last executing test programs: 11.037897069s ago: executing program 3 (id=36): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000180)='./file0\x00', 0x149443, 0x100) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)=""/65, 0x41) mmap$auto(0x0, 0x7909, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8c80d}, 0x24000010) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x3f, 0x4, 0x1}) mbind$auto(0x10000000002000, 0x100000004, 0xfd8, 0x0, 0x6, 0x5) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/pagemap\x00', 0x101a03, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb3, 0xffffffffffffffff, 0x69) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyc2\x00', 0x20c02, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) epoll_create$auto(0x4) 9.972810094s ago: executing program 1 (id=39): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r2, 0x9, 0x70bd2c, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x808) r3 = socket(0x2, 0x801, 0x106) getsockopt$auto(r3, 0x11c, 0x2, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x5) 9.218800455s ago: executing program 3 (id=40): r0 = ioctl$auto_NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r1 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000080), 0xffffffffffffffff) socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = socket(0x1f, 0x3, 0x400001) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x1ac}}, 0x4c041) r3 = socket(0xf, 0x5, 0xf) setsockopt$auto(r3, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x42100, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xfffffe01, 0x22, 0x940, 0x1ffde, 0x3, 0x3, 0x7, 0x9, 0x5, 0x0, 0x8004, 0xb0, 0x7, 0x1, 0x3, 0x5, 0x7, 0xfffffffe, 0x0, 0x0, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, [0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x7, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) socket(0x10, 0x2, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90) \x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0xbc, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0xa5, 0x3, 0x0, 0x1, [@generic="b5f2a76f1b6a4aaf3e11a9fa181ef31204e46fea12cab84d14cd0f78a7d3c73f3e09bc756d353f2d06f2b653ca26dbc0bc98867f8bf80e148cb010f4232097ad452b893a83b2dd6780642425a1695f5f2d924f37e34a5fdb3d23d3015c72a7929eb0261d0d8c74ea8f1eaf3531ee887f86201a9edd221e2ba3ba2a2068b2593dffd155293569d7576fdae33ad5a241669476852dd44a9264b9dc8df7", @generic="96b424849d"]}]}, 0xbc}}, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, 0x0, 0xb01, 0x0) 8.780007715s ago: executing program 0 (id=41): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/bNumEndpoints\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/239, 0xef) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x2d, 0x17000002, 0x0, 0x800000000000000, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(&(0x7f0000000040)={r1, 0x5, 0xf}, 0x4, 0x0, 0x0, 0x8) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket(0x10, 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x1011c0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da08, 0x3, 0x3, 0x62, 0x80000003, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r3 = socket(0x2, 0x1, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'xfrm0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x44000100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0x16, 0x1, '/dev/input/event1\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}, @OVS_DP_ATTR_IFINDEX={0x8}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x2, 0x0) mq_open$auto(&(0x7f0000000000)='P\x02\xb9\xd5\x02r\xbc\xd0\t^\xc0!\x7f\xc0\xdd8\xb0\x80\xfa;\x97\x05n\xf4~Z\x05\xf1\xef\xd1\xf1\b\xd9J\x9bp\xdf\xe7\xcd\x1f\x84-\xbb\x05\xa5\xb8\xfc\xf7v<)\xddR\x02\xd8\r_\x03\xe7\x8eWta\xfa\xbd\xaf\x06kG\xf7\xaa6\x1ch\vmD\xfc|v\xd4Q', 0x7e, 0x9, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) msgctl$auto_MSG_STAT_ANY(0xff, 0xd, &(0x7f0000000380)={{0x0, 0xee01, 0xffffffffffffffff, 0xb7, 0x200, 0x2, 0xfffb}, &(0x7f0000000240)=0xd, &(0x7f0000000280), 0x95d, 0x200, 0x5, 0xfffffffffffffc01, 0x7, 0x8, 0x2, 0x2, @raw=0x1ff}) setpriority$auto(0x7949, r5, 0x8) getsid$auto(0x0) 7.882905379s ago: executing program 3 (id=44): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd12/queue/max_segment_size\x00', 0x600, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/235, 0xeb) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0xffffffffffffffff, 0x8, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x3, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fcntl$auto(0xffffffffffffffff, 0x3, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0xf0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) process_vm_writev$auto(0x0, 0x0, 0x1007, 0x0, 0x9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/default/tag\x00', 0x163041, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.314105326s ago: executing program 0 (id=45): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETPAGEFILE(r1, 0x7a9, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';') r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r3, &(0x7f0000000240)='/d\xfd\xff/audio\x9c\b\xfe\xb2u\xe6+.\x0f\xc3\x00', 0x100000a3d9) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000040)={0x8020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7) setsockopt$auto_SO_TXTIME(r2, 0x2, 0x3d, &(0x7f0000000200)='/d\xfd\xff/audio\x9c\b\xfe\xb2u\xe6+.\x0f\xc3\x00', 0x8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_getevents$auto(0x1, 0x1ff, 0x9, &(0x7f0000000080)={0xffffffff, 0xc, 0xffffffffffffffff, 0x9}, &(0x7f0000000180)={0x6}) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) writev$auto(0x3, 0x0, 0x8) getsockopt$auto(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x98) setsockopt$auto_SO_SELECT_ERR_QUEUE(0xffffffffffffffff, 0x9, 0x2d, &(0x7f00000001c0)='\xf0&}\\:-:b\x00', 0x3) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, &(0x7f0000000040)='nbd\x00', 0x4) 6.615498053s ago: executing program 1 (id=47): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/psaux\x00', 0x800, 0x0) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x280080, 0x0) ioctl$auto_BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) mmap$auto(0x0, 0x20009, 0x725, 0xeb2, 0x8, 0x1008000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="05000000140000000000b16228c1083205"], 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) poll$auto(0x0, 0x6, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x9, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) r2 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) socket(0x3, 0x4, 0x300) io_uring_enter$auto(r2, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000000)="31145f", 0x3) 5.476837662s ago: executing program 2 (id=49): mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) epoll_create$auto(0x83e) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r0, 0x901064ae, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xb}]}, 0x24}}, 0x4000) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r4, 0x2284, r3) 4.883418452s ago: executing program 0 (id=50): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/uptime\x00', 0x20000, 0x0) open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x138) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000500)={0x0, 0x0, "a68a78cddb9af7ac4c80865002a0d2e3", "213ea76652ad28e8b96ec5ed5243aea3", "25222c3aac25ccff5de7b81eefde747e7674da7f6154e6bcf81ec7dadaa3b485", "12f251f2492bb43c598ef0237d522cb86954c0763131c2f67eaa6356799448a9576c948fc3fb995daec2f1fc9170a70b4b71b44f04809f3ca99cb9b4e9d3abb67d33f3d3fe57d0289938f4ce01d60bfd", "e9e7f824968ee78f73dc2749d12c7e05", "402beaf8e2dfaba5303a6efa74256963183267b80c0b5a1f17a2c919b4c43dc3817ea4719a3e48cdb8c3e9873ecfe260f627c94bc35f96d615979b05547405d7e633a060cdb0fc80f9562c947ed257fd", "5c84948d2c357792b0c4be9a3a15ecfee836d93ae475d2bc8193e8ac53c0494bf16e9a6d85fa65416177e39fac9de9d4869f6e9602c6f01a500ba2ba3d5fef158c908f502afdfe316cf3ac63f1f4842ec3c180d103084776592ff9e4a66125f8f285cabc67891f381c9bcc345f41ee4f2d7f4bffb05d58b0377a76a50de67bb8"}) r1 = getpgid(0x0) pidfd_open$auto(r1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{@inferred=0x0, 0x1, 0x6, 0x80000001, "a2b8e85fc56865ba529faa0000000000000000000000692a240000008000", @raw=0x6}, 0x6, 0x5, 0x7, @inferred=r1, @reserved="fb99d320be0de941ac3f58d7aae0c84cbe332d618e0342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d4c89bee7005c5affd5ab891b44e48364e8de3f344584996c31f9ae16c6c4f062d38f590125ed264000000000000000000000000000000000000000600", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f4ab606c276852295e00af49090000008034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000000c0)={@inferred=r1, 0x6, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000003600)=""/4110, 0x100e) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x6}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x876c5, 0x8, 0x100000000}}) setsockopt$auto_SO_BSDCOMPAT(r0, 0x7f, 0xe, &(0x7f00000018c0)='\x00', 0x4) mmap$auto(0x8000000000000000, 0x400008, 0xdf, 0xe7ff, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe984, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) epoll_ctl$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf250b0000000a001f00aaaaaaaaaa3400000600200002000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x2) connect$auto(0x4, 0x0, 0x10) r6 = pidfd_open$auto(r2, 0xffffbffe) sendmsg$auto_CGROUPSTATS_CMD_GET(r6, 0x0, 0x44) prctl$auto(0x1000000003b, 0xffb, r3, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) bpf$auto(0x4, 0x0, 0xa4) r7 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r7, &(0x7f0000000240)=""/80, 0x50) 4.802545639s ago: executing program 3 (id=51): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) semctl$auto_GETPID(0x0, 0x4, 0xb, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clock_getres$auto(0x10, &(0x7f0000000080)={0x5, 0x200}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) write$auto(0x3, 0x0, 0x80000003) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r2 = socket(0x5, 0x5, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000", @ANYRESDEC=r2, @ANYRESHEX=r2, @ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40048c0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r3 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000100)=0x9) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) preadv2$auto(r4, &(0x7f00000000c0)={0x0, 0x6}, 0x6, 0x7fff, 0xd01f, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/cpia1/uevent\x00', 0x121101, 0x0) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) 4.529577807s ago: executing program 2 (id=52): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0x1000df, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) socket(0x2, 0xa, 0xe57a) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = socket(0x2b, 0x1, 0x1) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, 0x0, 0x20000001) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0x2c, 0x1, 0x40003) ioperm$auto(0x7, 0x5ad2, 0xc) write$auto_proc_projid_map_operations_base(0xffffffffffffffff, &(0x7f00000001c0)="44f0e9fbc01fd062b62161bd72061e01c07586fd74bf853907a01ebd1a3cbc31b4801ebfcbaafda55783688acd1fc6f172", 0x31) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) 3.960661568s ago: executing program 1 (id=53): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/vbi14/name\x00', 0x1c7041, 0x0) write$auto(r0, 0x0, 0x4) mmap$auto(0xfffffffffffffffd, 0x20009, 0x4100000000e0, 0xeb1, r0, 0x40000008003) pipe2$auto(0x0, 0x80) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) socket(0x2, 0x80002, 0x73) r3 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci3/force_wakeup\x00', 0x8742, 0x0) write$auto_force_wakeup_fops_hci_vhci(r3, &(0x7f0000000080)="315b0a8f", 0x4) socket(0x2, 0x1, 0x84) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) prctl$auto_PR_SET_MM_START_STACK(0x7b, 0x5, 0x0, 0x9, 0x1) write$auto(r2, &(0x7f0000000200)='7\xed\xb0\xa0:\x81\xfbF\xda\xcd\x8c\xb5\x1f\xfb\xb6\xd9\x0eY\xc2\xe6\x10\xac\x94\v2o\x91G\xb1 4e\x9cu\x01\xde\x99\x86\x9f\x84\xf2\xea\xf6\x9b\x8b\xf7\x14\x1b\xcf\xc4\fc1\xe1\xacK\"j\xe5x\xb1\xd9\xb4D}\xeb\x89\x15\xb5\x17\xca\x8c\fy\xd6qK\xed\xd1I\xf7\x12\xb9}\x9b\xfa\xb5p\x99\xf1\x91(\x01\x80\x98\x03\xa7_K\x8c\xcd\xbc\x1e\xfa\xc3\xf2\xae\r1B\rb\xa3\xfd\xbe\xba\a\xf9lV\xa7\xcf\xbd\x1d\a\v\xbbL\x00\xa8`>5c\x9d\xa2\xc4\x02\x81\xa1\xb4,\xe1edD\x00\x98J\x05PF\v\xf5\xaf\bh-^\x1c\\\x8e\x9a,\xd2\x1fU\x8c\xd2\xa1\xf2Q\xf7=%8\xc6\x1f*\xc9\xce\xa8\xcb\xf7\x13oY\x93v', 0x82) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000880)=0x0) getsockname$auto(r4, &(0x7f00000008c0)=@nfc={0x27, r5, 0x0, 0x3}, &(0x7f0000000900)=0x7) accept$auto(r1, &(0x7f0000000080)=@nfc={0x27, r5, 0xffffffffffffffff, 0x2}, &(0x7f00000000c0)=0x5) clock_gettime$auto(0x80000000, 0x0) inotify_init1$auto(0x3000000000000) ioctl$auto(0x3, 0x541b, 0xffffffffffffffff) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x0, 0x1a, 0x0, 0x28) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_KEY_FLUSH(r6, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010814bd7000fedbdf000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 3.75996377s ago: executing program 0 (id=54): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x2, 0xfffc, 0x0, 0x11, r0, 0x80000000028004) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.prio.class\x00', 0x183042, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x2003f0, 0x15) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r4 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r4, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) socket$nl_generic(0x10, 0x3, 0x10) 3.269960575s ago: executing program 3 (id=55): bind$auto(0xffffffffffffffff, 0x0, 0x66) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0x5ca02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000180)={{@raw=0x5, 0x6, 0x3, 0x3, "0bd3a2c326172c92aae5b2a2d02f3a23ef92da93d9998c808879dc6394a7e6cf8a9bee3bbd26d7c49efab627"}, 0xb, 0x9, 0xa969, @raw=0x5, @reserved="43ee1a6615c9c6cae81027105fbc8c31742b8210887c89b1aeb8bb7bb773875f1244f6d9437760e1963e39c721c1e71016631aaa52f35d486f34a38181ff13499e6f5f95ce478df796981d512ebb69359186c9a94fb5f4d2388e5ccec6d706ae1b22f795328fd0243c18428f0365a4ba3df7cc1481d93739ca65d6aab96f2761", "9daf3df4e8335eef1177c7c72ccc2d2e58328579b90dce5f8f8ea43524b9ffacd7aa27a7ca72c8c8baf1250dcb932882993f917d1b875eddebce5895e9f866c5"}) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x1, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x11, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x200000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = open(0x0, 0x591002, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x13, r4, 0xffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20342, 0x0) readv$auto(r2, 0x0, 0xd709) r5 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/auxv\x00', 0x8040, 0x0) readv$auto(r5, &(0x7f0000000900)={&(0x7f0000000800), 0x3ff}, 0x2) write$auto(r5, &(0x7f0000000340)='A\xbe\x02\xb0\x00_\x00\x06\xd0+j\xab\xb7\xd6\xcc,\xd0\xb3r\xb3f\xa8\xda\xa8\x98\x97\xede\x11\x04\xce~\xd2\x95\xf5\x00\vZ\x8b\xf8)^\xf3U(\xcdRz\xc1\x88\xefr\xbeY@\xb4-J*_ck\xcf\xa1j\xed\xd6\b\x00\xf4\x91\xfdJy\x95H9\"\x00@\x00H\x90\xb5/\x12=fg\xd7\x19\x13\xed\xb8(d\x9fk\x93\xc8\xda\xecu\x0f\xd0\xfdM\x96\xd7\xd3\xb2\xb5\x84*YA\x82.\x12\x9b\x154\xdd\xc4\x05\x83-\xd45\x80\xb1\x9c\\jJ)\x87\x88\x92uj?\xf6\x11\xb1 t\xa4<\xbdr\xa8)\x94\x97\xb7\x9f\b\xceI\x8bd\xc4\x80K\xc5\x14\nNn\xa2\xf8\xb3SY\xa8\x7f2\xb3\x0eN\x177\xbe\xf8\xa2v\x9c\x00Zo\xad_o\xb9\x8aL\xccz@\xd1{\x99-\xe8F\xc9\xf7R\x02lX?\x00\xf2\x90\xd8\xd6\xd33\xbb\x17sH\xe6!\xdc\x12\xf2\xac\x91\x04c\x8f_\xa6\x85\xdb\xa0\xc7\x7f\x91,\vD\xd4\x90K\xbf\x11I\xf3;\xa4\xda\x05\xcfx\xf24\xaa\x84J\x98!\xabz\x96}', 0x6) vmsplice$auto(0xffffffffffffffff, 0x0, 0x2, 0x5) writev$auto(0xffffffffffffffff, 0x0, 0x3) ppoll$auto(0x0, 0x3, 0x0, 0x0, 0x8) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="100426bd7000fbdbdf25040000004d0001003231f2cabbec57a4511f7a9ba5742f545aee17fed70ed2150f2629db599d75304bf43aba5ba6c9fe848253111536261ecae4b36a46282550518119a99319709fc4393fc77ef66d4673000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000c4}, 0x8801) unshare$auto(0x40000080) mprotect$auto(0x8000, 0x8, 0x8) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) unshare$auto(0x8) unshare$auto(0x40000080) open(&(0x7f0000000000)='./file0\x00', 0x100, 0x0) read$auto(0x3, 0x0, 0x0) 3.244952528s ago: executing program 1 (id=56): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r0 = pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0xa, 0x0, 0x1) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socket(0xf, 0x3, 0x2) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7, 0x6d3c, 0x5, 0x80]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/power/wakeup_total_time_ms\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x2, 0x1ff) write$auto(0x1, 0x0, 0x100) close_range$auto(r0, r1, 0x5) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) socket(0xa, 0x2, 0x6) setgroups$auto(0xe, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3d, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ff4, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xff, 0x612, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff]}, 0x1fe, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd9\x00', 0x5e201, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r3, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.594767756s ago: executing program 2 (id=57): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r0, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x395603, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r2, 0xffffffff}, 0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0xc, &(0x7f0000000080)=@link_update={r3, @new_map_fd, 0x403, @old_map_fd}, 0x5) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x7, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r5, 0x0, &(0x7f0000001640)='+\x00', 0x0, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r1, 0x4138ae84, 0x0) 2.390221281s ago: executing program 0 (id=58): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f00000001c0)=@raw_tracepoint={0x8, 0xffffffffffffffff, 0x0, 0x4}, 0x1) mmap$auto(0x0, 0x400007, 0x876b, 0x9b72, 0xffffffffffffffff, 0x1) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon38\x00', 0x400, 0x0) ioctl$auto(0xffffffffffffffff, 0x549b, r1) mmap$auto(0x0, 0x2000c, 0xe1, 0x20eb5, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x600, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3, 0x1, 0x0, 0x2, 0x0) write$auto(r0, &(0x7f0000000280)='\x00\t\x00\x00\x00r\xd6\xa3\b\xa9\xdcn\x00\x00', 0x20fbffffff) mmap$auto(0x10000, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8010) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptys5\x00', 0x48340, 0x0) ioctl$auto(r2, 0x545c, 0xffffffffffffffff) ioctl$auto_TIOCMSET2(r2, 0x5418, &(0x7f0000000200)="ea8e") ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) syz_clone3(&(0x7f0000000100)={0x80a08680, 0x0, 0x0, 0x0, {0x824}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) socket(0xa, 0x801, 0x1) unshare$auto(0x40000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bpq2/napi_defer_hard_irqs\x00', 0x0, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/current_tracer\x00', 0x30080, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000300)='/dev/binderfs/binder0\x00', 0x4d4001, 0x0) ioctl$auto(r3, 0x80006, r4) 1.74858285s ago: executing program 2 (id=59): mmap$auto(0x0, 0x20009, 0xdf, 0x17, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7f) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x9, 0x2, 0xdf, 0x9b70, 0xffffffffffffffff, 0x140) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) read$auto(r1, 0x0, 0xcefbce6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000000)=""/156, 0x9c) shmat$auto(0x0, &(0x7f0000000580)='h\x00', 0xdffffffa) kill$auto(0x0, 0x11) syz_clone3(&(0x7f0000000500)={0x400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0xfff, 0x7, 0xab8) prctl$auto(0x9, 0x1, 0x0, 0x2000000007, 0x3) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) r4 = socket(0x29, 0x80000, 0x6) io_uring_register$auto_IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000140)="92f5b6d429e0ea2a4c97b31ef789fd555acfff756a6ddec6766e42cef1270e8cbc51c5f9e8f21d850b3d9ea1d0e1696765035381aa2abc1d8444971a96b79c11a4868a99e2bb7a8d57dc4174ab434c3803232696dd1e76a82db428ac5f853d91bd418b167d44f92ab9cb309d32d1e141b130eb16ee7fd4e1be204c3feff3f6278ae2b00e582c04ef3966bf12ce5af6fe2dfac002951b", 0x9) mmap$auto(0x1, 0x3, 0x3, 0x55, r2, 0x8001) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, r4, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) 1.613415961s ago: executing program 1 (id=60): mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x8000) socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xff}, 0x1, 0x0, 0x5, 0xa}, 0x8}, 0x5, 0xfff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/006/001\x00', 0x430c02, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x8001) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000100), 0xacd4}, 0x1) 1.316561742s ago: executing program 0 (id=61): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000500)="a860e2d7", 0xffffffff}, 0x6, 0x0) r1 = prctl$auto(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) mmap$auto(0x6, 0x200000000ecf, 0x80000002, 0x46199d5a, r1, 0xdb) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r2) write$auto(0x3, 0x0, 0xfffffdf2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda1\x00', 0xa4e00, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x14d142a943201126, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x20002, {0x100000000, 0x10000}, 0x7fffffff, 0x8, 0xfffffffffffffffd, 0xffff0003, 0x0, 0x1, 0x9, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x80c}) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000380), 0xffffffffffffffff) ioctl$auto(r3, 0xaccd, 0xffffffffffffffff) setresuid$auto(0x2, 0x7, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r3, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) write$auto(0xffffffffffffffff, 0x0, 0x81) connect$auto(0x3, 0x0, 0x55) 697.007281ms ago: executing program 3 (id=62): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x900, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) socket(0x2, 0x1, 0x0) ioctl$auto_SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000001580)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x6, 0x80003, 0xfff) msgsnd$auto(0x54, &(0x7f0000000080)={0x4, 0x3}, 0x7, 0x2) semtimedop$auto(0x0, &(0x7f0000000040)={0xd, 0x81, 0x5}, 0x7, 0x0) 574.02555ms ago: executing program 2 (id=63): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/3/smp_affinity_list\x00', 0x8f3b7a51b8162d21, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x28, 0x9, 0x2, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7d5, 0x0, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], "cb8f69837f97399704189f031235cf3780a3a799a866b130acf1daaddae578"}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x22342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) write$auto(0x3, 0x0, 0x704) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 187.736284ms ago: executing program 1 (id=64): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/target/dbroot\x00', 0x2001, 0x0) msgctl$auto_IPC_INFO(0xfffffff7, 0x3, &(0x7f0000000600)={{0x81, 0x0, 0x0, 0x8215, 0xae5, 0x3ff, 0x16}, 0x0, &(0x7f00000005c0)=0xd9, 0x2, 0x3, 0x9, 0x7, 0x101, 0x3, 0xe, 0x8, @raw=0x2, @raw=0x2}) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000", @ANYRES16=r1, @ANYBLOB="010028bd7000ffdadf2506e18f3a1ceafc1919ca613552f90f87000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x6c8, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x10000002, 0x3, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe462}, @BATADV_ATTR_FLAG_BEST={0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0xffffffa7}, @BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0x40}]}, 0x50}}, 0x4000000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3b3d2abd7000fcdbdf25020000000a000900bbbbbbbbbbbb0000eaaeb87306be9a3cd848b9595c95826c1f515d1e64b2ee9478f79440cf06d3189ceff6367d95eabec9787847055f46ff046a8b0edbcd2c635c16de58400cdcdc30040c809b316f5a9fc08e2af2d49f254688d3c1ef1a3700eedb6dccb41126b36a65d033a4507c3a3a0130e2f351bafd7c94003f0ad2a1a6db5b2678976ae58cd093a7deb08d5f349ac57336717c0247e8"], 0x20}}, 0x80) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000540)='/proc/irq/10/effective_affinity_list\x00', 0x11000, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7ffffffff000}, 0x7) write$auto(r0, &(0x7f0000000000)='/sys/kernel/config/target/dbroot\x00', 0x63) futex$auto(&(0x7f0000000040)=0x42af, 0x9, 0x9, &(0x7f0000000080)={0x0, 0xfffffffffffffffe}, &(0x7f00000000c0)=0xc4, 0x7) 0s ago: executing program 2 (id=65): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f00000001c0)=@bpf_attr_0={0x401, 0x81, 0x1, 0x0, 0x72, 0xffffffffffffffff, 0x385b2668, "33273336fde218b7f486a452335bbf57", 0x0, r1, 0x2, 0x1000, 0x10001, 0x1800000000000, r0, r1}, 0x1) mmap$auto(0x0, 0x400007, 0x876b, 0x9b72, 0xffffffffffffffff, 0x1) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon38\x00', 0x400, 0x0) ioctl$auto(0xffffffffffffffff, 0x549b, r2) mmap$auto(0x0, 0x2000c, 0xe1, 0x20eb5, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x600, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto(r4, 0x545c, 0xffffffffffffffff) ioctl$auto_TIOCMSET2(r4, 0x5418, &(0x7f0000000200)="ea8e") ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) syz_clone3(&(0x7f0000000100)={0x80a08680, 0x0, 0x0, 0x0, {0x824}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x31802, 0x0) socket(0xa, 0x801, 0x1) unshare$auto(0x40000080) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/current_tracer\x00', 0x30080, 0x0) r6 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000300)='/dev/binderfs/binder0\x00', 0x4d4001, 0x0) ioctl$auto(r5, 0x80006, r6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. [ 89.245267][ T5816] cgroup: Unknown subsys name 'net' [ 89.378133][ T5816] cgroup: Unknown subsys name 'cpuset' [ 89.387961][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.135881][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.344777][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.354259][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.362554][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.384735][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.394525][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.402005][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.402287][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.410052][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.424893][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.433133][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.442482][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.442673][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.450779][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.465920][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.474019][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.474049][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.489208][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.498118][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.502057][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.508125][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.041404][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 94.125818][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 94.201882][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 94.371227][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.379373][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.386819][ T5826] bridge_slave_0: entered allmulticast mode [ 94.394521][ T5826] bridge_slave_0: entered promiscuous mode [ 94.419883][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.427105][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.434435][ T5826] bridge_slave_1: entered allmulticast mode [ 94.441728][ T5826] bridge_slave_1: entered promiscuous mode [ 94.449086][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 94.528425][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.535665][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.542950][ T5825] bridge_slave_0: entered allmulticast mode [ 94.550741][ T5825] bridge_slave_0: entered promiscuous mode [ 94.598562][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.608601][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.616052][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.623232][ T5825] bridge_slave_1: entered allmulticast mode [ 94.630880][ T5825] bridge_slave_1: entered promiscuous mode [ 94.638202][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.646105][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.653291][ T5828] bridge_slave_0: entered allmulticast mode [ 94.660829][ T5828] bridge_slave_0: entered promiscuous mode [ 94.689647][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.711495][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.719289][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.726613][ T5828] bridge_slave_1: entered allmulticast mode [ 94.734117][ T5828] bridge_slave_1: entered promiscuous mode [ 94.809417][ T5826] team0: Port device team_slave_0 added [ 94.819217][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.831908][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.871171][ T5826] team0: Port device team_slave_1 added [ 94.892645][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.947687][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.957328][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.964795][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.971951][ T5827] bridge_slave_0: entered allmulticast mode [ 94.979518][ T5827] bridge_slave_0: entered promiscuous mode [ 95.005909][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.012920][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.039391][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.055851][ T5825] team0: Port device team_slave_0 added [ 95.075686][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.082840][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.090419][ T5827] bridge_slave_1: entered allmulticast mode [ 95.098576][ T5827] bridge_slave_1: entered promiscuous mode [ 95.106316][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.113302][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.139852][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.153104][ T5825] team0: Port device team_slave_1 added [ 95.206814][ T5828] team0: Port device team_slave_0 added [ 95.241949][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.256351][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.267370][ T5828] team0: Port device team_slave_1 added [ 95.288027][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.295392][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.321713][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.372878][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.379939][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.406126][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.445051][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.452055][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.478738][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.485333][ T5836] Bluetooth: hci1: command tx timeout [ 95.495356][ T5827] team0: Port device team_slave_0 added [ 95.513315][ T5826] hsr_slave_0: entered promiscuous mode [ 95.520008][ T5826] hsr_slave_1: entered promiscuous mode [ 95.527603][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.534824][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.560882][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.564917][ T5836] Bluetooth: hci2: command tx timeout [ 95.571467][ T5835] Bluetooth: hci3: command tx timeout [ 95.577421][ T5836] Bluetooth: hci0: command tx timeout [ 95.595769][ T5827] team0: Port device team_slave_1 added [ 95.699765][ T5828] hsr_slave_0: entered promiscuous mode [ 95.707579][ T5828] hsr_slave_1: entered promiscuous mode [ 95.713874][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.721674][ T5828] Cannot create hsr debugfs directory [ 95.759646][ T5825] hsr_slave_0: entered promiscuous mode [ 95.766174][ T5825] hsr_slave_1: entered promiscuous mode [ 95.772278][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.779967][ T5825] Cannot create hsr debugfs directory [ 95.801363][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.808484][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.835440][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.875623][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.882631][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.908949][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.051715][ T5827] hsr_slave_0: entered promiscuous mode [ 96.058348][ T5827] hsr_slave_1: entered promiscuous mode [ 96.064857][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.072456][ T5827] Cannot create hsr debugfs directory [ 96.373610][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.409274][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.442495][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.468834][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.512792][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.525864][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.544907][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.557142][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.632082][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.672874][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.688201][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.728448][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.771748][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.796374][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.806794][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.831038][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.930076][ T9] cfg80211: failed to load regulatory.db [ 96.940174][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.989602][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.015710][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.022992][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.049153][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.061699][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.068885][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.115931][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.149924][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.170752][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.177927][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.200936][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.208097][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.257772][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.289122][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.312815][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.319996][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.359463][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.366626][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.427416][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.469039][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.476601][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.519479][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.526683][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.565126][ T5836] Bluetooth: hci1: command tx timeout [ 97.655069][ T5836] Bluetooth: hci0: command tx timeout [ 97.656675][ T5835] Bluetooth: hci3: command tx timeout [ 97.660517][ T5836] Bluetooth: hci2: command tx timeout [ 97.822834][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.987158][ T5825] veth0_vlan: entered promiscuous mode [ 98.011716][ T5825] veth1_vlan: entered promiscuous mode [ 98.092275][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.129047][ T5825] veth0_macvtap: entered promiscuous mode [ 98.170125][ T5825] veth1_macvtap: entered promiscuous mode [ 98.214391][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.233167][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.256680][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.269784][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.279790][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.289946][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.300441][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.320405][ T5828] veth0_vlan: entered promiscuous mode [ 98.362993][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.406105][ T5828] veth1_vlan: entered promiscuous mode [ 98.533376][ T5826] veth0_vlan: entered promiscuous mode [ 98.553347][ T5826] veth1_vlan: entered promiscuous mode [ 98.564085][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.572060][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.611995][ T5828] veth0_macvtap: entered promiscuous mode [ 98.637644][ T5827] veth0_vlan: entered promiscuous mode [ 98.663769][ T5826] veth0_macvtap: entered promiscuous mode [ 98.671651][ T5828] veth1_macvtap: entered promiscuous mode [ 98.695548][ T5827] veth1_vlan: entered promiscuous mode [ 98.702442][ T5826] veth1_macvtap: entered promiscuous mode [ 98.716901][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.725649][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.751507][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.816496][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.820112][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.850815][ T5827] veth0_macvtap: entered promiscuous mode [ 98.862153][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.878654][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.892712][ T5827] veth1_macvtap: entered promiscuous mode [ 98.902797][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.912512][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.921993][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.936779][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.965562][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.984065][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.997177][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.006488][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.129123][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.191496][ T1315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.204782][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.217097][ T1315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.271401][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.283592][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.292355][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.304622][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.389051][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.398104][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.531791][ T1315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.561603][ T1315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.616973][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.638436][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.653839][ T5836] Bluetooth: hci1: command tx timeout [ 99.725745][ T5836] Bluetooth: hci2: command tx timeout [ 99.731242][ T5836] Bluetooth: hci3: command tx timeout [ 99.737224][ T5835] Bluetooth: hci0: command tx timeout [ 99.756517][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.790923][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.902576][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.929761][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.731522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.164061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.725319][ T5836] Bluetooth: hci1: command tx timeout [ 101.805224][ T5836] Bluetooth: hci3: command tx timeout [ 101.810693][ T5836] Bluetooth: hci0: command tx timeout [ 101.816215][ T51] Bluetooth: hci2: command tx timeout [ 101.827212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.835969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.844795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.853554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.862943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 101.873928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.961692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.363926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.929015][ T5955] Invalid ELF header magic: != ELF [ 103.063724][ T5957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9'. [ 103.122671][ T5957] Zero length message leads to an empty skb [ 106.611456][ T6010] futex_wake_op: syz.2.20 tries to shift op by -9; fix this program [ 106.744744][ T6003] syz.3.16 uses obsolete (PF_INET,SOCK_PACKET) [ 107.887048][ T6028] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.486726][ T6070] ubi0: attaching mtd0 [ 110.491002][ T6070] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 112.175215][ T6098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.353955][ T6099] process 'syz.3.40' launched './file0' with NULL argv: empty string added [ 115.315272][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 116.071943][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c394000: rx timeout, send abort [ 116.141173][ T6133] svc: failed to register nfsdv3 RPC service (errno 111). [ 116.188353][ T6133] svc: failed to register nfsaclv3 RPC service (errno 111). [ 116.580593][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c394000: abort rx timeout. Force session deactivation [ 117.064050][ T6146] mmap: syz.2.52 (6146) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.222889][ T6140] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.240182][ T6140] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.316354][ T6140] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.398123][ T6140] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.424767][ T6140] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.483598][ T30] audit: type=1800 audit(1751004719.949:2): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.53" name="lu_gp_id" dev="configfs" ino=8368 res=0 errno=0 [ 117.485254][ T6140] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.561115][ T6140] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.589934][ T6140] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.623400][ T6140] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.650285][ T6140] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.673345][ T6140] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.691870][ T6140] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.708349][ T6140] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.839594][ T6140] syz.3.51 (6140) used greatest stack depth: 19800 bytes left [ 118.657997][ T5836] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 118.764063][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.787079][ T6173] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.831595][ T6175] FAULT_INJECTION: forcing a failure. [ 118.831595][ T6175] name fail_futex, interval 1, probability 0, space 0, times 1 [ 118.860215][ T6175] CPU: 1 UID: 0 PID: 6175 Comm: syz.0.58 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 118.860257][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.860279][ T6175] Call Trace: [ 118.860289][ T6175] [ 118.860304][ T6175] dump_stack_lvl+0x16c/0x1f0 [ 118.860360][ T6175] should_fail_ex+0x512/0x640 [ 118.860421][ T6175] get_futex_key+0x1d0/0x1540 [ 118.860466][ T6175] ? __pfx_get_futex_key+0x10/0x10 [ 118.860502][ T6175] ? apparmor_capable+0x114/0x1d0 [ 118.860534][ T6175] ? bpf_lsm_capable+0x9/0x10 [ 118.860576][ T6175] futex_wake+0xea/0x530 [ 118.860621][ T6175] ? __pfx_futex_wake+0x10/0x10 [ 118.860669][ T6175] ? ksys_write+0x190/0x250 [ 118.860718][ T6175] do_futex+0x1e3/0x350 [ 118.860752][ T6175] ? __pfx_do_futex+0x10/0x10 [ 118.860798][ T6175] __x64_sys_futex+0x1e0/0x4c0 [ 118.860837][ T6175] ? fput+0x70/0xf0 [ 118.860863][ T6175] ? __pfx___x64_sys_futex+0x10/0x10 [ 118.860899][ T6175] ? xfd_validate_state+0x61/0x180 [ 118.860935][ T6175] ? __pfx_ksys_write+0x10/0x10 [ 118.860987][ T6175] do_syscall_64+0xcd/0x490 [ 118.861037][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.861085][ T6175] RIP: 0033:0x7fad8f58e929 [ 118.861115][ T6175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.861146][ T6175] RSP: 002b:00007fad9047c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.861176][ T6175] RAX: ffffffffffffffda RBX: 00007fad8f7b5fa8 RCX: 00007fad8f58e929 [ 118.861195][ T6175] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fad8f7b5fac [ 118.861214][ T6175] RBP: 00007fad8f7b5fa0 R08: 00007fad9047d000 R09: 0000000000000000 [ 118.861232][ T6175] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fad8f7b5fac [ 118.861251][ T6175] R13: 0000000000000000 R14: 00007fff3e13cba0 R15: 00007fff3e13cc88 [ 118.861290][ T6175] [ 119.052738][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.403516][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.563654][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.723551][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.853592][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.224612][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.64'. [ 121.265839][ T6206] FAULT_INJECTION: forcing a failure. [ 121.265839][ T6206] name fail_futex, interval 1, probability 0, space 0, times 0 [ 121.290141][ T6206] CPU: 0 UID: 0 PID: 6206 Comm: syz.2.65 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 121.290180][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.290200][ T6206] Call Trace: [ 121.290209][ T6206] [ 121.290220][ T6206] dump_stack_lvl+0x16c/0x1f0 [ 121.290285][ T6206] should_fail_ex+0x512/0x640 [ 121.290335][ T6206] get_futex_key+0x1d0/0x1540 [ 121.290376][ T6206] ? __pfx_get_futex_key+0x10/0x10 [ 121.290409][ T6206] ? apparmor_capable+0x114/0x1d0 [ 121.290440][ T6206] ? bpf_lsm_capable+0x9/0x10 [ 121.290482][ T6206] futex_wake+0xea/0x530 [ 121.290526][ T6206] ? __pfx_futex_wake+0x10/0x10 [ 121.290572][ T6206] ? ksys_write+0x190/0x250 [ 121.290620][ T6206] do_futex+0x1e3/0x350 [ 121.290689][ T6206] ? __pfx_do_futex+0x10/0x10 [ 121.290734][ T6206] __x64_sys_futex+0x1e0/0x4c0 [ 121.290772][ T6206] ? fput+0x70/0xf0 [ 121.290796][ T6206] ? __pfx___x64_sys_futex+0x10/0x10 [ 121.290831][ T6206] ? xfd_validate_state+0x61/0x180 [ 121.290867][ T6206] ? __pfx_ksys_write+0x10/0x10 [ 121.290919][ T6206] do_syscall_64+0xcd/0x490 [ 121.290962][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.291001][ T6206] RIP: 0033:0x7f0eb698e929 [ 121.291031][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.291057][ T6206] RSP: 002b:00007f0eb47f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.291086][ T6206] RAX: ffffffffffffffda RBX: 00007f0eb6bb5fa8 RCX: 00007f0eb698e929 [ 121.291105][ T6206] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0eb6bb5fac [ 121.291121][ T6206] RBP: 00007f0eb6bb5fa0 R08: 00007f0eb6b88000 R09: 0000000000000000 [ 121.291137][ T6206] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f0eb6bb5fac [ 121.291154][ T6206] R13: 0000000000000000 R14: 00007ffc0b1d69d0 R15: 00007ffc0b1d6ab8 [ 121.291188][ T6206] [ 121.484048][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.486988][ T6207] [ 121.492413][ T6207] ============================================ [ 121.498594][ T6207] WARNING: possible recursive locking detected [ 121.504771][ T6207] 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 Not tainted [ 121.511922][ T6207] -------------------------------------------- [ 121.518113][ T6207] syz.1.64/6207 is trying to acquire lock: [ 121.523954][ T6207] ffff8880280b9978 (&p->frag_sem){.+.+}-{4:4}, at: __configfs_open_file+0xe8/0x9c0 [ 121.533360][ T6207] [ 121.533360][ T6207] but task is already holding lock: [ 121.540754][ T6207] ffff8880280b9978 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x219/0x4e0 [ 121.551111][ T6207] [ 121.551111][ T6207] other info that might help us debug this: [ 121.559204][ T6207] Possible unsafe locking scenario: [ 121.559204][ T6207] [ 121.566695][ T6207] CPU0 [ 121.570014][ T6207] ---- [ 121.573317][ T6207] lock(&p->frag_sem); [ 121.577515][ T6207] lock(&p->frag_sem); [ 121.581713][ T6207] [ 121.581713][ T6207] *** DEADLOCK *** [ 121.581713][ T6207] [ 121.589875][ T6207] May be due to missing lock nesting notation [ 121.589875][ T6207] [ 121.598210][ T6207] 5 locks held by syz.1.64/6207: [ 121.603169][ T6207] #0: ffff88802eb43978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 121.612287][ T6207] #1: ffff888146286428 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 121.621419][ T6207] #2: ffff88807cc19288 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x75/0x4e0 [ 121.631501][ T6207] #3: ffff8880280b9978 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x219/0x4e0 [ 121.641302][ T6207] #4: ffffffff8f677f48 (target_devices_lock){+.+.}-{4:4}, at: target_core_item_dbroot_store+0x21/0x350 [ 121.652498][ T6207] [ 121.652498][ T6207] stack backtrace: [ 121.658404][ T6207] CPU: 0 UID: 0 PID: 6207 Comm: syz.1.64 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 121.658440][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.658457][ T6207] Call Trace: [ 121.658465][ T6207] [ 121.658476][ T6207] dump_stack_lvl+0x116/0x1f0 [ 121.658519][ T6207] print_deadlock_bug+0x1e9/0x240 [ 121.658553][ T6207] __lock_acquire+0x1106/0x1c90 [ 121.658593][ T6207] lock_acquire+0x179/0x350 [ 121.658627][ T6207] ? __configfs_open_file+0xe8/0x9c0 [ 121.658670][ T6207] ? __pfx___might_resched+0x10/0x10 [ 121.658700][ T6207] down_read+0x9b/0x480 [ 121.658723][ T6207] ? __configfs_open_file+0xe8/0x9c0 [ 121.658764][ T6207] ? __pfx_down_read+0x10/0x10 [ 121.658792][ T6207] __configfs_open_file+0xe8/0x9c0 [ 121.658833][ T6207] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 121.658873][ T6207] do_dentry_open+0x744/0x1c10 [ 121.658914][ T6207] ? __pfx_configfs_open_file+0x10/0x10 [ 121.658958][ T6207] vfs_open+0x82/0x3f0 [ 121.658987][ T6207] path_openat+0x1de4/0x2cb0 [ 121.659030][ T6207] ? __pfx_path_openat+0x10/0x10 [ 121.659068][ T6207] ? kasan_save_stack+0x42/0x60 [ 121.659118][ T6207] ? kasan_save_stack+0x33/0x60 [ 121.659164][ T6207] ? kasan_save_track+0x14/0x30 [ 121.659198][ T6207] ? __kasan_slab_alloc+0x89/0x90 [ 121.659242][ T6207] do_filp_open+0x20b/0x470 [ 121.659274][ T6207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.659299][ T6207] ? __pfx_do_filp_open+0x10/0x10 [ 121.659350][ T6207] file_open_name+0x2a3/0x450 [ 121.659379][ T6207] ? __pfx_file_open_name+0x10/0x10 [ 121.659405][ T6207] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 121.659441][ T6207] ? getname_kernel+0x52/0x370 [ 121.659463][ T6207] ? __asan_memcpy+0x3c/0x60 [ 121.659497][ T6207] filp_open+0x4b/0x80 [ 121.659521][ T6207] target_core_item_dbroot_store+0x108/0x350 [ 121.659551][ T6207] configfs_write_iter+0x303/0x4e0 [ 121.659590][ T6207] vfs_write+0x6c7/0x1150 [ 121.659623][ T6207] ? __pfx_configfs_write_iter+0x10/0x10 [ 121.659662][ T6207] ? __pfx___mutex_lock+0x10/0x10 [ 121.659699][ T6207] ? __pfx_vfs_write+0x10/0x10 [ 121.659742][ T6207] ksys_write+0x12a/0x250 [ 121.659775][ T6207] ? __pfx_ksys_write+0x10/0x10 [ 121.659813][ T6207] do_syscall_64+0xcd/0x490 [ 121.659851][ T6207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.659875][ T6207] RIP: 0033:0x7f64ac18e929 [ 121.659895][ T6207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.659918][ T6207] RSP: 002b:00007f64acf83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.659940][ T6207] RAX: ffffffffffffffda RBX: 00007f64ac3b6080 RCX: 00007f64ac18e929 [ 121.659956][ T6207] RDX: 0000000000000063 RSI: 0000200000000000 RDI: 0000000000000003 [ 121.659971][ T6207] RBP: 00007f64ac210b39 R08: 0000000000000000 R09: 0000000000000000 [ 121.659987][ T6207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.660002][ T6207] R13: 0000000000000000 R14: 00007f64ac3b6080 R15: 00007ffc64ec9398 [ 121.660024][ T6207] [ 121.661148][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.675713][ T6207] db_root: not a directory: /sys/kernel/config/target/dbroot [ 121.682619][ T30] audit: type=1804 audit(6045972020.172:3): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.64" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=7720 res=1 errno=0 [ 121.818586][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.002880][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.017133][ T30] audit: type=1800 audit(6045972020.172:4): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.64" name="dbroot" dev="configfs" ino=7720 res=0 errno=0