last executing test programs: 2m29.747569446s ago: executing program 2 (id=1892): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b74, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x42, 0x801, 0x0, 0xfffffffffffffffc, 0x0) write$auto(r0, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\x11\xb5\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0\xe4\xa3y\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ\xa5\xf4\xcb\x06\xc2\xf3\xf2\xfe\xdd\\!\xc1\\n\r\xe8\xbf\x9f\x1e\xb8\x8e\x0e\xbe\xdc\xc3}K\xab\xb8K=\xaaU\xa8\x0f\xd9\xfa\xb7n\xc1\x9c\xabg~\xfe\xaf`\x96\x02]t#\xe3\xbd\xf4N\xc8n\xfc7\xe60\xf1\x7f\x18 ~\xb5\x19H\x98~\xe6\x14\xe4S\xd8', 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x20000000000, 0x400008, 0xa, 0x9b73, 0xffffffffffffffff, 0x8) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r1 = socket(0xa, 0x1, 0x0) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) 2m29.204468223s ago: executing program 2 (id=1895): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r3) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)={0x30, r4, 0x901, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast1}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x4000, 0x0) bpf$auto(0xfffffffd, &(0x7f0000000580)=@link_create={@map_fd=r5, @target_ifindex=r0, 0xd, 0x341d, @tcx={@relative_id=0x5, 0x4}}, 0x6f4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 2m14.349316815s ago: executing program 32 (id=1893): r0 = socket$nl_generic(0x10, 0x3, 0x10) open_tree_attr$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffff68, &(0x7f0000000200)={0x8, 0x5, 0x8, @inferred=r0}, 0x82d4) bpf$auto(0x18, &(0x7f0000000040)=@batch={0x6, 0xb, 0xda9, 0x9, 0x8, 0xffffffffffffffff, 0x5, 0x6}, 0x92) sendmsg$auto_NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x440d1}, 0x4084) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010025bf7000fbdbdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) 2m13.852032158s ago: executing program 33 (id=1895): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r3) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)={0x30, r4, 0x901, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast1}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x4000, 0x0) bpf$auto(0xfffffffd, &(0x7f0000000580)=@link_create={@map_fd=r5, @target_ifindex=r0, 0xd, 0x341d, @tcx={@relative_id=0x5, 0x4}}, 0x6f4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 2m7.47360927s ago: executing program 34 (id=1905): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r3) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)={0x30, r4, 0x901, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast1}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x4000, 0x0) bpf$auto(0xfffffffd, &(0x7f0000000580)=@link_create={@map_fd=r5, @target_ifindex=r0, 0xd, 0x341d, @tcx={@relative_id=0x5, 0x4}}, 0x6f4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 2m6.819592585s ago: executing program 35 (id=1906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000140)={@siginfo_0_0={0x0, 0x7f, 0x9, @_rt={0xffffffffffffffff, 0xffffffffffffffff, @sival_ptr=&(0x7f0000000080)="53392b968d73b7c2c3abf0c3858803e39e01c0b6e57f84a0d2d4b2fd1c30cfdf0cbb5c1925c5edfbfec1f8762f1032425295c61b7db9a84c686928cf96d4566a399e40a15319a2b91547d9ecfacb06b7ce197410e0963ca5172ba1e4741b45def216d00909f290e55f5a2fd428558266aac45c7b945711d728c22b264034ba31d36d45ee306a73d3da91818ea6e31f3ba4acd65d4f660e33f2c627b3b3e3ff67b02db23b2f1c0c72c70387c62798594ba27791089587cde51df7dc539c"}}}, 0x1, &(0x7f00000001c0)={{0x2, 0x2}, {0x4, 0x5}, 0x3, 0x0, 0x102a000000000000, 0x9, 0x4, 0x0, 0x6e, 0x1b, 0x1, 0x8, 0x8001, 0x1e6270a, 0x9, 0x1}) sendmsg$auto_IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000280)={0x574, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x20a, 0x2, 0x0, 0x1, [@typed={0xc, 0x13b, 0x0, 0x0, @u64=0x4}, @generic="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", @nested={0xfa, 0x104, 0x0, 0x1, [@nested={0x4, 0x15a}, @generic="11507b55d998bf1c27f89658bde1e9f595d49bd0cf5cc309965f4c30b85ba7d05b99528327bf8d41adaf7616c4ad03f551b8bbe45d8fcdc44b87bcaffbc08127077265e120fb02a9eb71347590ca9e4c17154f8a525c0458221634f1232a774e6a7168c398899643df9c794f1c3d53d2e08fd0534f022d506c4f4b2ca2b9a0d567366ea023b9c0b68dfd7018dd57e077fcac517cda53424e19fb49e6c52049c898ebc1e25f58f81b694c9f72806c7872aaa48ff5fcbf9f35f510de51a13811e82ef3f1e57393c173e6997c9c1d062a7250a3850a5839fec9e8eadf285edda7b44a8cc728e79251ab3b31f497d042", @nested={0x4, 0x2e}]}]}, @IPVS_CMD_ATTR_DEST={0x2b6, 0x2, 0x0, 0x1, [@nested={0xe3, 0xfb, 0x0, 0x1, [@generic="62addb3c8f57279d4a20c19d28916f3ebea9bf8d0f0efaad5ae351135da576ca", @typed={0x4, 0xd3}, @nested={0x4, 0x4b}, @typed={0x4, 0xf7}, @nested={0x4, 0x84}, @generic="99f82ee46fe2a6d78da9790ed2c7042d502a8d10287e6e529516045b6caa35848fa1c559c6ee1d43fee739e4c43bc6f7ea1e2d77f094df269e86126d313371e60b72a3d11a6ae5bf2202c858cf8985623872d266331d198aed3a1294cec4d91acc5b9ce059c64dea9633ab67bf81800cd18670e17509da4b9a46766168896c6efb3fe0d63c084b752642ce05b2297796fc5d0d701c66ca25d4c4b93c42b1037c5748a0a183de8b87a035e427eab773"]}, @typed={0xc, 0x4e, 0x0, 0x0, @u64=0x400}, @typed={0x14, 0xab, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0xf9, 0x4, 0x0, 0x0, @binary="a055f76f79e5bdedac8c0f8ec047f65c10cb3f407897271da2639c3fdaf6b027d10ca95a9a59072e2e2797fbcab1898b3f3e402910d1399c1475b3a366ef3a131ecf260d7a73932931f5bc403e9d85daeef690a9df0735e76d26382b5faff8153cacf47528d86e728956871bfd95cd4869d55727e69a51ee126822dc888e10ba06fea95a418a14c11e312865f9fd56812f2d835837566428750f7e7cea63c7c2ec06879c1720c9a3b6a368b7e104002004a1363708a226fdcd93c3366fdd7ae88e116fb5c9c078dc77a6145aa9e9d9b36c0c7e7985a878e95e9e0d4f3a20b0e9a04c9d2e5ccd198083f212544c0dc21b478987df51"}, @typed={0x8, 0xd0, 0x0, 0x0, @u32=0xc}, @typed={0x8, 0x9a, 0x0, 0x0, @ipv4=@empty}, @generic="cc354d8d611f7c72781a7c07ee4fbaec845edd02871f6590b668e8aa6702db880ae80f2756ff56955d61e873cd9eb6ff6ddd1224d4bae827c3c0593df458658c8496fbb9bf3ecab2184e373d8d718b15a870fa9c8a6eebfc767e2094fcffa938f08049e105b0ef406201a1f56d19f23fb94c6999b78e285994bf5e9cf6bef6a3c1c92a52c4459f722c6b921c1aa0ef6cf99c", @typed={0x8, 0x80, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x5, 0xd6, 0x0, 0x0, @str='-'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9359}, @IPVS_CMD_ATTR_SERVICE={0x94, 0x1, 0x0, 0x1, [@nested={0x8e, 0x44, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @pid=r3}, @generic="6dcc355f042d18bc32500a6b6bef8ff65ba8b75322bb147e45eb89845d3f046ddd50a25d0a82c23ad425cf45b8732f0506df955c9f0bf8d5500aa73dc88398f977535f9c4226a0a07433b1a968d23f129343", @typed={0x8, 0x2c, 0x0, 0x0, @u32=0x40}, @nested={0x4, 0x146}, @nested={0x4, 0x128}, @typed={0xc, 0x104, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x116}, @nested={0x4, 0x5d}, @nested={0x4, 0x52}, @typed={0x6, 0x6c, 0x0, 0x0, @str='.\x00'}]}]}]}, 0x574}}, 0x0) r5 = waitid$auto(0x8, 0xffffffffffffffff, &(0x7f00000008c0)={@siginfo_0_0={0xd0e1, 0x5, 0x2, @_rt={r3, r4, @sival_ptr=&(0x7f0000000880)="4cd03ee13baf099b077855b40a48d6bc2f5c52c370e683f19512269dc09e2b888449ba478f9bf8e0f2b86b37dadbb98088cfd59a006d0b610d6184d61f2c"}}}, 0x8000, &(0x7f0000000940)={{0x1, 0xffff}, {0xa87, 0x6}, 0x7e, 0xd5fd, 0xf, 0x800, 0x7, 0x2, 0x10001, 0x8, 0x7f, 0x5b, 0xffffffffffffffff, 0x8000, 0x100000001, 0x57}) r6 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000a00)={@_si_pad}, 0x8, &(0x7f0000000a80)={{0x7, 0xf99}, {0x4, 0x28fa}, 0x8, 0x14fd, 0x10001, 0x7, 0x0, 0x800000, 0x800, 0x9ef, 0x700, 0x5, 0x100, 0x1, 0x29, 0xab}) rt_tgsigqueueinfo$auto(r2, r5, 0x401, &(0x7f0000000c00)={@siginfo_0_0={0x2, 0xfb53, 0x0, @_rt={r6, r4, @sival_ptr=&(0x7f0000000b40)="b9dae0b56795910d876839477496a1d690c55802d97f71b4c596dcb9f225e5bcd81155d12ca4a8fccf70186ae945e30c2a2c33eba0b8aec889cacdf2f8048904b05c0be3f98dca7941f9c38287a6097393fa433d7e830c801586d3bdd6d7cf13d7835678ecfce04a384f69e4623b7b24c77c3761b94c663e2577eb09e31ebdf4244b2afcc3c3730b8ee0d5a9bf9612"}}}) epoll_ctl$auto_EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff, &(0x7f0000000c80)={0x4}) r7 = socket(0x22, 0x6, 0x5) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000cc0)=@test={r7, 0x7, 0x4, 0x9, 0x82, 0xb3, 0x10001, 0x63e, 0x5, 0x2, 0x8000000000000001, 0x0, 0x6, 0x5, 0x4}, 0x9) mmap$auto(0xcf98, 0x0, 0x0, 0xffffffffffffffff, r7, 0x5) ioctl$auto_BLKDISCARDZEROES(r8, 0x127c, 0x0) r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000dc0), r7) sendmsg$auto_BATADV_CMD_GET_MESH(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf}, @BATADV_ATTR_BLA_BACKBONE={0xa, 0x21, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, @BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x82}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000ec0), r10) sendmsg$auto_OVS_FLOW_CMD_DEL(r8, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x15c, 0x0, 0xd19, 0x70bd27, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_KEY={0x128, 0x1, 0x0, 0x1, [@typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @nested={0xc, 0x3d, 0x0, 0x1, [@typed={0x8, 0x11b, 0x0, 0x0, @u32=0x1}]}, @nested={0x103, 0x10, 0x0, 0x1, [@generic="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", @nested={0x4, 0x15b}]}]}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x6}, @OVS_FLOW_ATTR_ACTIONS={0xb, 0x2, 0x0, 0x1, [@generic="6ade0b9f6b65ff"]}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40800}, 0x4010) read$auto_ftrace_set_event_notrace_pid_fops_trace_events(r8, &(0x7f0000001140)=""/4096, 0x1000) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002180), r0) sendmsg$auto_NL80211_CMD_DEL_KEY(r10, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x24, r11, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x50) gettid() sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002380)={&(0x7f00000022c0)={0xa0, r11, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_SCAN_SSIDS={0x7a, 0x2d, 0x0, 0x1, [@typed={0x8, 0x69, 0x0, 0x0, @pid=r6}, @typed={0xc, 0x12b, 0x0, 0x0, @u64=0x4}, @typed={0x14, 0x138, 0x0, 0x0, @ipv6=@empty}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}, @generic="318c1bd444969e6b74db55387342a87b1b24dcc8db7f1e8891bcc232e47c48c2bb67f6838f97c7374e92088d7bb9", @typed={0xc, 0x1d, 0x0, 0x0, @u64=0x5}]}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0xd0}, 0x48000) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r10, &(0x7f00000025c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002580)={&(0x7f0000002440)={0x128, r11, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8}, @NL80211_ATTR_MLO_LINKS={0x104, 0x138, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x3}, @NL80211_ATTR_MNTR_FLAGS={0xf0, 0x17, "c4d2f724f53c8985cd7a7a70ef611c69d754e82576b76b0e66040f4b6c0c634389b14d365e992490360b8ce40a3cf5b1d8c9cab2e232afb166d3113b4dcb3083634570455af0b3e4cbd6dfad0f7bac203553ec7a88da58f2463f5e70cda56567a5ceb9eba905f95f32572685a5ecee5896f0fef9a4d5cea12c9da8f8e1b8b4508b24eaf6c7e6a1f052dd43fd2c648d26bc7bc77f84815d504c4e99206e11983ce200c015a2c11ca2d0c784a716c612ed16408a9672283b2005e5be6572ca0c099592abb776c00a5cc004d3a9b08e6434728ae62585d1a568087df74ea9c979397ab77f7a3767a4a6c5d67e0d"}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8020004}, 0x40008c0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002640)={'rose0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002680)={'veth1_to_batadv\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r12, &(0x7f0000002740)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r13}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x40010) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000002780), 0x200000, 0x0) setsockopt$auto_SO_TIMESTAMPING_NEW(r10, 0xfffffe00, 0x41, &(0x7f00000027c0)='.\x00', 0x800) read$auto_proc_single_file_operations_base(0xffffffffffffffff, &(0x7f0000002840)=""/4096, 0x1000) 1m52.302257969s ago: executing program 36 (id=1912): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x81085520, r4) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r5, &(0x7f00000002c0)=""/190, 0xfffffe39) 1m49.786120342s ago: executing program 37 (id=1916): r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) pwritev$auto(r0, 0x0, 0x2, 0xfffffffffffff274, 0x6) msgget$auto(0xc, 0x77d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)=0x1) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) ioctl$auto(0x3, 0x541b, 0x38) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0xa2b0) msync$auto(0x0, 0x2000000005, 0x6) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0x3) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x8000}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_SCOPE={0x5a, 0x4, '..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x8000}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x7f}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xd}, @NFSD_A_SERVER_SCOPE={0x9, 0x4, '*#@/\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x800) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x6, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) 1m44.310738833s ago: executing program 38 (id=1921): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x81085520, r4) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r5, &(0x7f00000002c0)=""/190, 0xfffffe39) 1m42.161075368s ago: executing program 8 (id=1948): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1d, 0xa, 0x7fff) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x1) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, r0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001c00)=""/4111, 0x100f) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim5/ports/3/udp_ports_table1\x00', 0x408041, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x5}, {0x0, 0x0, 0x7}]}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xd561, 0x1a, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x80, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x207c2, 0x0) 1m30.15489718s ago: executing program 7 (id=1971): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xf4, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 1m29.86011495s ago: executing program 0 (id=1972): mmap$auto(0x5c, 0x2000d, 0x4000000000df, 0xeb0, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24004099}, 0xc0) r0 = socket(0x2, 0x80002, 0x73) mmap$auto(0x5, 0x12, 0x7f, 0x59db, 0x401, 0x8004) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e20, @multicast2}, 0xf30d) connect$auto(0x3, &(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23, 0x1}}, 0x56) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0) io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x400008, 0x6, 0xf610, 0x2, 0x8003) unshare$auto(0x40000080) bpf$auto(0x5, &(0x7f0000001180)=@link_detach={r0}, 0x5) mmap$auto(0x0, 0x2020009, 0x6, 0xeb3, 0xffffffffffffffff, 0xffffffff) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) poll$auto(&(0x7f0000000000)={r2, 0x2, 0xed}, 0x1, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7fff, 0x3, 0x200, 0x9, 0x3, 0x800000000006, 0x3, 0x7, 0x9, 0x8000009, 0x10007, 0x80, 0x4, 0xffefffff, 0x400003, 0x2080, 0x203, 0x0, 0x20e9d181, 0x400300000000000, 0xdb, 0x3, 0x6, 0xf04, [0xfffffffffffffffe, 0x4, 0x2, 0x1, 0x2, 0xfffffffffffffffe, 0x4, 0x6, 0x66, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0xfffffffffffffffd, 0x8f, 0x10000, 0x8000000, 0x7, 0x0, 0x1, 0xfffffffefffffffd, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x1, 0x100000001, 0x0, 0x0, 0xfffffffffffffffb, 0x10, 0x0, 0x0, 0x20000, 0x0, 0x3, 0xff, 0x80, 0x8c]}, 0x2, 0x800000d) write$auto(r1, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x147) readv$auto(0x3, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x9, 0x15f4da07, 0x6, 0x10001, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) rseq$auto(0x0, 0x8000, 0x205, 0x5) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f00000005c0)="c3341b36", 0x4) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40000) kexec_load$auto(0x70, 0x2, &(0x7f0000000080)={@kbuf=&(0x7f0000000180)="709bc6c9e3065f04b9f1373c3ffc3684426368a039f3aa960ab8176bf0542ba2368fcc0de90ea2d923fa424a9c5a32666043048c5591dee593e4d0f4e7303491eb4c8c0c70d5d17fef73ac", 0x0, 0x7fffffffffffffff, 0x403000}, 0x4) 1m29.293376441s ago: executing program 0 (id=1974): close_range$auto(0x2, 0xffffffffffffffff, 0x10000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x1b, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0xffff, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) unshare$auto(0x40000080) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) read$auto(r0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) fcntl$auto(r0, 0x8, 0x1) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000080)={0x67, 0x3f, 0x7fff, 0x5, 0x80000000007, 0x1, 0x6, 0xff, 0x5, 0x7f, 0xfbfffffe, 0xfff, 0x7fb, 0x4, 0x9}) fcntl$auto_F_GETOWN(r0, 0x9, 0x5) socket(0x1e, 0x4, 0x0) 1m28.8460982s ago: executing program 7 (id=1975): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0xfffffdff, &(0x7f00000001c0)=@task_fd_query={0x0, r0, 0x800, 0x10004, 0x5, 0x1000049, 0xffffffffffffffff, 0x9, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x2, 0x0, 0x0, 0x6}, 0x20000007}, 0x3, 0x800000) mmap$auto(0x0, 0x4020009, 0x6, 0x14, 0x401, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r2, r2, 0x0, 0x4a00) ioctl$auto(r1, 0xc0445624, r2) 1m28.217641959s ago: executing program 0 (id=1976): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r4 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f00000002c0)=""/190, 0xfffffe39) 1m26.768478805s ago: executing program 39 (id=1948): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1d, 0xa, 0x7fff) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x1) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, r0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001c00)=""/4111, 0x100f) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim5/ports/3/udp_ports_table1\x00', 0x408041, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x5}, {0x0, 0x0, 0x7}]}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xd561, 0x1a, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x80, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x207c2, 0x0) 1m26.709294572s ago: executing program 0 (id=1980): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x1d, 0x2, 0x6) bind$auto(r2, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x101001, 0x0) socket(0x21, 0x5, 0x2) write$auto(r3, &(0x7f0000000000)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) 1m24.352456956s ago: executing program 0 (id=1982): r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) write$auto_split_huge_pages_fops_huge_memory(r0, &(0x7f00000000c0)='1', 0x1) 1m20.376706553s ago: executing program 2 (id=1979): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x8, 0x0) mmap$auto(0x2, 0x61, 0x100001000000004, 0xfa31, 0x403, 0x8000) rt_sigqueueinfo$auto(0x0, 0x7, 0x0) mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = fanotify_init$auto(0x5, 0x2000000000002) r1 = socket(0xa, 0x5, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r3, 0xc040563e, r2) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_GET_TXSC(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='{o'], 0x14}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40080c4) recvfrom$auto(r0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd) r6 = socket(0x2, 0x1, 0x400104) getsockopt$auto_SO_MEMINFO(r6, 0x1, 0x37, &(0x7f00000004c0)='~^\xed\xe3\x00\x00\x00\x00\xc55Ds', &(0x7f0000000500)=0xc) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_EPCS_CFG(r6, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x2fc, r7, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MBSSID_ELEMS={0x2b2, 0x133, 0x0, 0x1, [@generic="8a31764425ba5497951d909dda4463c465a089aa1b458c2f3446e344d01447a48b03372087d3f41a9888ba9c3710eb2a8e48cd0b19f1babb1e806706260077178b9a28944272f99a3fce88a3966c8fd6809975e84d14499189512640339601ab6245feaa5aefb92e0d0a011ae1f24daecbb6d02935f3178a89a081dbb496093c6b2aba46ee48fbd1142873a47a759ef8a01b790f70f439127add03286d68a6fa86c8a6cb085ce1d745a9a9b88bda", @generic="90fda3f54235", @typed={0x8, 0x97, 0x0, 0x0, @ipv4=@local}, @generic="ec89dd15001972e6867c1cc343323eb91bcf7e4f7db2a7c880dcd2af808406bad715fb55ddc82da416d3a66656214eade9a6c8d0e1af56dacc4ef0f0e11a06c7a0dec80b", @generic="58c5e88d2cad2a8dc5e4d68756c5e251ddfea544c1540a035314daf4f22e32300e50d350b8249a0fdfd72a59770956b930469c952bffe82a07d21512f66ad85cc4c8dc6977f9622a2cfe1e7197167b4aa7510cb26c52ab3d581b3e20c3d7444448e1ea95620906e01cc69d84cdb227777d5c17f939b8b9b4f2a092d782161af44ff5206739e57c3274933bdb752a844631bfccc1802f2b5b94e25aa32f3d3926b22322596c8475e9984402476d86ae1d232db96f1a12daf1dd8f50d2f6944244ad247fa7f859d17179de8f382ba2c540a1b1b5c6df8951fe", @generic="77b44dc92596132cce727e20e64cc729ff8e1631412b7b8f5d3a2557e18812dcd84e4e48b684da504b7da347dc864f396f7715d62f506140599d04a645642eb1bab7b3d98f1ff7318dc34f42fbcfc3744a8d6cbe80bf98f72748da0757b6ee4f9deb2fb20ef395f68d06ae2e3f6b6bc42342cffd89e6f53f208f324df9c0498fbb4bdc7a3fb048dbb6cdb2dfdb719efe82f0d71ee9cf4b180b1c35fd2079a48139bcdd9e5205c62922132b7374d3720799fd838d3280e91eb4aaacde1771421cde71e1b95bc7cb35b40e9478bde4e5089ad7c53ee589"]}, @NL80211_ATTR_FILS_NONCES={0x23, 0xf3, "a4f7a2451d2860d45ce9dafde3a50e29657b7e112b868c9e7fb0d8dfc59640"}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x7}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4080}, 0x4040845) r8 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r8, 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = geteuid() sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r9, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000b80)=ANY=[@ANYBLOB="8c040000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB='\b\x00C\x00\x00\x00\x00\x00\x00\x00'], 0x48c}, 0x1, 0x0, 0x0, 0x4000}, 0x240040a0) sendmsg$auto_NL80211_CMD_ADD_LINK(r1, &(0x7f0000004140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004100)={&(0x7f0000001940)=ANY=[@ANYBLOB="8c270000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB='\b\x00x\x00', @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="08001900090000000400848004004b8008002c00ffffffff60214fc00e66950be8e388a98e20469b1057344f0692dfff0ba9a228c6690bc0bad2ab5149b8f0ad0bdd389d1823cc6ac10ffed0976866d95fb3a1d8ab98d77c46979e6d31909ce8b8d44bb0ef59b9f90d0da6dd779de1ce57dab0dfd92ca58edfe4f06f4662b796e67c94084c9821fc82b77bddb5932ea1436a4c657387912bc33b2a7e18df83d0764368919905e37802bd4c1959bb48c7f718b8d00abc8c4765987e57cfd864fdc4acc1a6f5fa2ffaec857076652cbbdfb2b928d3f885b0d0166fcec5410400148008000500", @ANYRES32=0xee00, @ANYBLOB="0000000c00b88008002e000000000008005a800400f9807000eb800400a580e6da4bdf155eb7d4a01b1c9455fec5dba4be27758dd05cd200612575d80d469de3debb0effc58ae6500210bb2e7f05870800ae001d0200000400ea800400088014006600fe88000000000000000000000000000104005b8008005600ffffffff0800a600", @ANYRES32=r2, @ANYBLOB="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"], 0x278c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000010) 1m20.004102635s ago: executing program 2 (id=1989): r0 = semctl$auto_GETPID(0x19, 0x8, 0xb, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = getpgrp(r0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004010) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x3000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages\x00', 0xa001, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r4 = gettid() kcmp$auto_KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, 0x9) getsockopt$auto_SO_TXTIME(r2, 0x10, 0x3d, &(0x7f0000000180)='{\x00', &(0x7f00000001c0)) 1m19.525890185s ago: executing program 2 (id=1991): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/tcp\x00', 0x288040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd=0xffffffffffffffff, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) mmap$auto(0x8, 0x80000000, 0x3, 0x17, r3, 0xc) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 1m17.78726281s ago: executing program 2 (id=1994): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(r2, 0x0, 0x9a6, 0x6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x70d782, 0x0) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff) ioctl$auto_FIGETBSZ(0xffffffffffffffff, 0x2, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe2080, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event0\x00', 0x80400, 0x0) ioctl$auto_EVIOCSMASK(r3, 0x40104593, &(0x7f00000002c0)={0x2, 0x8, 0x3}) r4 = set_tid_address$auto(&(0x7f0000000040)=0x8000) sendmsg$auto_NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c001}, 0xc000) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, 0x0) 1m13.769446668s ago: executing program 40 (id=1975): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0xfffffdff, &(0x7f00000001c0)=@task_fd_query={0x0, r0, 0x800, 0x10004, 0x5, 0x1000049, 0xffffffffffffffff, 0x9, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x2, 0x0, 0x0, 0x6}, 0x20000007}, 0x3, 0x800000) mmap$auto(0x0, 0x4020009, 0x6, 0x14, 0x401, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r2, r2, 0x0, 0x4a00) ioctl$auto(r1, 0xc0445624, r2) 1m9.263097142s ago: executing program 41 (id=1982): r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) write$auto_split_huge_pages_fops_huge_memory(r0, &(0x7f00000000c0)='1', 0x1) 1m8.897348368s ago: executing program 9 (id=2012): mmap$auto(0x5c, 0x2000d, 0x4000000000df, 0xeb0, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24004099}, 0xc0) r0 = socket(0x2, 0x80002, 0x73) mmap$auto(0x5, 0x12, 0x7f, 0x59db, 0x401, 0x8004) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e20, @multicast2}, 0xf30d) connect$auto(0x3, &(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23, 0x1}}, 0x56) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0) io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x400008, 0x6, 0xf610, 0x2, 0x8003) unshare$auto(0x40000080) bpf$auto(0x5, &(0x7f0000001180)=@link_detach={r0}, 0x5) mmap$auto(0x0, 0x2020009, 0x6, 0xeb3, 0xffffffffffffffff, 0xffffffff) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) poll$auto(&(0x7f0000000000)={r2, 0x2, 0xed}, 0x1, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7fff, 0x3, 0x200, 0x9, 0x3, 0x800000000006, 0x3, 0x7, 0x9, 0x8000009, 0x10007, 0x80, 0x4, 0xffefffff, 0x400003, 0x2080, 0x203, 0x0, 0x20e9d181, 0x400300000000000, 0xdb, 0x3, 0x6, 0xf04, [0xfffffffffffffffe, 0x4, 0x2, 0x1, 0x2, 0xfffffffffffffffe, 0x4, 0x6, 0x66, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0xfffffffffffffffd, 0x8f, 0x10000, 0x8000000, 0x7, 0x0, 0x1, 0xfffffffefffffffd, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x1, 0x100000001, 0x0, 0x0, 0xfffffffffffffffb, 0x10, 0x0, 0x0, 0x20000, 0x0, 0x3, 0xff, 0x80, 0x8c]}, 0x2, 0x800000d) write$auto(r1, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x147) readv$auto(0x3, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x9, 0x15f4da07, 0x6, 0x10001, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) rseq$auto(0x0, 0x8000, 0x205, 0x5) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40e240, 0x58) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) write$auto_tty_fops_tty_io(r3, &(0x7f00000005c0)="c3341b36", 0x4) kexec_load$auto(0x70, 0x2, &(0x7f0000000080)={@kbuf=&(0x7f0000000180)="709bc6c9e3065f04b9f1373c3ffc3684426368a039f3aa960ab8176bf0542ba2368fcc0de90ea2d923fa424a9c5a32666043048c5591dee593e4d0f4e7303491eb4c8c0c70d5d17fef73ac", 0x0, 0x7fffffffffffffff, 0x403000}, 0x4) 1m8.317924505s ago: executing program 9 (id=2013): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0x100000000000000, 0x4, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r3) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)={0x30, r4, 0x901, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast1}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x4000, 0x0) bpf$auto(0xfffffffd, &(0x7f0000000580)=@link_create={@map_fd=r5, @target_ifindex=r0, 0xd, 0x341d, @tcx={@relative_id=0x5, 0x4}}, 0x6f4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 1m5.673956364s ago: executing program 9 (id=2015): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r3) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010927bd7000fbdbdf250200000014000c00ff01000000000000000b00000000000108000100a41414bb"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x4000, 0x0) bpf$auto(0xfffffffd, &(0x7f0000000580)=@link_create={@map_fd, @target_ifindex=r0, 0x7, 0x341e, @tracing={0x1f94165, 0xff}}, 0x100009) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 1m3.894057094s ago: executing program 3 (id=2018): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1ac}}, 0x4004) r0 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x700003f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000440)="0a1bab5c30595644f93bb154d7886d8ec5eacee8d3371cadb82b2606381300770dc8f745b5c76eedaa0ec76b0a8b", 0x2e) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x4, 0x2, [0x1, 0xfffffffa]}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/machinecheck/machinecheck0/monarch_timeout\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)="33aa0d7191af", 0x6) 1m2.670458911s ago: executing program 42 (id=1994): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(r2, 0x0, 0x9a6, 0x6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x70d782, 0x0) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff) ioctl$auto_FIGETBSZ(0xffffffffffffffff, 0x2, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe2080, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event0\x00', 0x80400, 0x0) ioctl$auto_EVIOCSMASK(r3, 0x40104593, &(0x7f00000002c0)={0x2, 0x8, 0x3}) r4 = set_tid_address$auto(&(0x7f0000000040)=0x8000) sendmsg$auto_NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c001}, 0xc000) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, 0x0) 1m2.645017785s ago: executing program 9 (id=2020): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x81085520, r4) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r5, &(0x7f00000002c0)=""/190, 0xfffffe39) 59.947608515s ago: executing program 9 (id=2021): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xf5, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 59.758696475s ago: executing program 3 (id=2022): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x123040, 0x1d4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close$auto(0xffffffffffffffff) io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0) prctl$auto(0x200, 0x1, 0x0, 0x1, 0xa0f) write$auto(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r3) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)={0x3c, r4, 0x901, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast1}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1\x00', 0x4000, 0x0) bpf$auto(0xfffffffd, &(0x7f0000000580)=@link_create={@map_fd=r5, @target_ifindex=r0, 0xd, 0x341d, @tcx={@relative_id=0x5, 0x4}}, 0x6f4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 59.589537341s ago: executing program 1 (id=2011): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x1, 0x5, 0x7, 0x13c0d377, 0x4) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000180)={0x2, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0x1], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x806, 0x2}, {0x100, 0xffffffff, 0x52, 0x2, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r0, 0x1, 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) write$auto_ftrace_event_filter_fops_trace_events(r1, &(0x7f0000000300)="2baf82c1a5bc872318c266c40109c6b2b8e16198d96732ec3515702f77291f", 0x1f) 58.301569442s ago: executing program 1 (id=2023): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) io_uring_setup$auto(0xc, 0x0) pipe2$auto(0x0, 0x80) r0 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto_uhid_fops_uhid(r0, 0x0, 0xfccd) 58.223816229s ago: executing program 9 (id=2024): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r0, 0x1, 0x803a, r0, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/178, 0xb2) mmap$auto(0x3f00000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2c, 0x4, 0x0) umount2$auto(&(0x7f0000000000)='-\x00', 0x9) 56.645309875s ago: executing program 1 (id=2025): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1ac}}, 0x4004) r0 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000440)="0a1bab5c30595644f93bb154d7886d8ec5eacee8d3371cadb82b2606381300770dc8f745b5c76eedaa0ec76b0a8b", 0x2e) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x80000000001, 0xeb1, r0, 0x8000) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x4, 0x2, [0x1, 0xfffffffa]}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/machinecheck/machinecheck0/monarch_timeout\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)="33aa0d7191af", 0x6) close_range$auto(0x2, 0x8, 0x0) 56.511329813s ago: executing program 3 (id=2026): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x81085520, r4) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r5, &(0x7f00000002c0)=""/190, 0xfffffe39) 54.668022483s ago: executing program 3 (id=2027): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) io_uring_setup$auto(0xc, 0x0) pipe2$auto(0x0, 0x80) r0 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto_uhid_fops_uhid(r0, 0x0, 0xfccd) 53.044448756s ago: executing program 3 (id=2028): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x101000, 0x0) ioctl$auto(r3, 0xc0205647, 0xffffffffffffffff) ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) madvise$auto(0x9, 0x4, 0x7c3a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 51.396010685s ago: executing program 1 (id=2029): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x180443, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setgroups$auto(0x7, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x4b, 0x2) sendmsg$auto_SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x20000114) select$auto(0x3, 0x0, &(0x7f0000000180)={[0x5, 0xc, 0x3, 0x1, 0x100, 0x6, 0x8, 0x2, 0x80000000, 0x4, 0x0, 0x2, 0x800, 0x7, 0x5, 0xbb]}, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x9) socket(0x2, 0x801, 0x106) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram8\x00', 0x81, 0x0) ioctl$auto_BLKDISCARD(r0, 0x1277, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) 50.838166109s ago: executing program 1 (id=2031): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b74, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x42, 0x801, 0x0, 0xfffffffffffffffc, 0x0) write$auto(r0, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\x11\xb5\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0\xe4\xa3y\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ\xa5\xf4\xcb\x06\xc2\xf3\xf2\xfe\xdd\\!\xc1\\n\r\xe8\xbf\x9f\x1e\xb8\x8e\x0e\xbe\xdc\xc3}K\xab\xb8K=\xaaU\xa8\x0f\xd9\xfa\xb7n\xc1\x9c\xabg~\xfe\xaf`\x96\x02]t#\xe3\xbd\xf4N\xc8n\xfc7\xe60\xf1\x7f\x18 ~\xb5\x19H\x98~\xe6\x14\xe4S\xd8', 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x20000000000, 0x400008, 0xa, 0x9b73, 0xffffffffffffffff, 0x8) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r1 = socket(0xa, 0x1, 0x0) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) 49.908031374s ago: executing program 1 (id=2032): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000000008000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x2000101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x40005, 0x11, 0x101, 0x876c5, 0xc9, 0x1000003}}) io_uring_register$auto(r0, 0x11, 0x0, 0x56d) socket(0x2, 0x1, 0x106) socket(0x2, 0x3, 0xa) setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x1, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r2, 0x410, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') close_range$auto(0x2, 0xa, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r4 = io_uring_setup$auto(0x8, 0x0) mmap$auto(0x8001, 0x4020009, 0xdf, 0x17, 0x401, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_int=0x9, @inferred, 0x1, @_sigev_thread={0x0, 0x0}}, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0x2, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x401}}, 0x0) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="9bff69bd7000f9d3df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x2000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 49.659375273s ago: executing program 3 (id=2033): r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) write$auto(r1, 0x0, 0x80000001) socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f0000000340)=@qipcrtr={0x2a, 0xffffffff, 0x1}, 0x6) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = waitid$auto_P_ALL(0x0, 0xffffff81, &(0x7f0000000200)={@siginfo_0_0={0xfff, 0x1af7, 0x6, @_sigpoll={0x8, r0}}}, 0xfffffff9, &(0x7f0000000280)={{0x639, 0x52}, {0x5126, 0x9}, 0x8000000000000001, 0x5, 0x10001, 0xf80, 0x5ca9, 0x0, 0x8, 0x4, 0xe030, 0xffffffffffffffff, 0x1, 0x7b4, 0x5, 0x86}) close_range$auto(0x2, 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1, 0x4, 0x0) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf252b00000008001c00", @ANYRES32=r2, @ANYBLOB="49001c00", @ANYRES32=r2, @ANYBLOB="11000900000008000500ffffffff08001d000000cd001f9f28ab53edc81dcfafd5a8f45447830954754a3919cea7210fa23812e7e2f0b6d702701d924f31800661953af0e97cd2360f0e7577241659a7ddd692e2169d2a24c6fad61d257b3a73cf13779f9e2d663ddc3267d524b4b7e96982a30980ff2396115963f864eef275f59d7c2913e9b9d1d4eea032b787f476e185edc75ccfd0fc71bacafd2330100ad81d00af6bde1cc4ab3d830d1aa1a9044710b2c7ad8fa0ad9caeb372d6adcfa532145d7ae1ccc0f646618f6936654d91b9aafe64d1dffeb72c07a25bfa7fd63c0e3a266dd11290e8d8ac3f0e040f221ed0d0ed4162131cfae09bfbfb891f511bfaa1faff7d478133e28a2c449b8323dbe1cef00d1f2e4cd0e6d0191ca5b7eabdae0f7f3bdba6aee7e47584029b3795595eabcda9ed0de7d16ba20b001d59aecf0d", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r5 = socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x66) madvise$auto(0x0, 0x20000a, 0x8) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r6 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r6, 0x0, 0x7, 0x4cbd5d) r7 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec26\x00', 0xc0000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000180)={'\x00', 0x0, 0x5, 0x2, 0x9b7, 0x9, "fafffffc3924222ce18c1000", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "6c6529a31c18fffffffff300", "ef5ac4927aed9c5c00000080", ' \x00\x00\x00\x00\x00\t\x00']}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, 0x0) ioctl$auto_CEC_TRANSMIT(r6, 0xc0386105, 0x0) write$auto(0x3, 0x0, 0x400000000000050) r8 = socket(0xa, 0x1, 0x84) getsockopt$auto(r8, 0x0, 0x53, 0x0, 0x0) 43.065608784s ago: executing program 43 (id=2024): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r0, 0x1, 0x803a, r0, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/178, 0xb2) mmap$auto(0x3f00000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2c, 0x4, 0x0) umount2$auto(&(0x7f0000000000)='-\x00', 0x9) 34.69908693s ago: executing program 44 (id=2032): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000000008000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x2000101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x40005, 0x11, 0x101, 0x876c5, 0xc9, 0x1000003}}) io_uring_register$auto(r0, 0x11, 0x0, 0x56d) socket(0x2, 0x1, 0x106) socket(0x2, 0x3, 0xa) setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x1, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r2, 0x410, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') close_range$auto(0x2, 0xa, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r4 = io_uring_setup$auto(0x8, 0x0) mmap$auto(0x8001, 0x4020009, 0xdf, 0x17, 0x401, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_int=0x9, @inferred, 0x1, @_sigev_thread={0x0, 0x0}}, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0x2, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x401}}, 0x0) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="9bff69bd7000f9d3df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x2000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 34.137232142s ago: executing program 45 (id=2033): r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) write$auto(r1, 0x0, 0x80000001) socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f0000000340)=@qipcrtr={0x2a, 0xffffffff, 0x1}, 0x6) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = waitid$auto_P_ALL(0x0, 0xffffff81, &(0x7f0000000200)={@siginfo_0_0={0xfff, 0x1af7, 0x6, @_sigpoll={0x8, r0}}}, 0xfffffff9, &(0x7f0000000280)={{0x639, 0x52}, {0x5126, 0x9}, 0x8000000000000001, 0x5, 0x10001, 0xf80, 0x5ca9, 0x0, 0x8, 0x4, 0xe030, 0xffffffffffffffff, 0x1, 0x7b4, 0x5, 0x86}) close_range$auto(0x2, 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1, 0x4, 0x0) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf252b00000008001c00", @ANYRES32=r2, @ANYBLOB="49001c00", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r5 = socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x66) madvise$auto(0x0, 0x20000a, 0x8) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r6 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r6, 0x0, 0x7, 0x4cbd5d) r7 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec26\x00', 0xc0000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000180)={'\x00', 0x0, 0x5, 0x2, 0x9b7, 0x9, "fafffffc3924222ce18c1000", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "6c6529a31c18fffffffff300", "ef5ac4927aed9c5c00000080", ' \x00\x00\x00\x00\x00\t\x00']}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, 0x0) ioctl$auto_CEC_TRANSMIT(r6, 0xc0386105, 0x0) write$auto(0x3, 0x0, 0x400000000000050) r8 = socket(0xa, 0x1, 0x84) getsockopt$auto(r8, 0x0, 0x53, 0x0, 0x0) 33.971193022s ago: executing program 4 (id=2057): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) setreuid$auto(0x4, 0x8) futimesat$auto(0xda, 0x0, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) recvmmsg$auto(r0, 0x0, 0x10002, 0x4, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r3, 0x0, 0x39b8) 32.638835334s ago: executing program 4 (id=2059): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x81085520, r3) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r4 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f00000002c0)=""/190, 0xfffffe39) 30.804589594s ago: executing program 4 (id=2060): mmap$auto(0xfffffffffffffffc, 0x6, 0xdf, 0xeb0, 0x401, 0x8000) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x3, 0x4, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0xff, 0x403, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r0, 0x404c534a, 0x38) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x8000000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r1) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sda\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/pagemap\x00', 0x141201, 0x0) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x1d}, 0x800005, 0xfffffffffffffffa, 0x4, 0x10b1c) unshare$auto(0x40000080) unshare$auto(0x6) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000500)=@link_detach, 0x1) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/o2hb/quorum_regions\x00', 0x24000, 0x0) execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=&(0x7f0000000140)='/dev/tty19\x00', &(0x7f0000000200)=0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 29.78910509s ago: executing program 5 (id=2062): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0x10000003e}, 0x7, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow\x00', 0x40, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x2a02, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r1, 0x0, 0x10001, 0x830) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7e}, 0x40000000000009) r2 = socket(0xa, 0x1, 0x84) r3 = io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'nicvf0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100010100fbdb58b4b18893462273cb6662", @ANYRES32=r2, @ANYBLOB="05003e0005000000"], 0x24}, 0x1, 0x1400, 0x0, 0x4000080}, 0x20000084) r9 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r10, 0xfd}, 0x6a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) r13 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c010000", @ANYRES16=0x0, @ANYBLOB="10022abd7000fbdbdf25020000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200726f73653000000000000000000000001400020070696d72656730000000000000000000080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="2800018008000300ff03000014000200626f6e645f736c6176655f310000000008000300060000003c0001801400020070696d3672656730000000000000000008000100", @ANYRES32=r14, @ANYBLOB="1400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r4, @ANYBLOB="1c000180080003000000010008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="2400018008000100", @ANYRES32=r10, @ANYBLOB="0800010041ae9038dc96b272caf89657d9b5899c941ded8eabdd8d402f623744cdce9095d1043267c88d08fd67c2cb0ed3398347cfef9e59d2846c6138e06bea0a929e467d8803cbae2b6cfeb649b9cd4d8f13a371820b9a66acd78ca1dd8ccfc4550a617f36798c1a97243f848cbd19a3", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000300000000404400018008000100", @ANYRES32=r12, @ANYBLOB="0800030003000000140002006970366772653000000000000000000008000300000000001400020070696d7265673000000000000000000044000180080003000300000008000300f9ffffff1400020070696d367265670000000000000000001400020073797a6b616c6c65723100000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x136}, 0x1, 0x0, 0x0, 0xc4}, 0x40000) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) 29.111927259s ago: executing program 4 (id=2063): mmap$auto(0x5c, 0x2000d, 0x4000000000df, 0xeb0, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24004099}, 0xc0) r0 = socket(0x2, 0x80002, 0x73) mmap$auto(0x5, 0x12, 0x7f, 0x59db, 0x401, 0x8004) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e20, @multicast2}, 0xf30d) connect$auto(0x3, &(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23, 0x1}}, 0x56) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0) io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x400008, 0x6, 0xf610, 0x2, 0x8003) unshare$auto(0x40000080) bpf$auto(0x5, &(0x7f0000001180)=@link_detach={r0}, 0x5) mmap$auto(0x0, 0x2020009, 0x6, 0xeb3, 0xffffffffffffffff, 0xffffffff) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) poll$auto(&(0x7f0000000000)={r2, 0x2, 0xed}, 0x1, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7fff, 0x3, 0x200, 0x9, 0x3, 0x800000000006, 0x3, 0x7, 0x9, 0x8000009, 0x10007, 0x80, 0x4, 0xffefffff, 0x400003, 0x2080, 0x203, 0x0, 0x20e9d181, 0x400300000000000, 0xdb, 0x3, 0x6, 0xf04, [0xfffffffffffffffe, 0x4, 0x2, 0x1, 0x2, 0xfffffffffffffffe, 0x4, 0x6, 0x66, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0xfffffffffffffffd, 0x8f, 0x10000, 0x8000000, 0x7, 0x0, 0x1, 0xfffffffefffffffd, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x1, 0x100000001, 0x0, 0x0, 0xfffffffffffffffb, 0x10, 0x0, 0x0, 0x20000, 0x0, 0x3, 0xff, 0x80, 0x8c]}, 0x2, 0x800000d) write$auto(r1, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x147) readv$auto(0x3, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x9, 0x15f4da07, 0x6, 0x10001, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) rseq$auto(0x0, 0x8000, 0x205, 0x5) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40e240, 0x58) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) write$auto_tty_fops_tty_io(r3, &(0x7f00000005c0)="c3341b36", 0x4) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40000) kexec_load$auto(0x70, 0x2, &(0x7f0000000080)={@kbuf=&(0x7f0000000180)="709bc6c9e3065f04b9f1373c3ffc3684426368a039f3aa960ab8176bf0542ba2368fcc0de90ea2d923fa424a9c5a32666043048c5591dee593e4d0f4e7303491eb4c8c0c70d5d17fef73ac", 0x0, 0x7fffffffffffffff, 0x403000}, 0x4) 29.00662115s ago: executing program 5 (id=2064): mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x1, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x200000008000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x7, 0x0, 0x2, 0x401}, 0xed7138c}, 0x2, 0x9) r1 = socket(0x11, 0x3, 0x9) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) unshare$auto(0x40000080) io_uring_setup$auto(0x1, 0x0) socket(0x2, 0x2, 0x1) connect$auto(r1, &(0x7f0000000080)=@xdp={0x2c, 0x7, 0x0, 0x9}, 0x6) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x80) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x26, 0x80805, 0x0) r4 = socket(0x2a, 0x2, 0x1) connect$auto(r4, 0x0, 0x55) socket(0x1, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, 0x0, 0x1f, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$auto(r0, 0x6, 0x1d, 0x0, 0x0) 28.263376241s ago: executing program 4 (id=2065): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x200000, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 27.1840777s ago: executing program 5 (id=2066): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x1a3000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x8, 0xe2, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x100000000000033, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/stable_node_dups\x00', 0x20000, 0x0) r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) write$auto_split_huge_pages_fops_huge_memory(r0, &(0x7f00000000c0)='1', 0x1) mmap$auto(0x0, 0x2020009, 0x800003, 0xeb1, 0xfffffffffffffffa, 0x100) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x204400, 0x0) socket(0x3, 0x6, 0x4) getsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x7, 0x40, &(0x7f0000000340)='\x00', &(0x7f00000004c0)=0x8) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0xc0000103, 0x400, 0x9}]}) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x94, 0xf3, 0xb0, @raw=0xfffff02c}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/176, 0xb0) 26.061125825s ago: executing program 4 (id=2067): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1ac}}, 0x4004) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) gettid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 24.671430958s ago: executing program 5 (id=2068): r0 = semctl$auto_GETPID(0x19, 0x8, 0xb, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = getpgrp(r0) socket(0x2, 0x1, 0x106) mmap$auto(0xa34c, 0x9, 0xfffffffffffffffd, 0x9b72, 0x2, 0x400008000) mmap$auto(0x0, 0x9, 0xf, 0x8016, 0x3, 0x5) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004010) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x182, 0x0) r2 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x141402, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000029, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0x81a0ae8c, 0x0) read$auto_trace_clock_fops_trace(r2, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$auto_SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, &(0x7f0000000600)="5ba8d4") openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/loop6\x00', 0x101282, 0x0) 24.290947611s ago: executing program 5 (id=2069): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xf8, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 22.664305793s ago: executing program 5 (id=2070): openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/ipsec\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) sendmsg$auto_IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x46, 0x1, 0x0, 0x1, [@nested={0x10, 0x15c, 0x0, 0x1, [@nested={0x4, 0x46}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @generic="f4802067c7c219950232a2bd3d5f11c81b5466e54db0d52aee6b1cc590989a450a3de355c72702068a65ca23ca8906148c74"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x4, "8f07d7f6bc6127350c6715c9181da1a3e0c281bbb565775a4b18dc49cb551e47", @raw=0x5}) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/beacon_timeout\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000240)={0x0, 0xfffffffd}, 0x6, 0xc, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)='\x00', 0x1) 21.905048025s ago: executing program 8 (id=2056): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) socket(0x15, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) io_uring_setup$auto(0xc, 0x0) pipe2$auto(0x0, 0x80) r0 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto_uhid_fops_uhid(r0, 0x0, 0xfccd) 20.763210839s ago: executing program 8 (id=2072): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setgroups$auto(0x7, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x4b, 0x2) sendmsg$auto_SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x20000114) select$auto(0x3, 0x0, &(0x7f0000000180)={[0x5, 0xc, 0x3, 0x1, 0x100, 0x6, 0x8, 0x2, 0x80000000, 0x4, 0x0, 0x2, 0x800, 0x7, 0x5, 0xbb]}, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x9) socket(0x2, 0x801, 0x106) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram8\x00', 0x81, 0x0) ioctl$auto_BLKDISCARD(r0, 0x1277, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) 20.621683565s ago: executing program 8 (id=2073): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40008000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0x10000003e}, 0x7, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x2a02, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/pcm0c/sub2/status\x00', 0x802, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r1, 0x0, 0x10001, 0x830) writev$auto(r0, &(0x7f0000000180)={0x0, 0x7a}, 0x4) io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'nicvf0\x00'}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100010100fbdb58b4b18893462273cb6662", @ANYRES32, @ANYBLOB="05003e0005000000"], 0x24}, 0x1, 0x1400, 0x0, 0x4000080}, 0x20000084) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='%\n'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000340), r4) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) 20.426887012s ago: executing program 8 (id=2074): mmap$auto(0x0, 0x4, 0x6, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/arp\x00', 0x400002, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000280)=""/188, 0xfffffffffffffe31) close_range$auto(r1, 0x8, 0x0) socket(0x21, 0x1, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x15, 0x40000000000a5, 0x8000) socket(0x18, 0x3, 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0xfffffffd, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x7fff, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x400000000e1, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_1={r2, 0xa, @value=0x100, 0x4}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@iter_create={0xffffffffffffffff, 0x6}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@isdn={0x22, 0x6, 0x1, 0xa, 0x3}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 19.820275189s ago: executing program 8 (id=2077): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40008000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0x10000003e}, 0x7, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x2a02, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/pcm0c/sub2/status\x00', 0x802, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r1, 0x0, 0x10001, 0x830) writev$auto(r0, &(0x7f0000000180)={0x0, 0x7a}, 0x4) io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'nicvf0\x00'}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100010100fbdb58b4b18893462273cb6662", @ANYRES32, @ANYBLOB="05003e0005000000"], 0x24}, 0x1, 0x1400, 0x0, 0x4000080}, 0x20000084) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='%\n'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000340), r4) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) 18.785542373s ago: executing program 6 (id=2080): r0 = semctl$auto_GETPID(0x19, 0x8, 0xb, 0x5) r1 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/options/trace_printk_dest\x00', 0x40040, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = getpgrp(r0) kcmp$auto(0x0, r2, 0x2c, 0xffffffffffffffff, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004010) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r5 = memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/vhci_hcd.3/usb15/15-0:1.0/usb15-port2/over_current_count\x00', 0x22e03, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r7 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r7, 0x0, 0x4) mmap$auto(0x0, 0x4000002020009, 0x3, 0x10, 0xfffffffffffffffa, 0x8000) r8 = gettid() r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000280), r5) sendmsg$auto_CTRL_CMD_GETFAMILY(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r9, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc880}, 0x1) kcmp$auto_KCMP_EPOLL_TFD(r8, r8, 0x7, 0xffffffffffffffff, 0x9) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) write$auto_trace_options_core_fops_trace(r1, &(0x7f0000000080)="09cc2769bc002d6cb21c3d0676965492965b3462f9aeb968179d9db206a16f557eb4c6f2659a52743b60c1b2828a6171dec1c15a537747273686009ba701127221b0f0f52a6adb0f46d8bfa7670bfdfdfbce539ee7211acee7798b68efb08530f19555f141260a6416ad06ff746619d0f95e602f4031e0", 0x77) getsockopt$auto_SO_TXTIME(r3, 0x10, 0x3d, &(0x7f0000000180)='{\x00', &(0x7f00000001c0)) 18.383026558s ago: executing program 6 (id=2081): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40008000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0x10000003e}, 0x7, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x2a02, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/pcm0c/sub2/status\x00', 0x802, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r1, 0x0, 0x10001, 0x830) writev$auto(r0, &(0x7f0000000180)={0x0, 0x7a}, 0x4) io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100010100fbdb58b4b18893462273cb6662", @ANYRES32, @ANYBLOB="05003e0005000000"], 0x24}, 0x1, 0x1400, 0x0, 0x4000080}, 0x20000084) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='%\n'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000340), r4) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) 18.272241945s ago: executing program 6 (id=2082): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x81085520, r3) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r4 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f00000002c0)=""/190, 0xfffffe39) 17.671375778s ago: executing program 6 (id=2083): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/active_slave\x00', 0xa800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/41, 0x29) socket(0x23, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) connect$auto(0xffffffffffffffff, 0x0, 0x3a) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000100)='/dev/usbmon8\x00', 0x0, 0x0) read$auto_mon_fops_binary_mon_bin(r1, 0x0, 0x30) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x3, 0x5404, 0x38) bind$auto(0x3, 0x0, 0x6a) ioctl$auto_MON_IOCG_STATS(r1, 0x80089203, 0x0) ioctl$auto_MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000000)={0xfffffc01, 0x2}) close_range$auto(0x2, 0xffffffffffffffff, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) r2 = getegid() r3 = setfsuid$auto(0xee00) keyctl$auto(0x1, 0x0, r3, r2, 0xf) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r5, 0x4c81, 0xffffffffffffffff) r6 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) ioctl$auto_NVRAM_SETCKS(r6, 0x7041, 0x0) ioctl$auto(0x3, 0xae41, r4) 17.366483224s ago: executing program 6 (id=2084): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/dummy_hcd.6/usb7/bNumConfigurations\x00', 0x80000, 0x0) read$auto(r2, &(0x7f0000000180)='^{-!S\x84\x00', 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 16.414512134s ago: executing program 6 (id=2085): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40008000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0x10000003e}, 0x7, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x2a02, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/pcm0c/sub2/status\x00', 0x802, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r1, 0x0, 0x10001, 0x830) writev$auto(r0, &(0x7f0000000180)={0x0, 0x7a}, 0x4) io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100010100fbdb58b4b18893462273cb6662", @ANYRES32, @ANYBLOB="05003e0005000000"], 0x24}, 0x1, 0x1400, 0x0, 0x4000080}, 0x20000084) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='%\n'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000340), r4) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) 10.692326649s ago: executing program 46 (id=2067): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1ac}}, 0x4004) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) gettid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 7.16268551s ago: executing program 47 (id=2070): openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/ipsec\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) sendmsg$auto_IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x46, 0x1, 0x0, 0x1, [@nested={0x10, 0x15c, 0x0, 0x1, [@nested={0x4, 0x46}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @generic="f4802067c7c219950232a2bd3d5f11c81b5466e54db0d52aee6b1cc590989a450a3de355c72702068a65ca23ca8906148c74"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x4, "8f07d7f6bc6127350c6715c9181da1a3e0c281bbb565775a4b18dc49cb551e47", @raw=0x5}) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/beacon_timeout\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000240)={0x0, 0xfffffffd}, 0x6, 0xc, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)='\x00', 0x1) 7.130273271s ago: executing program 7 (id=2086): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x180443, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setgroups$auto(0x7, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x4b, 0x2) sendmsg$auto_SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x20000114) select$auto(0x3, 0x0, &(0x7f0000000180)={[0x5, 0xc, 0x3, 0x1, 0x100, 0x6, 0x8, 0x2, 0x80000000, 0x4, 0x0, 0x2, 0x800, 0x7, 0x5, 0xbb]}, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x9) socket(0x2, 0x801, 0x106) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram8\x00', 0x81, 0x0) ioctl$auto_BLKDISCARD(r0, 0x1277, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) 7.011236802s ago: executing program 7 (id=2088): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x1a3000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x8, 0xe2, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x100000000000033, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/stable_node_dups\x00', 0x20000, 0x0) r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) write$auto_split_huge_pages_fops_huge_memory(r0, &(0x7f00000000c0)='1', 0x1) mmap$auto(0x0, 0x2020009, 0x800003, 0xeb1, 0xfffffffffffffffa, 0x100) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x204400, 0x0) socket(0x3, 0x6, 0x4) getsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x7, 0x40, &(0x7f0000000340)='\x00', &(0x7f00000004c0)=0x8) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0xc0000103, 0x400, 0x9}]}) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x94, 0xf3, 0xb0, @raw=0xfffff02c}}) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/176, 0xb0) 5.584380778s ago: executing program 7 (id=2089): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x800100, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 4.612807502s ago: executing program 48 (id=2077): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40008000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0x10000003e}, 0x7, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x2a02, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/pcm0c/sub2/status\x00', 0x802, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r1, 0x0, 0x10001, 0x830) writev$auto(r0, &(0x7f0000000180)={0x0, 0x7a}, 0x4) io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'nicvf0\x00'}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100010100fbdb58b4b18893462273cb6662", @ANYRES32, @ANYBLOB="05003e0005000000"], 0x24}, 0x1, 0x1400, 0x0, 0x4000080}, 0x20000084) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='%\n'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000340), r4) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) 3.376086753s ago: executing program 7 (id=2091): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) setuid$auto(0xe) prctl$auto(0x1000000001c, 0x0, 0x0, 0x9, 0x38000000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getrusage$auto(0x1, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 1.151932474s ago: executing program 49 (id=2085): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40008000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0x10000003e}, 0x7, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x2a02, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/pcm0c/sub2/status\x00', 0x802, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r1, 0x0, 0x10001, 0x830) writev$auto(r0, &(0x7f0000000180)={0x0, 0x7a}, 0x4) io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100010100fbdb58b4b18893462273cb6662", @ANYRES32, @ANYBLOB="05003e0005000000"], 0x24}, 0x1, 0x1400, 0x0, 0x4000080}, 0x20000084) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='%\n'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000340), r4) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) 0s ago: executing program 0 (id=2087): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x81085520, r3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r4 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f00000002c0)=""/190, 0xfffffe39) kernel console output (not intermixed with test programs): 13803] kexec: Could not allocate control_code_buffer [ 806.452439][T13854] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by ""[13854] [ 807.831438][T13866] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5627] was attempted by ""[13866] [ 808.193281][T13883] blktrace: Concurrent blktraces are not allowed on loop2 [ 809.161550][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.168243][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.426137][T13916] kexec: Could not allocate control_code_buffer [ 817.231132][T13981] Device name cannot be null; rc = [-22] [ 819.150939][T13986] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5633] was attempted by ""[13986] [ 819.556544][T13993] kexec: Could not allocate control_code_buffer [ 819.962475][T14023] Device name cannot be null; rc = [-22] [ 820.559419][T14010] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by ""[14010] [ 820.655293][T14011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1445'. [ 820.778722][T14017] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5627] was attempted by ""[14017] [ 820.900032][T14018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1446'. [ 821.812251][T14028] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5633] was attempted by ""[14028] [ 821.906788][T14029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1448'. [ 824.253653][T14058] kexec: Could not allocate control_code_buffer [ 824.444877][T14061] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5633] was attempted by ""[14061] [ 824.548385][T14062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1454'. [ 824.734449][T14090] Device name cannot be null; rc = [-22] [ 825.898494][T14083] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5627] was attempted by ""[14083] [ 826.219268][T14083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1457'. [ 830.237414][T14142] blktrace: Concurrent blktraces are not allowed on loop2 [ 831.201178][T14155] blktrace: Concurrent blktraces are not allowed on loop2 [ 835.430613][T14210] blktrace: Concurrent blktraces are not allowed on loop2 [ 835.932970][T14206] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by ""[14206] [ 836.708328][T14203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1480'. [ 840.717366][T14256] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5627] was attempted by ""[14256] [ 841.196380][T14256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1488'. [ 841.867396][T14278] blktrace: Concurrent blktraces are not allowed on loop2 [ 843.546672][T14298] blktrace: Concurrent blktraces are not allowed on loop2 [ 847.271663][T14325] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5623] was attempted by ""[14325] [ 847.290426][T14340] Device name cannot be null; rc = [-22] [ 847.419217][T14327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1500'. [ 847.786334][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1505'. [ 848.255421][T14349] Device name cannot be null; rc = [-22] [ 857.997462][T14439] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5623] was attempted by ""[14439] [ 861.951587][T14495] blktrace: Concurrent blktraces are not allowed on loop2 [ 870.600995][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.607592][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.615202][T14696] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5633] was attempted by ""[14696] [ 881.290828][T14688] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5623] was attempted by ""[14688] [ 882.625134][T14706] blktrace: Concurrent blktraces are not allowed on loop2 [ 883.231361][T14719] blktrace: Concurrent blktraces are not allowed on loop2 [ 886.891091][T14756] Device name cannot be null; rc = [-22] [ 889.166500][T14767] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by ""[14767] [ 896.479606][T14850] Device name cannot be null; rc = [-22] [ 897.071011][T14854] Device name cannot be null; rc = [-22] [ 900.166047][T14882] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by ""[14882] [ 901.000726][T14911] blktrace: Concurrent blktraces are not allowed on loop2 [ 901.937833][T14892] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5627] was attempted by ""[14892] [ 902.053695][T14893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1592'. [ 903.377421][T14923] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5633] was attempted by ""[14923] [ 903.480610][T14924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1597'. [ 906.645942][T14947] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5633] was attempted by ""[14947] [ 906.784055][T14950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1601'. [ 915.272645][T15056] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1619'. [ 915.762741][T15059] net_ratelimit: 47 callbacks suppressed [ 915.762765][T15059] netlink: zone id is out of range [ 915.821240][T15059] netlink: zone id is out of range [ 915.829255][T15059] netlink: zone id is out of range [ 915.834891][T15059] netlink: zone id is out of range [ 915.891419][T15059] netlink: zone id is out of range [ 915.934371][T15059] netlink: zone id is out of range [ 915.960635][T15059] netlink: zone id is out of range [ 915.981568][T15059] netlink: zone id is out of range [ 916.003357][T15059] netlink: zone id is out of range [ 916.019439][T15059] netlink: zone id is out of range [ 926.353793][T15165] binder: 15162:15165 ioctl c0306201 200000000000 returned -14 [ 926.525245][T15163] syz.1.1635 (15163) used greatest stack depth: 18848 bytes left [ 932.040975][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.047400][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.364842][T15249] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5627] was attempted by ""[15249] [ 935.663982][T15251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1651'. [ 937.878819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 939.755873][T15278] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5623] was attempted by ""[15278] [ 939.842114][T15279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1655'. [ 940.877893][T15315] tc_dump_action: action bad kind [ 951.007482][T15426] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by ""[15426] [ 951.742931][T15410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1677'. [ 951.932764][T15430] Device name cannot be null; rc = [-22] [ 953.321403][T15439] Device name cannot be null; rc = [-22] [ 957.573778][T15472] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5633] was attempted by ""[15472] [ 957.680814][T15475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1688'. [ 960.101040][T15518] Device name cannot be null; rc = [-22] [ 960.918853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 963.972905][T15568] ======================================================= [ 963.972905][T15568] WARNING: The mand mount option has been deprecated and [ 963.972905][T15568] and is ignored by this kernel. Remove the mand [ 963.972905][T15568] option from the mount to silence this warning. [ 963.972905][T15568] ======================================================= [ 966.531795][T15598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1710'. [ 966.579077][T15598] vlan1: entered allmulticast mode [ 966.600612][T15598] veth0_vlan: entered allmulticast mode [ 967.825729][T15598] kexec: Could not allocate control_code_buffer [ 972.549712][T15666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1723'. [ 973.449775][T15671] net_ratelimit: 47 callbacks suppressed [ 973.449808][T15671] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 975.551343][T15684] Device name cannot be null; rc = [-22] [ 981.770563][ T30] audit: type=1800 audit(1778730249.587:3): pid=15751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1739" name="lu_gp_id" dev="configfs" ino=39787 res=0 errno=0 [ 988.035582][T15843] blktrace: Concurrent blktraces are not allowed on loop2 [ 989.009418][T15851] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by ""[15851] [ 993.481090][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.487512][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.027307][T15924] netlink: zone id is out of range [ 994.055024][T15924] netlink: zone id is out of range [ 994.078477][T15924] netlink: zone id is out of range [ 994.113837][T15924] netlink: zone id is out of range [ 994.158309][T15924] netlink: zone id is out of range [ 994.174594][T15924] netlink: zone id is out of range [ 994.191667][T15924] netlink: zone id is out of range [ 994.287226][T15924] netlink: zone id is out of range [ 994.303257][T15924] netlink: zone id is out of range [ 994.311222][T15924] netlink: zone id is out of range [ 995.337026][T15919] kexec: Could not allocate control_code_buffer [ 995.764714][T15954] FAULT_INJECTION: forcing a failure. [ 995.764714][T15954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 995.764786][T15954] CPU: 1 UID: 0 PID: 15954 Comm: syz.3.1778 Tainted: G L syzkaller #0 PREEMPT(full) [ 995.764818][T15954] Tainted: [L]=SOFTLOCKUP [ 995.764826][T15954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 995.764842][T15954] Call Trace: [ 995.764849][T15954] [ 995.764857][T15954] dump_stack_lvl+0x100/0x190 [ 995.764887][T15954] should_fail_ex.cold+0x5/0xa [ 995.764916][T15954] _copy_to_user+0x32/0xd0 [ 995.764945][T15954] simple_read_from_buffer+0xcb/0x170 [ 995.764974][T15954] proc_fail_nth_read+0x1af/0x230 [ 995.765012][T15954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 995.765051][T15954] ? rw_verify_area+0xce/0x6d0 [ 995.765074][T15954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 995.765111][T15954] vfs_read+0x1e4/0xb30 [ 995.765140][T15954] ? __pfx_vfs_read+0x10/0x10 [ 995.765167][T15954] ? __fget_files+0x215/0x3d0 [ 995.765201][T15954] ? __fget_files+0x21f/0x3d0 [ 995.765271][T15954] ksys_read+0x12a/0x250 [ 995.765297][T15954] ? __pfx_ksys_read+0x10/0x10 [ 995.765325][T15954] ? rcu_is_watching+0x12/0xc0 [ 995.765357][T15954] do_syscall_64+0x10b/0xf80 [ 995.765401][T15954] ? clear_bhb_loop+0x40/0x90 [ 995.765429][T15954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.765452][T15954] RIP: 0033:0x7f8cac55d68e [ 995.765470][T15954] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 995.765492][T15954] RSP: 002b:00007f8cad3fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 995.765518][T15954] RAX: ffffffffffffffda RBX: 00007f8cad3fe6c0 RCX: 00007f8cac55d68e [ 995.765534][T15954] RDX: 000000000000000f RSI: 00007f8cad3fe0a0 RDI: 0000000000000004 [ 995.765548][T15954] RBP: 00007f8cad3fe090 R08: 0000000000000000 R09: 0000000000000000 [ 995.765561][T15954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.765574][T15954] R13: 00007f8cac816128 R14: 00007f8cac816090 R15: 00007ffe7af2e5a8 [ 995.765604][T15954] [ 996.063795][T15956] FAULT_INJECTION: forcing a failure. [ 996.063795][T15956] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 996.063919][T15956] CPU: 0 UID: 0 PID: 15956 Comm: syz.1.1779 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.063966][T15956] Tainted: [L]=SOFTLOCKUP [ 996.063978][T15956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 996.063997][T15956] Call Trace: [ 996.064013][T15956] [ 996.064022][T15956] dump_stack_lvl+0x100/0x190 [ 996.064052][T15956] should_fail_ex.cold+0x5/0xa [ 996.064081][T15956] ? prepare_alloc_pages+0x16d/0x5f0 [ 996.064115][T15956] should_fail_alloc_page+0xeb/0x140 [ 996.064152][T15956] prepare_alloc_pages+0x1f0/0x5f0 [ 996.064188][T15956] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 996.064231][T15956] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 996.064266][T15956] ? stack_depot_save_flags+0x479/0x9d0 [ 996.064301][T15956] ? kasan_save_stack+0x3f/0x50 [ 996.064323][T15956] ? kasan_save_stack+0x30/0x50 [ 996.064345][T15956] ? kasan_save_track+0x14/0x30 [ 996.064367][T15956] ? __kasan_slab_alloc+0x89/0x90 [ 996.064393][T15956] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 996.064432][T15956] ? __pmd_alloc+0xbf/0x950 [ 996.064461][T15956] ? walk_to_pmd+0x3a3/0x4c0 [ 996.064491][T15956] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 996.064531][T15956] ? kcov_mmap+0xca/0x130 [ 996.064562][T15956] ? __mmap_region+0x13e1/0x2da0 [ 996.064598][T15956] ? mmap_region+0x527/0x620 [ 996.064618][T15956] ? vm_mmap_pgoff+0x29e/0x470 [ 996.064648][T15956] ? __x64_sys_mmap+0x125/0x190 [ 996.064672][T15956] ? do_syscall_64+0x10b/0xf80 [ 996.064707][T15956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.064741][T15956] ? __lock_acquire+0x4a5/0x2630 [ 996.064766][T15956] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 996.064803][T15956] ? policy_nodemask+0xed/0x4f0 [ 996.064833][T15956] alloc_pages_mpol+0x1fb/0x540 [ 996.064862][T15956] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 996.064892][T15956] ? do_raw_spin_lock+0x128/0x260 [ 996.064919][T15956] ? find_held_lock+0x2b/0x80 [ 996.064953][T15956] alloc_pages_noprof+0x1a/0x160 [ 996.064986][T15956] pte_alloc_one+0x1c/0x3d0 [ 996.065020][T15956] __pte_alloc+0x6d/0x3e0 [ 996.065046][T15956] ? __pfx___pte_alloc+0x10/0x10 [ 996.065106][T15956] ? walk_to_pmd+0x302/0x4c0 [ 996.065156][T15956] get_locked_pte+0xa1/0xc0 [ 996.065189][T15956] insert_page+0xcc/0x220 [ 996.065221][T15956] ? __pfx_insert_page+0x10/0x10 [ 996.065251][T15956] ? __pfx_down_read_trylock+0x10/0x10 [ 996.065287][T15956] vm_insert_page+0x2c0/0x400 [ 996.065322][T15956] kcov_mmap+0xca/0x130 [ 996.065358][T15956] __mmap_region+0x13e1/0x2da0 [ 996.065404][T15956] ? __pfx___mmap_region+0x10/0x10 [ 996.065459][T15956] ? find_held_lock+0x2b/0x80 [ 996.065498][T15956] ? find_held_lock+0x2b/0x80 [ 996.065528][T15956] ? ima_match_policy+0x8c4/0x2350 [ 996.065554][T15956] ? ima_match_policy+0x8c4/0x2350 [ 996.065607][T15956] ? process_measurement+0x4c8/0x2350 [ 996.065691][T15956] mmap_region+0x527/0x620 [ 996.065715][T15956] ? __pfx_mmap_region+0x10/0x10 [ 996.065741][T15956] ? cap_mmap_addr+0x4b/0x120 [ 996.065776][T15956] ? bpf_lsm_mmap_addr+0x9/0x30 [ 996.065804][T15956] ? security_mmap_addr+0x71/0x1e0 [ 996.065832][T15956] ? __get_unmapped_area+0x255/0x3e0 [ 996.065866][T15956] do_mmap+0xc63/0x12f0 [ 996.065900][T15956] ? __pfx_do_mmap+0x10/0x10 [ 996.065929][T15956] ? __pfx_down_write_killable+0x10/0x10 [ 996.065959][T15956] vm_mmap_pgoff+0x29e/0x470 [ 996.065994][T15956] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 996.066023][T15956] ? __fget_files+0x215/0x3d0 [ 996.066056][T15956] ? __fget_files+0x21f/0x3d0 [ 996.066089][T15956] ksys_mmap_pgoff+0x3cb/0x610 [ 996.066118][T15956] ? __x64_sys_futex+0x358/0x4d0 [ 996.066153][T15956] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 996.066182][T15956] ? xfd_validate_state+0x129/0x190 [ 996.066207][T15956] ? ksys_write+0x1ac/0x250 [ 996.066240][T15956] __x64_sys_mmap+0x125/0x190 [ 996.066270][T15956] do_syscall_64+0x10b/0xf80 [ 996.066304][T15956] ? clear_bhb_loop+0x40/0x90 [ 996.066333][T15956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.066357][T15956] RIP: 0033:0x7f3cb939ce59 [ 996.066376][T15956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.066399][T15956] RSP: 002b:00007f3cba270028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 996.066421][T15956] RAX: ffffffffffffffda RBX: 00007f3cb9615fa0 RCX: 00007f3cb939ce59 [ 996.066436][T15956] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 996.066450][T15956] RBP: 00007f3cb9432d6f R08: 00000000000000dd R09: 0000000000000000 [ 996.066465][T15956] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 996.066479][T15956] R13: 00007f3cb9616038 R14: 00007f3cb9615fa0 R15: 00007fff43366598 [ 996.066509][T15956] [ 996.101084][T15956] kcov: kcov: vm_insert_page() failed [ 1003.251720][T16032] Device name cannot be null; rc = [-22] [ 1004.631368][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1796'. [ 1004.669044][T16053] No such timeout policy "" [ 1004.679728][T16053] net_ratelimit: 47 callbacks suppressed [ 1004.679761][T16053] netlink: Failed to associated timeout policy '' [ 1004.766127][T16041] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5627] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[16041] [ 1009.537156][T16110] netlink: zone id is out of range [ 1011.424435][T16127] FAULT_INJECTION: forcing a failure. [ 1011.424435][T16127] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.480865][T16127] CPU: 0 UID: 0 PID: 16127 Comm: syz.0.1809 Tainted: G L syzkaller #0 PREEMPT(full) [ 1011.480920][T16127] Tainted: [L]=SOFTLOCKUP [ 1011.480932][T16127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1011.480951][T16127] Call Trace: [ 1011.480961][T16127] [ 1011.480974][T16127] dump_stack_lvl+0x100/0x190 [ 1011.481017][T16127] should_fail_ex.cold+0x5/0xa [ 1011.481059][T16127] should_failslab+0xc2/0x120 [ 1011.481098][T16127] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1011.481152][T16127] ? __proc_create+0x2cb/0x8c0 [ 1011.481204][T16127] __proc_create+0x2cb/0x8c0 [ 1011.481274][T16127] ? __pfx___proc_create+0x10/0x10 [ 1011.481348][T16127] proc_create_reg+0x75/0x170 [ 1011.481398][T16127] proc_create_net_data+0x8e/0x1c0 [ 1011.481446][T16127] ? __pfx_proc_create_net_data+0x10/0x10 [ 1011.481489][T16127] ? net_generic+0xea/0x2a0 [ 1011.481535][T16127] ? __pfx_phonet_init_net+0x10/0x10 [ 1011.481574][T16127] phonet_init_net+0x66/0x120 [ 1011.481612][T16127] ops_init+0x1e2/0x5f0 [ 1011.481656][T16127] setup_net+0x118/0x3a0 [ 1011.481698][T16127] ? __pfx_setup_net+0x10/0x10 [ 1011.481738][T16127] ? mutex_init_lockdep+0xf1/0x120 [ 1011.481782][T16127] copy_net_ns+0x46f/0x7c0 [ 1011.481830][T16127] create_new_namespaces+0x3ea/0xac0 [ 1011.481882][T16127] unshare_nsproxy_namespaces+0xf2/0x220 [ 1011.481935][T16127] ksys_unshare+0x438/0xab0 [ 1011.481986][T16127] ? __pfx_ksys_unshare+0x10/0x10 [ 1011.482032][T16127] ? xfd_validate_state+0x129/0x190 [ 1011.482080][T16127] __x64_sys_unshare+0x31/0x40 [ 1011.482131][T16127] do_syscall_64+0x10b/0xf80 [ 1011.482180][T16127] ? clear_bhb_loop+0x40/0x90 [ 1011.482220][T16127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.482263][T16127] RIP: 0033:0x7f4b6859ce59 [ 1011.482289][T16127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.482321][T16127] RSP: 002b:00007f4b667f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1011.482352][T16127] RAX: ffffffffffffffda RBX: 00007f4b68816090 RCX: 00007f4b6859ce59 [ 1011.482373][T16127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1011.482392][T16127] RBP: 00007f4b68632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1011.482411][T16127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.482429][T16127] R13: 00007f4b68816128 R14: 00007f4b68816090 R15: 00007ffed3bf1898 [ 1011.482472][T16127] [ 1012.454067][T16146] FAULT_INJECTION: forcing a failure. [ 1012.454067][T16146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1012.511036][T16146] CPU: 0 UID: 0 PID: 16146 Comm: syz.2.1813 Tainted: G L syzkaller #0 PREEMPT(full) [ 1012.511074][T16146] Tainted: [L]=SOFTLOCKUP [ 1012.511081][T16146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1012.511095][T16146] Call Trace: [ 1012.511102][T16146] [ 1012.511111][T16146] dump_stack_lvl+0x100/0x190 [ 1012.511141][T16146] should_fail_ex.cold+0x5/0xa [ 1012.511170][T16146] _copy_to_user+0x32/0xd0 [ 1012.511197][T16146] kvm_vcpu_ioctl+0x9dd/0x1720 [ 1012.511222][T16146] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1012.511245][T16146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1012.511285][T16146] ? do_vfs_ioctl+0x226/0x13e0 [ 1012.511332][T16146] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1012.511379][T16146] ? find_held_lock+0x2b/0x80 [ 1012.511409][T16146] ? __fget_files+0x215/0x3d0 [ 1012.511435][T16146] ? hook_file_ioctl_common+0x149/0x410 [ 1012.511466][T16146] ? __fget_files+0x21f/0x3d0 [ 1012.511497][T16146] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1012.511521][T16146] __x64_sys_ioctl+0x18e/0x210 [ 1012.511545][T16146] do_syscall_64+0x10b/0xf80 [ 1012.511579][T16146] ? clear_bhb_loop+0x40/0x90 [ 1012.511607][T16146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.511630][T16146] RIP: 0033:0x7f2a9299ce59 [ 1012.511648][T16146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.511668][T16146] RSP: 002b:00007f2a938c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1012.511689][T16146] RAX: ffffffffffffffda RBX: 00007f2a92c15fa0 RCX: 00007f2a9299ce59 [ 1012.511704][T16146] RDX: 00002000000000c0 RSI: 00000000c018ae85 RDI: 0000000000000004 [ 1012.511717][T16146] RBP: 00007f2a938c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.511731][T16146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.511743][T16146] R13: 00007f2a92c16038 R14: 00007f2a92c15fa0 R15: 00007ffe6549ae78 [ 1012.511772][T16146] [ 1018.034058][T16203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1823'. [ 1021.120838][T16248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1832'. [ 1025.995726][T16306] blktrace: Concurrent blktraces are not allowed on loop2 [ 1027.183580][T16320] FAULT_INJECTION: forcing a failure. [ 1027.183580][T16320] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.253998][T16320] CPU: 0 UID: 0 PID: 16320 Comm: syz.1.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.254035][T16320] Tainted: [L]=SOFTLOCKUP [ 1027.254043][T16320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1027.254057][T16320] Call Trace: [ 1027.254065][T16320] [ 1027.254073][T16320] dump_stack_lvl+0x100/0x190 [ 1027.254105][T16320] should_fail_ex.cold+0x5/0xa [ 1027.254137][T16320] ? mpi_resize+0x1ac/0x250 [ 1027.254159][T16320] should_failslab+0xc2/0x120 [ 1027.254187][T16320] __kmalloc_noprof+0xe0/0x850 [ 1027.254208][T16320] ? __kasan_kmalloc+0xaa/0xb0 [ 1027.254236][T16320] mpi_resize+0x1ac/0x250 [ 1027.254262][T16320] mpi_powm+0x9ff/0x1e50 [ 1027.254296][T16320] ? __pfx_mpi_powm+0x10/0x10 [ 1027.254318][T16320] ? mpi_free+0xa0/0x150 [ 1027.254338][T16320] ? mpi_free+0xe1/0x150 [ 1027.254358][T16320] ? kfree+0x223/0x6c0 [ 1027.254396][T16320] ? mpi_free+0xe6/0x150 [ 1027.254421][T16320] rsa_enc+0x1fe/0x3b0 [ 1027.254459][T16320] ? __pfx_rsa_enc+0x10/0x10 [ 1027.254515][T16320] ? __virt_addr_valid+0x239/0x430 [ 1027.254573][T16320] ? sg_init_one+0xf5/0x1b0 [ 1027.254609][T16320] rsassa_pkcs1_verify+0x4eb/0xc20 [ 1027.254643][T16320] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 1027.254687][T16320] ? rsa_max_size+0xd/0x70 [ 1027.254721][T16320] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 1027.254751][T16320] public_key_verify_signature+0x5ee/0x910 [ 1027.254780][T16320] ? __pfx_public_key_verify_signature+0x10/0x10 [ 1027.254818][T16320] ? __kmalloc_noprof+0x320/0x850 [ 1027.254847][T16320] x509_check_for_self_signed+0x325/0x510 [ 1027.254897][T16320] x509_cert_parse+0x60c/0x910 [ 1027.254920][T16320] ? kasan_save_stack+0x3f/0x50 [ 1027.254941][T16320] ? kasan_save_stack+0x30/0x50 [ 1027.254963][T16320] ? kasan_save_track+0x14/0x30 [ 1027.254987][T16320] pkcs7_extract_cert+0xa4/0x380 [ 1027.255020][T16320] asn1_ber_decoder+0x12b3/0x2170 [ 1027.255062][T16320] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 1027.255111][T16320] pkcs7_parse_message+0x289/0x870 [ 1027.255143][T16320] verify_pkcs7_signature+0x30/0xa0 [ 1027.255172][T16320] valid_regdb+0x211/0x590 [ 1027.255203][T16320] ? __pfx_valid_regdb+0x10/0x10 [ 1027.255255][T16320] reg_reload_regdb+0x11a/0x460 [ 1027.255289][T16320] ? __pfx_reg_reload_regdb+0x10/0x10 [ 1027.255323][T16320] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1027.255346][T16320] ? nl80211_pre_doit+0x19a/0xae0 [ 1027.255373][T16320] genl_family_rcv_msg_doit+0x214/0x300 [ 1027.255419][T16320] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1027.255459][T16320] ? genl_get_cmd+0x3e7/0x760 [ 1027.255502][T16320] ? bpf_lsm_capable+0x9/0x10 [ 1027.255529][T16320] ? security_capable+0x80/0x260 [ 1027.255571][T16320] genl_rcv_msg+0x560/0x800 [ 1027.255613][T16320] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1027.255652][T16320] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1027.255674][T16320] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1027.255704][T16320] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1027.255737][T16320] netlink_rcv_skb+0x159/0x420 [ 1027.255772][T16320] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1027.255812][T16320] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1027.255863][T16320] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1027.255900][T16320] genl_rcv+0x28/0x40 [ 1027.255935][T16320] netlink_unicast+0x585/0x850 [ 1027.255974][T16320] ? __pfx_netlink_unicast+0x10/0x10 [ 1027.256017][T16320] netlink_sendmsg+0x8b0/0xda0 [ 1027.256056][T16320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1027.256090][T16320] ? __import_iovec+0x1d2/0x640 [ 1027.256117][T16320] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1027.256160][T16320] ____sys_sendmsg+0x9e1/0xb70 [ 1027.256193][T16320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1027.256230][T16320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1027.256270][T16320] ? __pfx_futex_wake_mark+0x10/0x10 [ 1027.256307][T16320] ___sys_sendmsg+0x190/0x1e0 [ 1027.256344][T16320] ? __pfx____sys_sendmsg+0x10/0x10 [ 1027.256414][T16320] __sys_sendmsg+0x170/0x220 [ 1027.256442][T16320] ? __pfx___sys_sendmsg+0x10/0x10 [ 1027.256468][T16320] ? __x64_sys_futex+0x34f/0x4d0 [ 1027.256505][T16320] ? rcu_is_watching+0x12/0xc0 [ 1027.256538][T16320] do_syscall_64+0x10b/0xf80 [ 1027.256573][T16320] ? clear_bhb_loop+0x40/0x90 [ 1027.256602][T16320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.256626][T16320] RIP: 0033:0x7f3cb939ce59 [ 1027.256645][T16320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.256667][T16320] RSP: 002b:00007f3cba270028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1027.256690][T16320] RAX: ffffffffffffffda RBX: 00007f3cb9615fa0 RCX: 00007f3cb939ce59 [ 1027.256705][T16320] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 1027.256720][T16320] RBP: 00007f3cb9432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1027.256734][T16320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1027.256747][T16320] R13: 00007f3cb9616038 R14: 00007f3cb9615fa0 R15: 00007fff43366598 [ 1027.256778][T16320] [ 1028.757159][T16341] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by ""[16341] [ 1028.971066][T16341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1851'. [ 1033.912487][T16392] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1863'. [ 1034.007800][T16393] syz.0.1863 (16393): attempted to duplicate a private mapping with mremap. This is not supported. [ 1039.341643][T16442] kexec: Could not allocate control_code_buffer [ 1039.822461][T16459] blktrace: Concurrent blktraces are not allowed on loop2 [ 1040.624270][T16480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1877'. [ 1040.896732][T16482] busy [ 1041.910891][ T7075] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 1042.123647][T16505] random: crng reseeded on system resumption [ 1049.840431][T16565] random: crng reseeded on system resumption [ 1049.913180][T16565] hub 1-0:1.0: USB hub found [ 1049.932635][T16565] hub 1-0:1.0: 1 port detected [ 1050.370428][T16568] FAULT_INJECTION: forcing a failure. [ 1050.370428][T16568] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1050.406473][T16568] CPU: 1 UID: 0 PID: 16568 Comm: syz.1.1898 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.406518][T16568] Tainted: [L]=SOFTLOCKUP [ 1050.406527][T16568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1050.406542][T16568] Call Trace: [ 1050.406551][T16568] [ 1050.406560][T16568] dump_stack_lvl+0x100/0x190 [ 1050.406595][T16568] should_fail_ex.cold+0x5/0xa [ 1050.406630][T16568] get_futex_key+0x1d2/0x1510 [ 1050.406661][T16568] ? __pfx_get_futex_key+0x10/0x10 [ 1050.406687][T16568] ? lock_acquire+0x1b1/0x370 [ 1050.406722][T16568] futex_wake+0xea/0x530 [ 1050.406761][T16568] ? __pfx_futex_wake+0x10/0x10 [ 1050.406795][T16568] ? exit_mm_release+0x19/0x30 [ 1050.406847][T16568] do_futex+0x32b/0x350 [ 1050.406878][T16568] ? __pfx_do_futex+0x10/0x10 [ 1050.406905][T16568] ? __might_fault+0xc5/0x140 [ 1050.406957][T16568] mm_release+0x24a/0x2f0 [ 1050.406991][T16568] do_exit+0x707/0x2a60 [ 1050.407038][T16568] ? __pfx_do_exit+0x10/0x10 [ 1050.407080][T16568] ? do_raw_spin_lock+0x128/0x260 [ 1050.407111][T16568] ? find_held_lock+0x2b/0x80 [ 1050.407146][T16568] ? get_signal+0x7e0/0x21e0 [ 1050.407184][T16568] do_group_exit+0xd5/0x2a0 [ 1050.407218][T16568] get_signal+0x1ec7/0x21e0 [ 1050.407265][T16568] ? __pfx_get_signal+0x10/0x10 [ 1050.407303][T16568] ? do_futex+0x192/0x350 [ 1050.407335][T16568] arch_do_signal_or_restart+0x91/0x7a0 [ 1050.407380][T16568] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1050.407434][T16568] ? rcu_is_watching+0x12/0xc0 [ 1050.407472][T16568] exit_to_user_mode_loop+0x8b/0x4f0 [ 1050.407498][T16568] ? rcu_is_watching+0x12/0xc0 [ 1050.407538][T16568] do_syscall_64+0x6f2/0xf80 [ 1050.407578][T16568] ? clear_bhb_loop+0x40/0x90 [ 1050.407610][T16568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.407637][T16568] RIP: 0033:0x7f3cb939ce59 [ 1050.407659][T16568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.407685][T16568] RSP: 002b:00007f3cba24f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1050.407713][T16568] RAX: fffffffffffffe00 RBX: 00007f3cb9616098 RCX: 00007f3cb939ce59 [ 1050.407731][T16568] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3cb9616098 [ 1050.407747][T16568] RBP: 00007f3cb9616090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.407763][T16568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1050.407779][T16568] R13: 00007f3cb9616128 R14: 00007fff433664b0 R15: 00007fff43366598 [ 1050.407813][T16568] [ 1051.287641][T16586] netlink: zone id is out of range [ 1051.321691][T16586] netlink: zone id is out of range [ 1051.418237][T16586] netlink: zone id is out of range [ 1051.476853][T16586] netlink: zone id is out of range [ 1051.522993][T16586] netlink: zone id is out of range [ 1051.567057][T16586] netlink: zone id is out of range [ 1051.585950][T16586] netlink: zone id is out of range [ 1051.609848][T16586] netlink: zone id is out of range [ 1051.646308][T16586] netlink: zone id is out of range [ 1051.660645][T16586] netlink: zone id is out of range [ 1054.921061][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.927547][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.367265][T16607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1061.380610][T16607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1061.390428][T16607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1061.403444][T16607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1061.412034][T16607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1061.885935][ T7075] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1061.900067][ T7075] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1061.910671][ T7075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1061.922609][ T7075] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1061.933888][ T7075] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1062.214048][T16606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.221584][T16606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.229328][T16606] bridge_slave_0: entered allmulticast mode [ 1062.237586][T16606] bridge_slave_0: entered promiscuous mode [ 1062.248405][T16606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.255853][T16606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.263760][T16606] bridge_slave_1: entered allmulticast mode [ 1062.272403][T16606] bridge_slave_1: entered promiscuous mode [ 1062.317670][T16606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.332107][T16606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.377763][T16606] team0: Port device team_slave_0 added [ 1062.387367][T16606] team0: Port device team_slave_1 added [ 1062.425926][T16606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.433098][T16606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.459667][T16606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.473171][T16606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.480535][T16606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.507719][T16606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.575793][T16606] hsr_slave_0: entered promiscuous mode [ 1062.582449][T16606] hsr_slave_1: entered promiscuous mode [ 1062.588681][T16606] debugfs: 'hsr0' already exists in 'hsr' [ 1062.594573][T16606] Cannot create hsr debugfs directory [ 1062.909148][T16606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1062.921795][T16606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1062.931683][T16606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1062.946266][T16606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1062.960115][T16606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1062.974004][T16606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1062.982498][T16606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1062.994686][T16606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1063.155746][T16620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.167009][T16620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.174500][T16620] bridge_slave_0: entered allmulticast mode [ 1063.182424][T16620] bridge_slave_0: entered promiscuous mode [ 1063.193459][T16620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.200982][T16620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.208286][T16620] bridge_slave_1: entered allmulticast mode [ 1063.217755][T16620] bridge_slave_1: entered promiscuous mode [ 1063.258947][T16620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.272434][T16620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.311072][T16620] team0: Port device team_slave_0 added [ 1063.322798][T16620] team0: Port device team_slave_1 added [ 1063.361076][T16620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.368124][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.394294][T16620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.407408][T16620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.414646][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.441674][T16620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.478848][ T7075] Bluetooth: hci4: command tx timeout [ 1063.500352][T16606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.516305][T16620] hsr_slave_0: entered promiscuous mode [ 1063.523956][T16620] hsr_slave_1: entered promiscuous mode [ 1063.530622][T16620] debugfs: 'hsr0' already exists in 'hsr' [ 1063.536418][T16620] Cannot create hsr debugfs directory [ 1063.597288][T16606] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.635098][ T6800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.642287][ T6800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.673721][ T6724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.680899][ T6724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.793434][T16606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1063.895005][T16620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1063.907101][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1063.916100][T16620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1063.930334][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1063.942863][T16620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1063.955648][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1063.964682][T16620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1063.975747][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1064.040491][ T7075] Bluetooth: hci5: command tx timeout [ 1064.106372][T16620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.133684][T16620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.159396][ T6724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.166634][ T6724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.194080][ T6724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.201328][ T6724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.709187][T16606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.099072][T16620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.212938][T16606] veth0_vlan: entered promiscuous mode [ 1065.233351][T16606] veth1_vlan: entered promiscuous mode [ 1065.290768][T16606] veth0_macvtap: entered promiscuous mode [ 1065.303811][T16606] veth1_macvtap: entered promiscuous mode [ 1065.330374][T16606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.353397][T16606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.385740][ T6659] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.397896][ T6659] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.432418][ T6659] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.449781][ T6659] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.559161][ T7075] Bluetooth: hci4: command tx timeout [ 1065.586022][T15844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.605219][T15844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.668958][T12245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.683324][T12245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.846318][T16620] veth0_vlan: entered promiscuous mode [ 1065.861296][T16620] veth1_vlan: entered promiscuous mode [ 1065.910530][T16620] veth0_macvtap: entered promiscuous mode [ 1065.926408][T16620] veth1_macvtap: entered promiscuous mode [ 1065.959992][T16620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.980511][T16620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.002808][T12245] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.012234][T12245] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.027667][T12245] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.040855][T12245] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.130528][ T7075] Bluetooth: hci5: command tx timeout [ 1066.244087][T12245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.270484][T12245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.328433][T12245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.340446][T12245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.642122][ T7075] Bluetooth: hci4: command tx timeout [ 1067.702485][T16709] net_ratelimit: 49 callbacks suppressed [ 1067.702504][T16709] netlink: zone id is out of range [ 1067.736611][T16709] netlink: zone id is out of range [ 1067.749439][T16709] netlink: zone id is out of range [ 1067.754873][T16709] netlink: zone id is out of range [ 1067.781705][T16709] netlink: zone id is out of range [ 1067.798124][T16709] netlink: zone id is out of range [ 1067.804979][T16709] netlink: zone id is out of range [ 1067.819718][T16709] netlink: zone id is out of range [ 1067.826616][T16709] netlink: zone id is out of range [ 1067.844832][T16709] netlink: zone id is out of range [ 1068.198843][ T7075] Bluetooth: hci5: command tx timeout [ 1068.291020][T16607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1068.304999][T16607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1068.315324][T16607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1068.325586][T16607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1068.334093][T16607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1068.934273][T16607] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1068.946929][T16607] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1068.962738][T16607] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1068.977339][T16607] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1068.990611][T16607] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1069.721019][T16607] Bluetooth: hci4: command tx timeout [ 1069.877276][T16718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.887125][T16718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.894891][T16718] bridge_slave_0: entered allmulticast mode [ 1069.902399][T16718] bridge_slave_0: entered promiscuous mode [ 1069.924026][T16718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.935619][T16718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.949075][T16718] bridge_slave_1: entered allmulticast mode [ 1069.961383][T16718] bridge_slave_1: entered promiscuous mode [ 1070.067180][T16718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.101658][T16718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.210759][T16718] team0: Port device team_slave_0 added [ 1070.239802][T16718] team0: Port device team_slave_1 added [ 1070.282009][T16607] Bluetooth: hci5: command tx timeout [ 1070.298585][T16718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.307542][T16718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.333742][T16718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.352129][T16718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.359621][T16718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.386674][T16718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.441642][T16607] Bluetooth: hci6: command tx timeout [ 1070.483355][T16718] hsr_slave_0: entered promiscuous mode [ 1070.491126][T16718] hsr_slave_1: entered promiscuous mode [ 1070.497673][T16718] debugfs: 'hsr0' already exists in 'hsr' [ 1070.504302][T16718] Cannot create hsr debugfs directory [ 1070.722073][T16731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.730259][T16731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.737716][T16731] bridge_slave_0: entered allmulticast mode [ 1070.745529][T16731] bridge_slave_0: entered promiscuous mode [ 1070.760801][T16731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.768023][T16731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.775519][T16731] bridge_slave_1: entered allmulticast mode [ 1070.783719][T16731] bridge_slave_1: entered promiscuous mode [ 1070.835902][T16731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.860644][T16731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.911277][T16731] team0: Port device team_slave_0 added [ 1070.921445][T16731] team0: Port device team_slave_1 added [ 1070.967845][T16731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.975138][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.002308][T16731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.024579][T16731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.031871][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.058068][T16731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.082771][T16607] Bluetooth: hci7: command tx timeout [ 1071.110892][T16718] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1071.124792][T16718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1071.133296][T16718] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1071.143977][T16718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1071.165746][T16718] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1071.176533][T16718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1071.190478][T16731] hsr_slave_0: entered promiscuous mode [ 1071.197017][T16731] hsr_slave_1: entered promiscuous mode [ 1071.204898][T16731] debugfs: 'hsr0' already exists in 'hsr' [ 1071.210787][T16731] Cannot create hsr debugfs directory [ 1071.217936][T16718] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1071.230328][T16718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1071.497192][T16718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.521560][T16731] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1071.533904][T16731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1071.542476][T16731] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1071.554535][T16731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1071.580212][T16731] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1071.592829][T16731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1071.602438][T16731] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1071.613639][T16731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1071.627636][T16718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.653607][T15844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.660815][T15844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.692023][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.699263][T12246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.839987][T16731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.866492][T16731] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.885560][T12246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.892752][T12246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.936200][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.943410][ T8409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.045323][T16731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1072.519710][T16607] Bluetooth: hci6: command tx timeout [ 1072.723152][T16718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.911874][T16731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.159126][T16607] Bluetooth: hci7: command tx timeout [ 1073.308485][T16718] veth0_vlan: entered promiscuous mode [ 1073.332692][T16718] veth1_vlan: entered promiscuous mode [ 1073.376332][T16718] veth0_macvtap: entered promiscuous mode [ 1073.387726][T16718] veth1_macvtap: entered promiscuous mode [ 1073.412148][T16718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.434661][T16718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.456990][T15844] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.474667][T15844] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.498484][T15844] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.507496][T15844] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.667946][T16731] veth0_vlan: entered promiscuous mode [ 1073.683858][T12245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.696798][T12245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.707633][T16731] veth1_vlan: entered promiscuous mode [ 1073.767952][T12246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.787157][T12246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.800818][T16731] veth0_macvtap: entered promiscuous mode [ 1073.822831][T16731] veth1_macvtap: entered promiscuous mode [ 1073.856408][T16731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.884412][T16731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.914370][T12245] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.935941][T12245] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.969555][T12245] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.993437][T12245] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.133382][T15844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.142725][T15844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.193171][ T6659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.205098][ T6659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.491509][T16808] can: request_module (can-proto-0) failed. [ 1074.599830][T16607] Bluetooth: hci6: command tx timeout [ 1075.239879][T16607] Bluetooth: hci7: command tx timeout [ 1075.973984][T16826] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1076.681904][T16607] Bluetooth: hci6: command tx timeout [ 1077.324458][T16607] Bluetooth: hci7: command tx timeout [ 1079.603127][T16837] kexec: Could not allocate control_code_buffer [ 1083.440726][ T7075] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1083.456990][ T7075] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1083.467125][ T7075] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1083.478545][ T7075] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1083.490807][ T7075] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1084.444129][T16892] nvme_fabrics: missing parameter 'transport=%s' [ 1084.452402][T16897] sg_write: data in/out 262108/258 bytes for SCSI command 0x61-- guessing data in; [ 1084.452402][T16897] program syz.7.1935 not setting count and/or reply_len properly [ 1084.472352][T16892] nvme_fabrics: missing parameter 'nqn=%s' [ 1084.487545][T16877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.497580][T16877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.505376][T16877] bridge_slave_0: entered allmulticast mode [ 1084.516190][T16877] bridge_slave_0: entered promiscuous mode [ 1084.530756][T16877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.531542][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1935'. [ 1084.538322][T16877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.557811][T16877] bridge_slave_1: entered allmulticast mode [ 1084.565860][T16877] bridge_slave_1: entered promiscuous mode [ 1084.634563][T16877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.647089][T16877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.690774][T16877] team0: Port device team_slave_0 added [ 1084.700947][T16877] team0: Port device team_slave_1 added [ 1084.763772][T16877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.773463][T16877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.800527][T16877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.815162][T16877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.824774][T16877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.861696][T16877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.942077][T16877] hsr_slave_0: entered promiscuous mode [ 1084.949506][T16877] hsr_slave_1: entered promiscuous mode [ 1084.956176][T16877] debugfs: 'hsr0' already exists in 'hsr' [ 1084.970599][T16877] Cannot create hsr debugfs directory [ 1085.341031][T16877] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1085.357184][T16877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1085.366024][T16877] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1085.382284][T16877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1085.392054][T16877] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1085.417131][T16877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1085.426500][T16877] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1085.443431][T16877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1085.559273][T16607] Bluetooth: hci8: command tx timeout [ 1085.570496][T16877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.597804][T16877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.615717][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.622962][ T8409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.660923][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.668206][ T8409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.094967][ T7075] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1086.122004][ T7075] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1086.135035][ T7075] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1086.145158][ T7075] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1086.156210][ T7075] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1086.995125][T16877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.639410][ T7075] Bluetooth: hci8: command tx timeout [ 1087.864648][T16877] veth0_vlan: entered promiscuous mode [ 1087.905538][T16877] veth1_vlan: entered promiscuous mode [ 1087.986503][T16877] veth0_macvtap: entered promiscuous mode [ 1088.002039][T16877] veth1_macvtap: entered promiscuous mode [ 1088.165034][T16877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.201784][ T7075] Bluetooth: hci9: command tx timeout [ 1088.288530][T16915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.306690][T16915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.320163][T16915] bridge_slave_0: entered allmulticast mode [ 1088.336826][T16915] bridge_slave_0: entered promiscuous mode [ 1088.352907][T16877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.367299][T16915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.387871][T16915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.405933][T16915] bridge_slave_1: entered allmulticast mode [ 1088.419727][T16915] bridge_slave_1: entered promiscuous mode [ 1088.454096][ T6724] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.474980][ T6724] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.514007][T16915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.535418][ T6724] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.551697][ T6724] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.571993][T16915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.657701][T16915] team0: Port device team_slave_0 added [ 1088.684635][T16915] team0: Port device team_slave_1 added [ 1088.756775][T16915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.769441][T16915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.820521][T16915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.899457][T16915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.926017][T16915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.960755][T16915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.101617][T16915] hsr_slave_0: entered promiscuous mode [ 1089.109746][T16915] hsr_slave_1: entered promiscuous mode [ 1089.117727][T16915] debugfs: 'hsr0' already exists in 'hsr' [ 1089.126404][T16915] Cannot create hsr debugfs directory [ 1089.135384][T12245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.151177][T12245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.301425][ T6800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.321990][ T6800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.526938][T16963] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1934'. [ 1089.729927][ T7075] Bluetooth: hci8: command tx timeout [ 1089.917572][T16915] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1089.956896][T16915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1089.988094][T16915] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1090.032481][T16915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1090.060782][T16915] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1090.080138][T16915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1090.093025][T16915] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1090.125678][T16915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1090.279459][ T7075] Bluetooth: hci9: command tx timeout [ 1090.365873][T16915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.420300][T16915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.469149][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.476352][ T6659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.544369][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.551640][ T6659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.939007][T16979] cougar: G6 mapped to space [ 1091.601433][T16607] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1091.626620][T16607] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1091.638402][T16607] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1091.653920][T16607] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1091.661803][T16607] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1091.802944][ T7075] Bluetooth: hci8: command tx timeout [ 1091.926939][T16915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.359781][ T7075] Bluetooth: hci9: command tx timeout [ 1093.143475][T16915] veth0_vlan: entered promiscuous mode [ 1093.209786][T16915] veth1_vlan: entered promiscuous mode [ 1093.530660][T16994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.543387][T16994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.564668][T16994] bridge_slave_0: entered allmulticast mode [ 1093.586194][T16994] bridge_slave_0: entered promiscuous mode [ 1093.615075][T16994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.622566][T16994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.635167][T16994] bridge_slave_1: entered allmulticast mode [ 1093.645927][T16994] bridge_slave_1: entered promiscuous mode [ 1093.695630][T16994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.716836][T16915] veth0_macvtap: entered promiscuous mode [ 1093.721488][ T7075] Bluetooth: hci10: command tx timeout [ 1093.738271][T16994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.766728][T16915] veth1_macvtap: entered promiscuous mode [ 1093.847386][T16994] team0: Port device team_slave_0 added [ 1093.868280][T16994] team0: Port device team_slave_1 added [ 1093.891755][T16915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1093.980292][T16915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1094.000932][T16994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.008222][T16994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.054278][T16994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.081381][T16994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.089909][T16994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.129412][T16994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.182481][ T6800] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.206886][ T6800] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.220466][ T6800] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.255365][ T6800] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.370474][T16994] hsr_slave_0: entered promiscuous mode [ 1094.389722][T16994] hsr_slave_1: entered promiscuous mode [ 1094.409948][T16994] debugfs: 'hsr0' already exists in 'hsr' [ 1094.415793][T16994] Cannot create hsr debugfs directory [ 1094.441802][ T7075] Bluetooth: hci9: command tx timeout [ 1094.680031][ T6659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.698502][ T6659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.797797][ T6659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.817551][ T6659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.964991][T16994] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.152162][T16994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.405049][T16994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.594349][T16994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.804649][ T7075] Bluetooth: hci10: command tx timeout [ 1096.167251][T16994] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1096.205350][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1096.223703][T16994] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1096.252925][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1096.270439][T16994] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1096.294850][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1096.305042][T16994] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1096.347163][T16994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1096.573467][T16994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.661715][T16994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.711295][T15844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.718497][T15844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.783642][T15844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.790916][T15844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.640445][T17064] FAULT_INJECTION: forcing a failure. [ 1097.640445][T17064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.824624][T17064] CPU: 0 UID: 0 PID: 17064 Comm: syz.9.1951 Tainted: G L syzkaller #0 PREEMPT(full) [ 1097.824664][T17064] Tainted: [L]=SOFTLOCKUP [ 1097.824672][T17064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1097.824686][T17064] Call Trace: [ 1097.824694][T17064] [ 1097.824704][T17064] dump_stack_lvl+0x100/0x190 [ 1097.824735][T17064] should_fail_ex.cold+0x5/0xa [ 1097.824766][T17064] _copy_from_user+0x2e/0xd0 [ 1097.824791][T17064] copy_msghdr_from_user+0x9f/0x4f0 [ 1097.824831][T17064] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1097.824875][T17064] ? __pfx_futex_wake_mark+0x10/0x10 [ 1097.824919][T17064] ___sys_sendmsg+0x106/0x1e0 [ 1097.824957][T17064] ? __pfx____sys_sendmsg+0x10/0x10 [ 1097.825027][T17064] __sys_sendmsg+0x170/0x220 [ 1097.825055][T17064] ? __pfx___sys_sendmsg+0x10/0x10 [ 1097.825082][T17064] ? __x64_sys_futex+0x34f/0x4d0 [ 1097.825119][T17064] ? rcu_is_watching+0x12/0xc0 [ 1097.825153][T17064] do_syscall_64+0x10b/0xf80 [ 1097.825189][T17064] ? clear_bhb_loop+0x40/0x90 [ 1097.825218][T17064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.825242][T17064] RIP: 0033:0x7f331459ce59 [ 1097.825262][T17064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.825285][T17064] RSP: 002b:00007f33154f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1097.825308][T17064] RAX: ffffffffffffffda RBX: 00007f3314816180 RCX: 00007f331459ce59 [ 1097.825324][T17064] RDX: 0000000020040080 RSI: 0000200000004240 RDI: 000000000000000a [ 1097.825339][T17064] RBP: 00007f3314632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1097.825353][T17064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1097.825367][T17064] R13: 00007f3314816218 R14: 00007f3314816180 R15: 00007ffde2967fe8 [ 1097.825396][T17064] [ 1098.034494][ T7075] Bluetooth: hci10: command tx timeout [ 1098.705329][T16994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.770944][T17076] netlink: 25 bytes leftover after parsing attributes in process `syz.9.1953'. [ 1098.829398][T16994] veth0_vlan: entered promiscuous mode [ 1098.860824][T16994] veth1_vlan: entered promiscuous mode [ 1098.926184][T16994] veth0_macvtap: entered promiscuous mode [ 1098.945231][T16994] veth1_macvtap: entered promiscuous mode [ 1098.981055][T16994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.021771][T16994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.045565][T12245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.074689][T12245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.135584][T12245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.163968][T12245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.307384][T17082] rnbd_client L213: map_device: Parameters missing [ 1099.346548][T12246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.366915][T12246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.546365][ T8409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.571758][ T8409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.831619][T17086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1946'. [ 1100.119242][ T7075] Bluetooth: hci10: command tx timeout [ 1100.625355][T17093] netlink: 350 bytes leftover after parsing attributes in process `syz.7.1957'. [ 1101.277551][T17102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.143488][T17143] bond0: invalid ARP target specified [ 1104.238991][T17145] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1106.977699][T17171] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[16915] was attempted by ""[17171] [ 1107.118124][T17173] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1973'. [ 1107.767116][T17196] aoe: can't write to that file. [ 1107.775227][T17196] capability: warning: `syz.9.1977' uses 32-bit capabilities (legacy support in use) [ 1109.137783][T16607] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1109.151826][T16607] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1109.164189][T16607] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1109.172722][T16607] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1109.189077][T16607] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1110.788303][T17211] vhci_hcd: not connected 4 [ 1111.251406][T16607] Bluetooth: hci11: command tx timeout [ 1111.602999][T17213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.617404][T17213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.624875][T17213] bridge_slave_0: entered allmulticast mode [ 1111.637682][T17213] bridge_slave_0: entered promiscuous mode [ 1111.661826][T17213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.670661][T17213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.679038][T17213] bridge_slave_1: entered allmulticast mode [ 1111.697205][T17213] bridge_slave_1: entered promiscuous mode [ 1111.776656][T17213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.797030][T17213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.849759][T17213] team0: Port device team_slave_0 added [ 1111.867045][T17213] team0: Port device team_slave_1 added [ 1111.924251][T17213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.933572][T17213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.974804][T17213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.994540][T17213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.008446][T17213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.042338][T17213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.111076][T17213] hsr_slave_0: entered promiscuous mode [ 1112.128365][T17213] hsr_slave_1: entered promiscuous mode [ 1112.138334][T17213] debugfs: 'hsr0' already exists in 'hsr' [ 1112.146741][T17213] Cannot create hsr debugfs directory [ 1112.433662][T17213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.580052][T17213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.732328][T17213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.811181][T17213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.106470][T17213] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1113.130312][T17213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1113.141591][T17213] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1113.158370][T17213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1113.182907][T17213] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1113.204458][T17213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1113.220108][T17213] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1113.241622][T17213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1113.318979][T16607] Bluetooth: hci11: command tx timeout [ 1113.406426][T17213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.451089][T17213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.466495][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.473773][ T6659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.513922][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.521207][ T6659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.346236][T17213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.444472][T17213] veth0_vlan: entered promiscuous mode [ 1114.480320][T17213] veth1_vlan: entered promiscuous mode [ 1114.557955][T17213] veth0_macvtap: entered promiscuous mode [ 1114.585495][T17213] veth1_macvtap: entered promiscuous mode [ 1114.623958][T17213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.665523][T17213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.709351][T12246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.732488][T12246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.747781][T12246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.770224][T12246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.995600][ T6659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.026332][ T6659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.086700][T12246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.104999][T12246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.399913][T16607] Bluetooth: hci11: command tx timeout [ 1115.450015][T17281] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1987'. [ 1116.367376][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.383302][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.479033][T16607] Bluetooth: hci11: command tx timeout [ 1118.124599][T17311] net_ratelimit: 47 callbacks suppressed [ 1118.124621][T17311] netlink: zone id is out of range [ 1118.137254][T17311] netlink: zone id is out of range [ 1118.142590][T17311] netlink: zone id is out of range [ 1118.151044][T17311] netlink: zone id is out of range [ 1118.156246][T17311] netlink: zone id is out of range [ 1118.161945][T17311] netlink: zone id is out of range [ 1118.167100][T17311] netlink: zone id is out of range [ 1118.172705][T17311] netlink: zone id is out of range [ 1118.178110][T17311] netlink: zone id is out of range [ 1118.190450][T17311] netlink: zone id is out of range [ 1121.957348][ T7075] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1121.971672][ T7075] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1121.985806][ T7075] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1122.010598][ T7075] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1122.032045][ T7075] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1123.060703][T17344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.080083][T17344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.111561][T17344] bridge_slave_0: entered allmulticast mode [ 1123.121170][T17344] bridge_slave_0: entered promiscuous mode [ 1123.131426][T17344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.139049][T17344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.146595][T17344] bridge_slave_1: entered allmulticast mode [ 1123.155681][T17344] bridge_slave_1: entered promiscuous mode [ 1123.312397][T17344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.351853][T17344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.422455][T17344] team0: Port device team_slave_0 added [ 1123.440966][T17344] team0: Port device team_slave_1 added [ 1123.458611][T17373] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2007'. [ 1123.498983][T17344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.506076][T17344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.534211][T17344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.549075][T17344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.556307][T17344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.606452][T17344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.690973][T17344] hsr_slave_0: entered promiscuous mode [ 1123.698087][T17344] hsr_slave_1: entered promiscuous mode [ 1123.707578][T17344] debugfs: 'hsr0' already exists in 'hsr' [ 1123.715718][T17344] Cannot create hsr debugfs directory [ 1124.000791][T17344] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.134320][T16607] Bluetooth: hci12: command tx timeout [ 1124.147985][T17344] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.325751][T17344] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.424996][T17344] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.736273][T17344] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1124.748441][T17344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1124.763442][T17344] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1124.778972][T17344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1124.787600][T17344] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1124.808075][T17344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1124.818160][T17344] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1124.837162][T17344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1125.172723][T17344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.243541][T17344] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.293576][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.300778][ T8409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.397389][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.404606][ T8409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.200240][T16607] Bluetooth: hci12: command tx timeout [ 1126.341926][T17344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.468580][T17344] veth0_vlan: entered promiscuous mode [ 1126.497289][T17344] veth1_vlan: entered promiscuous mode [ 1126.643180][T17344] veth0_macvtap: entered promiscuous mode [ 1126.673205][T17344] veth1_macvtap: entered promiscuous mode [ 1126.694451][ T7075] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1126.720997][ T7075] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1126.731750][ T7075] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1126.749036][ T7075] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1126.760757][ T7075] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1126.811466][T17344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.851732][T17344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1126.923436][T17216] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.949986][T17216] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.983548][T17216] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.016897][T17216] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.424709][T17216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.474857][T17216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.643310][T16686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.675295][T16686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.912830][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2003'. [ 1127.924252][T17432] No such timeout policy "" [ 1127.929554][T17432] net_ratelimit: 47 callbacks suppressed [ 1127.929574][T17432] netlink: Failed to associated timeout policy '' [ 1128.282247][T16607] Bluetooth: hci12: command tx timeout [ 1128.826446][T17410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.839651][T16607] Bluetooth: hci13: command tx timeout [ 1128.856608][T17410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.879071][T17410] bridge_slave_0: entered allmulticast mode [ 1128.901362][T17410] bridge_slave_0: entered promiscuous mode [ 1128.948577][T17410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.965792][T17410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.986373][T17410] bridge_slave_1: entered allmulticast mode [ 1129.014178][T17410] bridge_slave_1: entered promiscuous mode [ 1129.125502][T17410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.153795][T17410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.302425][T17410] team0: Port device team_slave_0 added [ 1129.320235][T17437] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[17344] was attempted by ""[17437] [ 1129.351904][T17410] team0: Port device team_slave_1 added [ 1129.419768][T17439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2014'. [ 1129.439803][T17410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.459473][T17410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.533770][T17410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.593278][T17410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.604392][T17410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.662747][T17410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.104068][T17410] hsr_slave_0: entered promiscuous mode [ 1130.136433][T17410] hsr_slave_1: entered promiscuous mode [ 1130.152866][T17410] debugfs: 'hsr0' already exists in 'hsr' [ 1130.158806][T17410] Cannot create hsr debugfs directory [ 1130.360241][T16607] Bluetooth: hci12: command tx timeout [ 1130.842820][T17410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.920222][T16607] Bluetooth: hci13: command tx timeout [ 1131.033801][T17410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.067006][T17455] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1131.278071][T17410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.434824][T17410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.875587][T17410] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1131.907438][T17410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1131.936562][T17410] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1131.987544][T17410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1132.017197][T17410] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1132.040821][T17410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1132.058127][T17410] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1132.077286][T17410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1132.301768][T17410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.393381][T17410] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.430357][T17216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.437657][T17216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.500230][T17216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.507404][T17216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.000920][T16607] Bluetooth: hci13: command tx timeout [ 1133.316698][ T7075] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1133.342918][ T7075] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1133.357362][ T7075] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1133.375781][ T7075] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1133.383948][ T7075] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1134.192109][T17410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.417996][T17410] veth0_vlan: entered promiscuous mode [ 1134.499028][T17410] veth1_vlan: entered promiscuous mode [ 1134.656947][T17410] veth0_macvtap: entered promiscuous mode [ 1134.676699][T17410] veth1_macvtap: entered promiscuous mode [ 1134.818336][T17410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.869800][T17410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.981071][T16686] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.011494][T16686] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.042195][T16686] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.080109][ T7075] Bluetooth: hci13: command tx timeout [ 1135.088124][T16686] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.419912][ T6659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.471600][ T6659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.480905][ T7075] Bluetooth: hci14: command tx timeout [ 1135.711546][T17216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.726855][T17216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.900797][T17486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.917568][T17486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.945432][T17486] bridge_slave_0: entered allmulticast mode [ 1135.981233][T17486] bridge_slave_0: entered promiscuous mode [ 1136.029793][T17486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.094472][T17486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.102715][T17486] bridge_slave_1: entered allmulticast mode [ 1136.111589][T17486] bridge_slave_1: entered promiscuous mode [ 1136.305642][T17525] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1136.309052][T17486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.394107][T17486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.590885][T17486] team0: Port device team_slave_0 added [ 1136.630314][T17486] team0: Port device team_slave_1 added [ 1136.765408][T17486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.773358][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.851988][T17486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.964586][T17486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.998954][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.105072][T17486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.363084][T17486] hsr_slave_0: entered promiscuous mode [ 1137.389109][T17486] hsr_slave_1: entered promiscuous mode [ 1137.408252][T17486] debugfs: 'hsr0' already exists in 'hsr' [ 1137.414825][T17486] Cannot create hsr debugfs directory [ 1137.559499][ T7075] Bluetooth: hci14: command tx timeout [ 1137.925124][T17486] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.194245][T17486] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.399928][T17486] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.638393][T17486] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.094945][T17486] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1139.107392][T17486] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1139.119540][T17486] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1139.146066][T17486] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1139.161318][T17486] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1139.192129][T17486] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1139.211232][T17486] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1139.322454][T17486] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1139.639304][ T7075] Bluetooth: hci14: command tx timeout [ 1139.675165][T17486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.754434][T17486] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.792272][T12246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.799502][T12246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.894915][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.902110][T12246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.063591][T17486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1141.719318][ T7075] Bluetooth: hci14: command tx timeout [ 1141.864621][T17486] veth0_vlan: entered promiscuous mode [ 1141.903661][T17486] veth1_vlan: entered promiscuous mode [ 1142.031895][T17486] veth0_macvtap: entered promiscuous mode [ 1142.072221][T17486] veth1_macvtap: entered promiscuous mode [ 1142.143807][T17486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.196367][T17486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1142.266616][ T6659] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.318247][ T6659] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.372716][ T6659] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.383181][ T6659] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.666031][T15844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.688271][T15844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.771894][ T6659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.800487][ T6659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.536231][T17604] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2035'. [ 1152.633635][T16607] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1152.657414][T16607] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1152.666391][T16607] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1152.675947][T16607] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1152.685874][T16607] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1153.929200][T17661] sg_write: data in/out 262108/258 bytes for SCSI command 0x61-- guessing data in; [ 1153.929200][T17661] program syz.5.2044 not setting count and/or reply_len properly [ 1153.947186][T17659] nvme_fabrics: missing parameter 'transport=%s' [ 1153.953722][T17659] nvme_fabrics: missing parameter 'nqn=%s' [ 1154.006502][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'. [ 1154.108425][T17639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.116733][T17639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.142014][T17639] bridge_slave_0: entered allmulticast mode [ 1154.153586][T17639] bridge_slave_0: entered promiscuous mode [ 1154.166311][T17639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.174734][T17639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.197422][T17639] bridge_slave_1: entered allmulticast mode [ 1154.206625][T17639] bridge_slave_1: entered promiscuous mode [ 1154.266259][T17639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.296287][T17639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.340412][T17639] team0: Port device team_slave_0 added [ 1154.350173][T17639] team0: Port device team_slave_1 added [ 1154.416902][T17639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.427835][T17639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.455592][T17639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.469622][T17639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.476820][T17639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.514321][T17639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.613483][T17639] hsr_slave_0: entered promiscuous mode [ 1154.623784][T17639] hsr_slave_1: entered promiscuous mode [ 1154.632875][T17639] debugfs: 'hsr0' already exists in 'hsr' [ 1154.642716][T17639] Cannot create hsr debugfs directory [ 1154.768266][T16607] Bluetooth: hci15: command tx timeout [ 1155.061357][T17639] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.191488][T17639] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.353258][T17639] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.487427][T17639] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.741925][T17639] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1155.757398][T17639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1155.771080][T17639] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1155.792024][T17639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1155.802382][T17639] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1155.816138][T17639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1155.833740][T17639] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1155.846210][T17639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1156.149831][T17639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.226727][T17639] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.253886][T17217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.261162][T17217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.283968][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.291268][T12246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.524656][T17639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1156.842172][T16607] Bluetooth: hci15: command tx timeout [ 1157.356192][T17639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.881123][T17639] veth0_vlan: entered promiscuous mode [ 1157.930454][T17639] veth1_vlan: entered promiscuous mode [ 1157.970017][T17639] veth0_macvtap: entered promiscuous mode [ 1157.983139][T17639] veth1_macvtap: entered promiscuous mode [ 1158.012705][T17639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.053102][T17639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.089802][T15844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.130354][T15844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.168253][T15844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.245858][T15844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.390947][T15844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.410489][T15844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.504476][T16686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.532806][T16686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.920437][T16607] Bluetooth: hci15: command tx timeout [ 1160.999162][T16607] Bluetooth: hci15: command tx timeout [ 1161.114627][ T7075] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1161.130269][ T7075] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1161.143062][ T7075] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1161.166858][ T7075] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1161.174727][ T7075] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1161.927452][T17738] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1161.945835][T17738] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1161.958099][T17738] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1161.995408][T17738] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1162.008869][T17738] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1163.239647][ T7074] Bluetooth: hci16: command tx timeout [ 1163.576126][T17736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.599089][T17736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.625095][T17736] bridge_slave_0: entered allmulticast mode [ 1163.648418][T17736] bridge_slave_0: entered promiscuous mode [ 1163.695053][T17736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.705732][T17736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.735339][T17736] bridge_slave_1: entered allmulticast mode [ 1163.764155][T17736] bridge_slave_1: entered promiscuous mode [ 1163.907374][T17736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.939150][T17736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.087749][T17736] team0: Port device team_slave_0 added [ 1164.128915][ T7074] Bluetooth: hci17: command tx timeout [ 1164.143333][T17736] team0: Port device team_slave_1 added [ 1164.236128][T17736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.254801][T17736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.313046][T17736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.439937][T17736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.453162][T17736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.497719][T17736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.694296][T17736] hsr_slave_0: entered promiscuous mode [ 1164.740545][T17736] hsr_slave_1: entered promiscuous mode [ 1164.769964][T17736] debugfs: 'hsr0' already exists in 'hsr' [ 1164.793807][T17736] Cannot create hsr debugfs directory [ 1165.320457][ T7074] Bluetooth: hci16: command tx timeout [ 1165.634571][T17750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.650583][T17750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.674535][T17750] bridge_slave_0: entered allmulticast mode [ 1165.699693][T17750] bridge_slave_0: entered promiscuous mode [ 1165.782132][T17750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.806261][T17750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.823985][T17750] bridge_slave_1: entered allmulticast mode [ 1165.835138][T17750] bridge_slave_1: entered promiscuous mode [ 1166.004846][T17801] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2062'. [ 1166.063136][T17736] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.097530][T17750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.124395][T17750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.198898][ T7074] Bluetooth: hci17: command tx timeout [ 1166.263124][T17736] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.293353][T17750] team0: Port device team_slave_0 added [ 1166.307890][T17750] team0: Port device team_slave_1 added [ 1166.499153][T17736] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.567823][T17750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.584815][T17750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.615414][T17750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.645620][T17750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.658415][T17750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.707967][T17750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1166.754288][T17736] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.043996][T17750] hsr_slave_0: entered promiscuous mode [ 1167.065424][T17750] hsr_slave_1: entered promiscuous mode [ 1167.083367][T17750] debugfs: 'hsr0' already exists in 'hsr' [ 1167.099905][T17750] Cannot create hsr debugfs directory [ 1167.401432][ T7074] Bluetooth: hci16: command tx timeout [ 1167.973937][T17736] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1167.992020][T17736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1168.010127][T17736] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1168.041324][T17736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1168.077562][T17736] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1168.096285][T17736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1168.143068][T17736] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1168.186183][T17736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1168.279061][ T7074] Bluetooth: hci17: command tx timeout [ 1168.435700][T17750] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.822491][T17750] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.014625][T17750] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.151191][T17736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.224413][T17750] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.286013][T17736] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.306380][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.313694][ T6659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.355567][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.362825][ T6659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.484035][ T7074] Bluetooth: hci16: command tx timeout [ 1169.548386][T17736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1169.840380][T17750] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1169.868445][T17750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1169.890023][T17750] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1169.906761][T17750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1169.933811][T17750] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1169.947783][T17750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1169.957777][T17750] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1169.982602][T17750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1170.359032][T17738] Bluetooth: hci17: command tx timeout [ 1170.383103][T17750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.457830][T17750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.508234][T16686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.515531][T16686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.607326][T16686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.614640][T16686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.771838][T17750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1171.044212][T17736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.893529][T17736] veth0_vlan: entered promiscuous mode [ 1171.924750][T17736] veth1_vlan: entered promiscuous mode [ 1172.004459][T17736] veth0_macvtap: entered promiscuous mode [ 1172.023611][T17736] veth1_macvtap: entered promiscuous mode [ 1172.086098][T17736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.137215][T17736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.185358][T16686] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.215541][T16686] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.246687][T16686] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.275759][T16686] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.485194][T17750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.580604][T16686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.608925][T16686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.762440][T17216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.788414][T17216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.186537][T17750] veth0_vlan: entered promiscuous mode [ 1173.203450][T17750] veth1_vlan: entered promiscuous mode [ 1173.235309][T17750] veth0_macvtap: entered promiscuous mode [ 1173.251425][T17750] veth1_macvtap: entered promiscuous mode [ 1173.282304][T17750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.301221][T17750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.327393][T15844] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.347808][T15844] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.360210][T15844] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.370412][T15844] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.510060][ T8409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.518276][ T8409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.574463][ T6659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.584029][ T6659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.997668][T17895] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2073'. [ 1175.536159][T17903] nvme_fabrics: missing parameter 'transport=%s' [ 1175.542983][T17903] nvme_fabrics: missing parameter 'nqn=%s' [ 1175.588347][T17903] sg_write: data in/out 262108/258 bytes for SCSI command 0x61-- guessing data in; [ 1175.588347][T17903] program syz.6.2076 not setting count and/or reply_len properly [ 1175.670690][T17903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2076'. [ 1176.944851][T17916] blktrace: Concurrent blktraces are not allowed on loop2 [ 1177.204239][T17919] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2081'. [ 1177.811292][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.818174][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.009551][T17939] Bluetooth: hci4: command 0x0406 tx timeout [ 1185.022361][T17941] Bluetooth: hci5: command 0x0406 tx timeout [ 1185.034172][T16607] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1185.064988][T16607] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1185.090356][T16607] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1185.102826][T16607] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1185.115297][T16607] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1185.793465][T17937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.801534][T17937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.809573][T17937] bridge_slave_0: entered allmulticast mode [ 1185.817460][T17937] bridge_slave_0: entered promiscuous mode [ 1185.829982][T17937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.837296][T17937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.845333][T17937] bridge_slave_1: entered allmulticast mode [ 1185.853332][T17937] bridge_slave_1: entered promiscuous mode [ 1185.888847][T17937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.902562][T17937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.945611][T17937] team0: Port device team_slave_0 added [ 1185.954464][T17937] team0: Port device team_slave_1 added [ 1185.986216][T17937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1185.993908][T17937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.020249][T17937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.033742][T17937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.041516][T17937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.068413][T17937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.127221][T17937] hsr_slave_0: entered promiscuous mode [ 1186.135387][T17937] hsr_slave_1: entered promiscuous mode [ 1186.142777][T17937] debugfs: 'hsr0' already exists in 'hsr' [ 1186.148613][T17937] Cannot create hsr debugfs directory [ 1186.348594][T17937] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.447789][T17937] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.524673][T17937] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.617839][T17937] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.794869][T17937] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1186.806021][T17937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1186.815642][T17937] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1186.827911][T17937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1186.836301][T17937] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1186.849395][T17937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1186.858168][T17937] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1186.871168][T17937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1186.967764][T17937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.990794][T17937] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.005900][T17217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.013172][T17217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.032925][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.040118][ T6659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.164595][T16607] Bluetooth: hci18: command tx timeout [ 1187.597641][T17937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1187.900901][T17937] veth0_vlan: entered promiscuous mode [ 1187.919360][T17937] veth1_vlan: entered promiscuous mode [ 1187.954330][T17937] veth0_macvtap: entered promiscuous mode [ 1187.967141][T17937] veth1_macvtap: entered promiscuous mode [ 1187.991588][T17937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1188.008121][T17937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.027080][ T6659] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.037125][ T6659] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.074067][ T6659] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.094952][ T6659] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.233414][T17235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.251729][T17235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.304660][T17217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.315488][T17217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.708448][ T7075] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1188.730217][ T7075] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1188.743837][ T7075] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1188.755933][ T7075] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1188.770613][ T7075] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1189.239382][ T7075] Bluetooth: hci18: command tx timeout [ 1190.222537][T17987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.241161][T17987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.251621][T17987] bridge_slave_0: entered allmulticast mode [ 1190.273439][T17987] bridge_slave_0: entered promiscuous mode [ 1190.299533][T17987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.313438][T17987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.326066][T17987] bridge_slave_1: entered allmulticast mode [ 1190.353701][T17987] bridge_slave_1: entered promiscuous mode [ 1190.457277][T17987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.483809][T17987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.562008][T17987] team0: Port device team_slave_0 added [ 1190.576402][T17987] team0: Port device team_slave_1 added [ 1190.646827][T17987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1190.656023][T17987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.701705][T17987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.721863][T17987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.749234][T17987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.806223][T17987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.839209][ T7075] Bluetooth: hci19: command tx timeout [ 1190.998622][T17987] hsr_slave_0: entered promiscuous mode [ 1191.045925][T17987] hsr_slave_1: entered promiscuous mode [ 1191.064498][T17987] debugfs: 'hsr0' already exists in 'hsr' [ 1191.092261][T17987] Cannot create hsr debugfs directory [ 1191.319654][ T7075] Bluetooth: hci18: command tx timeout [ 1191.416716][T16607] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1191.433098][T16607] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1191.446907][T16607] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1191.471337][T16607] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1191.486111][T16607] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1191.629809][T17987] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.956609][T17987] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.158129][T17987] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.418246][T17987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1192.430659][T17987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1192.449626][T17987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1192.460408][T17987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1192.474558][T17987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1192.494787][T17987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1192.503197][T17987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1192.513719][T17987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1192.734218][T17987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.762976][T17987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.803741][T17217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.810973][T17217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.864828][T17217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.872098][T17217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.920745][T16607] Bluetooth: hci19: command tx timeout [ 1193.040648][T18012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.047866][T18012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.055848][T18012] bridge_slave_0: entered allmulticast mode [ 1193.066083][T18012] bridge_slave_0: entered promiscuous mode [ 1193.077957][T18012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.087374][T18012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.095217][T18012] bridge_slave_1: entered allmulticast mode [ 1193.104128][T18012] bridge_slave_1: entered promiscuous mode [ 1193.161033][T18012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.176304][T18012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.223651][T18012] team0: Port device team_slave_0 added [ 1193.234626][T18012] team0: Port device team_slave_1 added [ 1193.300506][T18012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.307538][T18012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.335708][T18012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.350711][T18012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.357974][T18012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.385799][T18012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.401729][ T7074] Bluetooth: hci18: command tx timeout [ 1193.490474][T18012] hsr_slave_0: entered promiscuous mode [ 1193.498162][T18012] hsr_slave_1: entered promiscuous mode [ 1193.506129][T18012] debugfs: 'hsr0' already exists in 'hsr' [ 1193.512672][T18012] Cannot create hsr debugfs directory [ 1193.561129][ T7074] Bluetooth: hci20: command tx timeout [ 1193.798443][T18012] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.912453][T18012] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.051830][T18012] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.162880][T18012] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.201153][T17987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1194.277314][T17987] veth0_vlan: entered promiscuous mode [ 1194.308479][T17987] veth1_vlan: entered promiscuous mode [ 1194.410822][T17987] veth0_macvtap: entered promiscuous mode [ 1194.433283][T17987] veth1_macvtap: entered promiscuous mode [ 1194.538049][T17987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.554160][T17987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.655359][T18012] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1194.669993][T18012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1194.704547][T17738] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 1194.715060][T17738] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 1194.727745][T17738] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 1194.743000][T17738] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 1194.752437][T17738] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 1194.782701][ T6724] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.818958][ T6724] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.845890][T18012] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1194.860516][T18012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1194.872181][ T6724] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.892573][ T6724] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.923307][T18012] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1194.935659][T18012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1194.945928][T18012] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1194.958377][T18012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1195.000342][T17738] Bluetooth: hci19: command tx timeout [ 1195.157542][T17235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.192432][T17235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.245027][T17738] Bluetooth: hci6: command 0x0406 tx timeout [ 1195.255664][ T7074] Bluetooth: hci7: command 0x0406 tx timeout [ 1195.339452][T12245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.387676][T18012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.390811][T12245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.476569][T18012] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.507678][T17217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.516279][T17217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.625687][T17217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.632926][T17217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.651733][ T7075] Bluetooth: hci20: command tx timeout [ 1196.839493][ T7075] Bluetooth: hci21: command tx timeout [ 1197.002652][ T31] INFO: task syz-executor:5627 blocked for more than 143 seconds. [ 1197.018923][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1197.054240][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1197.077209][T18046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.085756][ T7075] Bluetooth: hci19: command tx timeout [ 1197.111631][T18046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.129724][T18046] bridge_slave_0: entered allmulticast mode [ 1197.147149][T18046] bridge_slave_0: entered promiscuous mode [ 1197.163510][ T31] task:syz-executor state:D stack:22456 pid:5627 tgid:5627 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1197.242245][T18046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.256590][ T31] Call Trace: [ 1197.269017][ T31] [ 1197.290511][T18046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.297732][ T31] __schedule+0x1295/0x67a0 [ 1197.314632][ T31] ? __pfx___schedule+0x10/0x10 [ 1197.379252][T18046] bridge_slave_1: entered allmulticast mode [ 1197.388747][ T31] ? find_held_lock+0x2b/0x80 [ 1197.393812][ T31] ? schedule+0x2bf/0x390 [ 1197.398275][ T31] schedule+0xdd/0x390 [ 1197.402654][ T31] schedule_preempt_disabled+0x13/0x30 [ 1197.408198][ T31] __mutex_lock+0xced/0x1b10 [ 1197.425503][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1197.434684][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1197.444135][ T31] ? net_generic+0xea/0x2a0 [ 1197.455224][ T31] ? net_generic+0xea/0x2a0 [ 1197.472440][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1197.480487][T18046] bridge_slave_1: entered promiscuous mode [ 1197.497520][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1197.513081][ T31] nfsd_umount+0x3b/0x60 [ 1197.525844][ T31] deactivate_locked_super+0xc1/0x1b0 [ 1197.537500][ T31] deactivate_super+0xe7/0x110 [ 1197.549064][ T31] cleanup_mnt+0x21f/0x450 [ 1197.565488][ T31] task_work_run+0x150/0x240 [ 1197.579028][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1197.589128][ T31] ? rcu_is_watching+0x12/0xc0 [ 1197.607285][ T31] exit_to_user_mode_loop+0x107/0x4f0 [ 1197.621664][ T31] ? rcu_is_watching+0x12/0xc0 [ 1197.639370][ T31] do_syscall_64+0x6f2/0xf80 [ 1197.644251][ T31] ? clear_bhb_loop+0x40/0x90 [ 1197.659819][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.666517][ T31] RIP: 0033:0x7f2a9299e097 [ 1197.671665][ T31] RSP: 002b:00007ffe6549a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1197.680591][ T31] RAX: 0000000000000000 RBX: 00007f2a92a321ca RCX: 00007f2a9299e097 [ 1197.689192][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6549a1a0 [ 1197.697355][ T31] RBP: 00007ffe6549a1a0 R08: 00007ffe6549b1a0 R09: 00000000ffffffff [ 1197.706112][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6549b230 [ 1197.714620][ T31] R13: 00007f2a92a321ca R14: 00000000000ff63a R15: 00007ffe6549b270 [ 1197.723251][ T31] [ 1197.727216][ T7075] Bluetooth: hci20: command tx timeout [ 1197.733048][ T31] INFO: task syz-executor:5633 blocked for more than 144 seconds. [ 1197.733092][ T31] Tainted: G L syzkaller #0 [ 1197.733113][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1197.733128][ T31] task:syz-executor state:D stack:23624 pid:5633 tgid:5633 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1197.733236][ T31] Call Trace: [ 1197.733248][ T31] [ 1197.733267][ T31] __schedule+0x1295/0x67a0 [ 1197.733345][ T31] ? __pfx___schedule+0x10/0x10 [ 1197.733389][ T31] ? find_held_lock+0x2b/0x80 [ 1197.733437][ T31] ? schedule+0x2bf/0x390 [ 1197.733489][ T31] schedule+0xdd/0x390 [ 1197.733535][ T31] schedule_preempt_disabled+0x13/0x30 [ 1197.733583][ T31] __mutex_lock+0xced/0x1b10 [ 1197.733637][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1197.733696][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1197.733775][ T31] ? net_generic+0xea/0x2a0 [ 1197.733818][ T31] ? net_generic+0xea/0x2a0 [ 1197.733869][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1197.733917][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1197.733968][ T31] nfsd_umount+0x3b/0x60 [ 1197.734018][ T31] deactivate_locked_super+0xc1/0x1b0 [ 1197.734057][ T31] deactivate_super+0xe7/0x110 [ 1197.734096][ T31] cleanup_mnt+0x21f/0x450 [ 1197.734140][ T31] task_work_run+0x150/0x240 [ 1197.734179][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1197.734220][ T31] ? rcu_is_watching+0x12/0xc0 [ 1197.734268][ T31] exit_to_user_mode_loop+0x107/0x4f0 [ 1197.734302][ T31] ? rcu_is_watching+0x12/0xc0 [ 1198.138766][ T31] do_syscall_64+0x6f2/0xf80 [ 1198.161592][ T31] ? clear_bhb_loop+0x40/0x90 [ 1198.178162][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.184436][ T31] RIP: 0033:0x7f8cac59e097 [ 1198.192578][ T31] RSP: 002b:00007ffe7af2d818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1198.218780][ T31] RAX: 0000000000000000 RBX: 00007f8cac6321ca RCX: 00007f8cac59e097 [ 1198.238831][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7af2d8d0 [ 1198.255287][ T31] RBP: 00007ffe7af2d8d0 R08: 00007ffe7af2e8d0 R09: 00000000ffffffff [ 1198.278753][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7af2e960 [ 1198.309060][ T31] R13: 00007f8cac6321ca R14: 0000000000100ffb R15: 00007ffe7af2e9a0 [ 1198.358956][ T31] [ 1198.368900][ T31] INFO: task syz-executor:5635 blocked for more than 144 seconds. [ 1198.417882][ T31] Tainted: G L syzkaller #0 [ 1198.458831][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1198.467655][ T31] task:syz-executor state:D stack:23600 pid:5635 tgid:5635 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1198.481632][ T31] Call Trace: [ 1198.487227][ T31] [ 1198.503816][ T31] __schedule+0x1295/0x67a0 [ 1198.508532][ T31] ? __pfx___schedule+0x10/0x10 [ 1198.515848][ T31] ? find_held_lock+0x2b/0x80 [ 1198.533917][ T31] ? schedule+0x2bf/0x390 [ 1198.538409][ T31] schedule+0xdd/0x390 [ 1198.551125][ T31] schedule_preempt_disabled+0x13/0x30 [ 1198.556720][ T31] __mutex_lock+0xced/0x1b10 [ 1198.561943][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1198.567348][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1198.574327][ T31] ? net_generic+0xea/0x2a0 [ 1198.579311][ T31] ? net_generic+0xea/0x2a0 [ 1198.583961][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1198.592169][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1198.598245][ T31] nfsd_umount+0x3b/0x60 [ 1198.612756][ T31] deactivate_locked_super+0xc1/0x1b0 [ 1198.618616][ T31] deactivate_super+0xe7/0x110 [ 1198.637109][ T31] cleanup_mnt+0x21f/0x450 [ 1198.642012][ T31] task_work_run+0x150/0x240 [ 1198.646720][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1198.655524][ T31] ? rcu_is_watching+0x12/0xc0 [ 1198.665034][ T31] exit_to_user_mode_loop+0x107/0x4f0 [ 1198.671293][ T31] ? rcu_is_watching+0x12/0xc0 [ 1198.676171][ T31] do_syscall_64+0x6f2/0xf80 [ 1198.684933][ T31] ? clear_bhb_loop+0x40/0x90 [ 1198.692523][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.698533][ T31] RIP: 0033:0x7f3cb939e097 [ 1198.708779][ T31] RSP: 002b:00007fff43365808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1198.743764][ T31] RAX: 0000000000000000 RBX: 00007f3cb94321ca RCX: 00007f3cb939e097 [ 1198.753731][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff433658c0 [ 1198.779991][ T31] RBP: 00007fff433658c0 R08: 00007fff433668c0 R09: 00000000ffffffff [ 1198.798752][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff43366950 [ 1198.818725][ T31] R13: 00007f3cb94321ca R14: 00000000001012ae R15: 00007fff43366990 [ 1198.838571][ T31] [ 1198.845325][ T31] [ 1198.845325][ T31] Showing all locks held in the system: [ 1198.878533][ T31] 1 lock held by khungtaskd/31: [ 1198.890418][ T31] #0: ffffffff8e7e52e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1198.902517][ T31] 1 lock held by klogd/4981: [ 1198.907308][ T31] 2 locks held by getty/5380: [ 1198.912287][ T31] #0: ffff888033b880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1198.929338][ T7075] Bluetooth: hci21: command tx timeout [ 1198.963883][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1198.974559][ T31] 2 locks held by syz-executor/5627: [ 1198.987904][ T31] #0: ffff88806a48c0d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.003352][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.013201][ T31] 2 locks held by syz-executor/5633: [ 1199.018546][ T31] #0: ffff8880379760d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.029458][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.050363][ T31] 2 locks held by syz-executor/5635: [ 1199.055781][ T31] #0: ffff88807d2e60d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.067650][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.077487][ T31] 2 locks held by syz.0.1893/16545: [ 1199.087764][ T31] #0: ffffffff906bd588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1199.107279][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 1199.119840][ T31] 2 locks held by syz-executor/16606: [ 1199.125314][ T31] #0: ffff888035f880d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.135829][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.156728][ T31] 2 locks held by syz-executor/16620: [ 1199.167623][ T31] #0: ffff8880292f00d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.180954][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.190770][ T31] 2 locks held by syz-executor/16718: [ 1199.196237][ T31] #0: ffff888049c9c0d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.218405][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.228571][ T31] 2 locks held by syz-executor/16731: [ 1199.236523][ T31] #0: ffff88804982c0d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.270088][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.280220][ T31] 2 locks held by syz-executor/16877: [ 1199.285676][ T31] #0: ffff888025fde0d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.297980][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.310412][ T31] 2 locks held by syz-executor/16915: [ 1199.315884][ T31] #0: ffff888049caa0d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.353726][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.364417][ T31] 2 locks held by syz-executor/16994: [ 1199.370023][ T31] #0: ffff8880488660d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.381207][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.391050][ T31] 2 locks held by syz-executor/17213: [ 1199.396496][ T31] #0: ffff8880465400d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.411807][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.421587][ T31] 2 locks held by syz-executor/17344: [ 1199.426997][ T31] #0: ffff88803636e0d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.437446][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.462205][ T31] 2 locks held by syz-executor/17410: [ 1199.467670][ T31] #0: ffff8880784340d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.478446][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.489802][ T31] 2 locks held by syz-executor/17486: [ 1199.495270][ T31] #0: ffff888048cb20d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.505722][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.517011][ T31] 2 locks held by syz-executor/17639: [ 1199.523527][ T31] #0: ffff8880537740d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.534000][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.543727][ T31] 2 locks held by syz-executor/17736: [ 1199.556837][ T31] #0: ffff88807ab840d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.596805][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.606627][ T31] 2 locks held by syz-executor/17750: [ 1199.613796][ T31] #0: ffff88807657c0d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.624354][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.635033][ T31] 2 locks held by syz-executor/17937: [ 1199.642997][ T31] #0: ffff888035c760d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1199.661492][ T31] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1199.671570][ T31] 3 locks held by syz-executor/18012: [ 1199.677029][ T31] #0: ffff88809b238ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1199.686738][ T31] #1: ffff88809b2380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1199.697372][ T31] #2: ffffffff8e7f0e28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1199.716639][ T31] 3 locks held by syz-executor/18046: [ 1199.724565][ T31] #0: ffff8880accb0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1199.734337][ T31] #1: ffff8880accb00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1199.745091][ T31] #2: ffffffff90895820 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1199.762943][ T31] 5 locks held by syz.0.2087/18072: [ 1199.768255][ T31] #0: ffff88809f29cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1199.778046][ T31] #1: ffff88809f29c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1199.787893][ T31] #2: ffffffff90895820 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1199.798101][ T31] #3: ffff88805a5b0af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 1199.807905][ T7075] Bluetooth: hci20: command tx timeout [ 1199.813637][ T31] #4: ffffffff8e7f0e28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1199.828939][ T31] [ 1199.832860][ T31] ============================================= [ 1199.832860][ T31] [ 1199.885505][ T31] NMI backtrace for cpu 1 [ 1199.885536][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1199.885580][ T31] Tainted: [L]=SOFTLOCKUP [ 1199.885591][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1199.885608][ T31] Call Trace: [ 1199.885617][ T31] [ 1199.885629][ T31] dump_stack_lvl+0x100/0x190 [ 1199.885670][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1199.885711][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1199.885747][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1199.885796][ T31] sys_info+0x141/0x190 [ 1199.885824][ T31] watchdog+0xcb1/0x1030 [ 1199.885878][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1199.885924][ T31] ? __pfx_watchdog+0x10/0x10 [ 1199.885971][ T31] ? __kthread_parkme+0x18c/0x230 [ 1199.886022][ T31] ? kthread+0x13a/0x450 [ 1199.886049][ T31] ? __pfx_watchdog+0x10/0x10 [ 1199.886095][ T31] kthread+0x370/0x450 [ 1199.886122][ T31] ? __pfx_kthread+0x10/0x10 [ 1199.886154][ T31] ret_from_fork+0x72b/0xd50 [ 1199.886192][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1199.886230][ T31] ? __switch_to+0x800/0x1100 [ 1199.886274][ T31] ? __switch_to_asm+0x39/0x70 [ 1199.886316][ T31] ? __pfx_kthread+0x10/0x10 [ 1199.886347][ T31] ret_from_fork_asm+0x1a/0x30 [ 1199.886410][ T31] [ 1199.886433][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1200.027040][ C0] NMI backtrace for cpu 0 [ 1200.027066][ C0] CPU: 0 UID: 0 PID: 8409 Comm: kworker/u10:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.027103][ C0] Tainted: [L]=SOFTLOCKUP [ 1200.027112][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1200.027134][ C0] Workqueue: 0x0 (events_unbound) [ 1200.027166][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x20 [ 1200.027209][ C0] Code: bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <40> 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 86 fe ff ff 66 0f 1f 44 [ 1200.027235][ C0] RSP: 0018:ffffc9000c66fd18 EFLAGS: 00000046 [ 1200.027254][ C0] RAX: 0000000000000001 RBX: ffff888047270678 RCX: ffffffff81cdbc2d [ 1200.027271][ C0] RDX: 1ffff11008eb00d1 RSI: 0000000000000001 RDI: 0000000000000000 [ 1200.027287][ C0] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1200.027303][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888047270680 [ 1200.027319][ C0] R13: ffff888047580678 R14: ffff888037eda948 R15: 0000000000000001 [ 1200.027336][ C0] FS: 0000000000000000(0000) GS:ffff888124377000(0000) knlGS:0000000000000000 [ 1200.027360][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1200.027377][ C0] CR2: 00007ffcc14d7fd8 CR3: 0000000034f46000 CR4: 00000000003526f0 [ 1200.027393][ C0] Call Trace: [ 1200.027401][ C0] [ 1200.027409][ C0] move_linked_works+0xbd/0x2f0 [ 1200.027453][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 1200.027483][ C0] assign_work+0x1a2/0x440 [ 1200.027508][ C0] worker_thread+0x355/0xe50 [ 1200.027545][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1200.027571][ C0] ? kthread+0x13a/0x450 [ 1200.027593][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1200.027618][ C0] kthread+0x370/0x450 [ 1200.027638][ C0] ? __pfx_kthread+0x10/0x10 [ 1200.027662][ C0] ret_from_fork+0x72b/0xd50 [ 1200.027690][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1200.027718][ C0] ? __switch_to+0x800/0x1100 [ 1200.027754][ C0] ? __switch_to_asm+0x39/0x70 [ 1200.027789][ C0] ? __pfx_kthread+0x10/0x10 [ 1200.027812][ C0] ret_from_fork_asm+0x1a/0x30 [ 1200.027855][ C0] [ 1200.255885][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1200.262824][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.273588][ T31] Tainted: [L]=SOFTLOCKUP [ 1200.277962][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1200.288161][ T31] Call Trace: [ 1200.291492][ T31] [ 1200.294480][ T31] dump_stack_lvl+0x100/0x190 [ 1200.299235][ T31] vpanic+0x552/0x970 [ 1200.303282][ T31] ? __pfx_vpanic+0x10/0x10 [ 1200.307818][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1200.313998][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1200.320185][ T31] panic+0xd1/0xe0 [ 1200.323936][ T31] ? __pfx_panic+0x10/0x10 [ 1200.328392][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1200.334609][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1200.340802][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1200.346981][ T31] ? watchdog.cold+0x1ec/0x234 [ 1200.351771][ T31] ? watchdog+0xcc1/0x1030 [ 1200.356232][ T31] watchdog.cold+0x1fd/0x234 [ 1200.360890][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1200.366801][ T31] ? __pfx_watchdog+0x10/0x10 [ 1200.371563][ T31] ? __kthread_parkme+0x18c/0x230 [ 1200.376666][ T31] ? kthread+0x13a/0x450 [ 1200.380982][ T31] ? __pfx_watchdog+0x10/0x10 [ 1200.385693][ T31] kthread+0x370/0x450 [ 1200.389792][ T31] ? __pfx_kthread+0x10/0x10 [ 1200.394443][ T31] ret_from_fork+0x72b/0xd50 [ 1200.399100][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1200.404273][ T31] ? __switch_to+0x800/0x1100 [ 1200.408991][ T31] ? __switch_to_asm+0x39/0x70 [ 1200.413811][ T31] ? __pfx_kthread+0x10/0x10 [ 1200.418425][ T31] ret_from_fork_asm+0x1a/0x30 [ 1200.423232][ T31] [ 1200.427032][ T31] Kernel Offset: disabled [ 1200.431404][ T31] Rebooting in 86400 seconds..