, 0x5, 0x9) 926.049003ms ago: executing program 8 (id=767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0xc}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x60000000, 0x50}, 0xc800) 345.06037ms ago: executing program 8 (id=768): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/43:352/stable_pages_required\x00', 0x5bb502, 0x0) clock_getres$auto(0x6, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) fcntl$auto_F_GETFD(r0, 0x1, 0x3) 0s ago: executing program 9 (id=769): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @multicast2}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x8001) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xf0ff) kernel console output (not intermixed with test programs): performance. Setting the MTU to 1532 would solve the problem. [ 236.702195][ T7541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.817276][ T7364] veth0_vlan: entered promiscuous mode [ 236.844214][ T7364] veth1_vlan: entered promiscuous mode [ 237.075918][ T7541] hsr_slave_0: entered promiscuous mode [ 237.085857][ T7541] hsr_slave_1: entered promiscuous mode [ 237.093576][ T7541] debugfs: 'hsr0' already exists in 'hsr' [ 237.100194][ T7541] Cannot create hsr debugfs directory [ 237.559886][ T7364] veth0_macvtap: entered promiscuous mode [ 237.738695][ T5885] Bluetooth: hci1: command tx timeout [ 237.851334][ T7364] veth1_macvtap: entered promiscuous mode [ 238.097478][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.315711][ T7541] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.377559][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.441712][ T5810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.488002][ T5810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.509669][ T5810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.580392][ T5810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.664622][ T7541] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.817041][ T7541] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.053867][ T7541] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.303621][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 239.308986][ T5826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.355518][ T5826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.584316][ T5800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.608597][ T5800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.819411][ T5885] Bluetooth: hci1: command tx timeout [ 239.956719][ T7541] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 239.984421][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.000301][ T7541] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.034581][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.059153][ T7541] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.091560][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.113766][ T7541] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.127605][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 240.420534][ T7541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.585789][ T7541] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.634840][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.642038][ T5807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.684042][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.691261][ T5807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.899825][ T5885] Bluetooth: hci1: command tx timeout [ 242.350804][ T7541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.533152][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.247'. [ 242.585371][ T7541] veth0_vlan: entered promiscuous mode [ 242.604885][ T5885] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 242.672125][ T7541] veth1_vlan: entered promiscuous mode [ 242.836792][ T7541] veth0_macvtap: entered promiscuous mode [ 242.912844][ T7541] veth1_macvtap: entered promiscuous mode [ 243.000671][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.063080][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.150361][ T5811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.198403][ T5811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.214430][ T5811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.263191][ T5811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.501747][ T5811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.533314][ T5811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.586175][ T7725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 243.630148][ T5810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.652785][ T5810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.652884][ T7421] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 243.675378][ T7421] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 243.685597][ T7421] CPU: 0 UID: 0 PID: 7421 Comm: kworker/u11:3 Not tainted syzkaller #0 PREEMPT(full) [ 243.685630][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 243.685659][ T7421] Workqueue: hci0 hci_rx_work [ 243.685708][ T7421] Call Trace: [ 243.685717][ T7421] [ 243.685726][ T7421] dump_stack_lvl+0x100/0x190 [ 243.685758][ T7421] sysfs_warn_dup.cold+0x1c/0x28 [ 243.685799][ T7421] sysfs_create_dir_ns+0x24b/0x2b0 [ 243.685838][ T7421] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 243.685872][ T7421] ? find_held_lock+0x2b/0x80 [ 243.685903][ T7421] ? kobject_add_internal+0x25f/0x930 [ 243.685933][ T7421] ? kobject_add_internal+0x25f/0x930 [ 243.685966][ T7421] ? do_raw_spin_unlock+0x145/0x1e0 [ 243.685996][ T7421] kobject_add_internal+0x2c8/0x930 [ 243.686030][ T7421] kobject_add+0x16a/0x1e0 [ 243.686060][ T7421] ? __pfx_kobject_add+0x10/0x10 [ 243.686088][ T7421] ? class_to_subsys+0x10f/0x150 [ 243.686132][ T7421] ? kobject_put+0xb9/0x640 [ 243.686157][ T7421] ? _raw_spin_unlock+0x28/0x50 [ 243.686197][ T7421] device_add+0x294/0x1970 [ 243.686234][ T7421] ? __pfx_dev_set_name+0x10/0x10 [ 243.686290][ T7421] ? __pfx_device_add+0x10/0x10 [ 243.686351][ T7421] ? mgmt_send_event_skb+0x2fb/0x460 [ 243.686418][ T7421] hci_conn_add_sysfs+0x1a3/0x260 [ 243.686447][ T7421] le_conn_complete_evt+0x11eb/0x1f60 [ 243.686494][ T7421] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 243.686530][ T7421] ? __pfx_bt_warn+0x10/0x10 [ 243.686554][ T7421] ? hci_event_packet+0x186/0xcd0 [ 243.686634][ T7421] hci_le_conn_complete_evt+0x23c/0x3a0 [ 243.686679][ T7421] ? skb_pull_data+0x15f/0x1e0 [ 243.686717][ T7421] hci_le_meta_evt+0x34a/0x5f0 [ 243.686741][ T7421] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 243.686785][ T7421] hci_event_packet+0x51c/0xcd0 [ 243.686825][ T7421] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 243.686850][ T7421] ? __pfx_hci_event_packet+0x10/0x10 [ 243.686901][ T7421] ? kcov_remote_start+0x384/0x670 [ 243.686937][ T7421] ? lockdep_hardirqs_on+0x78/0x100 [ 243.686981][ T7421] hci_rx_work+0x451/0xfc0 [ 243.687025][ T7421] process_one_work+0xa23/0x1940 [ 243.687073][ T7421] ? __pfx_process_one_work+0x10/0x10 [ 243.687118][ T7421] ? __pfx_hci_rx_work+0x10/0x10 [ 243.687159][ T7421] worker_thread+0x5ef/0xe50 [ 243.687203][ T7421] ? __pfx_worker_thread+0x10/0x10 [ 243.687240][ T7421] ? kthread+0x13a/0x450 [ 243.687272][ T7421] ? __pfx_worker_thread+0x10/0x10 [ 243.687313][ T7421] kthread+0x370/0x450 [ 243.687353][ T7421] ? __pfx_kthread+0x10/0x10 [ 243.687388][ T7421] ret_from_fork+0x72b/0xd50 [ 243.687421][ T7421] ? __pfx_ret_from_fork+0x10/0x10 [ 243.687452][ T7421] ? rcu_is_watching+0x12/0xc0 [ 243.687487][ T7421] ? __switch_to+0x800/0x10f0 [ 243.687508][ T7421] ? __switch_to_asm+0x39/0x70 [ 243.687544][ T7421] ? __pfx_kthread+0x10/0x10 [ 243.687579][ T7421] ret_from_fork_asm+0x1a/0x30 [ 243.687635][ T7421] [ 243.687711][ T7421] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 244.006257][ T7421] Bluetooth: hci0: failed to register connection device [ 244.389317][ T7728] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 244.480791][ T7728] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 244.525801][ T7728] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 244.598320][ T7728] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 244.629497][ T7728] page dumped because: unmovable page [ 244.648482][ T7728] page_owner info is not present (never set?) [ 244.695442][ T7421] Bluetooth: hci0: command 0x2016 tx timeout [ 246.781792][ T7421] Bluetooth: hci0: command 0x2016 tx timeout [ 247.591520][ T7758] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 248.782658][ T7770] netlink: 338 bytes leftover after parsing attributes in process `syz.3.257'. [ 248.828471][ T7770] netlink: 338 bytes leftover after parsing attributes in process `syz.3.257'. [ 248.849472][ T7421] Bluetooth: hci0: command 0x2016 tx timeout [ 248.858406][ T7770] netlink: 338 bytes leftover after parsing attributes in process `syz.3.257'. [ 248.873376][ T7770] netlink: 338 bytes leftover after parsing attributes in process `syz.3.257'. [ 248.889177][ T7770] netlink: 338 bytes leftover after parsing attributes in process `syz.3.257'. [ 248.902603][ T7770] netlink: 338 bytes leftover after parsing attributes in process `syz.3.257'. [ 248.914767][ T7772] netlink: 306 bytes leftover after parsing attributes in process `syz.3.257'. [ 248.954874][ T7770] netlink: 338 bytes leftover after parsing attributes in process `syz.3.257'. [ 249.013787][ T7770] netlink: 338 bytes leftover after parsing attributes in process `syz.3.257'. [ 250.519098][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.261'. [ 250.617818][ T5885] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 250.685161][ T7797] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 250.929592][ T5885] Bluetooth: hci0: command 0x2016 tx timeout [ 251.740818][ T7812] HfR: entered promiscuous mode [ 252.490736][ T5885] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 253.008511][ T5885] Bluetooth: hci0: command 0x2016 tx timeout [ 254.533616][ T5802] Bluetooth: hci3: command 0x2016 tx timeout [ 255.089477][ T7421] Bluetooth: hci0: command 0x2016 tx timeout [ 256.608446][ T7421] Bluetooth: hci3: command 0x2016 tx timeout [ 257.046664][ T7874] __nla_validate_parse: 2 callbacks suppressed [ 257.046689][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 257.327765][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 261.171893][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.179577][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.108934][ T7938] FAULT_INJECTION: forcing a failure. [ 262.108934][ T7938] name failslab, interval 1, probability 0, space 0, times 0 [ 262.138299][ T7938] CPU: 0 UID: 0 PID: 7938 Comm: syz.0.290 Not tainted syzkaller #0 PREEMPT(full) [ 262.138330][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 262.138344][ T7938] Call Trace: [ 262.138351][ T7938] [ 262.138360][ T7938] dump_stack_lvl+0x100/0x190 [ 262.138393][ T7938] should_fail_ex.cold+0x5/0xa [ 262.138422][ T7938] should_failslab+0xc2/0x120 [ 262.138456][ T7938] __kmalloc_noprof+0xfc/0x820 [ 262.138486][ T7938] ? alloc_pipe_info+0x1ec/0x590 [ 262.138516][ T7938] alloc_pipe_info+0x1ec/0x590 [ 262.138543][ T7938] splice_direct_to_actor+0x78f/0xa30 [ 262.138571][ T7938] ? __pfx_direct_splice_actor+0x10/0x10 [ 262.138597][ T7938] ? __pfx_aa_file_perm+0x10/0x10 [ 262.138634][ T7938] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 262.138672][ T7938] do_splice_direct+0x174/0x240 [ 262.138698][ T7938] ? __pfx_do_splice_direct+0x10/0x10 [ 262.138723][ T7938] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 262.138751][ T7938] ? rw_verify_area+0xce/0x6d0 [ 262.138788][ T7938] do_sendfile+0xadc/0xe20 [ 262.138830][ T7938] ? __pfx_do_sendfile+0x10/0x10 [ 262.138864][ T7938] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.138905][ T7938] ? __fget_files+0x21f/0x3d0 [ 262.138933][ T7938] __x64_sys_sendfile64+0x1d8/0x220 [ 262.138960][ T7938] ? ksys_write+0x1ac/0x250 [ 262.138981][ T7938] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 262.139017][ T7938] do_syscall_64+0x115/0x840 [ 262.139037][ T7938] ? clear_bhb_loop+0x40/0x90 [ 262.139064][ T7938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.139088][ T7938] RIP: 0033:0x7fd23f39ce59 [ 262.139107][ T7938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.139129][ T7938] RSP: 002b:00007fd2402a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 262.139180][ T7938] RAX: ffffffffffffffda RBX: 00007fd23f615fa0 RCX: 00007fd23f39ce59 [ 262.139195][ T7938] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 262.139208][ T7938] RBP: 00007fd2402a2090 R08: 0000000000000000 R09: 0000000000000000 [ 262.139222][ T7938] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 262.139235][ T7938] R13: 00007fd23f616038 R14: 00007fd23f615fa0 R15: 00007ffd312ab778 [ 262.139265][ T7938] [ 265.573603][ T7969] openvswitch: HfR: Dropping previously announced user features [ 266.923042][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 268.602094][ T7992] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/ci-qemu-gce-upstream-auto/syz-executor /root/ci-qemu-gce-upstream-auto/syz-executor /newroot/11/file0' not defined. [ 268.704444][ T5802] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 270.625394][ T8037] bonding: no command found in bonding_masters - use +ifname or -ifname [ 270.762356][ T8046] openvswitch: HfR: Dropping previously announced user features [ 270.779007][ T7421] Bluetooth: hci0: command 0x2016 tx timeout [ 271.871312][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.314'. [ 272.265087][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.317'. [ 272.529315][ T7421] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 272.849408][ T7421] Bluetooth: hci0: command 0x2016 tx timeout [ 273.275222][ T8088] HfR: entered promiscuous mode [ 274.112905][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 274.611340][ T5885] Bluetooth: hci3: command 0x2016 tx timeout [ 275.355107][ T8107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.330'. [ 275.404370][ T5802] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 276.689541][ T7421] Bluetooth: hci3: command 0x2016 tx timeout [ 276.808867][ T8144] FAULT_INJECTION: forcing a failure. [ 276.808867][ T8144] name failslab, interval 1, probability 0, space 0, times 0 [ 276.836981][ T8144] CPU: 0 UID: 0 PID: 8144 Comm: syz.3.336 Not tainted syzkaller #0 PREEMPT(full) [ 276.837023][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 276.837046][ T8144] Call Trace: [ 276.837056][ T8144] [ 276.837067][ T8144] dump_stack_lvl+0x100/0x190 [ 276.837106][ T8144] should_fail_ex.cold+0x5/0xa [ 276.837141][ T8144] should_failslab+0xc2/0x120 [ 276.837179][ T8144] kmem_cache_alloc_noprof+0x91/0x6a0 [ 276.837211][ T8144] ? is_bpf_text_address+0x8a/0x1a0 [ 276.837250][ T8144] ? is_bpf_text_address+0x8a/0x1a0 [ 276.837287][ T8144] ? alloc_empty_file+0x5b/0x1c0 [ 276.837327][ T8144] alloc_empty_file+0x5b/0x1c0 [ 276.837361][ T8144] path_openat+0xe7/0x4280 [ 276.837388][ T8144] ? unwind_get_return_address+0x59/0xa0 [ 276.837430][ T8144] ? arch_stack_walk+0xa6/0xf0 [ 276.837479][ T8144] ? __pfx_path_openat+0x10/0x10 [ 276.837507][ T8144] ? stack_trace_save+0x8e/0xc0 [ 276.837547][ T8144] ? __pfx_stack_trace_save+0x10/0x10 [ 276.837591][ T8144] do_file_open+0x20e/0x430 [ 276.837621][ T8144] ? __pfx_do_file_open+0x10/0x10 [ 276.837648][ T8144] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 276.837682][ T8144] ? do_getname+0x35/0x390 [ 276.837717][ T8144] ? __x64_sys_execveat+0xc5/0x130 [ 276.837785][ T8144] ? __lock_acquire+0x49f/0x1a40 [ 276.837822][ T8144] do_open_execat+0xd1/0x360 [ 276.837878][ T8144] ? __pfx_do_open_execat+0x10/0x10 [ 276.837928][ T8144] ? __might_fault+0xc5/0x140 [ 276.837958][ T8144] ? __might_fault+0xc5/0x140 [ 276.837995][ T8144] alloc_bprm+0x2d/0x9d0 [ 276.838041][ T8144] do_execveat_common.isra.0+0x19c/0x580 [ 276.838087][ T8144] ? do_getname+0x191/0x390 [ 276.838135][ T8144] __x64_sys_execveat+0xdf/0x130 [ 276.838187][ T8144] do_syscall_64+0x115/0x840 [ 276.838215][ T8144] ? clear_bhb_loop+0x40/0x90 [ 276.838255][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.838288][ T8144] RIP: 0033:0x7fd631b9ce59 [ 276.838313][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.838340][ T8144] RSP: 002b:00007fd632a8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 276.838367][ T8144] RAX: ffffffffffffffda RBX: 00007fd631e15fa0 RCX: 00007fd631b9ce59 [ 276.838386][ T8144] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 276.838403][ T8144] RBP: 00007fd632a8c090 R08: 0000000000011000 R09: 0000000000000000 [ 276.838420][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.838436][ T8144] R13: 00007fd631e16038 R14: 00007fd631e15fa0 R15: 00007ffcb44e46b8 [ 276.838472][ T8144] [ 277.488419][ T5802] Bluetooth: hci0: command 0x2016 tx timeout [ 278.021716][ T8162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.338'. [ 278.497074][ T8169] netlink: 334 bytes leftover after parsing attributes in process `syz.0.340'. [ 278.926286][ T8167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.341'. [ 279.010905][ T5885] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 279.021403][ T5885] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 279.031151][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 279.031191][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 279.031212][ T5885] Workqueue: hci0 hci_rx_work [ 279.031263][ T5885] Call Trace: [ 279.031273][ T5885] [ 279.031284][ T5885] dump_stack_lvl+0x100/0x190 [ 279.031325][ T5885] sysfs_warn_dup.cold+0x1c/0x28 [ 279.031369][ T5885] sysfs_create_dir_ns+0x24b/0x2b0 [ 279.031414][ T5885] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 279.031457][ T5885] ? find_held_lock+0x2b/0x80 [ 279.031495][ T5885] ? kobject_add_internal+0x25f/0x930 [ 279.031531][ T5885] ? kobject_add_internal+0x25f/0x930 [ 279.031581][ T5885] ? do_raw_spin_unlock+0x145/0x1e0 [ 279.031619][ T5885] kobject_add_internal+0x2c8/0x930 [ 279.031662][ T5885] kobject_add+0x16a/0x1e0 [ 279.031698][ T5885] ? __pfx_kobject_add+0x10/0x10 [ 279.031732][ T5885] ? class_to_subsys+0x10f/0x150 [ 279.031793][ T5885] ? kobject_put+0xb9/0x640 [ 279.031825][ T5885] ? _raw_spin_unlock+0x28/0x50 [ 279.031878][ T5885] device_add+0x294/0x1970 [ 279.031932][ T5885] ? __pfx_dev_set_name+0x10/0x10 [ 279.031969][ T5885] ? __pfx_device_add+0x10/0x10 [ 279.032025][ T5885] ? mgmt_send_event_skb+0x2fb/0x460 [ 279.032096][ T5885] hci_conn_add_sysfs+0x1a3/0x260 [ 279.032139][ T5885] le_conn_complete_evt+0x11eb/0x1f60 [ 279.032208][ T5885] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 279.032261][ T5885] ? __pfx_bt_warn+0x10/0x10 [ 279.032291][ T5885] ? hci_event_packet+0x186/0xcd0 [ 279.032353][ T5885] hci_le_conn_complete_evt+0x23c/0x3a0 [ 279.032409][ T5885] ? skb_pull_data+0x15f/0x1e0 [ 279.032463][ T5885] hci_le_meta_evt+0x34a/0x5f0 [ 279.032503][ T5885] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 279.032566][ T5885] hci_event_packet+0x51c/0xcd0 [ 279.032633][ T5885] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 279.032670][ T5885] ? __pfx_hci_event_packet+0x10/0x10 [ 279.032741][ T5885] ? kcov_remote_start+0x384/0x670 [ 279.032801][ T5885] ? lockdep_hardirqs_on+0x78/0x100 [ 279.032872][ T5885] hci_rx_work+0x451/0xfc0 [ 279.032936][ T5885] process_one_work+0xa23/0x1940 [ 279.033008][ T5885] ? __pfx_process_one_work+0x10/0x10 [ 279.033075][ T5885] ? __pfx_hci_rx_work+0x10/0x10 [ 279.033133][ T5885] worker_thread+0x5ef/0xe50 [ 279.033198][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 279.033253][ T5885] ? kthread+0x13a/0x450 [ 279.033299][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 279.033349][ T5885] kthread+0x370/0x450 [ 279.033396][ T5885] ? __pfx_kthread+0x10/0x10 [ 279.033447][ T5885] ret_from_fork+0x72b/0xd50 [ 279.033494][ T5885] ? __pfx_ret_from_fork+0x10/0x10 [ 279.033541][ T5885] ? __switch_to+0x800/0x10f0 [ 279.033571][ T5885] ? __switch_to_asm+0x39/0x70 [ 279.033623][ T5885] ? __pfx_kthread+0x10/0x10 [ 279.033674][ T5885] ret_from_fork_asm+0x1a/0x30 [ 279.033749][ T5885] [ 279.033820][ T5885] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 279.345426][ T5885] Bluetooth: hci0: failed to register connection device [ 279.422140][ T8161] syz.2.339 (8161) used greatest stack depth: 19592 bytes left [ 279.518969][ T8180] ovs_: entered promiscuous mode [ 279.582978][ T5885] Bluetooth: hci0: command 0x2016 tx timeout [ 279.641975][ T8183] ubi0: attaching mtd0 [ 279.760891][ T8183] ubi0: scanning is finished [ 279.780284][ T8183] ubi0: empty MTD device detected [ 280.475930][ T8183] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 280.716189][ T8183] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 280.824778][ T8183] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 280.861150][ T8183] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 280.876573][ T8183] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 280.891528][ T8183] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 280.902807][ T8183] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1778598775 [ 280.913004][ T8183] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 280.980979][ T8185] ubi0: detaching mtd0 [ 281.140314][ T8183] blktrace: Concurrent blktraces are not allowed on sda1 [ 281.325374][ T8185] ubi0: mtd0 is detached [ 281.467835][ T8212] bonding: no command found in bonding_masters - use +ifname or -ifname [ 281.652032][ T5802] Bluetooth: hci0: command 0x2016 tx timeout [ 283.429867][ T8236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.353'. [ 283.468721][ T5885] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 283.728377][ T5885] Bluetooth: hci0: command 0x2016 tx timeout [ 283.745178][ T8246] openvswitch: HfR: Dropping previously announced user features [ 284.619006][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'. [ 284.692946][ T8251] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 285.568461][ T5802] Bluetooth: hci1: command 0x2016 tx timeout [ 285.689000][ T8273] FAULT_INJECTION: forcing a failure. [ 285.689000][ T8273] name failslab, interval 1, probability 0, space 0, times 0 [ 285.740739][ T8273] CPU: 1 UID: 0 PID: 8273 Comm: syz.0.361 Not tainted syzkaller #0 PREEMPT(full) [ 285.740786][ T8273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.740806][ T8273] Call Trace: [ 285.740816][ T8273] [ 285.740829][ T8273] dump_stack_lvl+0x100/0x190 [ 285.740879][ T8273] should_fail_ex.cold+0x5/0xa [ 285.740926][ T8273] should_failslab+0xc2/0x120 [ 285.740978][ T8273] kmem_cache_alloc_noprof+0x91/0x6a0 [ 285.741025][ T8273] ? vm_area_alloc+0x1f/0x160 [ 285.741066][ T8273] vm_area_alloc+0x1f/0x160 [ 285.741100][ T8273] __mmap_region+0x1033/0x2db0 [ 285.741147][ T8273] ? __pfx___mmap_region+0x10/0x10 [ 285.741200][ T8273] ? __lock_acquire+0x49f/0x1a40 [ 285.741232][ T8273] ? debug_object_activate+0x343/0x4b0 [ 285.741300][ T8273] ? find_held_lock+0x2b/0x80 [ 285.741352][ T8273] ? ima_match_policy+0x8c4/0x2350 [ 285.741399][ T8273] ? ima_match_policy+0x8c4/0x2350 [ 285.741473][ T8273] ? process_measurement+0x4c8/0x2350 [ 285.741504][ T8273] ? process_measurement+0x4c8/0x2350 [ 285.741536][ T8273] ? down_write+0x146/0x1f0 [ 285.741625][ T8273] mmap_region+0x527/0x620 [ 285.741660][ T8273] ? __pfx_mmap_region+0x10/0x10 [ 285.741698][ T8273] ? cap_mmap_addr+0x4b/0x120 [ 285.741725][ T8273] ? bpf_lsm_mmap_addr+0x9/0x30 [ 285.741756][ T8273] ? security_mmap_addr+0x71/0x1e0 [ 285.741795][ T8273] ? __get_unmapped_area+0x255/0x3e0 [ 285.741840][ T8273] do_mmap+0xc63/0x12f0 [ 285.741886][ T8273] ? __pfx_do_mmap+0x10/0x10 [ 285.741927][ T8273] ? __pfx_down_write_killable+0x10/0x10 [ 285.741965][ T8273] vm_mmap_pgoff+0x29e/0x470 [ 285.742011][ T8273] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 285.742048][ T8273] ? __fget_files+0x215/0x3d0 [ 285.742080][ T8273] ? __fget_files+0x21f/0x3d0 [ 285.742113][ T8273] ksys_mmap_pgoff+0x3cb/0x610 [ 285.742153][ T8273] ? __x64_sys_futex+0x358/0x4d0 [ 285.742195][ T8273] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 285.742236][ T8273] ? xfd_validate_state+0x129/0x190 [ 285.742279][ T8273] __x64_sys_mmap+0x125/0x190 [ 285.742320][ T8273] do_syscall_64+0x115/0x840 [ 285.742345][ T8273] ? clear_bhb_loop+0x40/0x90 [ 285.742379][ T8273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.742409][ T8273] RIP: 0033:0x7fd23f39ce59 [ 285.742433][ T8273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.742460][ T8273] RSP: 002b:00007fd2402a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 285.742487][ T8273] RAX: ffffffffffffffda RBX: 00007fd23f615fa0 RCX: 00007fd23f39ce59 [ 285.742506][ T8273] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 285.742523][ T8273] RBP: 00007fd23f432e6f R08: 00000000000000dd R09: 0700000000000000 [ 285.742541][ T8273] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 285.742559][ T8273] R13: 00007fd23f616038 R14: 00007fd23f615fa0 R15: 00007ffd312ab778 [ 285.742594][ T8273] [ 286.054396][ T8276] netlink: 'syz.1.362': attribute type 9 has an invalid length. [ 286.062372][ T8276] netlink: 330 bytes leftover after parsing attributes in process `syz.1.362'. [ 286.787551][ T8285] openvswitch: HfR: Dropping previously announced user features [ 287.648455][ T5802] Bluetooth: hci1: command 0x2016 tx timeout [ 288.378302][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 289.221564][ T8316] random: crng reseeded on system resumption [ 292.126566][ T8364] netlink: 326 bytes leftover after parsing attributes in process `syz.0.377'. [ 292.181219][ T8360] FAULT_INJECTION: forcing a failure. [ 292.181219][ T8360] name failslab, interval 1, probability 0, space 0, times 0 [ 292.311102][ T8360] CPU: 0 UID: 0 PID: 8360 Comm: syz.0.377 Not tainted syzkaller #0 PREEMPT(full) [ 292.311149][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.311170][ T8360] Call Trace: [ 292.311181][ T8360] [ 292.311194][ T8360] dump_stack_lvl+0x100/0x190 [ 292.311274][ T8360] should_fail_ex.cold+0x5/0xa [ 292.311322][ T8360] should_failslab+0xc2/0x120 [ 292.311371][ T8360] __kmalloc_cache_noprof+0x91/0x6c0 [ 292.311410][ T8360] ? usb_control_msg+0xbc/0x4b0 [ 292.311453][ T8360] usb_control_msg+0xbc/0x4b0 [ 292.311490][ T8360] ? __pfx_usb_control_msg+0x10/0x10 [ 292.311525][ T8360] ? __lock_acquire+0x49f/0x1a40 [ 292.311565][ T8360] hub_ext_port_status+0x152/0x600 [ 292.311637][ T8360] hub_activate+0x6d8/0x1d50 [ 292.311685][ T8360] ? __pfx_hub_activate+0x10/0x10 [ 292.311721][ T8360] ? find_held_lock+0x2b/0x80 [ 292.311764][ T8360] ? percpu_rwsem_wake_function+0x1b0/0x4a0 [ 292.311809][ T8360] ? usbdev_open+0x630/0x870 [ 292.311859][ T8360] ? usb_generic_driver_resume+0x70/0xa0 [ 292.311897][ T8360] ? hcd_bus_resume+0x37b/0x810 [ 292.311953][ T8360] hub_resume+0xb0/0x400 [ 292.311994][ T8360] ? __pfx_hub_resume+0x10/0x10 [ 292.312031][ T8360] ? __pfx_hcd_bus_resume+0x10/0x10 [ 292.312093][ T8360] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 292.312146][ T8360] usb_resume_both+0x53a/0x7f0 [ 292.312194][ T8360] ? do_dentry_open+0x6ab/0x14d0 [ 292.312230][ T8360] ? __pfx_usb_resume_both+0x10/0x10 [ 292.312283][ T8360] ? __rpm_callback+0x272/0x620 [ 292.312332][ T8360] ? __pfx_usb_runtime_resume+0x10/0x10 [ 292.312384][ T8360] ? rcu_is_watching+0x12/0xc0 [ 292.312429][ T8360] ? __pfx_usb_runtime_resume+0x10/0x10 [ 292.312480][ T8360] __rpm_callback+0xc8/0x620 [ 292.312526][ T8360] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 292.312583][ T8360] ? __pfx_usb_runtime_resume+0x10/0x10 [ 292.312634][ T8360] rpm_callback+0x16a/0x1b0 [ 292.312676][ T8360] ? __pfx_usb_runtime_resume+0x10/0x10 [ 292.312728][ T8360] rpm_resume+0xd13/0x1320 [ 292.312771][ T8360] ? usbdev_open+0x1b1/0x870 [ 292.312821][ T8360] ? klist_put+0xcb/0x1d0 [ 292.312866][ T8360] ? __pfx_rpm_resume+0x10/0x10 [ 292.312910][ T8360] ? do_raw_spin_lock+0x128/0x260 [ 292.312951][ T8360] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 292.312996][ T8360] ? _raw_spin_lock_irqsave+0x52/0x60 [ 292.313056][ T8360] __pm_runtime_resume+0xb6/0x170 [ 292.313108][ T8360] usb_autoresume_device+0x23/0xe0 [ 292.313164][ T8360] usbdev_open+0x228/0x870 [ 292.313219][ T8360] ? do_raw_spin_lock+0x128/0x260 [ 292.313276][ T8360] ? __pfx_usbdev_open+0x10/0x10 [ 292.313326][ T8360] ? chrdev_open+0x589/0x6a0 [ 292.313362][ T8360] ? chrdev_open+0x589/0x6a0 [ 292.313408][ T8360] ? __pfx_usbdev_open+0x10/0x10 [ 292.313446][ T8360] chrdev_open+0x234/0x6a0 [ 292.313471][ T8360] ? __pfx_chrdev_open+0x10/0x10 [ 292.313498][ T8360] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 292.313532][ T8360] do_dentry_open+0x6ab/0x14d0 [ 292.313556][ T8360] ? __pfx_chrdev_open+0x10/0x10 [ 292.313587][ T8360] vfs_open+0x82/0x3f0 [ 292.313621][ T8360] path_openat+0x2873/0x4280 [ 292.313658][ T8360] ? __pfx_path_openat+0x10/0x10 [ 292.313691][ T8360] do_file_open+0x20e/0x430 [ 292.313726][ T8360] ? __pfx_do_file_open+0x10/0x10 [ 292.313784][ T8360] ? alloc_fd+0x471/0x7a0 [ 292.313812][ T8360] ? do_getname+0x191/0x390 [ 292.313845][ T8360] do_sys_openat2+0x10f/0x1e0 [ 292.313879][ T8360] ? __pfx_do_sys_openat2+0x10/0x10 [ 292.313914][ T8360] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 292.313947][ T8360] __x64_sys_openat+0x12d/0x210 [ 292.313980][ T8360] ? __pfx___x64_sys_openat+0x10/0x10 [ 292.314071][ T8360] do_syscall_64+0x115/0x840 [ 292.314093][ T8360] ? clear_bhb_loop+0x40/0x90 [ 292.314122][ T8360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.314146][ T8360] RIP: 0033:0x7fd23f39ce59 [ 292.314167][ T8360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.314190][ T8360] RSP: 002b:00007fd240281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 292.314213][ T8360] RAX: ffffffffffffffda RBX: 00007fd23f616090 RCX: 00007fd23f39ce59 [ 292.314251][ T8360] RDX: 0000000000048b00 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 292.314274][ T8360] RBP: 00007fd23f432e6f R08: 0000000000000000 R09: 0000000000000000 [ 292.314297][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.314311][ T8360] R13: 00007fd23f616128 R14: 00007fd23f616090 R15: 00007ffd312ab778 [ 292.314342][ T8360] [ 292.756983][ T8360] hub 16-0:1.0: hub_ext_port_status failed (err = -12) [ 293.556126][ T5802] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 294.768967][ T8404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.383'. [ 294.847304][ T5802] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 294.922870][ T8404] HfR: entered allmulticast mode [ 295.570471][ T7421] Bluetooth: hci3: command 0x2016 tx timeout [ 295.590319][ T5885] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 296.427307][ T8434] zswap: compressor not available [ 296.917899][ T8423] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 296.925998][ T8423] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 296.938544][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout [ 296.947594][ T8423] CPU: 0 UID: 0 PID: 8423 Comm: kworker/u11:4 Not tainted syzkaller #0 PREEMPT(full) [ 296.947639][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.947661][ T8423] Workqueue: hci0 hci_rx_work [ 296.947720][ T8423] Call Trace: [ 296.947731][ T8423] [ 296.947745][ T8423] dump_stack_lvl+0x100/0x190 [ 296.947792][ T8423] sysfs_warn_dup.cold+0x1c/0x28 [ 296.947846][ T8423] sysfs_create_dir_ns+0x24b/0x2b0 [ 296.947898][ T8423] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 296.947948][ T8423] ? find_held_lock+0x2b/0x80 [ 296.947991][ T8423] ? kobject_add_internal+0x25f/0x930 [ 296.948034][ T8423] ? kobject_add_internal+0x25f/0x930 [ 296.948086][ T8423] ? do_raw_spin_unlock+0x145/0x1e0 [ 296.948130][ T8423] kobject_add_internal+0x2c8/0x930 [ 296.948182][ T8423] kobject_add+0x16a/0x1e0 [ 296.948230][ T8423] ? __pfx_kobject_add+0x10/0x10 [ 296.948272][ T8423] ? class_to_subsys+0x10f/0x150 [ 296.948334][ T8423] ? kobject_put+0xb9/0x640 [ 296.948372][ T8423] ? _raw_spin_unlock+0x28/0x50 [ 296.948440][ T8423] device_add+0x294/0x1970 [ 296.948494][ T8423] ? __pfx_dev_set_name+0x10/0x10 [ 296.948529][ T8423] ? __pfx_device_add+0x10/0x10 [ 296.948582][ T8423] ? mgmt_send_event_skb+0x2fb/0x460 [ 296.948651][ T8423] hci_conn_add_sysfs+0x1a3/0x260 [ 296.948691][ T8423] le_conn_complete_evt+0x11eb/0x1f60 [ 296.948759][ T8423] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 296.948813][ T8423] ? __pfx_bt_warn+0x10/0x10 [ 296.948847][ T8423] ? hci_event_packet+0x186/0xcd0 [ 296.948908][ T8423] hci_le_conn_complete_evt+0x23c/0x3a0 [ 296.948967][ T8423] ? skb_pull_data+0x15f/0x1e0 [ 296.949024][ T8423] hci_le_meta_evt+0x34a/0x5f0 [ 296.949059][ T8423] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 296.949123][ T8423] hci_event_packet+0x51c/0xcd0 [ 296.949180][ T8423] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 296.949215][ T8423] ? __pfx_hci_event_packet+0x10/0x10 [ 296.949270][ T8423] ? kcov_remote_start+0x384/0x670 [ 296.949321][ T8423] ? lockdep_hardirqs_on+0x78/0x100 [ 296.949395][ T8423] hci_rx_work+0x451/0xfc0 [ 296.949459][ T8423] process_one_work+0xa23/0x1940 [ 296.949531][ T8423] ? __pfx_process_one_work+0x10/0x10 [ 296.949596][ T8423] ? __pfx_hci_rx_work+0x10/0x10 [ 296.949655][ T8423] worker_thread+0x5ef/0xe50 [ 296.949719][ T8423] ? __pfx_worker_thread+0x10/0x10 [ 296.949774][ T8423] ? kthread+0x13a/0x450 [ 296.949819][ T8423] ? __pfx_worker_thread+0x10/0x10 [ 296.949866][ T8423] kthread+0x370/0x450 [ 296.949911][ T8423] ? __pfx_kthread+0x10/0x10 [ 296.949963][ T8423] ret_from_fork+0x72b/0xd50 [ 296.950009][ T8423] ? __pfx_ret_from_fork+0x10/0x10 [ 296.950062][ T8423] ? __switch_to+0x800/0x10f0 [ 296.950094][ T8423] ? __switch_to_asm+0x39/0x70 [ 296.950146][ T8423] ? __pfx_kthread+0x10/0x10 [ 296.950198][ T8423] ret_from_fork_asm+0x1a/0x30 [ 296.950272][ T8423] [ 297.237748][ T8423] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 297.253943][ T8423] Bluetooth: hci0: failed to register connection device [ 297.650087][ T5802] Bluetooth: hci3: command 0x2016 tx timeout [ 297.656202][ T8423] Bluetooth: hci0: command 0x2016 tx timeout [ 299.015053][ T7421] Bluetooth: hci2: command 0x0c1a tx timeout [ 299.325693][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 299.730033][ T5819] Bluetooth: hci0: command 0x2016 tx timeout [ 300.237999][ T5819] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 300.422220][ T8479] bond0: option slaves: interface -]=,Do does not exist! [ 300.494501][ T8496] misc userio: No port type given on /dev/userio [ 300.625026][ T8498] netlink: 186 bytes leftover after parsing attributes in process `syz.3.405'. [ 300.674262][ T8496] can: request_module (can-proto-5) failed. [ 301.638580][ T8525] netlink: 330 bytes leftover after parsing attributes in process `syz.2.413'. [ 301.808393][ T5819] Bluetooth: hci0: command 0x2016 tx timeout [ 302.288926][ T7421] Bluetooth: hci1: command 0x2016 tx timeout [ 302.426149][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.417'. [ 303.890962][ T5885] Bluetooth: hci0: command 0x2016 tx timeout [ 304.368250][ T5885] Bluetooth: hci1: command 0x2016 tx timeout [ 305.242838][ T8573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'. [ 305.317373][ T7421] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 305.877373][ T8588] netlink: 334 bytes leftover after parsing attributes in process `syz.3.426'. [ 307.408496][ T5885] Bluetooth: hci1: command 0x2016 tx timeout [ 309.263721][ T8640] No such timeout policy "" [ 309.269069][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.435'. [ 309.396725][ T7421] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 309.415722][ T7421] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 309.425450][ T7421] CPU: 0 UID: 0 PID: 7421 Comm: kworker/u11:3 Not tainted syzkaller #0 PREEMPT(full) [ 309.425494][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.425529][ T7421] Workqueue: hci1 hci_rx_work [ 309.425590][ T7421] Call Trace: [ 309.425601][ T7421] [ 309.425613][ T7421] dump_stack_lvl+0x100/0x190 [ 309.425660][ T7421] sysfs_warn_dup.cold+0x1c/0x28 [ 309.425712][ T7421] sysfs_create_dir_ns+0x24b/0x2b0 [ 309.425764][ T7421] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 309.425814][ T7421] ? find_held_lock+0x2b/0x80 [ 309.425856][ T7421] ? kobject_add_internal+0x25f/0x930 [ 309.425899][ T7421] ? kobject_add_internal+0x25f/0x930 [ 309.425946][ T7421] ? do_raw_spin_unlock+0x145/0x1e0 [ 309.425996][ T7421] kobject_add_internal+0x2c8/0x930 [ 309.426046][ T7421] kobject_add+0x16a/0x1e0 [ 309.426088][ T7421] ? __pfx_kobject_add+0x10/0x10 [ 309.426129][ T7421] ? class_to_subsys+0x10f/0x150 [ 309.426189][ T7421] ? kobject_put+0xb9/0x640 [ 309.426224][ T7421] ? _raw_spin_unlock+0x28/0x50 [ 309.426280][ T7421] device_add+0x294/0x1970 [ 309.426332][ T7421] ? __pfx_dev_set_name+0x10/0x10 [ 309.426365][ T7421] ? __pfx_device_add+0x10/0x10 [ 309.426416][ T7421] ? mgmt_send_event_skb+0x2fb/0x460 [ 309.426481][ T7421] hci_conn_add_sysfs+0x1a3/0x260 [ 309.426524][ T7421] le_conn_complete_evt+0x11eb/0x1f60 [ 309.426591][ T7421] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 309.426647][ T7421] ? __pfx_bt_warn+0x10/0x10 [ 309.426682][ T7421] ? hci_event_packet+0x186/0xcd0 [ 309.426747][ T7421] hci_le_conn_complete_evt+0x23c/0x3a0 [ 309.426806][ T7421] ? skb_pull_data+0x15f/0x1e0 [ 309.426865][ T7421] hci_le_meta_evt+0x34a/0x5f0 [ 309.426901][ T7421] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 309.426973][ T7421] hci_event_packet+0x51c/0xcd0 [ 309.427039][ T7421] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 309.427076][ T7421] ? __pfx_hci_event_packet+0x10/0x10 [ 309.427140][ T7421] ? kcov_remote_start+0x384/0x670 [ 309.427192][ T7421] ? lockdep_hardirqs_on+0x78/0x100 [ 309.427257][ T7421] hci_rx_work+0x451/0xfc0 [ 309.427319][ T7421] process_one_work+0xa23/0x1940 [ 309.427388][ T7421] ? __pfx_process_one_work+0x10/0x10 [ 309.427451][ T7421] ? __pfx_hci_rx_work+0x10/0x10 [ 309.427505][ T7421] worker_thread+0x5ef/0xe50 [ 309.427558][ T7421] ? __pfx_worker_thread+0x10/0x10 [ 309.427603][ T7421] ? kthread+0x13a/0x450 [ 309.427641][ T7421] ? __pfx_worker_thread+0x10/0x10 [ 309.427683][ T7421] kthread+0x370/0x450 [ 309.427721][ T7421] ? __pfx_kthread+0x10/0x10 [ 309.427763][ T7421] ret_from_fork+0x72b/0xd50 [ 309.427802][ T7421] ? __pfx_ret_from_fork+0x10/0x10 [ 309.427839][ T7421] ? rcu_is_watching+0x12/0xc0 [ 309.427875][ T7421] ? __switch_to+0x800/0x10f0 [ 309.427900][ T7421] ? __switch_to_asm+0x39/0x70 [ 309.427943][ T7421] ? __pfx_kthread+0x10/0x10 [ 309.427997][ T7421] ret_from_fork_asm+0x1a/0x30 [ 309.428059][ T7421] [ 309.714444][ T7421] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 309.729727][ T7421] Bluetooth: hci1: failed to register connection device [ 309.737738][ T7421] Bluetooth: hci1: command 0x2016 tx timeout [ 310.133949][ T8643] openvswitch: HfR: Dropping previously announced user features [ 310.801827][ T8652] misc userio: No port type given on /dev/userio [ 310.999104][ T8655] netlink: 186 bytes leftover after parsing attributes in process `syz.2.439'. [ 311.058871][ T8652] can: request_module (can-proto-5) failed. [ 311.367617][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'. [ 311.808563][ T5885] Bluetooth: hci1: command 0x2016 tx timeout [ 312.937991][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.447'. [ 313.024424][ T8684] HfR: entered allmulticast mode [ 313.041135][ T7421] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 313.888872][ T7421] Bluetooth: hci1: command 0x2016 tx timeout [ 314.577997][ T8700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.452'. [ 314.643210][ T5885] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 314.845780][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 315.090848][ T5819] Bluetooth: hci3: command 0x2016 tx timeout [ 315.646032][ T30] audit: type=1800 audit(1782635723.835:6): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.460" name="members" dev="configfs" ino=26735 res=0 errno=0 [ 316.424892][ T8743] No such timeout policy "" [ 316.688431][ T7421] Bluetooth: hci1: command 0x2016 tx timeout [ 316.828722][ T8752] futex_wake_op: syz.1.464 tries to shift op by -2048; fix this program [ 317.169133][ T5885] Bluetooth: hci3: command 0x2016 tx timeout [ 317.378847][ T8763] FAULT_INJECTION: forcing a failure. [ 317.378847][ T8763] name failslab, interval 1, probability 0, space 0, times 0 [ 317.430841][ T8763] CPU: 1 UID: 0 PID: 8763 Comm: syz.3.466 Not tainted syzkaller #0 PREEMPT(full) [ 317.430891][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.430912][ T8763] Call Trace: [ 317.430924][ T8763] [ 317.430938][ T8763] dump_stack_lvl+0x100/0x190 [ 317.430990][ T8763] should_fail_ex.cold+0x5/0xa [ 317.431037][ T8763] should_failslab+0xc2/0x120 [ 317.431089][ T8763] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 317.431141][ T8763] ? cache_create_net+0x2b/0x1f0 [ 317.431187][ T8763] ? __pfx_nfsd_net_init+0x10/0x10 [ 317.431236][ T8763] kmemdup_noprof+0x29/0x60 [ 317.431279][ T8763] cache_create_net+0x2b/0x1f0 [ 317.431320][ T8763] ? __pfx_nfsd_net_init+0x10/0x10 [ 317.431367][ T8763] nfsd_export_init+0x62/0x250 [ 317.431428][ T8763] ? __pfx_nfsd_net_init+0x10/0x10 [ 317.431477][ T8763] nfsd_net_init+0x69/0x3e0 [ 317.431528][ T8763] ? __pfx_nfsd_net_init+0x10/0x10 [ 317.431576][ T8763] ops_init+0x1e2/0x5f0 [ 317.431624][ T8763] setup_net+0x118/0x3a0 [ 317.431668][ T8763] ? __pfx_setup_net+0x10/0x10 [ 317.431713][ T8763] ? mutex_init_lockdep+0xf1/0x120 [ 317.431756][ T8763] copy_net_ns+0x46f/0x7c0 [ 317.431808][ T8763] create_new_namespaces+0x3ea/0xac0 [ 317.431857][ T8763] unshare_nsproxy_namespaces+0xf2/0x220 [ 317.431910][ T8763] ksys_unshare+0x438/0xab0 [ 317.431960][ T8763] ? __pfx_ksys_unshare+0x10/0x10 [ 317.432022][ T8763] __x64_sys_unshare+0x31/0x40 [ 317.432068][ T8763] do_syscall_64+0x115/0x840 [ 317.432099][ T8763] ? clear_bhb_loop+0x40/0x90 [ 317.432141][ T8763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.432175][ T8763] RIP: 0033:0x7fd631b9ce59 [ 317.432202][ T8763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.432237][ T8763] RSP: 002b:00007fd632a8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 317.432282][ T8763] RAX: ffffffffffffffda RBX: 00007fd631e15fa0 RCX: 00007fd631b9ce59 [ 317.432305][ T8763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 317.432327][ T8763] RBP: 00007fd631c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 317.432349][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.432370][ T8763] R13: 00007fd631e16038 R14: 00007fd631e15fa0 R15: 00007ffcb44e46b8 [ 317.432417][ T8763] [ 317.693965][ T8764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.465'. [ 317.750052][ T5819] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 318.776416][ T5885] Bluetooth: hci1: command 0x2016 tx timeout [ 319.322165][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 319.390297][ T8784] nbd: must specify a size in bytes for the device [ 319.809101][ T5819] Bluetooth: hci3: command 0x2016 tx timeout [ 319.961256][ T8789] FAULT_INJECTION: forcing a failure. [ 319.961256][ T8789] name fail_futex, interval 1, probability 0, space 0, times 1 [ 319.988671][ T8789] CPU: 0 UID: 0 PID: 8789 Comm: syz.0.473 Not tainted syzkaller #0 PREEMPT(full) [ 319.988716][ T8789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.988747][ T8789] Call Trace: [ 319.988758][ T8789] [ 319.988772][ T8789] dump_stack_lvl+0x100/0x190 [ 319.988822][ T8789] should_fail_ex.cold+0x5/0xa [ 319.988867][ T8789] get_futex_key+0x295/0x14f0 [ 319.988908][ T8789] ? __pfx_get_futex_key+0x10/0x10 [ 319.988945][ T8789] ? lock_acquire+0x1b9/0x370 [ 319.988987][ T8789] futex_wake+0xf4/0x5e0 [ 319.989039][ T8789] ? __pfx_futex_wake+0x10/0x10 [ 319.989085][ T8789] ? find_held_lock+0x2b/0x80 [ 319.989132][ T8789] ? exit_mm_release+0x19/0x30 [ 319.989184][ T8789] do_futex+0x2b2/0x440 [ 319.989222][ T8789] ? __pfx_do_futex+0x10/0x10 [ 319.989257][ T8789] ? __might_fault+0xc5/0x140 [ 319.989304][ T8789] mm_release+0x24a/0x2f0 [ 319.989340][ T8789] do_exit+0x707/0x2ae0 [ 319.989394][ T8789] ? __pfx_do_exit+0x10/0x10 [ 319.989441][ T8789] ? do_raw_spin_lock+0x128/0x260 [ 319.989479][ T8789] ? find_held_lock+0x2b/0x80 [ 319.989520][ T8789] ? get_signal+0x7e0/0x21e0 [ 319.989565][ T8789] do_group_exit+0xd5/0x2a0 [ 319.989615][ T8789] get_signal+0x1ec7/0x21e0 [ 319.989670][ T8789] ? __pfx_get_signal+0x10/0x10 [ 319.989712][ T8789] ? do_futex+0x190/0x440 [ 319.989766][ T8789] arch_do_signal_or_restart+0x91/0x7a0 [ 319.989805][ T8789] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 319.989866][ T8789] exit_to_user_mode_loop+0x139/0x6f0 [ 319.989903][ T8789] ? rcu_is_watching+0x12/0xc0 [ 319.989950][ T8789] do_syscall_64+0x652/0x840 [ 319.989980][ T8789] ? clear_bhb_loop+0x40/0x90 [ 319.990024][ T8789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.990058][ T8789] RIP: 0033:0x7fd23f39ce59 [ 319.990087][ T8789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.990119][ T8789] RSP: 002b:00007fd2402a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 319.990152][ T8789] RAX: fffffffffffffe00 RBX: 00007fd23f615fa8 RCX: 00007fd23f39ce59 [ 319.990173][ T8789] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd23f615fa8 [ 319.990193][ T8789] RBP: 00007fd23f615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 319.990213][ T8789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.990233][ T8789] R13: 00007fd23f616038 R14: 00007ffd312ab690 R15: 00007ffd312ab778 [ 319.990275][ T8789] [ 321.890596][ T7421] Bluetooth: hci3: command 0x2016 tx timeout [ 322.621655][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.628801][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.861064][ T8819] openvswitch: HfR: Dropping previously announced user features [ 324.096524][ T30] audit: type=1800 audit(1782635732.285:7): pid=8825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.480" name="members" dev="configfs" ino=25952 res=0 errno=0 [ 325.199342][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.479'. [ 326.129369][ T8846] netlink: 186 bytes leftover after parsing attributes in process `syz.1.483'. [ 326.633040][ T8848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.484'. [ 326.703258][ T5819] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 328.000686][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'. [ 328.769006][ T7421] Bluetooth: hci1: command 0x2016 tx timeout [ 329.349847][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 330.311533][ T8904] netlink: 178 bytes leftover after parsing attributes in process `syz.0.499'. [ 330.848716][ T5819] Bluetooth: hci1: command 0x2016 tx timeout [ 332.235555][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'. [ 332.900517][ T8951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.509'. [ 332.968959][ T8951] bond0: (slave bond_slave_0): Releasing backup interface [ 333.167107][ T8956] netlink: 178 bytes leftover after parsing attributes in process `syz.3.511'. [ 335.393468][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 335.994235][ T30] audit: type=1800 audit(1782635744.185:8): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.518" name="dbroot" dev="configfs" ino=27588 res=0 errno=0 [ 336.165236][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.518'. [ 337.113450][ T8998] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 338.968757][ T9027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'. [ 339.021483][ T7421] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 340.143644][ T30] audit: type=1107 audit(1782635748.335:9): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 340.177228][ T30] audit: type=1107 audit(1782635748.365:10): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 340.376575][ T9059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 340.433421][ T7421] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 341.089761][ T5819] Bluetooth: hci0: command 0x2016 tx timeout [ 341.116894][ T9071] netlink: 'syz.0.533': attribute type 1 has an invalid length. [ 341.696585][ T9071] zswap: compressor 000 not available [ 342.528435][ T5885] Bluetooth: hci3: command 0x2016 tx timeout [ 343.168234][ T7421] Bluetooth: hci0: command 0x2016 tx timeout [ 344.608443][ T5819] Bluetooth: hci3: command 0x2016 tx timeout [ 345.567232][ T9118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.545'. [ 346.341349][ T9135] netlink: 330 bytes leftover after parsing attributes in process `syz.1.548'. [ 346.768581][ T5819] Bluetooth: hci3: command 0x2016 tx timeout [ 348.152593][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.551'. [ 348.357038][ T5885] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 348.791363][ T9160] vivid-008: ================= START STATUS ================= [ 348.804942][ T9160] vivid-008: ================== END STATUS ================== [ 349.189045][ T9160] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 349.473399][ T9158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.552'. [ 349.583724][ T5885] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 349.596306][ T5885] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 349.608332][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: kworker/u11:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.608374][ T5885] Tainted: [L]=SOFTLOCKUP [ 349.608383][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 349.608401][ T5885] Workqueue: hci0 hci_rx_work [ 349.608447][ T5885] Call Trace: [ 349.608458][ T5885] [ 349.608469][ T5885] dump_stack_lvl+0x100/0x190 [ 349.608506][ T5885] sysfs_warn_dup.cold+0x1c/0x28 [ 349.608546][ T5885] sysfs_create_dir_ns+0x24b/0x2b0 [ 349.608584][ T5885] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 349.608634][ T5885] ? find_held_lock+0x2b/0x80 [ 349.608668][ T5885] ? kobject_add_internal+0x25f/0x930 [ 349.608706][ T5885] ? kobject_add_internal+0x25f/0x930 [ 349.608741][ T5885] ? do_raw_spin_unlock+0x145/0x1e0 [ 349.608779][ T5885] kobject_add_internal+0x2c8/0x930 [ 349.608817][ T5885] kobject_add+0x16a/0x1e0 [ 349.608850][ T5885] ? __pfx_kobject_add+0x10/0x10 [ 349.608881][ T5885] ? class_to_subsys+0x10f/0x150 [ 349.608931][ T5885] ? kobject_put+0xb9/0x640 [ 349.608963][ T5885] ? _raw_spin_unlock+0x28/0x50 [ 349.609015][ T5885] device_add+0x294/0x1970 [ 349.609055][ T5885] ? __pfx_dev_set_name+0x10/0x10 [ 349.609082][ T5885] ? __pfx_device_add+0x10/0x10 [ 349.609127][ T5885] ? mgmt_send_event_skb+0x2fb/0x460 [ 349.609181][ T5885] hci_conn_add_sysfs+0x1a3/0x260 [ 349.609211][ T5885] le_conn_complete_evt+0x11eb/0x1f60 [ 349.609262][ T5885] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 349.610200][ T5885] ? __pfx_bt_warn+0x10/0x10 [ 349.610233][ T5885] ? hci_event_packet+0x186/0xcd0 [ 349.610284][ T5885] hci_le_conn_complete_evt+0x23c/0x3a0 [ 349.610935][ T5885] ? skb_pull_data+0x15f/0x1e0 [ 349.611001][ T5885] hci_le_meta_evt+0x34a/0x5f0 [ 349.611039][ T5885] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 349.611088][ T5885] hci_event_packet+0x51c/0xcd0 [ 349.611131][ T5885] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 349.611158][ T5885] ? __pfx_hci_event_packet+0x10/0x10 [ 349.611204][ T5885] ? kcov_remote_start+0x384/0x670 [ 349.611243][ T5885] ? lockdep_hardirqs_on+0x78/0x100 [ 349.611293][ T5885] hci_rx_work+0x451/0xfc0 [ 349.611343][ T5885] process_one_work+0xa23/0x1940 [ 349.611396][ T5885] ? __pfx_process_one_work+0x10/0x10 [ 349.611446][ T5885] ? __pfx_hci_rx_work+0x10/0x10 [ 349.611489][ T5885] worker_thread+0x5ef/0xe50 [ 349.611677][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 349.611781][ T5885] ? kthread+0x13a/0x450 [ 349.611815][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 349.611852][ T5885] kthread+0x370/0x450 [ 349.611885][ T5885] ? __pfx_kthread+0x10/0x10 [ 349.611922][ T5885] ret_from_fork+0x72b/0xd50 [ 349.611956][ T5885] ? __pfx_ret_from_fork+0x10/0x10 [ 349.611989][ T5885] ? __switch_to+0x800/0x10f0 [ 349.612017][ T5885] ? __switch_to_asm+0x39/0x70 [ 349.612056][ T5885] ? __pfx_kthread+0x10/0x10 [ 349.612092][ T5885] ret_from_fork_asm+0x1a/0x30 [ 349.612146][ T5885] [ 349.612278][ T5885] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 349.957544][ T5885] Bluetooth: hci0: failed to register connection device [ 350.370922][ T5885] Bluetooth: hci0: command 0x2016 tx timeout [ 352.486774][ T5885] Bluetooth: hci0: command 0x2016 tx timeout [ 353.063891][ T9220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.562'. [ 354.538298][ T5885] Bluetooth: hci0: command 0x2016 tx timeout [ 356.608348][ T5819] Bluetooth: hci0: command 0x2016 tx timeout [ 356.666362][ T9247] FAULT_INJECTION: forcing a failure. [ 356.666362][ T9247] name fail_futex, interval 1, probability 0, space 0, times 0 [ 356.765705][ T9247] CPU: 1 UID: 0 PID: 9247 Comm: syz.0.577 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.765763][ T9247] Tainted: [L]=SOFTLOCKUP [ 356.765776][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.765796][ T9247] Call Trace: [ 356.765808][ T9247] [ 356.765823][ T9247] dump_stack_lvl+0x100/0x190 [ 356.765877][ T9247] should_fail_ex.cold+0x5/0xa [ 356.765929][ T9247] get_futex_key+0x1d2/0x14f0 [ 356.765972][ T9247] ? __pfx_get_futex_key+0x10/0x10 [ 356.766008][ T9247] ? find_held_lock+0x2b/0x80 [ 356.766054][ T9247] ? futex_wake+0x4ea/0x5e0 [ 356.766120][ T9247] futex_wake+0xf4/0x5e0 [ 356.766162][ T9247] ? futex_wait+0x11e/0x370 [ 356.766212][ T9247] ? __pfx_futex_wake+0x10/0x10 [ 356.766262][ T9247] ? vfs_read+0x243/0xb40 [ 356.766303][ T9247] do_futex+0x2b2/0x440 [ 356.766343][ T9247] ? __pfx_do_futex+0x10/0x10 [ 356.766379][ T9247] ? __fget_files+0x215/0x3d0 [ 356.766421][ T9247] __x64_sys_futex+0x34f/0x4d0 [ 356.766463][ T9247] ? __x64_sys_close_range+0x30f/0x5d0 [ 356.766500][ T9247] ? __pfx___x64_sys_futex+0x10/0x10 [ 356.766540][ T9247] ? __pfx___x64_sys_close_range+0x10/0x10 [ 356.766589][ T9247] do_syscall_64+0x115/0x840 [ 356.766621][ T9247] ? clear_bhb_loop+0x40/0x90 [ 356.766665][ T9247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.766701][ T9247] RIP: 0033:0x7fd23f39ce59 [ 356.766729][ T9247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.766762][ T9247] RSP: 002b:00007fd2402a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 356.766797][ T9247] RAX: ffffffffffffffda RBX: 00007fd23f615fa8 RCX: 00007fd23f39ce59 [ 356.766820][ T9247] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd23f615fac [ 356.766842][ T9247] RBP: 00007fd23f615fa0 R08: 0000000000000001 R09: 0000000000000000 [ 356.766864][ T9247] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 356.766886][ T9247] R13: 00007fd23f616038 R14: 00007ffd312ab690 R15: 00007ffd312ab778 [ 356.766929][ T9247] [ 357.086667][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 359.643997][ T9282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.579'. [ 359.709140][ T5819] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 360.541943][ T5819] Bluetooth: hci1: command 0x2016 tx timeout [ 361.728558][ T7421] Bluetooth: hci0: command 0x2016 tx timeout [ 363.812187][ T5885] Bluetooth: hci0: command 0x2016 tx timeout [ 363.882514][ T9322] syz.3.587(9322): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 363.939045][ T9322] capability: warning: `syz.3.587' uses 32-bit capabilities (legacy support in use) [ 366.071815][ T7421] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 368.128345][ T7421] Bluetooth: hci0: command 0x2016 tx timeout [ 368.636353][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 369.002971][ T5885] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 370.220856][ T5885] Bluetooth: hci0: command 0x2016 tx timeout [ 371.089065][ T5819] Bluetooth: hci1: command 0x2016 tx timeout [ 373.179525][ T5885] Bluetooth: hci1: command 0x2016 tx timeout [ 374.319773][ T9426] hub 1-0:1.0: USB hub found [ 374.351399][ T9426] hub 1-0:1.0: 1 port detected [ 375.114562][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.195368][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.209722][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.228474][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.241831][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 376.366875][ T9448] openvswitch: HfR: Dropping previously announced user features [ 376.725359][ T9436] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.733776][ T9436] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.741353][ T9436] bridge_slave_0: entered allmulticast mode [ 376.751485][ T9436] bridge_slave_0: entered promiscuous mode [ 376.763398][ T9436] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.774542][ T9436] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.792777][ T9436] bridge_slave_1: entered allmulticast mode [ 376.812587][ T9436] bridge_slave_1: entered promiscuous mode [ 376.844682][ T9453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.612'. [ 376.884684][ T9436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.950929][ T9436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.041196][ T9436] team0: Port device team_slave_0 added [ 377.053473][ T9436] team0: Port device team_slave_1 added [ 377.099842][ T9436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.109006][ T9436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.137565][ T9436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.152989][ T9436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.161763][ T9436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.196245][ T9436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.280233][ T9436] hsr_slave_0: entered promiscuous mode [ 377.288020][ T9436] hsr_slave_1: entered promiscuous mode [ 377.301007][ T9436] debugfs: 'hsr0' already exists in 'hsr' [ 377.317548][ T9436] Cannot create hsr debugfs directory [ 377.328285][ T5819] Bluetooth: hci4: command tx timeout [ 377.803522][ T9436] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.833603][ T9436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.852964][ T9436] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.880076][ T9436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.893466][ T9436] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 377.910311][ T9436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.926801][ T9436] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.942764][ T9436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.112810][ T9436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.161971][ T9436] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.182118][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.189619][ T5810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.225957][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.233695][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.356955][ T9436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.409787][ T5819] Bluetooth: hci4: command tx timeout [ 380.038658][ T9436] veth0_vlan: entered promiscuous mode [ 380.082277][ T9436] veth1_vlan: entered promiscuous mode [ 380.171525][ T9436] veth0_macvtap: entered promiscuous mode [ 380.320018][ T9436] veth1_macvtap: entered promiscuous mode [ 380.392674][ T9436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.438018][ T9436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.500592][ T5810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.534849][ T5810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.559413][ T5810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.599968][ T5810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.799549][ T5807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.828986][ T5807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.896543][ T5810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.914181][ T5810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.154862][ T9499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.618'. [ 381.203114][ T5819] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 381.488507][ T5819] Bluetooth: hci4: command tx timeout [ 381.791569][ T9510] smpboot: CPU 1 is now offline [ 382.693404][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.700037][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.249669][ T5885] Bluetooth: hci2: command 0x0c1a tx timeout [ 383.358380][ T7421] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 383.385819][ T7421] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.396694][ T7421] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.413989][ T7421] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.423190][ T7421] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.573421][ T7421] Bluetooth: hci4: command tx timeout [ 385.104497][ T9535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.624'. [ 385.153842][ T7421] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 385.329390][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 385.488612][ T5885] Bluetooth: hci5: command tx timeout [ 386.080884][ T9545] vivid-007: ================= START STATUS ================= [ 386.141434][ T9545] vivid-007: Generate PTS: true [ 386.155103][ T9525] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.182379][ T9525] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.199201][ T9545] vivid-007: Generate SCR: true [ 386.214111][ T9525] bridge_slave_0: entered allmulticast mode [ 386.239984][ T9545] tpg source WxH: 320x240 (Y'CbCr) [ 386.248245][ T9525] bridge_slave_0: entered promiscuous mode [ 386.279461][ T9545] tpg field: 1 [ 386.286608][ T9525] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.317875][ T9525] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.325670][ T9545] tpg crop: (0,0)/320x240 [ 386.342246][ T9525] bridge_slave_1: entered allmulticast mode [ 386.361976][ T9545] tpg compose: (0,0)/320x240 [ 386.373447][ T9525] bridge_slave_1: entered promiscuous mode [ 386.392269][ T9545] tpg colorspace: 8 [ 386.429324][ T9545] tpg transfer function: 0/0 [ 386.452690][ T9545] tpg Y'CbCr encoding: 0/0 [ 386.473755][ T9545] tpg quantization: 0/0 [ 386.493235][ T9545] tpg RGB range: 0/2 [ 386.511044][ T9525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.522823][ T9545] vivid-007: ================== END STATUS ================== [ 386.549366][ T9551] vivid-007: ================= START STATUS ================= [ 386.562258][ T9525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.580440][ T9551] vivid-007: Generate PTS: true [ 386.593324][ T9551] vivid-007: Generate SCR: true [ 386.630102][ T9551] tpg source WxH: 320x240 (Y'CbCr) [ 386.653319][ T9551] tpg field: 1 [ 386.666040][ T9551] tpg crop: (0,0)/320x240 [ 386.679267][ T9551] tpg compose: (0,0)/320x240 [ 386.710023][ T9551] tpg colorspace: 8 [ 386.724434][ T9551] tpg transfer function: 0/0 [ 386.731304][ T9525] team0: Port device team_slave_0 added [ 386.741031][ T9551] tpg Y'CbCr encoding: 0/0 [ 386.756487][ T9525] team0: Port device team_slave_1 added [ 386.768548][ T9551] tpg quantization: 0/0 [ 386.777715][ T9551] tpg RGB range: 0/2 [ 386.792212][ T9551] vivid-007: ================== END STATUS ================== [ 386.911475][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.942392][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.027363][ T9525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.086763][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.134805][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.178689][ T7421] Bluetooth: hci4: command 0x2016 tx timeout [ 387.258622][ T9525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.456557][ T9525] hsr_slave_0: entered promiscuous mode [ 387.471455][ T9525] hsr_slave_1: entered promiscuous mode [ 387.492928][ T9525] debugfs: 'hsr0' already exists in 'hsr' [ 387.506261][ T9525] Cannot create hsr debugfs directory [ 387.568267][ T5885] Bluetooth: hci5: command tx timeout [ 388.254311][ T9576] netlink: 186 bytes leftover after parsing attributes in process `syz.0.631'. [ 388.290553][ T9576] netlink: 186 bytes leftover after parsing attributes in process `syz.0.631'. [ 388.572824][ T9525] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 388.591339][ T9525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.630709][ T9525] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 388.646422][ T9525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.675453][ T9525] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 388.707548][ T9525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.741400][ T9525] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 388.761202][ T9525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.140286][ T9525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.200612][ T9525] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.217086][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.224391][ T5800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.253502][ T5885] Bluetooth: hci4: command 0x2016 tx timeout [ 389.292867][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.300284][ T5800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.648467][ T7421] Bluetooth: hci5: command tx timeout [ 389.985248][ T9525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.452180][ T5885] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 390.477641][ T5885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 390.486983][ T5885] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 390.501889][ T5885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 390.516931][ T5885] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 390.933815][ T9525] veth0_vlan: entered promiscuous mode [ 390.971556][ T9525] veth1_vlan: entered promiscuous mode [ 391.082543][ T9525] veth0_macvtap: entered promiscuous mode [ 391.130245][ T9525] veth1_macvtap: entered promiscuous mode [ 391.220236][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.283857][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.360265][ T5826] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.403027][ T5826] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.473650][ T5826] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.520884][ T5826] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.731888][ T7421] Bluetooth: hci5: command tx timeout [ 391.863581][ T5807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.899340][ T5807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.013543][ T5810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.036859][ T5810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.609350][ T7421] Bluetooth: hci6: command tx timeout [ 392.843915][ T9619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.622'. [ 392.949865][ T7421] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 392.996707][ T9602] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.030811][ T9602] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.072333][ T9602] bridge_slave_0: entered allmulticast mode [ 393.087871][ T9602] bridge_slave_0: entered promiscuous mode [ 393.125489][ T9602] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.152194][ T9602] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.200591][ T9602] bridge_slave_1: entered allmulticast mode [ 393.239757][ T9602] bridge_slave_1: entered promiscuous mode [ 393.401336][ T9602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.462996][ T9602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.642153][ T9602] team0: Port device team_slave_0 added [ 393.692854][ T9602] team0: Port device team_slave_1 added [ 393.848158][ T9602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.879430][ T9602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.983132][ T9602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.025279][ T9602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.055744][ T9602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.141686][ T9602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.392252][ T9602] hsr_slave_0: entered promiscuous mode [ 394.419599][ T9602] hsr_slave_1: entered promiscuous mode [ 394.433399][ T9602] debugfs: 'hsr0' already exists in 'hsr' [ 394.447798][ T9602] Cannot create hsr debugfs directory [ 394.690162][ T7421] Bluetooth: hci6: command tx timeout [ 395.013181][ T7421] Bluetooth: hci5: command 0x2016 tx timeout [ 395.743092][ T9602] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 395.768346][ T9602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.789459][ T9602] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 395.801975][ T9633] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 395.823726][ T9602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.833990][ T9633] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 395.854148][ T9633] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 395.878625][ T9633] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 395.909661][ T9633] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 395.933444][ T9633] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 395.949341][ T9633] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 395.957178][ T9602] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 395.967522][ T9633] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 396.000566][ T9602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.009740][ T9633] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 396.033179][ T9602] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 396.077283][ T9633] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 396.099595][ T9633] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 396.107816][ T9602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 396.117265][ T9633] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 396.195323][ T9633] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 396.214720][ T9633] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 396.231416][ T9633] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 396.358847][ T9602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.405345][ T9602] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.433331][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.440769][ T6279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.510549][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.517840][ T6279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.046069][ T9645] ovs_: entered promiscuous mode [ 397.169959][ T5885] Bluetooth: hci0: command 0x2016 tx timeout [ 397.888697][ T7421] Bluetooth: hci2: command 0x0c1a tx timeout [ 397.895490][ T5885] Bluetooth: hci3: command 0x2016 tx timeout [ 397.970665][ T5885] Bluetooth: hci4: command 0x2016 tx timeout [ 397.982104][ T7421] Bluetooth: hci1: command 0x2016 tx timeout [ 398.050368][ T9602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.129143][ T5885] Bluetooth: hci5: command 0x2016 tx timeout [ 398.208568][ T5885] Bluetooth: hci6: command 0x0419 tx timeout [ 399.093727][ T9602] veth0_vlan: entered promiscuous mode [ 399.146484][ T9602] veth1_vlan: entered promiscuous mode [ 399.511466][ T9602] veth0_macvtap: entered promiscuous mode [ 399.573938][ T9602] veth1_macvtap: entered promiscuous mode [ 399.732388][ T9659] kexec: Could not allocate control_code_buffer [ 399.916108][ T9602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.972704][ T5885] Bluetooth: hci3: command 0x2016 tx timeout [ 400.036485][ T9602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.049417][ T5885] Bluetooth: hci4: command 0x2016 tx timeout [ 400.056400][ T7421] Bluetooth: hci1: command 0x2016 tx timeout [ 400.110451][ T5826] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.140864][ T5826] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.194455][ T5826] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.213236][ T5885] Bluetooth: hci5: command 0x2016 tx timeout [ 400.247520][ T5826] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.298207][ T5885] Bluetooth: hci6: command 0x0419 tx timeout [ 400.594234][ T5810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.659916][ T5810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.763464][ T5810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.786784][ T5810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.554198][ T9676] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 402.128659][ T5885] Bluetooth: hci4: command 0x2016 tx timeout [ 402.290328][ T5885] Bluetooth: hci5: command 0x2016 tx timeout [ 402.368593][ T5885] Bluetooth: hci6: command 0x0419 tx timeout [ 402.745585][ T7421] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 402.762068][ T7421] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 402.773714][ T7421] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 402.800341][ T7421] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 402.814917][ T7421] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 404.394061][ T9717] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 404.463727][ T7421] Bluetooth: hci6: command 0x0419 tx timeout [ 404.932151][ T7421] Bluetooth: hci7: command tx timeout [ 405.354674][ T9723] HfR: entered promiscuous mode [ 405.752127][ T5885] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 405.773756][ T5885] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 405.787300][ T5885] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 405.800118][ T5885] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 405.812716][ T5885] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 406.656231][ T9698] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.697672][ T9698] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.737241][ T9698] bridge_slave_0: entered allmulticast mode [ 406.775627][ T9698] bridge_slave_0: entered promiscuous mode [ 406.823322][ T9698] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.845063][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.649'. [ 406.870836][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.905255][ T9698] bridge_slave_1: entered allmulticast mode [ 406.962795][ T9698] bridge_slave_1: entered promiscuous mode [ 407.009081][ T5885] Bluetooth: hci7: command tx timeout [ 407.336883][ T9698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.403342][ T9698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.592416][ T9698] team0: Port device team_slave_0 added [ 407.654906][ T9698] team0: Port device team_slave_1 added [ 407.785955][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.822741][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.897555][ T5885] Bluetooth: hci8: command tx timeout [ 407.979824][ T9698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.048943][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.091735][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.236439][ T9698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.656164][ T9698] hsr_slave_0: entered promiscuous mode [ 408.707753][ T9698] hsr_slave_1: entered promiscuous mode [ 408.727384][ T9698] debugfs: 'hsr0' already exists in 'hsr' [ 408.748916][ T9698] Cannot create hsr debugfs directory [ 409.089817][ T5885] Bluetooth: hci7: command tx timeout [ 409.932614][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.651'. [ 409.968321][ T5885] Bluetooth: hci8: command tx timeout [ 410.613947][ T9728] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.623012][ T9728] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.632777][ T9728] bridge_slave_0: entered allmulticast mode [ 410.642941][ T9728] bridge_slave_0: entered promiscuous mode [ 410.657923][ T9698] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 410.670259][ T9698] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.680804][ T9728] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.695845][ T9728] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.705186][ T9728] bridge_slave_1: entered allmulticast mode [ 410.714084][ T9728] bridge_slave_1: entered promiscuous mode [ 410.722787][ T9698] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 410.735687][ T9698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.763707][ T9698] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 410.793471][ T9698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.821494][ T9698] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 410.834296][ T9698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.853188][ T9728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.880976][ T9728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.953411][ T9728] team0: Port device team_slave_0 added [ 410.967958][ T9728] team0: Port device team_slave_1 added [ 411.025333][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.033781][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.061115][ T9728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.076621][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.085124][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.117638][ T9728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.169448][ T5885] Bluetooth: hci7: command tx timeout [ 411.213004][ T9728] hsr_slave_0: entered promiscuous mode [ 411.220573][ T9728] hsr_slave_1: entered promiscuous mode [ 411.227524][ T9728] debugfs: 'hsr0' already exists in 'hsr' [ 411.234327][ T9728] Cannot create hsr debugfs directory [ 411.474344][ T9698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.544851][ T9698] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.592151][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.600414][ T5810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.677561][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.685630][ T5810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.044842][ T9728] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 412.052864][ T5885] Bluetooth: hci8: command tx timeout [ 412.076714][ T9728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.102114][ T9728] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 412.139864][ T9728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.163886][ T9728] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 412.195002][ T9728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.232846][ T9728] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 412.262537][ T9728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.547656][ T9728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.597813][ T9728] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.640879][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.649101][ T5811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.695631][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.703622][ T5811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.562463][ T9698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.129360][ T5885] Bluetooth: hci8: command tx timeout [ 414.407131][ T9728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.496280][ T9698] veth0_vlan: entered promiscuous mode [ 414.548515][ T9698] veth1_vlan: entered promiscuous mode [ 414.639727][ T9698] veth0_macvtap: entered promiscuous mode [ 414.685928][ T9698] veth1_macvtap: entered promiscuous mode [ 414.754650][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.829552][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.878977][ T5800] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.909286][ T5800] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.010730][ T5800] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.082926][ T5800] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.307396][ T5811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.345519][ T5811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.448997][ T6279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.506046][ T9728] veth0_vlan: entered promiscuous mode [ 415.514386][ T6279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.549673][ T9728] veth1_vlan: entered promiscuous mode [ 415.677907][ T9728] veth0_macvtap: entered promiscuous mode [ 415.715796][ T9728] veth1_macvtap: entered promiscuous mode [ 415.827833][ T9728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.893541][ T9728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.960306][ T5826] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.006152][ T5826] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.039974][ T5826] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.080151][ T5826] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.424741][ T5800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.467100][ T5800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.577237][ T5826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.632953][ T5826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.927815][ T7421] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 417.951833][ T7421] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 417.978433][ T7421] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 418.001345][ T7421] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 418.010744][ T7421] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 418.532329][ T6279] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.401999][ T6279] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.483537][ T5885] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 419.503129][ T5885] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 419.520140][ T5885] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 419.542026][ T5885] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 419.550414][ T5885] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 420.040210][ T6279] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.128803][ T5885] Bluetooth: hci8: command tx timeout [ 420.785443][ T6279] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.649615][ T5885] Bluetooth: hci9: command tx timeout [ 422.212656][ T5885] Bluetooth: hci8: command tx timeout [ 422.350284][ T6279] bridge_slave_1: left allmulticast mode [ 422.394151][ T6279] bridge_slave_1: left promiscuous mode [ 422.414570][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.457732][ T6279] bridge_slave_0: left allmulticast mode [ 422.504948][ T6279] bridge_slave_0: left promiscuous mode [ 422.551870][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.734307][ T5885] Bluetooth: hci9: command tx timeout [ 423.803707][ T6279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.865559][ T6279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.955663][ T6279] bond0 (unregistering): Released all slaves [ 424.290271][ T5885] Bluetooth: hci8: command tx timeout [ 424.847923][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 425.775773][ T6279] hsr_slave_0: left promiscuous mode [ 425.808284][ T5885] Bluetooth: hci9: command tx timeout [ 425.850629][ T6279] hsr_slave_1: left promiscuous mode [ 425.900710][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.959016][ T6279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.013894][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.068176][ T6279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.179456][ T6279] veth1_macvtap: left promiscuous mode [ 426.229941][ T6279] veth0_macvtap: left promiscuous mode [ 426.273044][ T6279] veth1_vlan: left promiscuous mode [ 426.306412][ T6279] veth0_vlan: left promiscuous mode [ 426.368956][ T5885] Bluetooth: hci8: command tx timeout [ 426.429252][ T7421] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 426.459761][ T7421] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 426.470015][ T7421] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 426.492873][ T7421] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 426.502807][ T7421] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 427.889945][ T7421] Bluetooth: hci9: command tx timeout [ 428.072217][ T6279] team0 (unregistering): Port device team_slave_1 removed [ 428.155088][ T6279] team0 (unregistering): Port device team_slave_0 removed [ 428.609776][ T7421] Bluetooth: hci10: command tx timeout [ 428.775584][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 429.225852][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.273020][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.346003][ T9824] bridge_slave_0: entered allmulticast mode [ 429.390593][ T9824] bridge_slave_0: entered promiscuous mode [ 429.483165][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.546743][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.623357][ T9824] bridge_slave_1: entered allmulticast mode [ 429.665472][ T9824] bridge_slave_1: entered promiscuous mode [ 430.410330][ T9824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.633791][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz.7.663'. [ 430.704734][ T7421] Bluetooth: hci10: command tx timeout [ 430.863620][ T9824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.596782][ T9835] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.639910][ T9835] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.685680][ T9835] bridge_slave_0: entered allmulticast mode [ 431.720744][ T9835] bridge_slave_0: entered promiscuous mode [ 431.766905][ T9824] team0: Port device team_slave_0 added [ 431.789779][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.7.664'. [ 431.823596][ T9824] team0: Port device team_slave_1 added [ 431.865934][ T9835] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.905489][ T9835] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.943499][ T9835] bridge_slave_1: entered allmulticast mode [ 431.987595][ T9835] bridge_slave_1: entered promiscuous mode [ 432.364563][ T9824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.411421][ T9824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.526408][ T9824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.683426][ T9824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.736379][ T9824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.787127][ T7421] Bluetooth: hci10: command tx timeout [ 432.894428][ T9824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.120813][ T9835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.193724][ T9835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.561812][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 433.771159][ T9835] team0: Port device team_slave_0 added [ 433.791811][ T9835] team0: Port device team_slave_1 added [ 433.885754][ T9824] hsr_slave_0: entered promiscuous mode [ 433.907798][ T9824] hsr_slave_1: entered promiscuous mode [ 433.940770][ T9824] debugfs: 'hsr0' already exists in 'hsr' [ 433.977045][ T9824] Cannot create hsr debugfs directory [ 434.115187][ T9944] netlink: 28 bytes leftover after parsing attributes in process `syz.7.665'. [ 434.188712][ T9835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.201492][ T7421] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 434.290075][ T9835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.381193][ T9835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.523127][ T9835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.571316][ T9835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.704424][ T9835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.851615][ T7421] Bluetooth: hci10: command tx timeout [ 435.601466][ T9835] hsr_slave_0: entered promiscuous mode [ 435.640822][ T9835] hsr_slave_1: entered promiscuous mode [ 435.697372][ T9835] debugfs: 'hsr0' already exists in 'hsr' [ 435.734736][ T9835] Cannot create hsr debugfs directory [ 436.293663][ T7421] Bluetooth: hci7: command 0x2016 tx timeout [ 437.126842][ T9890] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.161356][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.226509][ T9890] bridge_slave_0: entered allmulticast mode [ 437.268855][ T9890] bridge_slave_0: entered promiscuous mode [ 437.366773][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 437.385957][ T9890] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.407630][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.439974][ T9890] bridge_slave_1: entered allmulticast mode [ 437.455538][ T9890] bridge_slave_1: entered promiscuous mode [ 437.651215][ T9890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.925022][ T9890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.179269][ T9890] team0: Port device team_slave_0 added [ 438.222251][ T9890] team0: Port device team_slave_1 added [ 438.386858][ T7421] Bluetooth: hci7: command 0x2016 tx timeout [ 438.664719][ T9824] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 438.701438][ T9824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.728984][ T9824] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 438.792605][ T9824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.826244][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.861399][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.950316][ T9890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.450763][ T9958] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 439.522270][ T9824] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 439.556616][ T9824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.617213][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.653038][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.755693][ T9890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.871348][ T9824] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 439.923649][ T9824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.497662][ T9890] hsr_slave_0: entered promiscuous mode [ 440.543136][ T9890] hsr_slave_1: entered promiscuous mode [ 440.575274][ T9890] debugfs: 'hsr0' already exists in 'hsr' [ 440.619436][ T9890] Cannot create hsr debugfs directory [ 441.962838][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.7.668'. [ 442.506316][ T9824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.125204][ T9824] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.296656][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.304288][ T5809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.662141][ T9835] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 443.723103][ T9835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.770460][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.778192][ T5810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.094229][ T9835] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 444.162241][ T9835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.734466][ T9890] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.973470][ T9835] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 445.055913][ T9835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.237418][ T9835] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 445.292253][ T9835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.497640][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.514312][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.586065][ T9890] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.927399][ T9890] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.429878][ T9890] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.155590][ T9835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.388281][ T9835] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.507331][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.515426][ T5809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.682281][ T9827] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.689614][ T9827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.401662][T10049] netlink: 28 bytes leftover after parsing attributes in process `syz.7.670'. [ 448.532026][ T5885] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 449.006831][ T9890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 449.136209][ T9890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.204831][ T9890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 449.279940][ T9890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.366265][ T9890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 449.446518][ T9890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.517444][ T9890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 449.624366][ T9890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.346630][ T9824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.396821][ T9890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.594596][ T9890] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.611551][ T5885] Bluetooth: hci7: command 0x2016 tx timeout [ 450.735237][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.743231][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.919731][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.932723][ T5811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.024005][ T9835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.634067][ T9824] veth0_vlan: entered promiscuous mode [ 452.689861][ T7421] Bluetooth: hci7: command 0x2016 tx timeout [ 452.753681][ T9824] veth1_vlan: entered promiscuous mode [ 452.903140][T10077] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 453.115632][ T9824] veth0_macvtap: entered promiscuous mode [ 453.193637][ T9824] veth1_macvtap: entered promiscuous mode [ 453.451869][ T9824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.562875][ T9824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.705995][ T5826] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.784747][ T5826] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.910677][ T5826] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.033937][ T5826] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.880442][ T9890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.983635][ T5809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.061737][ T5809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.251341][ T9835] veth0_vlan: entered promiscuous mode [ 455.301752][ T5826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.372370][ T5826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.391847][ T9835] veth1_vlan: entered promiscuous mode [ 455.611150][ T9890] veth0_vlan: entered promiscuous mode [ 455.800395][ T9890] veth1_vlan: entered promiscuous mode [ 455.865241][ T9835] veth0_macvtap: entered promiscuous mode [ 455.959874][ T9835] veth1_macvtap: entered promiscuous mode [ 456.170452][ T9835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.296230][ T9835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.312316][T10145] netlink: 28 bytes leftover after parsing attributes in process `syz.7.673'. [ 456.409640][ T9890] veth0_macvtap: entered promiscuous mode [ 456.426099][ T7421] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 456.512859][ T6279] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.573770][ T6279] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.657131][ T9890] veth1_macvtap: entered promiscuous mode [ 456.707849][ T6279] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.751954][ T6279] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.137600][ T9890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.380715][ T9890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.546263][T10157] netlink: 28 bytes leftover after parsing attributes in process `syz.9.674'. [ 457.675792][ T7421] Bluetooth: hci8: unexpected subevent 0x01 length: 123 > 18 [ 457.776340][ T5800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.823415][ T5800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.862652][ T5809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.919362][ T5809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.120759][ T5800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.375869][ T5800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.449378][ T5885] Bluetooth: hci7: command 0x2016 tx timeout [ 458.594474][ T9827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.629998][ T9827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.736011][ T5819] Bluetooth: hci8: command 0x2016 tx timeout [ 459.755657][ T5810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.821904][ T5810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.250861][ T9827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.298173][ T9827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.531513][ T5885] Bluetooth: hci7: command 0x2016 tx timeout [ 461.202927][T10185] Line length is too long: Should be less than 4094 [ 461.706359][T10187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.660'. [ 461.812560][ T7421] Bluetooth: hci8: command 0x2016 tx timeout [ 461.905582][ T5819] Bluetooth: hci10: unexpected subevent 0x01 length: 123 > 18 [ 462.496204][T10199] netlink: 334 bytes leftover after parsing attributes in process `syz.8.681'. [ 462.687825][T10203] HfR: entered promiscuous mode [ 463.091707][T10200] zswap: compressor 000 not available [ 463.555679][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.682'. [ 463.968982][ T5819] Bluetooth: hci10: command 0x2016 tx timeout [ 464.559333][T10224] program syz.2.686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.798520][T10224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.686'. [ 465.118739][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.8.688'. [ 466.050805][ T5819] Bluetooth: hci10: command 0x2016 tx timeout [ 466.097228][T10245] ovs_: entered promiscuous mode [ 466.385522][T10252] netlink: 'syz.8.695': attribute type 23 has an invalid length. [ 466.817087][T10248] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 466.869174][T10255] netlink: 28 bytes leftover after parsing attributes in process `syz.7.696'. [ 467.008557][ T7421] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 467.040886][T10255] ovs_: entered allmulticast mode [ 469.697793][T10295] HfR: entered promiscuous mode [ 470.255018][ T5809] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.431286][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.9.707'. [ 470.651591][ T5809] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.923460][ T7421] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 470.940336][ T7421] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 470.951737][ T7421] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 470.964516][ T7421] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 470.974486][ T7421] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 471.020698][ T5809] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.254319][ T5809] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.190456][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.9.713'. [ 472.692300][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.9.714'. [ 473.019206][ T7421] Bluetooth: hci7: command tx timeout [ 473.518631][ T5809] bridge_slave_1: left allmulticast mode [ 473.544746][ T5809] bridge_slave_1: left promiscuous mode [ 473.585750][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.684365][ T5809] bridge_slave_0: left allmulticast mode [ 473.732535][ T5809] bridge_slave_0: left promiscuous mode [ 473.773164][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.085653][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.098195][ T7421] Bluetooth: hci7: command tx timeout [ 475.191501][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.292833][ T5809] bond0 (unregistering): Released all slaves [ 475.864156][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 476.063608][T10370] ovs_: entered promiscuous mode [ 476.656383][T10377] netlink: 'syz.8.721': attribute type 23 has an invalid length. [ 476.723493][T10356] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 476.755983][ T5809] hsr_slave_0: left promiscuous mode [ 476.816166][ T5809] hsr_slave_1: left promiscuous mode [ 476.872983][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.965799][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.071158][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.135645][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.170537][ T7421] Bluetooth: hci7: command tx timeout [ 477.289337][ T5809] veth1_macvtap: left promiscuous mode [ 477.353492][ T5809] veth0_macvtap: left promiscuous mode [ 477.396950][ T5809] veth1_vlan: left promiscuous mode [ 477.440068][ T5809] veth0_vlan: left promiscuous mode [ 479.232985][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 479.258795][ T7421] Bluetooth: hci7: command tx timeout [ 479.346306][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 480.274839][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 482.172648][ T5809] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.387647][ T5819] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 482.407299][ T5819] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 482.419317][ T5819] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 482.436045][ T5819] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 482.449813][ T5819] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 483.574986][ T5809] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.008845][T10305] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.060975][T10305] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.116579][T10305] bridge_slave_0: entered allmulticast mode [ 484.195641][T10305] bridge_slave_0: entered promiscuous mode [ 484.532194][ T5819] Bluetooth: hci10: command tx timeout [ 484.552172][ T5809] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.661375][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 484.695707][T10305] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.737809][T10305] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.757089][T10305] bridge_slave_1: entered allmulticast mode [ 484.774992][T10305] bridge_slave_1: entered promiscuous mode [ 484.957676][T10451] openvswitch: ovs_: Dropping previously announced user features [ 485.210693][ T5809] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.317806][T10305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.498639][T10305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.944667][T10305] team0: Port device team_slave_0 added [ 485.996508][T10463] netlink: 'syz.8.736': attribute type 23 has an invalid length. [ 486.062241][T10305] team0: Port device team_slave_1 added [ 486.609559][ T5819] Bluetooth: hci10: command tx timeout [ 487.045005][T10305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.085712][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.231820][T10305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.435019][T10305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.460934][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.598565][T10305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.078689][ T5809] bridge_slave_1: left allmulticast mode [ 488.113056][ T5809] bridge_slave_1: left promiscuous mode [ 488.148648][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.194761][ T5809] bridge_slave_0: left allmulticast mode [ 488.257519][ T5809] bridge_slave_0: left promiscuous mode [ 488.295390][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.692668][ T5819] Bluetooth: hci10: command tx timeout [ 489.560212][ T5809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.602122][ T5809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.659789][ T5809] bond0 (unregistering): Released all slaves [ 489.999232][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 490.116835][T10305] hsr_slave_0: entered promiscuous mode [ 490.167076][T10305] hsr_slave_1: entered promiscuous mode [ 490.198764][T10305] debugfs: 'hsr0' already exists in 'hsr' [ 490.228600][T10305] Cannot create hsr debugfs directory [ 490.272300][ T5809] HfR: left promiscuous mode [ 490.783584][ T5819] Bluetooth: hci10: command tx timeout [ 491.917601][T10505] FAULT_INJECTION: forcing a failure. [ 491.917601][T10505] name fail_futex, interval 1, probability 0, space 0, times 0 [ 492.062885][T10505] CPU: 0 UID: 0 PID: 10505 Comm: syz.8.741 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.062929][T10505] Tainted: [L]=SOFTLOCKUP [ 492.062938][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.062955][T10505] Call Trace: [ 492.062962][T10505] [ 492.062972][T10505] dump_stack_lvl+0x100/0x190 [ 492.063012][T10505] should_fail_ex.cold+0x5/0xa [ 492.063146][T10505] get_futex_key+0x1d2/0x14f0 [ 492.063179][T10505] ? __pfx_get_futex_key+0x10/0x10 [ 492.063207][T10505] ? check_irq_usage+0xe5/0x810 [ 492.063249][T10505] ? __bfs+0x150/0x2a0 [ 492.063286][T10505] futex_wait_setup+0x91/0x540 [ 492.063331][T10505] __futex_wait+0x19f/0x300 [ 492.063382][T10505] ? __pfx___futex_wait+0x10/0x10 [ 492.063542][T10505] ? futex_hash+0x311/0x400 [ 492.063575][T10505] ? __pfx_futex_wake_mark+0x10/0x10 [ 492.063620][T10505] ? __pfx_futex_hash+0x10/0x10 [ 492.063655][T10505] futex_wait+0xe6/0x370 [ 492.063698][T10505] ? __pfx_futex_wait+0x10/0x10 [ 492.063749][T10505] ? __mutex_unlock_slowpath+0x35d/0x930 [ 492.063814][T10505] do_futex+0x265/0x440 [ 492.063847][T10505] ? __pfx_do_futex+0x10/0x10 [ 492.063875][T10505] ? rcu_is_watching+0x12/0xc0 [ 492.063912][T10505] ? __do_sys_fsconfig+0x31d/0xcb0 [ 492.063949][T10505] ? kfree+0x1e5/0x6c0 [ 492.063978][T10505] __x64_sys_futex+0x34f/0x4d0 [ 492.064015][T10505] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 492.064050][T10505] ? __pfx___x64_sys_futex+0x10/0x10 [ 492.064089][T10505] do_syscall_64+0x115/0x840 [ 492.064112][T10505] ? clear_bhb_loop+0x40/0x90 [ 492.064143][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.064170][T10505] RIP: 0033:0x7ff5fe19ce59 [ 492.064209][T10505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.064239][T10505] RSP: 002b:00007ff5ff0580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 492.064267][T10505] RAX: ffffffffffffffda RBX: 00007ff5fe415fa8 RCX: 00007ff5fe19ce59 [ 492.064285][T10505] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff5fe415fa8 [ 492.064301][T10505] RBP: 00007ff5fe415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 492.064318][T10505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.064335][T10505] R13: 00007ff5fe416038 R14: 00007fffef439680 R15: 00007fffef439768 [ 492.064370][T10505] [ 493.074312][ T5809] hsr_slave_0: left promiscuous mode [ 493.131078][ T5809] hsr_slave_1: left promiscuous mode [ 493.152333][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.193301][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.227325][ T5809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.262938][ T5809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.357350][ T5809] veth1_macvtap: left promiscuous mode [ 493.372443][ T5809] veth0_macvtap: left promiscuous mode [ 493.392917][ T5809] veth1_vlan: left promiscuous mode [ 493.414391][ T5809] veth0_vlan: left promiscuous mode [ 494.490305][ T5809] team0 (unregistering): Port device team_slave_1 removed [ 494.525068][ T5809] team0 (unregistering): Port device team_slave_0 removed [ 494.801563][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 494.889475][T10532] ovs_: entered promiscuous mode [ 496.182937][T10426] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.233659][T10426] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.259383][T10426] bridge_slave_0: entered allmulticast mode [ 496.319033][T10426] bridge_slave_0: entered promiscuous mode [ 496.653140][T10426] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.677723][T10426] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.740985][T10426] bridge_slave_1: entered allmulticast mode [ 496.776335][T10426] bridge_slave_1: entered promiscuous mode [ 497.273241][T10426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.544475][T10426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.781631][T10426] team0: Port device team_slave_0 added [ 497.879089][T10426] team0: Port device team_slave_1 added [ 498.187716][T10426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.240248][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.390344][T10426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.490274][T10426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.549982][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.777449][T10426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.887228][T10557] netlink: 334 bytes leftover after parsing attributes in process `syz.8.749'. [ 499.921352][T10426] hsr_slave_0: entered promiscuous mode [ 499.953392][T10426] hsr_slave_1: entered promiscuous mode [ 499.994952][T10426] debugfs: 'hsr0' already exists in 'hsr' [ 500.020093][T10426] Cannot create hsr debugfs directory [ 500.218604][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 501.155096][T10305] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 501.263581][T10305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.384253][T10305] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 501.462790][T10305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.499015][T10305] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 501.553988][T10586] netlink: 52 bytes leftover after parsing attributes in process `syz.8.754'. [ 501.595133][T10586] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 501.627992][T10305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.801871][T10305] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 501.944917][T10305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.036521][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 505.172703][T10622] netlink: 24 bytes leftover after parsing attributes in process `syz.9.756'. [ 505.325574][T10305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.642414][T10305] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.867059][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.874792][ T6279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.992070][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.999426][ T6279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.950021][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.961001][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.222025][T10426] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 507.279348][T10426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 507.313107][T10426] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 507.389689][T10426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 507.469159][T10426] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 507.546603][T10426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 507.680680][T10426] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 507.743746][T10426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 508.432206][T10426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.612546][T10426] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.807135][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.816493][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.942067][ T9827] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.950614][ T9827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.041038][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.759'. [ 510.501981][T10669] openvswitch: ovs_: Dropping previously announced user features [ 511.393336][T10305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.905343][T10698] openvswitch: ovs_: Dropping previously announced user features [ 512.872954][T10710] openvswitch: HfR: Dropping previously announced user features [ 513.444933][T10426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.738345][T10305] veth0_vlan: entered promiscuous mode [ 513.827340][T10725] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 513.932190][T10305] veth1_vlan: entered promiscuous mode [ 514.020772][T10426] veth0_vlan: entered promiscuous mode [ 514.145846][T10426] veth1_vlan: entered promiscuous mode [ 514.370117][T10305] veth0_macvtap: entered promiscuous mode [ 514.442542][T10305] veth1_macvtap: entered promiscuous mode [ 514.578824][T10426] veth0_macvtap: entered promiscuous mode [ 514.589897][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.9.763'. [ 514.646129][T10305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.739003][T10426] veth1_macvtap: entered promiscuous mode [ 514.817585][T10305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.110559][ T5827] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.265105][ T5827] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.307374][ T5827] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.392048][ T5827] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.511117][T10426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.663812][T10426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.891401][T10137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.978894][ T6279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.153524][ T6279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.271350][ T6279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.529982][ T31] INFO: task syz.1.596:9365 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 516.577606][ T31] Tainted: G L syzkaller #0 [ 516.677627][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.751057][ T31] task:syz.1.596 state:D stack:27560 pid:9365 tgid:9363 ppid:6175 task_flags:0x400140 flags:0x00080002 [ 516.912782][ T31] Call Trace: [ 516.954433][ T31] [ 517.000064][ T31] __schedule+0x125c/0x6730 [ 517.054139][ T31] ? irqentry_exit+0x24d/0xa00 [ 517.107474][ T31] ? __pfx___schedule+0x10/0x10 [ 517.156763][ T31] ? find_held_lock+0x2b/0x80 [ 517.203572][ T31] ? schedule+0x225/0x2c0 [ 517.219332][ T31] schedule+0xdd/0x2c0 [ 517.244942][ T31] schedule_preempt_disabled+0x13/0x30 [ 517.275275][ T31] __mutex_lock+0xccc/0x1bd0 [ 517.299032][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 517.322991][ T31] ? __sys_sendmsg+0x160/0x210 [ 517.346759][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.381936][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 517.400920][ T31] ? __asan_memset+0x23/0x50 [ 517.419802][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 517.427445][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 517.451221][ T31] nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 517.468215][ T31] ? rcu_is_watching+0x12/0xc0 [ 517.473785][ T31] ? trace_kmalloc+0xeb/0x110 [ 517.491981][ T31] ? __kasan_kmalloc+0xaa/0xb0 [ 517.508708][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 517.515047][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 517.531721][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 517.550002][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 517.564798][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 517.603508][ T31] ? genl_get_cmd+0x3e7/0x760 [ 517.619804][ T31] ? bpf_lsm_capable+0x9/0x10 [ 517.635405][ T31] ? security_capable+0x80/0x260 [ 517.651554][ T31] genl_rcv_msg+0x560/0x800 [ 517.662987][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.675656][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 517.683791][ T31] netlink_rcv_skb+0x159/0x420 [ 517.689737][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.703880][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.711539][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 517.717437][ T31] genl_rcv+0x28/0x40 [ 517.722038][ T31] netlink_unicast+0x585/0x850 [ 517.727240][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 517.735095][ T31] netlink_sendmsg+0x8b0/0xda0 [ 517.742846][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.752000][ T31] ? apparmor_socket_sendmsg+0x15b/0x270 [ 517.759248][ T31] ____sys_sendmsg+0xa4d/0xbe0 [ 517.764639][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.771836][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.777555][ T31] ___sys_sendmsg+0x190/0x1e0 [ 517.785326][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.791315][ T31] ? __lock_acquire+0x49f/0x1a40 [ 517.802232][ T31] __sys_sendmsg+0x160/0x210 [ 517.806965][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 517.821638][ T31] do_syscall_64+0x115/0x840 [ 517.826354][ T31] ? clear_bhb_loop+0x40/0x90 [ 517.832583][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.838997][ T31] RIP: 0033:0x7ff6a739ce59 [ 517.843908][ T31] RSP: 002b:00007ff6a82c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.854233][ T31] RAX: ffffffffffffffda RBX: 00007ff6a7615fa0 RCX: 00007ff6a739ce59 [ 517.866477][ T31] RDX: 0000000000048080 RSI: 0000200000003140 RDI: 0000000000000003 [ 517.875410][ T31] RBP: 00007ff6a7432e6f R08: 0000000000000000 R09: 0000000000000000 [ 517.885245][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.906382][ T31] R13: 00007ff6a7616038 R14: 00007ff6a7615fa0 R15: 00007ffcb45d2018 [ 517.915658][ T31] [ 518.021261][ T31] [ 518.021261][ T31] Showing all locks held in the system: [ 518.077400][ T31] 1 lock held by khungtaskd/31: [ 518.151824][ T31] #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 518.258591][ T31] 2 locks held by getty/5384: [ 518.301448][ T31] #0: ffff88803457d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 518.354638][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 518.400035][ T31] 2 locks held by syz-executor/6364: [ 518.430208][ T31] #0: ffff88802e72e0d8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 518.501317][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 518.545178][ T31] 2 locks held by syz.2.580/9288: [ 518.572483][ T31] #0: ffffffff906efd28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.620918][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 518.664021][ T31] 2 locks held by syz.1.596/9365: [ 518.685383][ T31] #0: ffffffff906efd28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.751642][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 518.809606][ T31] 2 locks held by syz.3.611/9435: [ 518.829961][ T31] #0: ffffffff906efd28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.865141][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 518.889224][ T31] 2 locks held by syz.4.629/9570: [ 518.899865][ T31] #0: ffffffff906efd28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.927957][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 518.970694][ T31] 2 locks held by syz.6.643/9694: [ 518.977777][ T31] #0: ffffffff906efd28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.998881][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 519.020240][ T31] 2 locks held by syz.5.652/9759: [ 519.041900][ T31] #0: ffffffff906efd28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.068411][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 519.085435][ T31] 1 lock held by syz-executor/9824: [ 519.112317][ T31] #0: ffff88803d260ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 519.140621][ T31] 5 locks held by syz-executor/9835: [ 519.155116][ T31] #0: ffff88804e74cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 519.206267][ T31] #1: ffff88804e74c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0 [ 519.240302][ T31] #2: ffffffff908cbbe0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 519.278134][ T31] #3: ffff888058d7e2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 519.293439][ T31] #4: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 519.317066][ T31] 1 lock held by syz-executor/10426: [ 519.336084][ T31] #0: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 519.363165][ T31] 1 lock held by rm/10767: [ 519.463404][ T31] [ 519.465931][ T31] ============================================= [ 519.465931][ T31] [ 519.607222][ T31] NMI backtrace for cpu 0 [ 519.607247][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 519.607280][ T31] Tainted: [L]=SOFTLOCKUP [ 519.607288][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.607302][ T31] Call Trace: [ 519.607310][ T31] [ 519.607319][ T31] dump_stack_lvl+0x100/0x190 [ 519.607354][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 519.607390][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 519.607421][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 519.607458][ T31] sys_info+0x141/0x190 [ 519.607484][ T31] watchdog+0xcb1/0x1030 [ 519.607526][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 519.607562][ T31] ? __pfx_watchdog+0x10/0x10 [ 519.607597][ T31] ? __kthread_parkme+0x18c/0x230 [ 519.607629][ T31] ? kthread+0x13a/0x450 [ 519.607658][ T31] ? __pfx_watchdog+0x10/0x10 [ 519.607691][ T31] kthread+0x370/0x450 [ 519.607722][ T31] ? __pfx_kthread+0x10/0x10 [ 519.607755][ T31] ret_from_fork+0x72b/0xd50 [ 519.607788][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 519.607819][ T31] ? __switch_to+0x800/0x10f0 [ 519.607840][ T31] ? __switch_to_asm+0x39/0x70 [ 519.607875][ T31] ? __pfx_kthread+0x10/0x10 [ 519.607916][ T31] ret_from_fork_asm+0x1a/0x30 [ 519.607965][ T31] [ 520.692419][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 520.700986][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 520.712703][ T31] Tainted: [L]=SOFTLOCKUP [ 520.717401][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 520.731642][ T31] Call Trace: [ 520.739402][ T31] [ 520.742966][ T31] dump_stack_lvl+0x100/0x190 [ 520.749739][ T31] vpanic+0x552/0x970 [ 520.756370][ T31] ? __pfx_vpanic+0x10/0x10 [ 520.761270][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 520.770399][ T31] panic+0xd1/0xe0 [ 520.775659][ T31] ? __pfx_panic+0x10/0x10 [ 520.780921][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 520.792408][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 520.801492][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 520.808726][ T31] ? watchdog.cold+0x1ec/0x234 [ 520.815385][ T31] ? watchdog+0xcc1/0x1030 [ 520.820536][ T31] watchdog.cold+0x1fd/0x234 [ 520.826345][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 520.832440][ T31] ? __pfx_watchdog+0x10/0x10 [ 520.837798][ T31] ? __kthread_parkme+0x18c/0x230 [ 520.844317][ T31] ? kthread+0x13a/0x450 [ 520.850064][ T31] ? __pfx_watchdog+0x10/0x10 [ 520.855918][ T31] kthread+0x370/0x450 [ 520.860730][ T31] ? __pfx_kthread+0x10/0x10 [ 520.866529][ T31] ret_from_fork+0x72b/0xd50 [ 520.872704][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 520.877970][ T31] ? __switch_to+0x800/0x10f0 [ 520.882878][ T31] ? __switch_to_asm+0x39/0x70 [ 520.888153][ T31] ? __pfx_kthread+0x10/0x10 [ 520.893570][ T31] ret_from_fork_asm+0x1a/0x30 [ 520.900976][ T31] [ 520.904146][ T31] Kernel Offset: disabled [ 520.910267][ T31] Rebooting in 86400 seconds..