last executing test programs: 3m14.37608081s ago: executing program 32 (id=74): socket(0x21, 0x2, 0x2) (async) socket(0x21, 0x2, 0x2) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x2b, 0x1, 0x1) (async) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae41, 0x38) ioctl$auto_KVM_CREATE_VM(r0, 0x4138ae84, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0045401, 0xffffffffffffffff) (async) ioctl$auto(0xffffffffffffffff, 0xc0045401, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$auto(0x3, 0x541b, 0x38) (async) ioctl$auto(0x3, 0x541b, 0x38) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x1000000004, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 3m12.369211059s ago: executing program 1 (id=112): madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000200)=@llc={0x1a, 0x1, 0xe2, 0x6, 0xcb, 0x3}, 0x1ff) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x5) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x521041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3db) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r2, 0x542e, 0x0) (async) ioctl$auto_TCFLSH2(r2, 0x542e, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x2000000000040, 0x0) (async) sysfs$auto(0x2, 0x2000000000040, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) (async) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)="33514949a556f04d181549ff4dcde76a15b704b9cf57ad93447042660764bcc39119a0ada7dc1620b30f0849416972116b93d7e5c54485a39eb9ef937d356ea3e2dc470bbe90f6ce5b0f90bf7f437db28a69ad1120d9c267ace59f02839da4df0a", 0x61) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r4, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x40, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}, @HWSIM_ATTR_COOKIE={0xc}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0xffffffcc}, @HWSIM_ATTR_TX_INFO={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008845) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008845) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 3m10.919772532s ago: executing program 3 (id=119): mmap$auto(0x7, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x488, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x12, 0x2, 0x8000) setresuid$auto(0x2, 0x7, 0x8080) madvise$auto(0x0, 0x2, 0x15) 3m10.615806887s ago: executing program 3 (id=120): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r0, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) 3m10.615537041s ago: executing program 1 (id=121): socket(0x11, 0x3, 0x8) io_submit$auto(0x2, 0x7f, &(0x7f0000000040)=&(0x7f0000000000)={0x2, 0xb, 0x8, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x2, 0x1001, 0x0, 0x6}) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) syz_clone(0x1010000, &(0x7f0000001140)="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", 0x203, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 3m10.193385367s ago: executing program 3 (id=122): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) (async) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r0, 0xc0046209, 0xffffffffffffffff) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x801, 0x84) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/smack/current\x00', 0x323400, 0x0) (async) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0xffc, 0x20000000007, 0x939f, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x80000000000005, 0xc0f, 0x1, 0x7fd, 0x92b8, 0x7, 0x800, 0x7}) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r1, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00@=\x00\x00\x00\x00\x00\x00', 0x4000000002fb) r2 = socket(0xc, 0x3, 0x3) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) ioperm$auto(0x3, 0x8001, 0x2000000000000149) kexec_load$auto(0x6, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) shmctl$auto(0xa0000000, 0x6, &(0x7f00000002c0)={{0x3, 0x0, 0x0, 0x0, 0x7, 0xd, 0xff}, 0x2, 0xffffffff80000001, 0x3ff, 0x800, @raw=0x71a, @inferred, 0x7, 0x0, 0x0, &(0x7f00000001c0)}) (async) sendmsg$auto_IPVS_CMD_GET_DAEMON(r2, 0x0, 0x20000000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) (async) io_setup$auto(0x7ffe, &(0x7f0000000000)) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) 3m10.079835397s ago: executing program 1 (id=124): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba", 0xfffffffffffffff7}, 0xc, 0x0, 0x5, 0x5}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) nanosleep$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0xd33, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0000, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) capget$auto(&(0x7f00000002c0), &(0x7f0000000300)={0x5, 0x3, 0x3}) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) 3m9.745817831s ago: executing program 3 (id=125): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nl802154(0x0, r0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000001c0)={0x9, 0x7ff, 0x7, 0x920, 0x6, 0xffffffffffffffff}) fcntl$getown(r0, 0x9) sendmsg$auto_NL802154_CMD_ASSOCIATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002f80)=ANY=[], 0x1380}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) gettid() ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000200)=0x6) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r0, 0x0, 0x4) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) read$auto(r1, 0x0, 0x2) mkdir$auto(0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 3m8.898812432s ago: executing program 3 (id=126): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/numa_maps\x00', 0x8000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(r1, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0x3ff) ioctl$auto_EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000140)={0xfffffffd, 0x1, "504388c27dd67ffc9b8cd87d2b2994cf7623d96a475d4257e7a2b27afaa59291bef2d0187f31d80c200a33f9653e54cc272ba363f9fe8c23163b69196adeb9edd7c5"}) mmap$auto(0x7, 0x2000b, 0xe2, 0xeb1, r0, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto_FIONREAD(r1, 0x541b, 0x80) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x113140, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) r4 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r2, r1, 0xb2) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r4, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) 3m7.892812367s ago: executing program 3 (id=128): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) semctl$auto_IPC_INFO(0x3, 0x5, 0x3, 0x7c0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) r0 = prctl$auto_SECCOMP_MODE_STRICT(0x8, 0x1, 0x0, 0x40, 0xaa) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x44040) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) semctl$auto_IPC_INFO(0x3, 0x5, 0x3, 0x7c0) (async) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) (async) prctl$auto_SECCOMP_MODE_STRICT(0x8, 0x1, 0x0, 0x40, 0xaa) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x44040) (async) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) (async) 3m4.854201524s ago: executing program 1 (id=133): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0x12, r0, 0x4) r3 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r3, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x2, 0x400008, 0xdf, 0xfffffffffffffff7, 0x2, 0x8040) r4 = geteuid() keyctl$auto(0x1e, r4, r4, 0x5, 0x8) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x58dd88d482a93619}, 0xc, &(0x7f0000001a80)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) mmap$auto(0xfffffffd, 0x8, 0xdf, 0x9b7e, 0x2, 0x8003) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20010000", @ANYRES16=r6, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="00012bbd7000fedbde250900bb6d8cb51910f13c4a01"], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) read$auto(r5, 0x0, 0xb4d3) write$auto(r3, 0x0, 0x5) unshare$auto(0x20000) unshare$auto(0x20000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) 3m0.912722489s ago: executing program 1 (id=136): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(0xffffffffffffffff, 0x40084149, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/id/id\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4088, 0xff8) mmap$auto(0x1, 0x1, 0x1, 0xe31, 0xffffffffffffffff, 0x40) socket(0x26, 0x5, 0x84) mmap$auto(0x0, 0x2020005, 0x3, 0x12, 0xfffffffffffffffa, 0x7ffc) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) write$auto_ppp_device_fops_ppp_generic(r1, &(0x7f00000000c0)="c021ce6d3d6c", 0x6) socket(0x1f, 0x80000, 0x0) mmap$auto(0x3, 0xa00006, 0x2000000000000005, 0xffffffffffffffff, 0x602, 0x1) read$auto(0xffffffffffffffff, 0x0, 0x9) 3m0.303870171s ago: executing program 1 (id=138): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0xfffffffe, 0x80000002, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2m52.398964439s ago: executing program 33 (id=128): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) semctl$auto_IPC_INFO(0x3, 0x5, 0x3, 0x7c0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) r0 = prctl$auto_SECCOMP_MODE_STRICT(0x8, 0x1, 0x0, 0x40, 0xaa) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x44040) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) semctl$auto_IPC_INFO(0x3, 0x5, 0x3, 0x7c0) (async) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) (async) prctl$auto_SECCOMP_MODE_STRICT(0x8, 0x1, 0x0, 0x40, 0xaa) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x44040) (async) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) (async) 2m45.169169724s ago: executing program 34 (id=138): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0xfffffffe, 0x80000002, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2m41.412102301s ago: executing program 4 (id=178): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) r1 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) read$auto_sco_debugfs_fops_(r1, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) pread64$auto(r0, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) ioctl$auto(r3, 0x4b68, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r3, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x4) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r5) (async) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x6a, 0x0, [{0x200, 0x6, 0x7}]}) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x106) socket(0x28, 0x5, 0x0) (async) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000540)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffffff00", 0x3ff, 0x8, 0x1000, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r6, 0x1276, 0x0) (async) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(r2, &(0x7f0000000000)='/proc/self/net/ip6_tables_targets\x00', 0x40) 2m41.021201512s ago: executing program 4 (id=179): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/dynamic_events\x00', 0x201, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f00000002c0)="65507307ff6587a725ca87720ef9769f20592e77a8", 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x7, 0x0, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x1a6b25bb]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8999cf49a034b6a1835aaff1eaa34c364213b7df217625611245492fc0e3344619c7f8c79e20c0c2ca448aac0028414eb84dac36cf99955c1a0157637d946cdd5f278e8899416017fc51b9bdd234f221af70a2a0fe07932883053f77b6ed448fee764"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r5 = gettid() r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r6, 0x0, 0x8, 0x7fff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000440)={{@inferred=r4, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r5}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) 2m39.877976874s ago: executing program 4 (id=182): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYBLOB="02003abd7000fedbdf254f00000008006100010000000500f6000100000004008e00"], 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r2, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x7ffd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/eps\x00', 0x280, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/midi2\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyt3\x00', 0x0, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d52", 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="08009e00", @ANYRES16=r3], 0x24}}, 0x4000000) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rename$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, r1, 0x8000) 2m38.490822033s ago: executing program 4 (id=187): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) 2m35.287050358s ago: executing program 4 (id=198): socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) (async, rerun: 32) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) (async, rerun: 32) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x803, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) (async) futex$auto(0x0, 0x6, 0x9, 0x0, 0x0, 0x6) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) io_uring_setup$auto(0x6, 0x0) syz_clone3(&(0x7f0000000200)={0x186800080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) kill$auto(0x0, 0x21) (async, rerun: 64) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) getcwd$auto(0x0, 0xffffffffffffffff) (async) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) (async, rerun: 32) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m33.367964762s ago: executing program 4 (id=203): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) (async) ioctl$auto_TUNDETACHFILTER(r1, 0x401054d6, &(0x7f0000000040)={0x2, &(0x7f0000000000)={0xe6e, 0x4, 0x7, @inferred=r0}}) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x9, 0x44b, 0x7, 0x5, 0x100717e, 0xd1, 0x7, 0x7, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, [0x7, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26b2519, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0xa, 0xd) socket(0xa, 0x801, 0x84) (async) connect$auto(0x3, 0x0, 0x54) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 2m17.869916147s ago: executing program 35 (id=203): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) (async) ioctl$auto_TUNDETACHFILTER(r1, 0x401054d6, &(0x7f0000000040)={0x2, &(0x7f0000000000)={0xe6e, 0x4, 0x7, @inferred=r0}}) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x9, 0x44b, 0x7, 0x5, 0x100717e, 0xd1, 0x7, 0x7, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, [0x7, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26b2519, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0xa, 0xd) socket(0xa, 0x801, 0x84) (async) connect$auto(0x3, 0x0, 0x54) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 1m59.445229657s ago: executing program 7 (id=244): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nl802154(0x0, r0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000001c0)={0x9, 0x7ff, 0x7, 0x920, 0x6, 0xffffffffffffffff}) fcntl$getown(r0, 0x9) sendmsg$auto_NL802154_CMD_ASSOCIATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002f80)=ANY=[], 0x1380}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) gettid() ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000200)=0x6) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r0, 0x0, 0x4) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x2) mkdir$auto(0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 1m58.659296202s ago: executing program 7 (id=280): mmap$auto(0x10000000000, 0x0, 0x8e, 0x14, 0x2, 0x8) memfd_create$auto(0x0, 0x9) getitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000000)={{0x7, 0xfffffffffffffffe}, {0x5, 0x3}}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x401, r1, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x8) bpf$auto(0x4, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x200ffffffff, 0x9, 0x5, 0xf870e9f, 0x3ff, 0x8}, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r4 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x440, 0x0) ioctl$auto_OSS_ALSAEMULVER(r4, 0x80044df9, &(0x7f0000000080)="021e65da194b5f4198070af7ba504900d9728bf594f889528885228e5e0633de7b60f861fd80abd093eedd9a968a58267679fa7f57157c59c307ceae5f57a45d2df48487ad198f19ce054263425c03c21458d1ab45c98104") socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) fallocate$auto(0xffffffffffffffff, 0xfffffffd, 0xb, 0xcbd5a) rseq$auto(&(0x7f0000000100)={0xff, 0x9, 0x6, 0xeec2, 0xf41f, 0x7, "55520dffe11c6f2d2f3099cb2ea93a2fffc0e8bf52fa5dc1e34201843e910d8100702f4b3f8aafe864995e7c090c31ecd5c971238c52ee997b3adf4626088be4e52df4ac93e5f833a2d98eecf0b8063dbc51e7061418079c154e55d600b0b085e49a05"}, 0x3, 0x6e, 0x3) mmap$auto(0x0, 0x8, 0x1000000005, 0x9b72, 0x2, 0x8000) io_setup$auto(0x1, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0x20000fffffdef) mremap$auto(0x10000, 0x4, 0x0, 0xc10c, 0x0) 1m58.51956811s ago: executing program 7 (id=281): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) mmap$auto(0x0, 0x400008, 0x81, 0x9b72, 0x2, 0x8002) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x0) r0 = socket(0x2e, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8000, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r1 = socket(0x11, 0x80003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x34, 0xfffffff9, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r2, 0x10}, 0x22) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f00000003c0)=@link_create={@map_fd=r0, @target_ifindex=r2, 0xbe, 0x2, @tracing={0x7, 0x7}}, 0x3) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000009d31f86042aae8c521a934005e34c380e9ce2dbe8c67bca263024fd4ff7d7718cc3fbd3100672cbbb258476995ec845a4f31d3fb12618aaff21ceb98ee8c7a3eaf57faf1b03e60d069fd50ec30031c676e51cf0840027ec80659e006ab32213cbec31e87a08841384da04d52dcf0078a3ae5ebb3b735e2a5b46202d4a56931a538a5013c3e52f36f6033a46f000d901febe5aeb92c4511a870fba76ea0658d96fa76f5c3008ed0a7185e5383e57f855dc11d1f73855bd678b932131e8c98fc8fc06f18b1d0c7362b6a470b8beedfc1a1781d15dea6f2d7a9c6824c334d0c85eb57cc9b053c4c8633794db19d1d0c1e34fe83da40", @ANYRES16=r3, @ANYBLOB="00042dbd7000ffdbdf250500000008006a0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0x15, 0x5, 0x0) io_uring_setup$auto(0x9, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x7) r4 = socket(0x2, 0x801, 0x84) getsockopt$auto(r4, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) mmap$auto(0x0, 0x7fffffff, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f00000005c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kN\x12^~\r~JW\xaf\xaec\xf6\xf5g:\x85\xb6\xaeu\xeb{v\xdf`\xa0xr\x86\x80\x0e\xd0dOG\x0fQ\xf5E\x90_p\xadO\x85{\x0e\xc9\xaeG\xf8\xc5\xe3D9\xfd\xab@\xde\x8ag\xf7\xa6\xb2Q\x02@7\x96\x97\xde;\xb0%\f\x88\x01\x95\xbe\xe8', 0x81) 1m58.203292845s ago: executing program 7 (id=283): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) socket(0x1a, 0x5, 0xfffffffd) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001ff, 0x20000000007, 0x41, 0xbc3, 0x800, 0x3, 0x510, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x6]}, 0x0) getpgid(0xffffffffffffffff) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x800, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000180)="b21520261092a80f47058b3374b610ce6c195d0a89d1ebb5b3011388101661a34c4e1d26632d3a32698be4b761a7a9659d47c5607eb90bc239606da36aa48f2fe49fd306e0b39e9dba2eb70c22d35a97000594110fa7eb1b9bcc1e8e0968") acct$auto(&(0x7f0000000880)='/dev/fb0\x00') syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x4, 0x8, 0x2, 0x19, r1, 0x3) madvise$auto(0x110c234000, 0x1, 0x9) unshare$auto(0x40000080) pwrite64$auto(r0, &(0x7f0000000000)=')\x00', 0x0, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x14b402, 0x0) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) 1m55.611910954s ago: executing program 2 (id=288): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nl802154(0x0, r0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000001c0)={0x9, 0x7ff, 0x7, 0x920, 0x6, 0xffffffffffffffff}) fcntl$getown(r0, 0x9) sendmsg$auto_NL802154_CMD_ASSOCIATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002f80)=ANY=[], 0x1380}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) gettid() ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000200)=0x6) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r0, 0x0, 0x4) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x2) mkdir$auto(0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 1m54.319874225s ago: executing program 2 (id=289): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) (async) io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000002c0)="d05d6f2f716f74230faba010656e878f1af86cd29108de4bf8bb61f80c2d38d4a7038ba0c7c51f76e06d4a15ba90d087513109136561924733c1d54fc9a8f5ee48b052879f664c3f8328365e88c643d7de7d513c46d805b35a6cae38c311835bed572cd39d6b1a5bbf0d8d56cb1076a94e85efd3508e8bd8def432f349860acb37d323f298ec9b4feb8b7ac48f397930a1fcf4f29bff8a8b28ac893866859ec288ac1b44d22ba0ec052a304f187342c3f6129dd96052217f549f3c71105d481a399a8262df0fd090807cdbb56033bbe801", 0x5) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0x8002, 0x0, 0x0, &(0x7f0000000240)={[0x1000000000000008, 0x2, 0x3, 0x8fd6, 0x948b, 0xffffffffffffffff, 0x100000001, 0x7fff, 0x6, 0x1, 0x0, 0x0, 0x1, 0xffffffff, 0xfd, 0x18]}, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r2 = socket(0xa, 0x1, 0x100) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) (async) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) (async) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES32=r1, @ANYBLOB="160083002f6465762f736e642f6d69646943324430000000da0007802000bfce062815f545559fc8d84ace66131a61e94d4312d5526980b59522515bed2964108b25cf3c7d786f063913e41b6fc985884b34a0b9fe37c723f18c9005d89f151a60e94c9466f90ab85fc59a7b46f7e955fea3de2067bb953f32cfb7222c9a2a47c2e892f07f82d3b2f2d06ad035d1c588c2f5765db2f7f397c1a83373c1f9efa03f922ddf229f8d9d2f8814a5bb1a83c631d7b9d30e4a2b71df74bc3c5265453817124399f70ef893a5fd804a5167279d493db4a57772", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT=r2, @ANYBLOB="0400558004"], 0x226c}, 0x1, 0x0, 0x0, 0xc4}, 0x1880) (async) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) (async) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0x4008af04, 0x0) (async) mmap$auto(0x0, 0x35e, 0x8000, 0x9b7e, 0x2, 0x5) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0xc40, 0x0) 1m51.747968026s ago: executing program 2 (id=290): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba", 0xfffffffffffffff7}, 0xc, 0x0, 0x5, 0x5}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) nanosleep$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0xd33, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0000, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) capget$auto(&(0x7f00000002c0), &(0x7f0000000300)={0x5, 0x3, 0x3}) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) 1m48.626345402s ago: executing program 2 (id=291): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba", 0xfffffffffffffff7}, 0xc, 0x0, 0x5, 0x5}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) nanosleep$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0xd33, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0000, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) capget$auto(&(0x7f00000002c0), &(0x7f0000000300)={0x5, 0x3, 0x3}) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) 1m45.355235629s ago: executing program 2 (id=299): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) sendmsg$auto_NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f00000004c0)={0x484, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REKEY_DATA={0x45f, 0x7a, 0x0, 0x1, [@generic="d0b639691b58f71f024766982495e3cfffa17c8f4806e0983435a588634a84efadb1b11d03066b3ff302819c59c9863f4e2770f3550f17c01d91b53f284d56e8715b2000613028a42b278269d3d37897cdaf50f3295eea0c1eb8355bed15deaf34f3a0e3169692654ee033c456c096c9019df54705d175af99709c51b7f620c7c6fd527be2d48ef927762b2c9f0ab65c1f25adaeb34ff107bb150d8ec40cd8be10232d7868a17f27c8413545f9220199308e8cc86ea6d9ab7b169188c3bb96baf36b", @generic="e7f1218c833b7510c4fec587d4a6ffa5cd1554864e276019337d2fa32ad32dfe6b3b92f4ae6211048811a8a5976ca27c0334699a13", @nested={0x265, 0x11, 0x0, 0x1, [@generic="2dcade7ee68767ae7993e71cfb00e3abd48557586a534b768bfdd3df1ecad1b0c3a71b0cd008113cb8b70db5336576d8f19b669caab0dee5abb58443138de67fd52227ef2a230bff070e0746cfee3f64c731b73b20f18b4bd695510efe36f5039a8d04f3dfe3ea80767e63a7cbf730e50717fc5d7daa691f0f4df0b2bbf037e0e7022a2a3b9476e86a49a51cb4", @generic="668f1a2bc345484f795e3a1c9f3caf24b664d9ba60a095cdf9a6070fa2be4c2674c0d801597a35876cb75f9a4a6831aea5739b7bd85d9f1688cae697845fcf58d19a1e25c9e0eec46e2c168cbd6b3491d00004ff3856c13378e5f86828c0622eb9e561f3ec654588ddae461580f784720f941ba3493991ee8e954e57d1898548d9597891e15a92c42636c671a7186e2f3f50f28cae586be67797c07406ad7f80d46952b8575b28f47320e7b1a7db31368462f4058ce907bc1c29439efc09b8e14234e007", @generic="2687cadebe7f3809975be733ffa1b916212fa694f38a8e7ffbe333c2399867463504652c1459e8fa3651460affdf1a0433a64f9b1822af4546f8a81fbbe07abdc43f53ba013db47ca8ed0bbb41ae2c191bc7102bea6d93650e0ec38292efbc8eaaaba9dbfaaf86d5e3b8d90fb9351dd0f51e36b8fd8f926e0223540d0c172a1496374f91e3ea0042a3e7cac19450f57ff87bcb4c3c396b1e8483d7bc1a0dc71bcd0b36f5", @nested={0x4, 0x97}, @generic="8a76dfd5a149652b4bba0f3235d1fd4c854889b963abbe6c3afae6fbcc576b56c3ecbe9a17a6be3b4493d741b30f729e64a63aeb4733acebbc665d001b6960b0051cc57f1e4a57356aedfd0868e34f7d06be7474243c97e5ac21b2c78e56781dba6ee6dabe63e4dd"]}, @nested={0x14, 0xb0, 0x0, 0x1, [@typed={0x8, 0xde, 0x0, 0x0, @str='{+$\x00'}, @typed={0x4, 0x2e}, @nested={0x4, 0x3e}]}, @typed={0x8, 0x50, 0x0, 0x0, @pid}, @generic="6bdcfab5378d649e3de0430fe973edc77255054d7f48a18d127fdfdd6c45ff62c4a93301f585da9944f856b5e8ec78e990d5e85d921cbaa2951574134698dae2c79cc487e2061d5eb9cb1fea11293ed2f70b9ee735e78fd4e885176be00e1933039007581fafdcba1cda83d9787b054c388e3b499310977542eb845c0f63abaa6265d01d594a6660f23d5f4c314676a2bc66c986914641f9d1dd13541546fdaa84703f24b29421211b9e5480e08df32c92232e103eeff6bed4a739df778c603ddd13acf5b897ee6a9e171fd4c3c23bab06454ec6bd6e9eb7791cda2cc98fb95e"]}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xbac}]}, 0x484}, 0x1, 0x0, 0x0, 0x4004041}, 0x40100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D1\x00', 0x660040, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0) memfd_create$auto(0x0, 0x7) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x1003, 0x1, 0x948b, 0x3, 0x9, 0xfffffffffffffffd, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7312, 0x43, 0x1000006, 0x1ffde, 0x7, 0x3, 0xfffffffffffffffe, 0x9, 0x3, 0x5, 0x6, 0x3000, 0x1, 0x6, 0x10003, 0x83, 0x4004, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, 0x0, 0x0, 0xf, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000001, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) setfsgid$auto(0xee00) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080)="af101b8f8a7d3fb11541234c841ad04ef950bd816b1a4f98cd92c3e2a12357557135aad56ced71a1f0d966c275daa2c99a9c0ad115b322b5d8183b96ab92708cc68cbbdfb3df131db9a98348c8", 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r3, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)=ANY=[@ANYBLOB="20040000", @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="04000b00"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)='-7', 0x3a) openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/1:0:0:0\x00', 0x711000, 0x0) 1m44.52045206s ago: executing program 2 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f00000018c0)={0x2c4, r1, 0xa05ea4b1dbb828eb, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_BEACON_TAIL={0x2ae, 0xf, "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"}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 1m42.347016692s ago: executing program 36 (id=283): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) socket(0x1a, 0x5, 0xfffffffd) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001ff, 0x20000000007, 0x41, 0xbc3, 0x800, 0x3, 0x510, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x6]}, 0x0) getpgid(0xffffffffffffffff) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x800, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000180)="b21520261092a80f47058b3374b610ce6c195d0a89d1ebb5b3011388101661a34c4e1d26632d3a32698be4b761a7a9659d47c5607eb90bc239606da36aa48f2fe49fd306e0b39e9dba2eb70c22d35a97000594110fa7eb1b9bcc1e8e0968") acct$auto(&(0x7f0000000880)='/dev/fb0\x00') syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x4, 0x8, 0x2, 0x19, r1, 0x3) madvise$auto(0x110c234000, 0x1, 0x9) unshare$auto(0x40000080) pwrite64$auto(r0, &(0x7f0000000000)=')\x00', 0x0, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x14b402, 0x0) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) 1m29.430345984s ago: executing program 37 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f00000018c0)={0x2c4, r1, 0xa05ea4b1dbb828eb, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_BEACON_TAIL={0x2ae, 0xf, "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"}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 1m14.847942471s ago: executing program 5 (id=382): socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x981083, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/config.gz\x00', 0x0, 0x0) read$auto(r1, &(0x7f00000006c0)='/sys/devices\xdcn\xe6\x13r\xb6=\xd0\xd5\xea\xed/plamform/vrt\xb2_hcd.8/usb26/descriptors\x00\xc8\xdf{\v\xd1D\x9f\xa8\x17\xc5mP=\x1fjd?8G;\x9a\x17P\xc4\xfc\x9eO\x1a\\%\x81\x1bv\x1d\xab\x15-Y\x1a\x99\xfd\xb7\x88)2I\x92\xf5|\x92\x82\x15\xad\xe5\xb5\x1d\x97@\xc4t\x8d\xebI#N\xde\x14D \xeaV`\a\x16\xf14\xd2\xe3\xbaJ}\xdeA0y\xd0X\xcf\xc7a\"NSF\xc5\xb0\xd0H\xed\x05\x06\x00\xa1;\\-\x045]\x14@\xbbA\xf4(\x11\n\xe5\xe7wf\x92\xaaR\x003\xa8`\xe0\xa5\xa0\x965\xbc\xb8\xd0vRt\xf5\xd1C/\x97\x87k\x99\xbfj\xb73\x96\xbaf\xcb\x99\xdd\x1f\x99\n\xf85\xb4\xa1\n\x00\x00\x01w\xe7\xfdY\x87\xf9YO4!\xbc\x8b\xe2\xd8\n\xf4\x86_\xfd1!684\xf3v\xf4\x10\x9b\x80\xfb\xae\xb7\x0f\x94\"\xa0P\xf2\xb9\x1cM`\xf7\x8cB\"\xaekm+\x8dg\x12c;\"=\x18H\x8d\xc1\xa1\x91\xb6\\9\x93\xc3\xa8\xf2\xf9T\x10\x0e(\xf6emEE\xb8\xe2\x95\xa7\x93\xb5\x02=)%\x89\x9d\x9d\xf4\x84\x04\r\xf5t\xd1\x03TQ\x04\xae\x0ek\x9d\xab*\x02\xe6\x7f\x99\x9b\xe0\xa6\xc4\r\xa8\xcbd\xf7\xb4-\x8a@\x94\xb7\xadr\x83\xab\xc7\xbb\xdc\x04R]/s\\\x8f\xf8\x83\xf3\xa1\t\xe1\xd1\xa3\x9a\xf6\x8c\x1bI\xee!\xeeX\xe8S\x01\xd2#\xeb-[\xd8\x8bnV\n\x0e\xcd\xdb\x8e\x8a\x90$k#&Y\xbc\x7f$@f\x06v\x9bL|\xd3\xc7\x8e=\x8d\n\xcd \xd9y\x87\xd7\x8a\xd5\xef', 0xb) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x80701, 0x0) pselect6$auto(0x1, 0x0, &(0x7f0000000240)={[0xf, 0x5e9, 0x8, 0x8e, 0xd, 0xfffffffffffff801, 0x2d44b40f, 0x831f, 0x4, 0xb911, 0x2, 0x81, 0x4, 0x6, 0x1, 0x5]}, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x328, r3, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x305, 0x2, 0x0, 0x1, [@nested={0xe9, 0xa8, 0x0, 0x1, [@generic="6d0e014513d735bdf9a190adfcb86d10927c3ca5f2af5c6234c47a6451297a0c75344cb1c563a47e4363e00e5e80ccda27bca1e26c2550f3ea7c53c288103a775aee4b6f368ad0a3cc813d04938dff18e8cc1d55ba955e25ac760e436cd0c848d01a0b7104a5", @generic="665d0b8f1062d29c063d7990bf9b3cd48a3efc30972a465d8532773c6e744758304732c7a09707a27d94b672b537ba506f9f92286451512f6069aefad5d25784705c8d3259303d36c1ec0e39f9ae34fc5037885c51888799e3ad3daa107d14c03cb0492776f51bb41122aaa12c3e05dbff15ed389276cb9664bf05", @nested={0x4, 0x30}]}, @nested={0x55, 0xba, 0x0, 0x1, [@typed={0x8, 0x9d, 0x0, 0x0, @uid=0xee00}, @generic="2a9a17b5d40dc06df90e057aec2435bcae8fb0e906141c9799710336c01e2a03e245088de8b8f7f4dd804a43c35af3286dc4137453399d33645ff9ed051abbf6b631bf9c19d3fb4220"]}, @generic="4101109ad41097df424c18eaf27e34f3b8a5bcc3d60a3d676c8173de1b1c42859bf76db186573970a71672c616af34adb08a68571c859cbc74bfa5907dd9965a5fc17f5b33", @nested={0xdc, 0x144, 0x0, 0x1, [@nested={0x4, 0xd0}, @typed={0xd2, 0xd0, 0x0, 0x0, @binary="cd03d0f32f93fa3c7d45f84aafb03125d13f555bda96c0520e457770a6335a273a3beb0bca5554711956f57923d217f20453f91d6d5092446377083582364246592e1423bfc51a1f5f27a197cac22aaa12e5f5ea2e49464b681b4b136616b9c475a79ba710b386ffebb1046a94fd103282dbc1243dabd6f102eaf5d3c9e0b3358178b5c367d069a8458e9d295a2158ea324120461b99d26dfb3218f1f1b3b0d24f4a168c6952b23c42c8d106a1a336d4143861c05a4ec14c37a343979737e920a4e568be3447a82f7ffe8968d68f"}]}, @typed={0x14, 0x26, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x4, 0x6d}, @nested={0x82, 0x4e, 0x0, 0x1, [@nested={0x4, 0xd3}, @generic="f17f6ff48167bef708616d0307f6f3e1393de6c4b72da86184cac6cd644f5c1c85b5dbc750cb4b7b57874f9185524dab86543172b001e3b632927de28b65ab475efdcd9dd2b115de82675b5b0d6ce049fd586e12bd78526cf2b8da62e02e1edc49ebbef012226ae15738154e8e3af0224afa277018c6", @nested={0x4, 0x134}]}]}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x328}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x2028009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) prctl$auto(0x1, 0x8, 0x0, 0x9, 0x1) mmap$auto(0xc85, 0x7fffffffffffffff, 0x0, 0x16, r0, 0x7) waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000100)={@_si_pad}, 0x400, &(0x7f0000000180)={{0x400, 0x611}, {0x1dc}, 0x7, 0x2, 0x401, 0x3, 0xfffffffffffffff8, 0x7, 0x6, 0x3, 0xc46, 0x4, 0x6, 0x1, 0x339, 0x6}) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) ioctl$auto(0x3, 0x2284, 0x38) socket(0x2, 0x3, 0x2) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) setsockopt$auto(0x3, 0x0, 0xcc, 0xfffffffffffffffc, 0x3c) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 1m13.794408308s ago: executing program 5 (id=388): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba", 0xfffffffffffffff7}, 0xc, 0x0, 0x5, 0x5}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) nanosleep$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0xd33, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0000, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) capget$auto(&(0x7f00000002c0), &(0x7f0000000300)={0x5, 0x3, 0x3}) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) 1m9.447717961s ago: executing program 5 (id=401): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000000)=0x1ff) sched_getattr$auto(r0, &(0x7f0000000040)={0x1, 0xe45, 0x8, 0x4, 0x5, 0x6, 0x61c, 0x7ff, 0x3, 0x2}, 0x9, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) 1m9.07603454s ago: executing program 5 (id=404): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) io_uring_setup$auto(0x1, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0xc545, 0x3, 0x6, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) ioctl$auto_SG_SET_RESERVED_SIZE2(r2, 0x2275, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) close_range$auto(r4, r3, 0x3) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r5, 0xc0285629, r5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/device_hdr\x00', 0x10b402, 0x0) pread64$auto(r6, &(0x7f0000000340)='/pro\x00'/16, 0x8, 0x2e1) ioctl$auto_VHOST_GET_BACKEND_FEATURES2(r1, 0x8008af26, &(0x7f00000000c0)=0x4) open(0x0, 0x6041, 0x0) socket(0x6, 0x2, 0x6) semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 1m7.324059999s ago: executing program 5 (id=407): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) socket(0x22, 0x3, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0xd2, 0x4000000000df, 0xeb1, 0x401, 0x80000000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x80059, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x4000005, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0xd}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) 1m6.125325205s ago: executing program 5 (id=412): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = semctl$auto_GETPID(0x101, 0x9, 0xb, 0x8) move_pages$auto(r0, 0x40000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r1 = socket(0xa, 0x3, 0x73) setsockopt$auto(r1, 0x3a, 0x9, 0x0, 0x4) mmap$auto(0x0, 0xd2, 0x4000000000df, 0xeb1, 0x401, 0x80000000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x80059, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x4000005, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0xd}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) 50.719046104s ago: executing program 38 (id=412): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = semctl$auto_GETPID(0x101, 0x9, 0xb, 0x8) move_pages$auto(r0, 0x40000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r1 = socket(0xa, 0x3, 0x73) setsockopt$auto(r1, 0x3a, 0x9, 0x0, 0x4) mmap$auto(0x0, 0xd2, 0x4000000000df, 0xeb1, 0x401, 0x80000000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x80059, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x4000005, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0xd}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) 25.185145247s ago: executing program 9 (id=492): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x29, 0x6, 0x400105) mmap$auto(0x0, 0x20009, 0xdf, 0xed3, 0x401, 0x5) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x82a0, 0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf25030000000400080012000100000000000000000000000000000000000400028024000380080014804818f1fa1600a0002f6465762f736e642f6d69646943324430000000"], 0x54}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) setresuid$auto(0x0, 0x8, 0x0) access$auto(0x0, 0x3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r4 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) ioctl$auto_SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000600)="d6fb33c9e0939f6bc4b1410d3e73bfb07e89e3d3bfec33da92a99b959615ad7d2c14207bcfefb9ff1a5e70499e1c1339dac2f58d6aeae91619e4ea447dd165d17324f40ea5abb3d1e715fe346ea362ea67d5cdc52d56a63737a277855c3f03643707e4752e6e83d5094790b6a2b3eea4f44a41a7596d2cbce19821cb614d4bb3ade309aea5772a00a886af43ec7e9225c517486d6064dff97c0c5003549b540f268e847d2d1a37623d50382e3328b08ac6af0b35243d889fea9115303e9f6be85b86cfe7ca5d97a63eccbb4f54e6560ca78c2c9a99aec1b4e82af296144e2af28a73f6258da68e4935") openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x20040, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r4, 0x0, 0x0) fsopen$auto(0x0, 0x1) socket(0x2b, 0x6, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r5 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) 24.121118511s ago: executing program 9 (id=494): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba", 0xfffffffffffffff7}, 0xc, 0x0, 0x5, 0x5}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) nanosleep$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0xd33, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) capget$auto(&(0x7f00000002c0), &(0x7f0000000300)={0x5, 0x3, 0x3}) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) 20.52607624s ago: executing program 9 (id=505): mmap$auto(0x0, 0x3, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101800, 0x7) read$auto(r2, 0x0, 0x1) ioctl$auto_MON_IOCH_MFLUSH(r2, 0x9208, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40100010}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1d0, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x653}, @NL80211_ATTR_MLO_TTLM_DLINK={0xf1, 0x148, "923a0d3add1b5ac78f7c3c71f883a5e1d34c9c401d71886953f15aca9487da179a58898940943f6602ad11d7a678f5faf88408e7c3cb96be8230028d02864f46ea81aed3a4eb270bdb4b837b741af6e3aa393d9a03091e40014a83c65799a8c69d0f84637b067ddf36cfd8e295e0148f9e25ee1b18ae32ddca6dd56d4456a43c577d0952d823a07b42e8415ec8b0e9d08a12054b1e8d78c106b9d5186311bb61219e433f320ea43193cfb2dd924d19e0468c769c1a87f5d345357a741aa3572dd5f3a87051d9bf5c75b10481f8cc462b6efcb7e86dbc3bc797c6f3f957015b59537c0a568f41edd69603e72c44"}, @NL80211_ATTR_PMKR0_NAME={0xa3, 0x102, "cec377290b3479129e3e4d8180c963f6c91a5071f00bcfd78ff580518f83254909f410f8f5cee56f78017c4947b6f223c990bc317ebc10abc6e43163f76e2b03bf2300be2884960b48e66d83373aaddff3ee6e55a14ceef8b3eef5c4404c829a5cff94bbe267b4fd798e342c721a4249ca9b94b94709aab636369d9943917ac153029f0618b12928d3e257ebc250ebf5da1b5c015484de2ced5c4d5ed10d70"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x9, 0x7d, 0x0, 0x1, [@generic="838bac59eb"]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x84, 0xf3, 0xb0, @raw=0xfffff010}}) 20.068160812s ago: executing program 9 (id=509): writev$auto(0xc8, 0x0, 0x9) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) syz_clone(0x1010000, &(0x7f0000001140)="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", 0x201, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 19.739243555s ago: executing program 9 (id=510): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004600)={0xe0, r3, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xc8, 0x1, 0x0, 0x1, [@nested={0x4, 0x6}, @nested={0xbd, 0x4, 0x0, 0x1, [@generic="fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4c52d520334c57c56a5fe9358c7a8b45d2c39492577b0c60cedaffccee1b2ebd9a11ad0eab4d390826b494ea05d6578176f70cd9cfc566abf6d1329a68a6a6fc28a2e2c669c39ce8"]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x4) msgctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000000180)={{0x1000, 0xee00, 0xee01, 0xc, 0x5, 0x5, 0x9}, &(0x7f0000000040), &(0x7f0000000080)=0x62, 0x9, 0x2, 0x81, 0x81, 0x1, 0x5, 0x4, 0xa73, @raw=0x6, @inferred=r0}) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000001100)=ANY=[@ANYBLOB="f4260000", @ANYRES16=r3, @ANYBLOB="10002cbd7000ffdbdf25010000002202018008000e00ac1414bb552746a7beedfe58b0886001337d7d4333d921f4a752ff57b90e8b871ca33c84f91aeee769f44b818bddb5ac35048d3e2661acfb7ce03d49015969d67c796dd9e14fada0228c3615b380b8daf230342fd5e43b4f827f8aa828e771c9904cafa19724088cf133cc6ea3bc82e530878ab91fd6c18a7d9bfd1b6e086eea68927d9b3a41fd0d087eaefb1a93e890978bb86560f026b2860800de00fbffffff0800b800", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="170034002f6465762f736e642f636f6e74726f6c43310000beac3372bfe15b9ebeab1af3f441199cd746ee13f36c0000"], 0x26f4}, 0x1, 0x0, 0x0, 0x10}, 0x24000804) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1c\x00', 0x40, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3b) mmap$auto(0x9, 0x200040009, 0xdd, 0x800000000009b72, 0xffffffffffffffff, 0x8db) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@can, 0x54) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x34000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x3f3) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, r0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r6, 0x0, 0x5) 18.375890852s ago: executing program 9 (id=514): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) socketpair$auto(0x3, 0x5, 0x7, 0x0) connect$auto(r4, 0x0, 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0xe4, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_RADIO_NAME={0xd0, 0x11, 'u)(\xa0\xb66s\xec\xbe\f\x19\"\xbfW:L\x15\x94\x1a\x06\xb27\b\xb7;\x1eF\xe0 .\xdfB\xbb\xe11\xea\xfdX\x95\xa5\x01\xd62\xf4E\xa5O\x1a\x950\xacJkD\xa39\x11\x11\xb4\xb1,>\xc7\xf97=\xe7\x98\xa9\xefPq\'\xc9\x8doJ$2\xae\xd1\xeaF\xd7os7\xffr\n#\x00\x00\x04\x00\xc3\x9fx\a\xc3f\xb1\xc1i\xa4\xaf8y\xf2\x0f\xa3\xcaa\xaf%\xe1\xd3j;U\xd8t\xc9\xf7\xbf\xbf\xb4$\xbb\x8eM\x17c\x9c\xc2\xbfn\x83\r\xcbY\xb4O(\x05[\x90\x9di\xbb\xd3oC\x1f\a\xd7\x1f\xeb\xb1pBr\x8e\a<\xa7?\x05\xf7UI\x92\xa4pt\x9b\xee\x904\x91\xd8\xa4\xcb\x83o\\\xdf&\xae\xe8\xe9\x80nmy\xf0\r[:\xf2\xf3\x1f\x1d\xa4'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 5.095883673s ago: executing program 8 (id=557): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0) r1 = dup$auto(r0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4008ae48, 0x38) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) readv$auto(r2, &(0x7f0000000400)={0x0, 0x40}, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) memfd_secret$auto(0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/123, 0x7b) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) getsockopt$auto_SO_PEERPIDFD(r1, 0x1, 0x4d, 0x0, &(0x7f00000000c0)=0x8) 4.583475443s ago: executing program 8 (id=558): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x1, 0x9, 0x7, 0x5, 0x6, 0x8, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0x9, 0x8, 0x10007, 0x7, 0x10000000000, 0x0, 0x3, 0x22000, 0x203, 0x9, 0x84, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x7, 0x6, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x10000, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x81, 0x968c) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x7ff, 0x400008, 0xdf, 0x9b72, 0x2, 0x5) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) futimesat$auto(0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) close_range$auto(r0, r1, 0x1) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r3, 0x0, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, 0x0, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) read$auto(0xffffffffffffffff, &(0x7f0000000240)='/proc/scsi/sg\x00\x00\x00\x00ices\x00\r\xe2\xc9\x04\x986\xbc\xb0FI\xb9-E\xe3\x87j\xdes1\xa7\xdf\xc4\b\xb3\xeelc\x7f\xfdg\x18*\a:_\xb0\x92\xacwH\x9c\x9dF\xb1\xc47\x85\xc7\x13\xe1\x19UR\x96\xd8\x86\xd3\xe4\xa9R\x1c\xeb\xc8\xe5X\xfcR\xc7\vdU\x8b\xaa^\xfd\x83#\xc1o\x04\xeca\xbf\x8bYz\xd9\r\xcbk\xfd\x9e\x97\xcbOf\x80', 0x100000001) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) 4.027236186s ago: executing program 0 (id=560): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0xfffffffffffffffe, r0, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/content\x00', 0x181b80, 0x0) read$auto(r2, &(0x7f0000000440)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xecC\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb08\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk\x02_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1e\xe9T1\xbf\xc8_^\a\x03\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xddC\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3\xb0\x84\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda+U\b\x88\xa7\x88\x1fC\xbb\xa8\xce\x0f\xd5\xdew\x99\x18G.s\x16\xfa\xf2\x96|\x1e]\xe5\xf8\xb1\x8b.}\x841\xd8\x98\xd8f86h\xab\x94\x7f\xc4<\x03\xdd\x86=\xb6\x1e@\xab6\x81\xce\xaa\xcf\xfd\x947\xc3\x86\xfe\xb7O\xd9\xa9\xb6[\xcc\xd8\xe1\xa9\x84[\xe0\xd4\x03\x90@\x03\xbe\xba\xee\xed\xe9\xb1\xd2\xf1\x8cgn\xb7m/\xf1\"\xc2\xeb\x1d\x04\xf3\xf1\x96\xf2\x00C\xf0wg\xd6\x11\x18\xb5o\x9d\xd7`\xce\x81\x9b1b\x8ce\x99*\xa3\xd2\x8dAw\xd9\xa6l\\\x17\xbb\xf6\xe2\xa2<\n\xc0\f:\x97\xff\xc6y\x05<\xa6\x81\xd92\xc9\x9e\f[\xf9\xfc\xf1ih\"J\x92\xd2\xd4\xc2\xe8\x89 \x81\xbf8C\xa9\x1at\xa1\xdc\x94\xc5\xc8K\xbb\x14h\xa9)\xaa\xf2\xda\xaf\xb1\rs\xe6\x97\x1e\xcc6\x94\xff\x1b\x8e\x98\xf7\xa0', 0x67b) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/threads-max\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0xfe5c) socket(0x1e, 0x6, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x282, 0x0) read$auto_event_trigger_fops_trace(r4, 0x0, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D3\x00', 0xc2203, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x4, 0x2) write$auto(r5, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(r6, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r2, @ANYRESDEC=r7, @ANYBLOB="010326bd7000fedbdf25080000000800048004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x18fc01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x4000000000000000, 0x400105, 0xeb9, 0x9b72, r9, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0x6a6d80, 0x0) write$auto(0x3, 0x0, 0x70) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0xffffffffffffffff, 0xa, 0x100000db, 0x9b72, 0x5, 0x1) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 3.483995346s ago: executing program 8 (id=562): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) pselect6$auto(0x3, &(0x7f00000000c0)={[0xd4c, 0xffffffffffff0001, 0x400, 0x37e153ab, 0x3701, 0x0, 0x2, 0x9, 0x80000001, 0x8, 0x5c, 0x2, 0x3, 0x7, 0xc3fb, 0x3]}, &(0x7f0000000340)={[0x1, 0x6, 0x40, 0x2f3, 0x8, 0x7, 0x8, 0x8, 0x4, 0x7, 0x40, 0x67a4ee2e, 0x6, 0x7, 0x9, 0x5]}, &(0x7f00000001c0)={[0x9, 0xb11, 0x3, 0xecd, 0x2, 0x8, 0x1000, 0x6, 0x7f, 0xfffffffffffffff2, 0xd30, 0x4, 0x8, 0x40, 0x74d, 0x10000]}, &(0x7f0000000240)={0x10000, 0x1000000009}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x8200, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) capset$auto(0x0, 0x0) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) ioctl$auto(0xffffffffffffffff, 0x4b67, 0x1) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) 3.326573977s ago: executing program 6 (id=563): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioperm$auto(0x7, 0x5ad2, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x21, 0x3, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x200, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000080)=0x1) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) getsockopt$auto_SO_BUSY_POLL(r0, 0x9, 0x2e, &(0x7f0000000000)='\x00', &(0x7f0000000040)) write$auto(0x3, 0x0, 0xffd8) 3.247154418s ago: executing program 39 (id=514): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) socketpair$auto(0x3, 0x5, 0x7, 0x0) connect$auto(r4, 0x0, 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0xe4, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_RADIO_NAME={0xd0, 0x11, 'u)(\xa0\xb66s\xec\xbe\f\x19\"\xbfW:L\x15\x94\x1a\x06\xb27\b\xb7;\x1eF\xe0 .\xdfB\xbb\xe11\xea\xfdX\x95\xa5\x01\xd62\xf4E\xa5O\x1a\x950\xacJkD\xa39\x11\x11\xb4\xb1,>\xc7\xf97=\xe7\x98\xa9\xefPq\'\xc9\x8doJ$2\xae\xd1\xeaF\xd7os7\xffr\n#\x00\x00\x04\x00\xc3\x9fx\a\xc3f\xb1\xc1i\xa4\xaf8y\xf2\x0f\xa3\xcaa\xaf%\xe1\xd3j;U\xd8t\xc9\xf7\xbf\xbf\xb4$\xbb\x8eM\x17c\x9c\xc2\xbfn\x83\r\xcbY\xb4O(\x05[\x90\x9di\xbb\xd3oC\x1f\a\xd7\x1f\xeb\xb1pBr\x8e\a<\xa7?\x05\xf7UI\x92\xa4pt\x9b\xee\x904\x91\xd8\xa4\xcb\x83o\\\xdf&\xae\xe8\xe9\x80nmy\xf0\r[:\xf2\xf3\x1f\x1d\xa4'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 2.844897057s ago: executing program 0 (id=565): setsockopt$auto(0xffffffffffffffff, 0x7, 0x40, &(0x7f0000000000)='{\x00', 0x9) madvise$auto(0x3, 0x5, 0x4) mlock$auto(0x7b, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd5\x00', 0x208000, 0x0) ioctl$auto_BLKOPENZONE(r0, 0x40101286, &(0x7f0000000080)={0xfffffffffffffffe, 0x2}) madvise$auto(0x0, 0x3a5bed9c, 0x6) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x400000, 0x0) madvise$auto(0x735, 0x74e, 0xaae) r2 = pipe2$auto(&(0x7f0000000100)=r1, 0x7) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_INFO(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = socketpair$auto(0x8000, 0x9, 0x4, &(0x7f0000000280)=0x9cde) r5 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x20100, 0x0) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000300)="f342b99394f8ae3b994bd53da35bd1211256ee433bb12fc391bdf31eda8290c17addfbb4aea082f87d0715c4ed88817c1148db4e0a263184b502bc1f23f9de01e71ac8c08b6fbeecd7b0b8fddd0d0954e1a2456eb6e4ac83b5fb0dd8d1520169a47721b8ac975fcdbb3b721b3d2b4a5c3c6454b69b57e8d8610eca44f86cf0df4ff38def30df04292db27b372897c49e43854edc60143b3f108834249dbceff7034f9212deb5ce9b188a6598067a7dfc677e57cbb0373e1999651dd5ee10f27ba8e28fd75be1ae930c2de18ae304f331d19974e146cce20df188d6997b3d981f365ee021630488edef77edcfa8873b76df8aa2570a001008e23d8ce06e9426d0ff425f1156d077ac43128d0519d0debfc7d91a7405b6d264378bfa1deb3070e00732b7ff11f3df28ed7b928af812dfdaa040b21703a3c3b835a93cc749b1a9ac26fbe30b6da22ca6fc7f9722162a4acc6e4de3f696d75e591426e7f70fc024a19784899c6dad6004d77c0d04c1d98e5133a8ade079675f10056a9cefb4fefd5acf142586a784bb56b626f0fcd9e2d3d92a5c204b3231aefaafa4005b481a61c3b62559910bf2882ffb03057494dbe58923e06deb4bcc3a13d7be02eaf7420b0f038eff5c1d16d196aaed519783e2a022d03f789de88f19288e93326ddb5a6654bbaa3a1b69581d0ed73ecc49bb67d2dff814985190d99db0e1d87eaab69c8ff3f89df1c2752afbf6a5dfda32746fd413e34a83e4a347586d7b20f968a0799f7b1d70a36c7f7505286796fb9244539caa4903f3ae61e52ab9572488545c0f3153694614e33b0284bcf41a5f0188c1252efc108c9de9a76bd1ca6ca88405da463d0f27e077ee4512f7a4ea648b53e1e237f886c8c54e9c70f1c2ca9be887519b092e2f5c5b80fb60dd181b2f8977357a0ea3aa6230add9087058724513f5b8e4baf3f31cacbaf01e85ab68a2de68526e4266fb941075b7763d2b09dbd7c69644890145991a83ab9af64f49d93f15429e487458449bb406ee32a47531490473c1f0155d2ea87decb946da0acb5b059ff9a9da0a869b30a4972e960c626a05aa5fd52e8b2676065e74b63b467084253498f6725069a2f9b344955bc3b4c94266ea7cf57222dfc652da649b5dabdd6d93aa70159252ea386182f7b03d2f77d0dc72d3082a2457b3ead21a3145f331db988611dd0c9e1ee34b0b66fa81fbcd96ae9124705c22e26e6153afe45771c254e4990d172a9be62ec0aa4a839f074fbbc3c1ea6ab085d9b82dc55e6d555593fa672b3b49e1465ffe44b4958654e3793a21e2a10986b5d0d2d97f05efef955b3e3f855208d6e9b383194932ac9360b19e8df406c6f09801bdd5bc4db9380e9cb055e77731ae251282e3bc9f60eb398e3e139d6d5c99dfec206f5ca45994710b2cd74dec4c36a960da2be769ebdb6513756663afcf349b928eb8d493319c80f745ea3482b69c77724340724b743d3168c630449c8571ac86b8cb49ef82ac5a38abe389babb6d100b6fe07b68f8cdcb8638d3e8661a50aebb4356705a357d87eadea2bc6be7a07bb530509bb3f2afefaacd6b8b7faecfce1449de41b145d4b36f3d6ac1746ff341c629c6cecfd0dec0123cf460b77ebb961b5b33e911e17e314ca3586d0aed5d5fe7bee3e61d82f5a9b2a32cba95825dc581628301a8b0e5566b3a604fdfb296249f773eab4a7197749b36847d947ae84ed8f99511ee1d101eb39281c4ec8c8eb6e69d2ec77f17542096ed4b5e16a68e0aa60ee2c0d4ba9074b0c3b9214017bfc98cc529dfb5179ea867c3109240df69e26351f8b192d18db9ce65e4a9c9ab6344104905f6ff9c0c73478e8a7435c850b6fb1ddd36c1954e7d47aa6579b8f4c90d618da7feee64b3f65eab6cd39f18ea168df828265673c329d025317cc271a1ecde60da84076698e88c953e78ebf70e178113a507d7fa623314de6662fdcf1771c8c88e739d74fa9ef6d627e6b7e792d20718032b692c7bbc2da5e7647549d0a5cf7dde2a994f10f50129162c763412b412d291fe18627527854a293d98a1217ca8cd6eeafb29abb3ed1acc85c03bd4789200cbee8fa2e25ac980d09294be15cf7c98a3e0948d2560da77546b2e9c12686e13628c34d46de81bfd1987a7f8eded08ebc27747299d0aafd2a65b2bc6cd8f9c66452ecea5adf9e6a748639b17c91c657c9b2b5d25323f585b59ea6fba436402e60652af38aaa9249c7502a5e4ed6238ded97c97accedcbc5a47d2d552d3b52ed0ea4b5783d6be2336f85920d5c24bf0b9df921231d9d79e3688e14cf70d337a97356db5a3e6902d77c9c12e876e805ac286f07b142bcbfa452202e76f7c9e2a94117df64ace3349da5fe2a225f79d41e7946c2437f701f5018d4d7fc5f88ce825ed396017d6fbd4a3e5811316afc7e5636d44f0c75120f4f0d5a8ec676f35c6870e1f30d0dd1af057dc41f5b37d9aa159cf9abe6e62f496bde087104f55312bb081b4c113bf710433e55e588cfcf92752fa7f0f2a7d1f8b48b7ae0a05bd6e508ced6b272d8009441021850dc2eb6d07db11909f6619492f6a24dddd8465a115fb8d8a486e44e5d2da204676fe70290230ad856a0458419670fa8ca833ee94711b9fae3728217f9f757c88ea951c5f7b57afa063f52b3e8234c9393889b8259ce96a7264a0eba73c82df528daf3b1e7d7f8e340ac2172e1eb8ebff897f3e699e37f94886ca9272755fbedbf6b17cdd2cd19200e2a9412ddeb6adfefb8c3b85956a0eeadfe760c827267d50bf20b1d6edc3aaf49ff9ff6391131bd078222d31db8a6a443f53fb66fe5b53d27803d938fe55fbac932b6ed4f0183e9329878684b3a58539c73a2a909a7d2156d1e1f525ae0ada1b03d208c19a1a5f5b936b410ecbb85012e284510269b58550502c82663bbe76e895d2e06d241195e2c1e23a7d6dd2c9a13282c0e2c9fffdb89cf353e23ab9dc21186dcf1e5d26454fe38967df3d65bde259d7ec733eb0f7a2849521f6803492e6d7d532d15246d1a84fb725b9c5c1857e4511ef12e5ca97645001a61ea23814c89796df4402966d4f0dd1143d0483d23d6cb56b3cca94ba90e377e2774877b391f555a64ecdbc32942dca67aaad161dea83b8686464d70fced4bdd72c3e75fc201cb8bffffeaf08ca47cc532c6e22316097868a2dda5bd44a57e7a387f4617be6596b1ef5ac215d3a41f4a104cc10d2f1f6625eb8ae4ffae0b92125c86c4711a970bf3c1f9127cba01bc96edd4a9b433b33dacddd657f9b73714232267139fd41d934a545f33e5e71b7c06249ed4adea6b972edd1c500528a953e7cdbd63d6d880f9577569fa9870d07f1247f92bb6d9d34d7ded35142849edbdf828e3137e4cc0cd7f678bcf65f02a8420472826d9fba1357de77e174cbde6a3a252c94d75125e55f5a1e7d09a775e9b6a3bc1a30c25c37db7cb11e22dde44d7dfb166eb2093c42c5f602acc52163c4d10b5392e825eaba16d546c449451c2a4929e2025db781dfaff6ea992d1148588de37416a9e761c00760fb82de01967983ead1acfc573b22afb4a8e5c65a5dca965141bfeea901b0ebde94556afc54ecbed1ced55f10b49b38903d6e5c4ef66df4a6ba337a32f191d18763460f788ac1cda05ba1f58fe234333d5ef0805014959f740eb1dc7e3d94d49ba3a14611d67591f8609ee9f672d12847dde904947b121cc230805b7634c23a2511d3c10058effc16d2896dd771703d9879edb19d17091dee4e47824ac7515dda5f2e4146af2e2ba83f31f956348df4c5028877568cc1a4b792ff5e7983a7a542231e7ac144683d98dd75f652dac907fad9d76472c06db45d387b2b9463132f3934b3a468a6f8e5c88c8725cefdbfece8278c95f194d44f02efa488dcfd92cfc2dcb53192614afeab85ac2a727ff7a04c6292ef2e0e678dc1ee557e3ac4f08eeb7f3da0573ed5ac0d99b9727f9f57573aab5187ff291e53697fe4f349946d039df4157e2a23b34521e530309b4eaa50d186124fd9c05615fa0f7ed2552769bf6117b9c5cba8fb392768702cc2d7a8b3ca47c5ff8152ca1796c57071daedd42fe0f52de4e54d9d37e52f789205e7f3fe59b6399e621b215dda616dcca80b4b3d1bfdf989240f5a3c445f8744c323fbf6a3cd9e8cb3fe6f9174958a0f9f0fa77bc58a03db02eccb3e808ecf6ce689181ffce2cda588c9358cbc2a99e39487b2a8db4c1b5b024da0ef438e7060f7a13a09a8f52a12a610e8fd584bf926e0e2559e64ca9b58745ccef97c97c7f5adc15decee3fe55da67c18edbbc5b66f87aa5b73516b8570d37b8c62a32fa15ebb7c8ae69097445e031b10e1ff9f81df5d39b52c9dfef596a4297348366bdd9c74294363ed362226c683b097b9378e17915c560a4c536414e5534340e6a60cd60e78d61e6847dd1423953e4c7be6561a2e73c386471fb2c1546e119ce56b2580257526656d4f527cda524243f218a9ab8396b87b61a0c6b22923e9c1b87b56fdafdd3f889c0c7e499ebaafce4af53b058157f8969a4414af63299068f1137e80817137ee58ae8f985714088e6e00ea46a1a9c33e30d0a3cdfe77c54c5f4597705504c54b21c9feb9730c6a8e3d8a10ba2748ff1469d63771c2d53c903d89444f5a6ed61ba1ed42f2e53500858c7cf5407855679f100cbaa7a10eb9b0ca30bb084951b1554d28cff7304030e99b1f5a36c2ceacc31b433bad04fc01d86d87c550dd1d269e532a94e72a79797638daf4b99906f9053fa367b58811815c1d6662019789fca26cde4392234ce0042f3b25469afe06c19da5e73452f8424ce63459d6b985cafd3298a7b1eb73c17a1cca5e6f149279c35982cd7d9f8e986428224844f92de6890174ef9f727f38e4d0374eac24199ca0a056d24af199f3d637ba22fedc2a0bc2dd5f4495022e40262e6184596e56a118e4869374e5f44bedbde793ef2d95a71df56a6f06e91fd5a0adcc12407ca141e0481b5222c9cd48afedc4cfd3de223ea2e20763eb6f3266b026c798e35f02e99ba6a5c844deb07380145ce8dbc991746382deb24270d69b75db63144f8ffcf98ca26884d245d13074780b7f52d7fdd854b94656e2beedf9592366aea53233bc8a68ef820943f872f50effcfa17af6f3e74525000d31a0fe3d21d3d6e9abf2fd4d0df24f160eb0af8434d19ae0c325e59659e204ea5062d942ec6814b7106fb167fc272e4bdb5fbbf8e6f966d29958f667f97ba894005026529cb73adaa14f3732dd6689d4f2b6c01f8bdc0d5c24fb3704e87e6af5e030e66ebd8ed55071a0b152e29021980313cb259153e2a9cf94bb0e6736026dc728383d0566921685e51009bdbb1c9829d3e18d1c04cac11dbb2adeedc764f1dd789c93a429ca512bd6b9d9e7f6b7c714ff9b58c4a4481a5597f04149353d2059e63ee281fea28a848dcfa53425acb0ba3623faba73d46a5354471b55a022f8deb05f6eff88c6a79bd712412af0b718b8fa7d36e267b60913084e5d77aae1673e447dff72034048f7e19603f3ffcda11bea51c86ddddb203a5d484a76ddea7f573f994aa38f075caf6fe801da958f09e6523b47c9b1b8f1d5370d0591900e58c554d6f4d2dbb200d9925e360a603030a582ac43b8feb9d1639df2a41120f9ac21d3baf05ab023a85b2abdd5aacfb3bded227ccda317658ed63b9de3eb89410c0bc58ee7f0f0c2f73c4857159034b3a2fc5f8c61604eab8b446b6f127ead5b8f1862b7b2c56ab0efdaba5cca34bf12568bd04fd44ec627a67c369997382b8cb9f55425", 0x5) r6 = fcntl$auto_F_GETOWN(r1, 0x9, 0x3) process_vm_readv$auto(r6, &(0x7f00000013c0)={&(0x7f0000001300)="d7d0c7ccb4500b95359036a8c3ebc6265f4d33cf5ca4c9d979f4498edb264b1faba3fd7b4b160bfca4f40240efc018b2c4925b5adf0ada6c4518e2a6423d77b75f2d2b822d6b1c34eaeab3fbaf305087b4125623e1df5987c3a24731774ef6e0ab5eae7857eb2491c176f5149a5250384ae4f3a27c2df6cc79a35c0a6e61d1a3bfce168fe865c360eb00976037085c", 0xfff}, 0x4, &(0x7f00000014c0)={&(0x7f0000001400)="031fc7646835b7cf75fd88a39a0b19d51d6bc7be75e057c35b4f33b0519139c9b4f222b129189a284ddb7c9e4d7807814e45d881428fd2c7d5ea12be44489eb4f286713f0d62231798472d897b2759c490cdc07ab71c9df2ce4b2c05170bca4a704b4de3da635c2b73b52f3668802c3b5569b21df3d5918ed20c357322579b99a06362ba0476fd21887b83b361eb0055f026e6776f484595a1aefc3eee29406148a656954690fde56497aa11793e8e56fc749ab11aa000ec81bf", 0x3570}, 0x7, 0x2) read$auto(r5, &(0x7f0000001500)='/dev/nbd5\x00', 0x80) madvise$auto(0x9, 0xc, 0x0) r7 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000001540), 0x2005c1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001580)='/proc/thread-self/net/ip_vs_conn_sync\x00', 0x1, 0x0) getsockopt$auto_SO_DONTROUTE(r7, 0x0, 0x5, &(0x7f00000015c0)='#-%^@)..[[%\x00', &(0x7f0000001600)=0x2) read$auto_fops_u16_(r2, &(0x7f0000001640)=""/36, 0x24) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000016c0), r4) sendmsg$auto_TIPC_NL_PEER_REMOVE(r8, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x38, r9, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@typed={0x1e, 0x98, 0x0, 0x0, @binary="eb8d78b94a444baf32b747fc06985dd106cbd36376ed7b525e5b"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c094) rseq$auto(&(0x7f00000017c0)={0x0, 0x8000, 0x78b, 0x3, 0x6, 0xfffffffa, "e5672341ab4f98afd95dcb56acf65d5d8db231"}, 0x2, 0x3, 0x8001) ioctl$auto_BCH_IOCTL_DISK_ONLINE(r2, 0x4010bc06, &(0x7f0000001800)={0xffff0001, 0x0, 0x3200}) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001840)="2fecd5cfb80fa479107379ef8ad1849b4764c1bf9f18cdff7c6a7a6c749af33dae75777e1b8dda86d29614d288c26b3ae462c7f4d3cf15", 0x0) io_uring_setup$auto(0x5d0, &(0x7f0000001880)={0x2, 0x1, 0xf375, 0x0, 0x2, 0x8, r4, [0x2, 0xffff8001, 0x5], {0x8, 0x4, 0x80000000, 0x8, 0x10001, 0x8f9, 0x7fffffff, 0x8, 0x1}, {0x37, 0x6, 0x4, 0xc4, 0x6, 0xf, 0xe3b6, 0x1, 0x4}}) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 2.660083219s ago: executing program 6 (id=566): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r2, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) ioctl$sock_SIOCGIFINDEX(r0, 0x4611, 0x0) r3 = socket(0x2b, 0x1, 0x1) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x80, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x30) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000880)={0x14, r5, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) io_uring_setup$auto(0x58, 0x0) r7 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/usbmon8\x00', 0x640, 0x0) r8 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x5) bpf$auto(0x1, &(0x7f00000001c0)=@bpf_attr_1={r2, 0x0, @value=0x4, 0x4}, 0x101) read$auto_mon_fops_binary_mon_bin(r7, 0x0, 0x2f) close_range$auto(0x2, 0xa, 0x0) r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r9, 0x0, 0x3) getsockopt$auto(r3, 0x0, 0xb, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x1) pread64$auto(r0, &(0x7f0000000040)='!:%\x00', 0x5, 0x1000) 2.421388354s ago: executing program 0 (id=567): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x11, 0x3, 0x6) capset$auto(0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab/kmalloc-64/objects\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x14f602, 0x0) (async) r3 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x1, 0xf8, r3, 0x8000) (async) memfd_create$auto(0x0, 0xfffffffd) (async, rerun: 32) r4 = socket(0x2, 0x1, 0x0) (rerun: 32) getsockopt$auto(r4, 0x0, 0x41, 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0x6, 0x1a, r4, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) fanotify_init$auto(0x65, 0x318) (async, rerun: 32) pipe$auto(0x0) (async, rerun: 32) futex$auto(0x0, 0x40b, 0x5, &(0x7f00000000c0)={0x1, 0x9}, &(0x7f0000000100)=0x6, 0x7ff) (async, rerun: 32) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) (rerun: 32) write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (async) ioctl$auto_BLKRRPART(r2, 0x125f, 0x0) (async) unshare$auto(0xb) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb2, 0x401, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.420389459s ago: executing program 8 (id=568): mmap$auto(0xfffffffffffffffd, 0x2000c, 0x4000000000df, 0xeb0, 0x401, 0xffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x42, 0x0) write$auto(r0, &(0x7f0000000340)='3\x00', 0x6) write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x408, 0x3, 0x10101, 0x6fb3, 0x8a, 0xffffd387, 0xffffffffffffffff, [0x100, 0x7, 0x4], {0x2, 0x9, 0x3034, 0xc, 0x8f, 0x5, 0x5, 0x5, 0x6}, {0x4000, 0x2, 0x0, 0xfffff000, 0x0, 0xb89, 0xd5, 0x837, 0x8}}) socket(0x28, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x1, 0x2000000000002) r2 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) r3 = fanotify_init$auto(0x5, 0x2000000000002) r4 = open(&(0x7f0000000000)='./bus\x00', 0x486400, 0x133) fanotify_mark$auto(0x0, 0x451, 0xa, r4, 0x0) fanotify_mark$auto(r3, 0x451, 0x800000a, r2, 0x0) recvfrom$auto(r1, 0x0, 0xc, 0xb21, 0x0, 0x0) process_madvise$auto_MADV_POPULATE_READ(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000300), 0x8}, 0x5, 0x16, 0x5) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r5 = socket(0x10, 0x2, 0x4) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) 1.882825862s ago: executing program 6 (id=569): close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c61ec00) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), r0) sendmsg$auto_NFC_CMD_ENABLE_SE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x4}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004000}, 0x20000003) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$auto(0x15, 0x0, 0x0) 1.714560402s ago: executing program 6 (id=570): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="7385a762d785b2195e2feb575ad5cc6ed336a77050e2b7044b559e00350f91cab0eeecfb6cce762980dbc2b60821402a9493489681d05dacf4fff921544b2cf37c7d2568a5137908b3c2731a5fcb690a1a326b059a1a8f71fb8f44da242b6738909708342ffdb522da29a2e2a629e6937438ee314205cacc7377de1666c163406856b434274f12b7921957cfbae92961bbf76450e7fecf6f5c1efbf0a5b3bf84", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="80020000", @ANYBLOB="be0e6b944db8ad7a9d1d66e5f53fb232abe699f1ee6d8e7ed9db09ee19dc9f770000", @ANYRES32=0x0, @ANYBLOB], 0x280}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) socket(0x10, 0x800, 0x0) socket(0x11, 0x80003, 0x300) socket(0xa, 0x801, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r1], 0x1ac}}, 0x4c050) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x3, 0xb}, 0x2}, 0x3, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0x1, 0x201, 0x1, 0x5, 0x3, 0x3ffde, 0x400, 0x3, 0x9, 0x6, 0x80004, 0x4, 0x11ffffffffffd, 0xb2, 0x2, 0x9, 0x10, 0x80, 0x80000002a0, 0x0, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x0, [0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x0, 0x9, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x200, 0x0, 0x10000, 0x0, 0x9, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x2000000c) openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/kernel/debug/nfcsim/nfc0/dropframe\x00', 0x20000, 0x0) statmount$auto(0x0, &(0x7f0000000940)={0x8, 0x1, 0x1258, 0x1, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0x800000000b4, 0x3, 0x7, 0x10007, 0x80, 0x2a0, 0x0, 0x1, 0x145, 0x200, 0x4, 0x84, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], "2e33f159b851068378a4f8d68c65ca0d92e1aa01b8856f5bb4b5f4f438ed5666ddddc9dc9786d8fd5d59f4ded0fbee9897a408053d1bc620cce0979e9886de648a7534c7de7e2e0705561412f6f422cce00e6da04bb871cb73b9a07c4bcfc2250e288bf2e6250ef2899a2c37215d87afb1fb4f863359f7"}, 0x1fe, 0x0) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd03, &(0x7f00000001c0)) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/available_tracers\x00', 0x400000, 0x0) r7 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r7, 0xfffffffffffffd02, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) 1.580024344s ago: executing program 0 (id=571): statx$auto(0x564, 0xfffffffffffffffc, 0x1000, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) (async) mmap$auto(0xffffffff, 0x2020005, 0x2b90, 0x932, 0xffffffffffffffff, 0x1) (async) r0 = fcntl$auto(0xffffffffffffffff, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) syslog$auto(0x1, 0x0, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20000010) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x8) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x50643, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty6\x00', 0x519c41, 0x0) ioctl$auto(r1, 0x4b6a, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd1\x00', 0x80002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.deny\x00', 0x301040, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)='B', 0x1) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) r4 = socket(0x2, 0x1, 0x106) (async) mmap$auto(0xffffffff7ffffff7, 0x2020009, 0x3, 0xeb3, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@ethernet={0x306, @broadcast}, 0x64b) (async) setsockopt$auto(r4, 0x1, 0x9, 0x0, 0xeb66) (async) close_range$auto(0x2, 0x8, 0x0) 1.497911558s ago: executing program 6 (id=572): r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x82042, 0x0) write$auto(r0, 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) (async) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x408) (async) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r1, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x70bda6, 0x25dfdbfd, {}, [@HSR_A_IFINDEX={0x8, 0x2, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) adjtimex$auto(&(0x7f0000000000)={0x5, 0x0, 0xb, 0xfffffffffffffff3, 0x6, 0x1, 0x100, 0x0, 0x9, 0x5, 0x9, {0xc, 0x4}, 0xf3, 0x5, 0x195d, 0x0, 0x0, 0x1, 0x5, 0x9, 0x401, 0x80, 0x8f}) 1.342205143s ago: executing program 6 (id=573): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001fc, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0e, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x3]}, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)="e3466055") ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) mmap$auto(0x0, 0x4020009, 0x2000000000006, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x82042, 0x0) (async) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x82042, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, r2, 0x8, 0x8, 0x1, @relative_id=0x5, 0x2}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x10, 0x2, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x80, 0x9, 0x0) (async) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x80, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="00fe65b7fd8000f654022ff4efb0d96e390879cc58528a9dee4756afdeea263b494ee4f798cec0b6266affc3c78a2ad1d40c7dc4bfb0517624cf50ae39d05713535cca39bf20c9660c43f274158532633e869dcfacc5ae73ca9040e6f28c9f4d06bec474005382cc0c6f4e5956087948efe7312bf4a9adf8a387dfd299976957df838e956a00840cc946f60d9bd9d29897", @ANYRESOCT=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x4004854}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x2a, "ab06fdffff00fff500"}, 0x55) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x2a, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1.279981755s ago: executing program 8 (id=574): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) write$auto(r0, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V98\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\x80\x04z\xd0I>\x8f\x00\xd7\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x97nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb6\x9f4[!\x0f3u\xaf\x97\x97\x9d\x1dp\xf3\xab\xdfE[5\x86\xa2\xb92\xc0\x15L\xda\xe3\x04\\M\x85}\xdfh\xd2\xd93e\xf61^\x04\x0f\x85\xc7_\xd0\x8d9\xbd\xc6\xf3R\xea\x10\xb9\xa2\x94]\xf2\r\t\xff$\xeb\xfd1\x8d\x97\x80\x81\x95]\xb2H\xf4\x1c\x8c\xcf\x8eM\x0eB\xb0\x83\xa3\bF\xc7\xae\x1a\xa7r\x9c\xfe\xa5\xa0~\xe4o+\x9d\xb0\xa6\xe8\a\x9a}\x88\x0eKd\xe07\xf0\x88\xf2\xb7\xe3\xe3\b\xac\x1e\xa2a0\x83\x0f\x06\x9eD\xd0\xc6\xba\xa4\x13(l\xf6\xbc\x982\xa0@\xda\xe0\x96\xdc0X\x9c\n\xb3fs\xe1\xf5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x4, 0x6, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/oom_adj\x00', 0x14a402, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/hw_random/rng_available\x00', 0x22000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/kernel/printk_devkmsg\x00', 0x202, 0x0) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) read$auto(0x3, 0x0, 0x1f40) 0s ago: executing program 0 (id=577): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x242, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x6, 0x1, 0x0, 0x4, 0x0) socket(0x2, 0x2, 0x0) socket(0x1a, 0x5, 0xfffffffd) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x400, 0x4020009, 0x4e, 0x13, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x48}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x2000c004) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/d\r\x00\x00\x00\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x90, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x58, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, "1bc6e7e10bc66696ea9b05d53fcb46cdea5e227f20ea27bbee943b059ee673eb196cbf758915ad0d31d27b34b0e98cd68af9d349f9047fced322702974"}]}, 0x58}}, 0x4004010) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x4, 0x8, 0x2, 0x19, r1, 0x3) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000040)) unshare$auto(0x40000080) pwrite64$auto(r0, &(0x7f0000000000)=')\x00', 0x0, 0x9) kernel console output (not intermixed with test programs): 87711][ T6188] Call Trace: [ 106.287722][ T6188] [ 106.287732][ T6188] dump_stack_lvl+0x16c/0x1f0 [ 106.287768][ T6188] should_fail_ex+0x512/0x640 [ 106.287799][ T6188] ? __kmalloc_node_noprof+0xc5/0x500 [ 106.287832][ T6188] should_failslab+0xc2/0x120 [ 106.287865][ T6188] __kmalloc_node_noprof+0xd8/0x500 [ 106.287895][ T6188] ? alloc_slab_obj_exts+0x41/0xa0 [ 106.287922][ T6188] alloc_slab_obj_exts+0x41/0xa0 [ 106.287946][ T6188] __memcg_slab_post_alloc_hook+0x255/0x960 [ 106.287980][ T6188] ? kasan_save_track+0x14/0x30 [ 106.288009][ T6188] kmem_cache_alloc_noprof+0x307/0x3b0 [ 106.288034][ T6188] ? d_instantiate+0x77/0x90 [ 106.288061][ T6188] ? alloc_empty_file+0x55/0x1e0 [ 106.288097][ T6188] alloc_empty_file+0x55/0x1e0 [ 106.288131][ T6188] alloc_file_pseudo+0x13a/0x230 [ 106.288164][ T6188] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 106.288211][ T6188] ? alloc_fd+0x471/0x7d0 [ 106.288242][ T6188] sock_alloc_file+0x50/0x210 [ 106.288275][ T6188] __sys_socket+0x1c0/0x260 [ 106.288297][ T6188] ? __pfx___sys_socket+0x10/0x10 [ 106.288319][ T6188] ? xfd_validate_state+0x61/0x180 [ 106.288350][ T6188] ? __pfx_do_writev+0x10/0x10 [ 106.288379][ T6188] __x64_sys_socket+0x72/0xb0 [ 106.288401][ T6188] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.288429][ T6188] do_syscall_64+0xcd/0x490 [ 106.288461][ T6188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.288484][ T6188] RIP: 0033:0x7ffa91f8ebe9 [ 106.288503][ T6188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.288524][ T6188] RSP: 002b:00007ffa92d63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 106.288548][ T6188] RAX: ffffffffffffffda RBX: 00007ffa921b6180 RCX: 00007ffa91f8ebe9 [ 106.288564][ T6188] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 106.288576][ T6188] RBP: 00007ffa92011e19 R08: 0000000000000000 R09: 0000000000000000 [ 106.288589][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.288601][ T6188] R13: 00007ffa921b6218 R14: 00007ffa921b6180 R15: 00007ffdb325ae98 [ 106.288634][ T6188] [ 106.574342][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.588552][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.588562][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.044922][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.294584][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.445928][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.539799][ T6200] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.565359][ T6200] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.581321][ T6200] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.613056][ T6207] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.671055][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.140841][ T49] bridge_slave_1: left allmulticast mode [ 108.146687][ T49] bridge_slave_1: left promiscuous mode [ 108.198256][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.207617][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.226647][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.236578][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.256331][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.264948][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.287367][ T49] bridge_slave_0: left allmulticast mode [ 108.305947][ T49] bridge_slave_0: left promiscuous mode [ 108.314392][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.369612][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.609688][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.609716][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.818657][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.831973][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.834960][ T49] bond0 (unregistering): Released all slaves [ 110.329768][ T51] Bluetooth: hci1: command tx timeout [ 111.431320][ T6272] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.468582][ T6272] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.468986][ T49] hsr_slave_0: left promiscuous mode [ 111.494878][ T6272] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.541191][ T6272] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.577898][ T6272] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.584574][ T49] hsr_slave_1: left promiscuous mode [ 111.596595][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.619738][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.634018][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.645238][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.654090][ T6272] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.716304][ T49] veth1_macvtap: left promiscuous mode [ 111.739845][ T49] veth0_macvtap: left promiscuous mode [ 111.750272][ T49] veth1_vlan: left promiscuous mode [ 111.755787][ T49] veth0_vlan: left promiscuous mode [ 113.005773][ T30] audit: type=1800 audit(6049974086.854:4): pid=6305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.66" name="dbroot" dev="configfs" ino=7991 res=0 errno=0 [ 113.046265][ T6312] syz.1.67 uses obsolete (PF_INET,SOCK_PACKET) [ 113.069049][ T6312] WARNING! power/level is deprecated; use power/control instead [ 113.224061][ T49] team0 (unregistering): Port device team_slave_1 removed [ 113.324076][ T49] team0 (unregistering): Port device team_slave_0 removed [ 113.460015][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.533925][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.540052][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.619735][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 114.222688][ T6221] chnl_net:caif_netlink_parms(): no params data found [ 114.366977][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.376794][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.389156][ T6221] bridge_slave_0: entered allmulticast mode [ 114.413180][ T6221] bridge_slave_0: entered promiscuous mode [ 114.456235][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.474803][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.531243][ T6221] bridge_slave_1: entered allmulticast mode [ 114.560944][ T6221] bridge_slave_1: entered promiscuous mode [ 114.962068][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.991394][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.109457][ T6221] team0: Port device team_slave_0 added [ 115.130745][ T6221] team0: Port device team_slave_1 added [ 115.236162][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.263109][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.336291][ T6221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.353110][ T6329] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.359951][ T6329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.368651][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.376595][ T6329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.386595][ T6329] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.393460][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.433341][ T6221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.606733][ T6221] hsr_slave_0: entered promiscuous mode [ 115.650812][ T6221] hsr_slave_1: entered promiscuous mode [ 115.657323][ T6221] debugfs: 'hsr0' already exists in 'hsr' [ 115.710102][ T6221] Cannot create hsr debugfs directory [ 116.007453][ T6363] FAULT_INJECTION: forcing a failure. [ 116.007453][ T6363] name failslab, interval 1, probability 0, space 0, times 0 [ 116.055640][ T6363] CPU: 1 UID: 0 PID: 6363 Comm: syz.1.75 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 116.055682][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.055697][ T6363] Call Trace: [ 116.055705][ T6363] [ 116.055715][ T6363] dump_stack_lvl+0x16c/0x1f0 [ 116.055741][ T6363] should_fail_ex+0x512/0x640 [ 116.055761][ T6363] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 116.055792][ T6363] should_failslab+0xc2/0x120 [ 116.055812][ T6363] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 116.055829][ T6363] ? __kernfs_new_node+0xd2/0x8e0 [ 116.055850][ T6363] __kernfs_new_node+0xd2/0x8e0 [ 116.055870][ T6363] ? __pfx___kernfs_new_node+0x10/0x10 [ 116.055891][ T6363] ? find_held_lock+0x2b/0x80 [ 116.055906][ T6363] ? kernfs_root+0xee/0x2a0 [ 116.055926][ T6363] kernfs_new_node+0x13c/0x1e0 [ 116.055949][ T6363] __kernfs_create_file+0x53/0x350 [ 116.055965][ T6363] sysfs_add_file_mode_ns+0x207/0x3c0 [ 116.055986][ T6363] internal_create_group+0x578/0xf30 [ 116.056009][ T6363] ? __pfx_internal_create_group+0x10/0x10 [ 116.056040][ T6363] sysfs_slab_add+0x1a3/0x1e0 [ 116.056056][ T6363] do_kmem_cache_create+0x529/0x720 [ 116.056073][ T6363] ? __kmem_cache_create_args+0x205/0x390 [ 116.056092][ T6363] __kmem_cache_create_args+0x225/0x390 [ 116.056110][ T6363] copy_pid_ns+0xaa8/0xce0 [ 116.056127][ T6363] ? __pfx_copy_pid_ns+0x10/0x10 [ 116.056142][ T6363] ? copy_mnt_ns+0xac/0xac0 [ 116.056158][ T6363] ? trace_kmem_cache_alloc+0x28/0xc0 [ 116.056180][ T6363] ? copy_ipcs+0xb6/0x610 [ 116.056197][ T6363] create_new_namespaces+0x2aa/0xa90 [ 116.056218][ T6363] copy_namespaces+0x468/0x560 [ 116.056234][ T6363] copy_process+0x2822/0x7690 [ 116.056252][ T6363] ? __pfx___futex_wait+0x10/0x10 [ 116.056280][ T6363] ? __pfx_copy_process+0x10/0x10 [ 116.056297][ T6363] ? futex_private_hash_put+0x176/0x300 [ 116.056315][ T6363] ? futex_private_hash_put+0x18a/0x300 [ 116.056335][ T6363] kernel_clone+0xfc/0x930 [ 116.056351][ T6363] ? find_held_lock+0x2b/0x80 [ 116.056365][ T6363] ? __pfx_kernel_clone+0x10/0x10 [ 116.056393][ T6363] __do_sys_clone+0xce/0x120 [ 116.056413][ T6363] ? __pfx___do_sys_clone+0x10/0x10 [ 116.056440][ T6363] ? xfd_validate_state+0x61/0x180 [ 116.056467][ T6363] do_syscall_64+0xcd/0x490 [ 116.056486][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.056500][ T6363] RIP: 0033:0x7f3051d8ebe9 [ 116.056514][ T6363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.056528][ T6363] RSP: 002b:00007f304fff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 116.056542][ T6363] RAX: ffffffffffffffda RBX: 00007f3051fb5fa0 RCX: 00007f3051d8ebe9 [ 116.056552][ T6363] RDX: 0000000000000000 RSI: 0000080000000002 RDI: 0100000020003b49 [ 116.056561][ T6363] RBP: 00007f3051e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 116.056570][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.056578][ T6363] R13: 00007f3051fb6038 R14: 00007f3051fb5fa0 R15: 00007ffe507591a8 [ 116.056597][ T6363] [ 116.459074][ T6363] SLUB: Unable to add cache pid_3 to sysfs [ 116.536760][ T6364] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.542910][ T6364] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.548939][ T6364] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.555607][ T6364] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.467886][ T6221] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 118.532957][ T6221] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 118.575133][ T6221] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 118.623050][ T6221] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 118.651782][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.658046][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 118.664765][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.670909][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.065061][ T6221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.170008][ T6221] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.217459][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.224756][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.377837][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.385157][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.264824][ T6221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.576704][ T6221] veth0_vlan: entered promiscuous mode [ 120.666337][ T6221] veth1_vlan: entered promiscuous mode [ 120.673581][ T6437] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.730008][ T5864] Bluetooth: hci1: command 0x040f tx timeout [ 120.816113][ T6221] veth0_macvtap: entered promiscuous mode [ 120.892517][ T6221] veth1_macvtap: entered promiscuous mode [ 120.962801][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.036574][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.166135][ T1147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.195527][ T1147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.413677][ T1147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.442929][ T1147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.836489][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.993095][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.126858][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.179692][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.809706][ T5864] Bluetooth: hci1: command 0x040f tx timeout [ 123.202846][ T6471] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.219886][ T6471] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.256951][ T6471] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.292898][ T6471] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.333398][ T6473] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 124.445850][ T6520] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 125.220309][ T5864] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.290272][ T5864] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.297030][ T5864] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.369718][ T5864] Bluetooth: hci1: command 0x040f tx timeout [ 128.407036][ T6576] vhci_hcd: invalid port number 16 [ 128.448405][ T6576] vhci_hcd: invalid port number 16 [ 128.750825][ T6560] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.787779][ T6560] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.794104][ T6560] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.802751][ T6560] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.848965][ T5864] Bluetooth: hci1: command 0x040f tx timeout [ 130.848987][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.849007][ T5863] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.855145][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.252056][ T6604] random: crng reseeded on system resumption [ 131.676893][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.685567][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.694811][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.703497][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.711073][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.153542][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.216128][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.617324][ T6633] netlink: 25 bytes leftover after parsing attributes in process `syz.1.110'. [ 132.901840][ T6621] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.971065][ T6613] chnl_net:caif_netlink_parms(): no params data found [ 133.149426][ T6621] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.472352][ T6621] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.823545][ T6622] Bluetooth: hci4: command tx timeout [ 134.149395][ T6621] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.306205][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.543849][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.580030][ T6613] bridge_slave_0: entered allmulticast mode [ 134.656841][ T6613] bridge_slave_0: entered promiscuous mode [ 134.689703][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.717455][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.748634][ T6613] bridge_slave_1: entered allmulticast mode [ 134.764888][ T6613] bridge_slave_1: entered promiscuous mode [ 134.949707][ T6676] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.986525][ T6676] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.000161][ T6676] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.033527][ T6676] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 135.052202][ T6676] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 135.064678][ T6613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.130746][ T6676] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 135.175063][ T6613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.317606][ T6693] binder: 6691:6693 ioctl c0046209 ffffffffffffffff returned -22 [ 135.673417][ T6613] team0: Port device team_slave_0 added [ 135.716596][ T6613] team0: Port device team_slave_1 added syzkaller syzkaller login: [ 136.822401][ T6622] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.004823][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.011913][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.098808][ T6622] Bluetooth: hci4: command 0x040f tx timeout [ 137.109682][ T6622] Bluetooth: hci1: command 0x040f tx timeout [ 137.122802][ T6622] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.162571][ T6613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.179211][ T6719] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.209303][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.216541][ T6719] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.224130][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.229885][ T6719] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.255848][ T6613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.270133][ T6621] bridge_slave_1: left allmulticast mode [ 137.276224][ T6621] bridge_slave_1: left promiscuous mode [ 137.292190][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.310158][ T6621] bridge_slave_0: left allmulticast mode [ 137.316091][ T6621] bridge_slave_0: left promiscuous mode [ 137.323326][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.434787][ T6719] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 137.980398][ T6736] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 138.096000][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.102723][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.275967][ T6737] netlink: 354 bytes leftover after parsing attributes in process `syz.2.129'. [ 139.210557][ T6725] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.216634][ T6618] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.299744][ T6725] Bluetooth: hci1: command 0x040f tx timeout [ 139.461937][ T6725] Bluetooth: hci4: command 0x040f tx timeout [ 140.085025][ T6621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.108742][ T6621] bond0 (unregistering): Released all slaves [ 140.903263][ T6613] hsr_slave_0: entered promiscuous mode [ 140.984919][ T6613] hsr_slave_1: entered promiscuous mode [ 141.016904][ T6613] debugfs: 'hsr0' already exists in 'hsr' [ 141.110381][ T6613] Cannot create hsr debugfs directory [ 141.119911][ T6372] syz.1.75 (6372) used greatest stack depth: 19320 bytes left [ 141.531282][ T6725] Bluetooth: hci4: command 0x040f tx timeout [ 141.889741][ T6621] hsr_slave_0: left promiscuous mode [ 141.906328][ T6621] hsr_slave_1: left promiscuous mode [ 141.925340][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.944888][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.092782][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.193425][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.244947][ T6621] veth1_macvtap: left promiscuous mode [ 142.250584][ T6621] veth0_macvtap: left promiscuous mode [ 142.260749][ T6621] veth1_vlan: left promiscuous mode [ 142.274416][ T6621] veth0_vlan: left promiscuous mode [ 143.610800][ T6725] Bluetooth: hci4: command 0x040f tx timeout [ 143.695264][ T6621] team0 (unregistering): Port device team_slave_1 removed [ 143.740355][ T6621] team0 (unregistering): Port device team_slave_0 removed [ 144.303426][ T6765] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 144.313509][ T30] audit: type=1800 audit(6049974118.154:5): pid=6765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.133" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 144.362100][ T6765] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 144.406901][ T6765] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 144.794409][ T6786] netlink: 330 bytes leftover after parsing attributes in process `syz.1.136'. [ 144.852078][ T6781] zswap: compressor not available [ 145.123085][ T6613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.207475][ T6613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.656852][ T6613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.689676][ T6725] Bluetooth: hci4: command 0x040f tx timeout [ 145.722745][ T6613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.113976][ T6797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.120536][ T6797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.126662][ T6797] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.156883][ T6797] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 146.167627][ T6613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.200616][ T6811] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 146.306323][ T6613] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.374635][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.381849][ T6626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.453317][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.460525][ T6626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.888017][ T6613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.290437][ T6618] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.532803][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 147.558236][ T6613] veth0_vlan: entered promiscuous mode [ 147.588959][ T6613] veth1_vlan: entered promiscuous mode [ 147.660864][ T6613] veth0_macvtap: entered promiscuous mode [ 147.673306][ T6613] veth1_macvtap: entered promiscuous mode [ 147.699978][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.738210][ T6613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.875334][ T6632] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.893226][ T6632] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.913914][ T6632] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.948433][ T6632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.111392][ T6632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.149700][ T6632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.170382][ T6618] Bluetooth: hci4: command 0x040f tx timeout [ 148.176758][ T6725] Bluetooth: hci1: command 0x040f tx timeout [ 148.183718][ T6725] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.225396][ T6632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.235007][ T6632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.351306][ T6956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.365304][ T6956] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.381431][ T6956] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 154.486057][ T6725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.497120][ T6725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.510499][ T6725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.521221][ T6725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.532001][ T6725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.558262][ T6632] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.694907][ T6632] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.873191][ T6632] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.062166][ T6632] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.521670][ T6971] chnl_net:caif_netlink_parms(): no params data found [ 155.553332][ T6632] bridge_slave_1: left allmulticast mode [ 155.559030][ T6632] bridge_slave_1: left promiscuous mode [ 155.572374][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.606648][ T6632] bridge_slave_0: left allmulticast mode [ 155.617583][ T6632] bridge_slave_0: left promiscuous mode [ 155.628790][ T6632] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.982871][ T6632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.997748][ T6632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.008538][ T6632] bond0 (unregistering): Released all slaves [ 156.204803][ T6971] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.212436][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.220771][ T6971] bridge_slave_0: entered allmulticast mode [ 156.234751][ T6971] bridge_slave_0: entered promiscuous mode [ 156.261004][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.270106][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.277492][ T6971] bridge_slave_1: entered allmulticast mode [ 156.321099][ T6971] bridge_slave_1: entered promiscuous mode [ 156.416233][ T6725] Bluetooth: hci4: command 0x040f tx timeout [ 156.423496][ T6725] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.429671][ T6618] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.569932][ T6618] Bluetooth: hci0: command tx timeout [ 156.601245][ T6971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.628719][ T6632] hsr_slave_0: left promiscuous mode [ 156.640493][ T6632] hsr_slave_1: left promiscuous mode [ 156.647678][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.658167][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.672884][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.686927][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.732321][ T6632] veth1_macvtap: left promiscuous mode [ 156.738098][ T6632] veth0_macvtap: left promiscuous mode [ 156.746025][ T6632] veth1_vlan: left promiscuous mode [ 156.751750][ T6632] veth0_vlan: left promiscuous mode [ 157.505167][ T6632] team0 (unregistering): Port device team_slave_1 removed [ 157.567438][ T6632] team0 (unregistering): Port device team_slave_0 removed [ 158.131786][ T6971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.378993][ T6971] team0: Port device team_slave_0 added [ 158.448963][ T6971] team0: Port device team_slave_1 added [ 158.650712][ T6618] Bluetooth: hci0: command tx timeout [ 158.675335][ T7045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.682025][ T7045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.692155][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.699910][ T7045] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 158.711386][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.723036][ T7045] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.744252][ T7045] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 158.751093][ T6971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.762353][ T7052] mmap: syz.2.162 (7052) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 158.775943][ T7045] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 158.816619][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.874239][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.984686][ T6971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.425825][ T6971] hsr_slave_0: entered promiscuous mode [ 159.475662][ T6971] hsr_slave_1: entered promiscuous mode [ 159.787142][ T7064] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.813864][ T7064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.822671][ T7064] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.854468][ T7064] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 160.168869][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 160.347912][ T7088] capability: warning: `syz.4.166' uses 32-bit capabilities (legacy support in use) [ 160.385408][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.166'. [ 160.454643][ T7088] HfR: entered promiscuous mode [ 160.525523][ T6971] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.589968][ T6971] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.635217][ T6971] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.657473][ T6971] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.004605][ T6971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.006773][ T7114] Invalid ELF header magic: != ELF [ 161.056888][ T6971] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.105505][ T6725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.115146][ T6725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.125141][ T6725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.155868][ T6632] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.163196][ T6632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.172439][ T6725] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.191713][ T6725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.226182][ T6632] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.233340][ T6632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.611372][ T6725] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.851682][ T6725] Bluetooth: hci4: command 0x040f tx timeout [ 161.857724][ T6725] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.929948][ T6725] Bluetooth: hci0: command 0x0419 tx timeout [ 162.160312][ T6971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.325435][ T7116] chnl_net:caif_netlink_parms(): no params data found [ 162.859238][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.909730][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.917041][ T7116] bridge_slave_0: entered allmulticast mode [ 162.999972][ T7116] bridge_slave_0: entered promiscuous mode [ 163.043731][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.060007][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.078529][ T7116] bridge_slave_1: entered allmulticast mode [ 163.101969][ T7116] bridge_slave_1: entered promiscuous mode [ 163.289668][ T6725] Bluetooth: hci1: command tx timeout [ 163.446294][ T7116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.468718][ T7116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.808644][ T7116] team0: Port device team_slave_0 added [ 163.839724][ T7116] team0: Port device team_slave_1 added [ 163.912456][ T7116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.929213][ T7116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.976063][ T7116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.993497][ T6971] veth0_vlan: entered promiscuous mode [ 164.009863][ T6725] Bluetooth: hci0: command 0x0419 tx timeout [ 164.018952][ T7116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.033908][ T7116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.102036][ T7116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.195544][ T6971] veth1_vlan: entered promiscuous mode [ 164.409192][ T7116] hsr_slave_0: entered promiscuous mode [ 164.460709][ T7116] hsr_slave_1: entered promiscuous mode [ 164.467007][ T7116] debugfs: 'hsr0' already exists in 'hsr' [ 164.493719][ T7116] Cannot create hsr debugfs directory [ 164.580988][ T7203] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 164.662351][ T6971] veth0_macvtap: entered promiscuous mode [ 164.750599][ T6971] veth1_macvtap: entered promiscuous mode [ 164.997902][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.159462][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.286665][ T6679] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.356331][ T6679] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.370745][ T6725] Bluetooth: hci1: command tx timeout [ 165.462161][ T6679] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.496314][ T6679] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.566069][ T7116] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 165.614360][ T7116] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 165.671413][ T7116] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 165.701497][ T7116] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 165.740820][ T6679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.753735][ T6679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.816215][ T6679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.854818][ T6679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.090124][ T6725] Bluetooth: hci0: command 0x0419 tx timeout [ 166.121979][ T7116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.298903][ T7116] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.313880][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.321258][ T6637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.333217][ T7251] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 166.422374][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.429639][ T6621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.696022][ T7262] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 167.015537][ T7253] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 167.451889][ T6725] Bluetooth: hci1: command tx timeout [ 167.507114][ T7116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.831786][ T7282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.862175][ T7282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.871314][ T7282] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 167.891111][ T7282] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.900214][ T7282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.921402][ T7282] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 167.961786][ T7282] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.426163][ T7116] veth0_vlan: entered promiscuous mode [ 168.467957][ T7116] veth1_vlan: entered promiscuous mode [ 168.625718][ T7116] veth0_macvtap: entered promiscuous mode [ 168.664167][ T7116] veth1_macvtap: entered promiscuous mode [ 168.814514][ T7116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.934180][ T7116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.182445][ T6679] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.211047][ T6679] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.292223][ T6679] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.349442][ T6679] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.604687][ T6679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.634808][ T6679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.691802][ T6725] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.795388][ T6679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.848271][ T6679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.933373][ T6618] Bluetooth: hci0: command 0x0419 tx timeout [ 169.940311][ T6860] Bluetooth: hci4: command 0x040f tx timeout [ 169.949758][ T6860] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.955954][ T6725] Bluetooth: hci1: command 0x0c1a tx timeout [ 171.263660][ T7396] : Can't lookup blockdev [ 172.011930][ T6725] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.269844][ T7397] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.276198][ T7397] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.286312][ T7397] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 172.292571][ T7397] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.310777][ T7397] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.329852][ T6725] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.335914][ T6725] Bluetooth: hci0: command 0x0419 tx timeout [ 174.343690][ T6618] Bluetooth: hci4: command 0x040f tx timeout [ 174.349766][ T7354] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.355890][ T6622] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.939271][ T7460] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 176.376929][ T7488] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.383575][ T7488] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.391212][ T7488] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 176.400420][ T7488] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 176.406482][ T7488] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.132295][ T7503] ======================================================= [ 177.132295][ T7503] WARNING: The mand mount option has been deprecated and [ 177.132295][ T7503] and is ignored by this kernel. Remove the mand [ 177.132295][ T7503] option from the mount to silence this warning. [ 177.132295][ T7503] ======================================================= [ 178.329810][ T6725] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.415651][ T6725] Bluetooth: hci4: command 0x040f tx timeout [ 178.422138][ T6725] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.489904][ T7354] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.496164][ T7354] Bluetooth: hci0: command 0x0419 tx timeout syzkaller syzkaller login: [ 181.371156][ T7584] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.377590][ T7584] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.424628][ T7584] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 181.475007][ T7584] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 181.481543][ T7584] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.666898][ T7599] nfs4: Unknown parameter 'Ø' [ 181.815052][ T7603] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 182.700047][ T7618] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.708493][ T7618] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.717498][ T7618] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 182.729879][ T7618] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.741607][ T7618] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.730420][ T7354] Bluetooth: hci4: command 0x040f tx timeout [ 184.736597][ T6725] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.742835][ T6860] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.811311][ T6725] Bluetooth: hci0: command 0x0419 tx timeout [ 184.817388][ T7354] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.312757][ T7687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.319982][ T7687] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.330858][ T7687] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 185.336903][ T7687] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 185.369511][ T7687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.891764][ T6725] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.370487][ T6725] Bluetooth: hci0: command 0x0419 tx timeout [ 187.376534][ T7354] Bluetooth: hci4: command 0x040f tx timeout [ 187.382678][ T6860] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.403600][ T7723] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.410278][ T7723] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.423296][ T7723] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 187.431055][ T7723] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.445169][ T7723] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.549466][ T6860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.560622][ T6860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.568310][ T7741] FAULT_INJECTION: forcing a failure. [ 188.568310][ T7741] name fail_futex, interval 1, probability 0, space 0, times 1 [ 188.582058][ T6860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.623909][ T7741] CPU: 1 UID: 0 PID: 7741 Comm: syz.2.246 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 188.623945][ T7741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.623959][ T7741] Call Trace: [ 188.623967][ T7741] [ 188.623977][ T7741] dump_stack_lvl+0x16c/0x1f0 [ 188.624012][ T7741] should_fail_ex+0x512/0x640 [ 188.624049][ T7741] get_futex_key+0xff0/0x1560 [ 188.624082][ T7741] ? __pfx_get_futex_key+0x10/0x10 [ 188.624109][ T7741] ? __mutex_trylock_common+0xe9/0x250 [ 188.624150][ T7741] futex_wake+0xea/0x530 [ 188.624186][ T7741] ? __pfx_futex_wake+0x10/0x10 [ 188.624241][ T7741] do_futex+0x1e3/0x350 [ 188.624269][ T7741] ? __pfx_do_futex+0x10/0x10 [ 188.624294][ T7741] ? __might_fault+0xe3/0x190 [ 188.624328][ T7741] mm_release+0x24e/0x300 [ 188.624356][ T7741] do_exit+0x68e/0x2bf0 [ 188.624393][ T7741] ? __pfx_do_exit+0x10/0x10 [ 188.624431][ T7741] ? do_raw_spin_lock+0x12c/0x2b0 [ 188.624463][ T7741] ? find_held_lock+0x2b/0x80 [ 188.624491][ T7741] do_group_exit+0xd3/0x2a0 [ 188.624524][ T7741] get_signal+0x2673/0x26d0 [ 188.624559][ T7741] ? poll_select_finish+0x377/0x6b0 [ 188.624586][ T7741] ? __pfx_get_signal+0x10/0x10 [ 188.624613][ T7741] ? read_tsc+0x9/0x20 [ 188.624638][ T7741] ? ktime_get_ts64+0x256/0x400 [ 188.624668][ T7741] arch_do_signal_or_restart+0x8f/0x790 [ 188.624700][ T7741] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 188.624739][ T7741] ? xfd_validate_state+0x61/0x180 [ 188.624769][ T7741] ? __pfx_ksys_write+0x10/0x10 [ 188.624799][ T7741] exit_to_user_mode_loop+0x84/0x110 [ 188.624832][ T7741] do_syscall_64+0x3f6/0x490 [ 188.624860][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.624880][ T7741] RIP: 0033:0x7ffa91f8ebe9 [ 188.624897][ T7741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.624918][ T7741] RSP: 002b:00007ffa92d84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 188.624947][ T7741] RAX: fffffffffffffdfe RBX: 00007ffa921b6090 RCX: 00007ffa91f8ebe9 [ 188.624963][ T7741] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 188.624977][ T7741] RBP: 00007ffa92011e19 R08: 00002000000001c0 R09: 0000000000000000 [ 188.624991][ T7741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.625004][ T7741] R13: 00007ffa921b6128 R14: 00007ffa921b6090 R15: 00007ffdb325ae98 [ 188.625033][ T7741] [ 188.629785][ T6860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.926878][ T6860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.969658][ T6860] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.384357][ T7768] netlink: 72 bytes leftover after parsing attributes in process `syz.2.250'. [ 189.404196][ T7768] netlink: 72 bytes leftover after parsing attributes in process `syz.2.250'. [ 189.452657][ T6860] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.458714][ T7354] Bluetooth: hci0: command 0x0419 tx timeout [ 189.465932][ T6725] Bluetooth: hci4: command 0x040f tx timeout [ 189.472017][ T6618] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.665958][ T7754] chnl_net:caif_netlink_parms(): no params data found [ 190.033067][ T7354] Bluetooth: hci2: unexpected event 0x17 length: 440 > 6 [ 190.116912][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.251'. [ 190.506634][ T7798] bond0: option all_slaves_active: invalid value () [ 190.757633][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.764876][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.772311][ T7754] bridge_slave_0: entered allmulticast mode [ 190.781189][ T7754] bridge_slave_0: entered promiscuous mode [ 190.933039][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.940723][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.948005][ T7754] bridge_slave_1: entered allmulticast mode [ 190.956626][ T7754] bridge_slave_1: entered promiscuous mode [ 190.969943][ T7354] Bluetooth: hci5: command tx timeout [ 191.105007][ T7779] bond0: option all_slaves_active: invalid value () [ 191.200234][ T7804] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.206650][ T7804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.221437][ T7804] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 191.227922][ T7804] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.249081][ T7804] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.269822][ T7804] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 191.279853][ T7804] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 191.304951][ T7754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.325653][ T7804] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 191.558126][ T7754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.991331][ T7754] team0: Port device team_slave_0 added [ 192.242909][ T7754] team0: Port device team_slave_1 added [ 192.516962][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.527129][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.596116][ T7826] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.629107][ T7826] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.655868][ T7754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.758246][ T7826] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.769890][ T7826] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.787596][ T7826] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.806586][ T7826] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 192.812036][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.829631][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.866760][ T7833] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 192.889932][ T7754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.772769][ T7754] hsr_slave_0: entered promiscuous mode [ 193.779500][ T7754] hsr_slave_1: entered promiscuous mode [ 193.800480][ T7754] debugfs: 'hsr0' already exists in 'hsr' [ 193.822575][ T7754] Cannot create hsr debugfs directory [ 193.946759][ T7853] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.000082][ T7853] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.034506][ T7853] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 194.104239][ T7853] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.131971][ T7853] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 194.147123][ T7853] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 194.356852][ T7879] random: crng reseeded on system resumption [ 194.703407][ T7867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.716889][ T7867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.303758][ T7754] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 195.422148][ T7896] random: crng reseeded on system resumption [ 195.529939][ T7354] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.569893][ T7754] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 195.722290][ T7754] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 195.769466][ T7754] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.010522][ T7354] Bluetooth: hci3: command 0x0c1a tx timeout [ 196.044439][ T7888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.062069][ T7888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.113978][ T7354] Bluetooth: hci4: command 0x040f tx timeout [ 196.173090][ T7354] Bluetooth: hci5: command 0x040f tx timeout [ 196.179355][ T7354] Bluetooth: hci1: command 0x0c1a tx timeout [ 196.185582][ T6725] Bluetooth: hci0: command 0x0419 tx timeout [ 196.704280][ T7754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.807483][ T7754] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.867869][ T6632] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.875153][ T6632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.941046][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.948339][ T6621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.033246][ T7754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.099876][ T7931] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 197.104567][ T7754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.247454][ T7929] kexec: Could not allocate control_code_buffer [ 198.261617][ T7354] Bluetooth: hci5: command 0x040f tx timeout [ 199.016129][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.535061][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.541474][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.642498][ T6637] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.882760][ T6637] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.255886][ T6637] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.342503][ T7354] Bluetooth: hci5: command 0x040f tx timeout [ 200.375354][ T7990] process 'syz.5.269' launched ':,' with NULL argv: empty string added [ 200.424154][ T7754] veth0_vlan: entered promiscuous mode [ 200.489486][ T6637] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.550625][ T7754] veth1_vlan: entered promiscuous mode [ 200.866317][ T6725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.879819][ T6725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.888964][ T6725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.903186][ T6725] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.918984][ T6725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.223685][ T7754] veth0_macvtap: entered promiscuous mode [ 201.255555][ T7754] veth1_macvtap: entered promiscuous mode [ 201.329463][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.493057][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.776938][ T6614] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.834094][ T6614] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.855214][ T6614] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.884624][ T6637] bridge_slave_1: left allmulticast mode [ 201.892436][ T6637] bridge_slave_1: left promiscuous mode [ 201.898191][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.962350][ T6637] bridge_slave_0: left allmulticast mode [ 201.979285][ T6637] bridge_slave_0: left promiscuous mode [ 201.998536][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.410980][ T7354] Bluetooth: hci5: command 0x040f tx timeout [ 202.898879][ T6637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.944512][ T6637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.976662][ T7354] Bluetooth: hci1: command tx timeout [ 203.011823][ T6637] bond0 (unregistering): Released all slaves [ 203.028219][ T6614] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.946428][ T6679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.992960][ T6679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.186644][ T8003] chnl_net:caif_netlink_parms(): no params data found [ 204.326092][ T6637] hsr_slave_0: left promiscuous mode [ 204.349517][ T6637] hsr_slave_1: left promiscuous mode [ 204.375220][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.384092][ T6637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.405197][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.413625][ T6637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.449389][ T6637] veth1_macvtap: left promiscuous mode [ 204.465118][ T6637] veth0_macvtap: left promiscuous mode [ 204.479046][ T6637] veth1_vlan: left promiscuous mode [ 204.490311][ T7354] Bluetooth: hci5: command 0x040f tx timeout [ 204.501263][ T6637] veth0_vlan: left promiscuous mode [ 204.929339][ T6725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.944176][ T6725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.955085][ T6725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.974240][ T6725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.001075][ T6725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.050232][ T7354] Bluetooth: hci1: command tx timeout [ 205.246862][ T6637] team0 (unregistering): Port device team_slave_1 removed [ 205.288683][ T6637] team0 (unregistering): Port device team_slave_0 removed [ 205.705463][ T6679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.737209][ T6679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.193227][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.225455][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.243354][ T8003] bridge_slave_0: entered allmulticast mode [ 206.267415][ T8003] bridge_slave_0: entered promiscuous mode [ 206.426540][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.436495][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.490663][ T8003] bridge_slave_1: entered allmulticast mode [ 206.518278][ T8003] bridge_slave_1: entered promiscuous mode [ 206.675356][ T8003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.747151][ T8003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.921260][ T8003] team0: Port device team_slave_0 added [ 206.932671][ T8003] team0: Port device team_slave_1 added [ 207.045259][ T6637] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.059516][ T7354] Bluetooth: hci0: command tx timeout [ 207.130232][ T7354] Bluetooth: hci1: command tx timeout [ 207.267807][ T6637] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.298849][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.306073][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.370208][ T8003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.414115][ T6637] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.470277][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.478500][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.539750][ T8003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.602713][ T6637] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.836569][ T8003] hsr_slave_0: entered promiscuous mode [ 207.860861][ T8003] hsr_slave_1: entered promiscuous mode [ 207.877626][ T8003] debugfs: 'hsr0' already exists in 'hsr' [ 207.886885][ T8003] Cannot create hsr debugfs directory [ 208.082965][ T8068] chnl_net:caif_netlink_parms(): no params data found [ 208.463435][ T6637] bridge_slave_1: left allmulticast mode [ 208.469263][ T6637] bridge_slave_1: left promiscuous mode [ 208.485599][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.501132][ T6637] bridge_slave_0: left allmulticast mode [ 208.506905][ T6637] bridge_slave_0: left promiscuous mode [ 208.515705][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.137291][ T7354] Bluetooth: hci0: command tx timeout [ 209.191864][ T6637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.207637][ T6637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.217770][ T7354] Bluetooth: hci1: command tx timeout [ 209.225468][ T6637] bond0 (unregistering): Released all slaves [ 209.510645][ T8154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'. [ 209.564140][ T8068] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.599695][ T8068] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.607091][ T8068] bridge_slave_0: entered allmulticast mode [ 209.628279][ T8068] bridge_slave_0: entered promiscuous mode [ 209.753226][ T8068] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.809815][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.845216][ T8068] bridge_slave_1: entered allmulticast mode [ 209.871618][ T8068] bridge_slave_1: entered promiscuous mode [ 210.647835][ T8068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.881842][ T8068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.209958][ T7354] Bluetooth: hci0: command tx timeout [ 211.341051][ T6637] hsr_slave_0: left promiscuous mode [ 211.357302][ T6637] hsr_slave_1: left promiscuous mode [ 211.370875][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.378470][ T6637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.423628][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.431537][ T6637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.466184][ T6637] veth1_macvtap: left promiscuous mode [ 211.479747][ T6637] veth0_macvtap: left promiscuous mode [ 211.485520][ T6637] veth1_vlan: left promiscuous mode [ 211.501140][ T6637] veth0_vlan: left promiscuous mode [ 212.864059][ T6637] team0 (unregistering): Port device team_slave_1 removed [ 212.942386][ T6637] team0 (unregistering): Port device team_slave_0 removed [ 213.290257][ T7354] Bluetooth: hci0: command tx timeout [ 213.546212][ T8068] team0: Port device team_slave_0 added [ 213.556738][ T8068] team0: Port device team_slave_1 added [ 213.680299][ T8068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.687368][ T8068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.749879][ T8068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.762707][ T8068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.770356][ T8068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.822663][ T8068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.007718][ T8068] hsr_slave_0: entered promiscuous mode [ 214.028094][ T8068] hsr_slave_1: entered promiscuous mode [ 214.234316][ T8003] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 214.281102][ T8003] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 214.346753][ T8003] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 214.378420][ T8003] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 214.461172][ T8233] random: crng reseeded on system resumption [ 215.054197][ T8003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.097977][ T8003] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.120728][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.127842][ T6637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.191856][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.198981][ T6637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.343391][ T8068] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 215.391291][ T8068] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 215.409073][ T8068] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.435935][ T8068] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.952229][ T8003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.081744][ T8068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.143170][ T8068] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.185519][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.192705][ T6621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.236736][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.244186][ T6621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.506471][ T8003] veth0_vlan: entered promiscuous mode [ 216.547967][ T8003] veth1_vlan: entered promiscuous mode [ 216.613790][ T8003] veth0_macvtap: entered promiscuous mode [ 216.643599][ T8003] veth1_macvtap: entered promiscuous mode [ 216.687749][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.712402][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.725712][ T8068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.834732][ T6637] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.863389][ T6637] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.964140][ T6637] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.998225][ T6637] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.084795][ T6637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.112857][ T6637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.235313][ T6614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.272262][ T6614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.424131][ T8068] veth0_vlan: entered promiscuous mode [ 217.463485][ T8068] veth1_vlan: entered promiscuous mode [ 217.568965][ T8068] veth0_macvtap: entered promiscuous mode [ 217.585480][ T8068] veth1_macvtap: entered promiscuous mode [ 217.607496][ T8068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.624824][ T8068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.645868][ T6614] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.663895][ T6614] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.677980][ T6614] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.710925][ T6614] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.854769][ T6626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.878928][ T6626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.103994][ T6626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.114694][ T6626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.163441][ T8298] random: crng reseeded on system resumption [ 219.629280][ T8322] random: crng reseeded on system resumption [ 220.376999][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 223.505401][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.306'. [ 223.640065][ T6725] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.650868][ T6725] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.659187][ T6725] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.674222][ T6725] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.684377][ T6725] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.021640][ T8370] chnl_net:caif_netlink_parms(): no params data found [ 224.154725][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.163285][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.198502][ T8370] bridge_slave_0: entered allmulticast mode [ 224.226994][ T8370] bridge_slave_0: entered promiscuous mode [ 224.257888][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.277685][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.285427][ T8370] bridge_slave_1: entered allmulticast mode [ 224.320988][ T8370] bridge_slave_1: entered promiscuous mode [ 224.449138][ T8370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.500730][ T8370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.643762][ T8383] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 224.666797][ T8370] team0: Port device team_slave_0 added [ 224.696463][ T8370] team0: Port device team_slave_1 added [ 224.760166][ T8384] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 224.848113][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.857450][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.006674][ T8370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.029028][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.044362][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.088079][ T8370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.278943][ T8370] hsr_slave_0: entered promiscuous mode [ 225.289738][ T8370] hsr_slave_1: entered promiscuous mode [ 225.296358][ T8370] debugfs: 'hsr0' already exists in 'hsr' [ 225.305330][ T8370] Cannot create hsr debugfs directory [ 225.525744][ T8396] mkiss: ax0: crc mode is auto. [ 225.564976][ T8398] random: crng reseeded on system resumption [ 225.773716][ T7354] Bluetooth: hci6: command tx timeout [ 226.181313][ T8370] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 226.193340][ T8370] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 226.207858][ T8370] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 226.224244][ T8370] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 226.402597][ T8370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.467770][ T8370] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.488550][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.495792][ T6637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.524181][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.531452][ T6637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.785883][ T8370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.016842][ T8370] veth0_vlan: entered promiscuous mode [ 227.031035][ T8370] veth1_vlan: entered promiscuous mode [ 227.068865][ T8370] veth0_macvtap: entered promiscuous mode [ 227.081233][ T8370] veth1_macvtap: entered promiscuous mode [ 227.103852][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.118025][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.134315][ T6680] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.144626][ T6680] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.155848][ T6680] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.165693][ T6680] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.244614][ T6680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.266375][ T6680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.492885][ T6626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.520116][ T6626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.851855][ T7354] Bluetooth: hci6: command tx timeout [ 228.096177][ T8436] tty tty46: ldisc open failed (-12), clearing slot 45 [ 228.621232][ T8444] FAULT_INJECTION: forcing a failure. [ 228.621232][ T8444] name fail_futex, interval 1, probability 0, space 0, times 0 [ 228.653102][ T8444] CPU: 1 UID: 0 PID: 8444 Comm: syz.8.317 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 228.653146][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.653159][ T8444] Call Trace: [ 228.653167][ T8444] [ 228.653176][ T8444] dump_stack_lvl+0x16c/0x1f0 [ 228.653209][ T8444] should_fail_ex+0x512/0x640 [ 228.653244][ T8444] get_futex_key+0x1d0/0x1560 [ 228.653277][ T8444] ? __pfx_get_futex_key+0x10/0x10 [ 228.653300][ T8444] ? find_held_lock+0x2b/0x80 [ 228.653326][ T8444] ? __lock_acquire+0x62e/0x1ce0 [ 228.653362][ T8444] futex_requeue+0x1f9/0x2030 [ 228.653401][ T8444] ? find_held_lock+0x2b/0x80 [ 228.653425][ T8444] ? __pfx_futex_requeue+0x10/0x10 [ 228.653461][ T8444] ? get_pid_task+0x106/0x250 [ 228.653494][ T8444] ? find_held_lock+0x2b/0x80 [ 228.653523][ T8444] ? find_held_lock+0x2b/0x80 [ 228.653546][ T8444] ? ksys_write+0x190/0x250 [ 228.653578][ T8444] do_futex+0x1ad/0x350 [ 228.653608][ T8444] ? __pfx_do_futex+0x10/0x10 [ 228.653645][ T8444] __x64_sys_futex+0x1e0/0x4c0 [ 228.653675][ T8444] ? fput+0x9b/0xd0 [ 228.653704][ T8444] ? __pfx___x64_sys_futex+0x10/0x10 [ 228.653730][ T8444] ? ksys_write+0x1ac/0x250 [ 228.653756][ T8444] ? __pfx_ksys_write+0x10/0x10 [ 228.653791][ T8444] do_syscall_64+0xcd/0x490 [ 228.653822][ T8444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.653846][ T8444] RIP: 0033:0x7f79d718ebe9 [ 228.653865][ T8444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.653886][ T8444] RSP: 002b:00007f79d8057038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 228.653909][ T8444] RAX: ffffffffffffffda RBX: 00007f79d73b5fa0 RCX: 00007f79d718ebe9 [ 228.653924][ T8444] RDX: 000000000000b95d RSI: 0000000000000003 RDI: 0000200000001a80 [ 228.653938][ T8444] RBP: 00007f79d8057090 R08: 0000200000001b00 R09: 0000000000000009 [ 228.653953][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.653966][ T8444] R13: 00007f79d73b6038 R14: 00007f79d73b5fa0 R15: 00007ffc741d2f98 [ 228.653998][ T8444] [ 229.929889][ T7354] Bluetooth: hci6: command tx timeout [ 230.224308][ T8457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.342027][ T8457] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.349797][ T8457] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 230.355908][ T8457] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 230.380874][ T8457] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.389107][ T8457] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 230.426726][ T8457] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 230.470560][ T8457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.476892][ T8457] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 230.497013][ T8457] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 230.515553][ T8457] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 230.521929][ T8457] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 230.535321][ T8457] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 231.770406][ T6725] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.413511][ T6725] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.420153][ T7354] Bluetooth: hci5: command 0x040f tx timeout [ 232.426198][ T6860] Bluetooth: hci4: command 0x040f tx timeout [ 232.432244][ T6618] Bluetooth: hci3: command 0x0c1a tx timeout [ 232.490685][ T6618] Bluetooth: hci0: command 0x0c1a tx timeout [ 232.575448][ T6618] Bluetooth: hci6: command 0x0c1a tx timeout [ 232.828044][ T8500] FAULT_INJECTION: forcing a failure. [ 232.828044][ T8500] name fail_futex, interval 1, probability 0, space 0, times 0 [ 232.842721][ T8500] CPU: 0 UID: 0 PID: 8500 Comm: syz.6.328 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 232.842754][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.842766][ T8500] Call Trace: [ 232.842774][ T8500] [ 232.842781][ T8500] dump_stack_lvl+0x16c/0x1f0 [ 232.842815][ T8500] should_fail_ex+0x512/0x640 [ 232.842849][ T8500] get_futex_key+0x293/0x1560 [ 232.842878][ T8500] ? __pfx_get_futex_key+0x10/0x10 [ 232.842899][ T8500] ? find_held_lock+0x2b/0x80 [ 232.842922][ T8500] ? __lock_acquire+0x62e/0x1ce0 [ 232.842957][ T8500] futex_requeue+0x1f9/0x2030 [ 232.843000][ T8500] ? find_held_lock+0x2b/0x80 [ 232.843021][ T8500] ? __pfx_futex_requeue+0x10/0x10 [ 232.843051][ T8500] ? get_pid_task+0x106/0x250 [ 232.843079][ T8500] ? find_held_lock+0x2b/0x80 [ 232.843102][ T8500] ? find_held_lock+0x2b/0x80 [ 232.843120][ T8500] ? ksys_write+0x190/0x250 [ 232.843146][ T8500] do_futex+0x1ad/0x350 [ 232.843171][ T8500] ? __pfx_do_futex+0x10/0x10 [ 232.843201][ T8500] __x64_sys_futex+0x1e0/0x4c0 [ 232.843226][ T8500] ? fput+0x9b/0xd0 [ 232.843251][ T8500] ? __pfx___x64_sys_futex+0x10/0x10 [ 232.843273][ T8500] ? ksys_write+0x1ac/0x250 [ 232.843293][ T8500] ? __pfx_ksys_write+0x10/0x10 [ 232.843321][ T8500] do_syscall_64+0xcd/0x490 [ 232.843347][ T8500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.843367][ T8500] RIP: 0033:0x7f3eb0b8ebe9 [ 232.843383][ T8500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.843401][ T8500] RSP: 002b:00007f3eb1a8d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 232.843419][ T8500] RAX: ffffffffffffffda RBX: 00007f3eb0db5fa0 RCX: 00007f3eb0b8ebe9 [ 232.843432][ T8500] RDX: 000000000000b95d RSI: 0000000000000003 RDI: 0000200000001a80 [ 232.843443][ T8500] RBP: 00007f3eb1a8d090 R08: 0000200000001b00 R09: 0000000000000009 [ 232.843454][ T8500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.843465][ T8500] R13: 00007f3eb0db6038 R14: 00007f3eb0db5fa0 R15: 00007ffee8265bc8 [ 232.843490][ T8500] [ 233.059147][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.157991][ T8510] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.166420][ T8510] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.172772][ T8510] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 234.179090][ T8510] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 234.190726][ T8510] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.198318][ T8510] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 234.205901][ T8510] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 234.539471][ T8527] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 235.016904][ T8545] FAULT_INJECTION: forcing a failure. [ 235.016904][ T8545] name fail_futex, interval 1, probability 0, space 0, times 0 [ 235.016930][ T8545] CPU: 0 UID: 0 PID: 8545 Comm: syz.8.338 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 235.016948][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.016956][ T8545] Call Trace: [ 235.016961][ T8545] [ 235.016966][ T8545] dump_stack_lvl+0x16c/0x1f0 [ 235.016988][ T8545] should_fail_ex+0x512/0x640 [ 235.017011][ T8545] get_futex_key+0xff0/0x1560 [ 235.017030][ T8545] ? __pfx_get_futex_key+0x10/0x10 [ 235.017045][ T8545] ? find_held_lock+0x2b/0x80 [ 235.017060][ T8545] ? __lock_acquire+0x62e/0x1ce0 [ 235.017081][ T8545] futex_requeue+0x1f9/0x2030 [ 235.017105][ T8545] ? find_held_lock+0x2b/0x80 [ 235.017118][ T8545] ? __pfx_futex_requeue+0x10/0x10 [ 235.017140][ T8545] ? get_pid_task+0x106/0x250 [ 235.017161][ T8545] ? find_held_lock+0x2b/0x80 [ 235.017178][ T8545] ? find_held_lock+0x2b/0x80 [ 235.017191][ T8545] ? ksys_write+0x190/0x250 [ 235.017210][ T8545] do_futex+0x1ad/0x350 [ 235.017229][ T8545] ? __pfx_do_futex+0x10/0x10 [ 235.017251][ T8545] __x64_sys_futex+0x1e0/0x4c0 [ 235.017269][ T8545] ? fput+0x9b/0xd0 [ 235.017287][ T8545] ? __pfx___x64_sys_futex+0x10/0x10 [ 235.017303][ T8545] ? ksys_write+0x1ac/0x250 [ 235.017318][ T8545] ? __pfx_ksys_write+0x10/0x10 [ 235.017338][ T8545] do_syscall_64+0xcd/0x490 [ 235.017357][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.017372][ T8545] RIP: 0033:0x7f79d718ebe9 [ 235.017383][ T8545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.017396][ T8545] RSP: 002b:00007f79d8057038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 235.017410][ T8545] RAX: ffffffffffffffda RBX: 00007f79d73b5fa0 RCX: 00007f79d718ebe9 [ 235.017419][ T8545] RDX: 000000000000b95d RSI: 0000000000000003 RDI: 0000200000001a80 [ 235.017427][ T8545] RBP: 00007f79d8057090 R08: 0000200000001b00 R09: 0000000000000009 [ 235.017436][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.017444][ T8545] R13: 00007f79d73b6038 R14: 00007f79d73b5fa0 R15: 00007ffc741d2f98 [ 235.017461][ T8545] [ 235.647543][ T8548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.648312][ T8548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.649171][ T8548] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 235.650463][ T8548] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 235.653727][ T8548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.654013][ T8548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 235.654272][ T8548] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 235.761853][ T8552] : Can't lookup blockdev [ 236.610883][ T6725] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.620634][ T6725] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.629010][ T6725] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.636995][ T6725] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.650311][ T6725] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.196310][ T8584] chnl_net:caif_netlink_parms(): no params data found @[ 237.487124][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.500582][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.512314][ T8584] bridge_slave_0: entered allmulticast mode [ 237.521983][ T8584] bridge_slave_0: entered promiscuous mode [ 237.531995][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.541670][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.554036][ T8584] bridge_slave_1: entered allmulticast mode [ 237.562159][ T8584] bridge_slave_1: entered promiscuous mode [ 237.709728][ T6725] Bluetooth: hci6: command 0x0c1a tx timeout [ 237.717498][ T6618] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.724616][ T6725] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.734207][ T6860] Bluetooth: hci5: command 0x040f tx timeout [ 237.747550][ T8584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.767227][ T7354] Bluetooth: hci4: command 0x040f tx timeout [ 237.773645][ T6622] Bluetooth: hci3: command 0x0c1a tx timeout [ 237.779994][ T6618] Bluetooth: hci2: command 0x0c1a tx timeout [ 237.875190][ T8584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.970599][ T8609] random: crng reseeded on system resumption [ 238.244675][ T8584] team0: Port device team_slave_0 added [ 238.255863][ T8619] vhci_hcd: invalid port number 16 [ 238.261421][ T8619] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 238.346909][ T8584] team0: Port device team_slave_1 added [ 238.526577][ T8621] tc_dump_action: action bad kind [ 238.545442][ T8621] FAULT_INJECTION: forcing a failure. [ 238.545442][ T8621] name failslab, interval 1, probability 0, space 0, times 0 [ 238.565016][ T8621] CPU: 0 UID: 0 PID: 8621 Comm: syz.6.352 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 238.565041][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.565051][ T8621] Call Trace: [ 238.565056][ T8621] [ 238.565062][ T8621] dump_stack_lvl+0x16c/0x1f0 [ 238.565085][ T8621] should_fail_ex+0x512/0x640 [ 238.565104][ T8621] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 238.565122][ T8621] should_failslab+0xc2/0x120 [ 238.565141][ T8621] __kmalloc_cache_noprof+0x6a/0x3e0 [ 238.565155][ T8621] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 238.565175][ T8621] ? kvm_set_irq_routing+0x24f/0x970 [ 238.565197][ T8621] kvm_set_irq_routing+0x24f/0x970 [ 238.565221][ T8621] kvm_arch_vm_ioctl+0x8e8/0x1860 [ 238.565242][ T8621] ? register_lock_class+0x41/0x4c0 [ 238.565261][ T8621] ? find_held_lock+0x2b/0x80 [ 238.565275][ T8621] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 238.565296][ T8621] ? __lock_acquire+0x62e/0x1ce0 [ 238.565317][ T8621] ? __lock_acquire+0x62e/0x1ce0 [ 238.565338][ T8621] ? __lock_acquire+0x62e/0x1ce0 [ 238.565359][ T8621] ? __lock_acquire+0x62e/0x1ce0 [ 238.565388][ T8621] ? is_bpf_text_address+0x8a/0x1a0 [ 238.565405][ T8621] ? bpf_ksym_find+0x124/0x1c0 [ 238.565418][ T8621] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 238.565435][ T8621] ? is_bpf_text_address+0x94/0x1a0 [ 238.565451][ T8621] ? kernel_text_address+0x8d/0x100 [ 238.565473][ T8621] ? __kernel_text_address+0xd/0x40 [ 238.565485][ T8621] ? unwind_get_return_address+0x59/0xa0 [ 238.565499][ T8621] ? arch_stack_walk+0xa6/0x100 [ 238.565521][ T8621] ? stack_trace_save+0x8e/0xc0 [ 238.565536][ T8621] ? __pfx_stack_trace_save+0x10/0x10 [ 238.565551][ T8621] ? stack_depot_save_flags+0x29/0x9c0 [ 238.565569][ T8621] ? __lock_acquire+0xb97/0x1ce0 [ 238.565589][ T8621] ? kasan_save_stack+0x42/0x60 [ 238.565613][ T8621] ? kasan_save_stack+0x33/0x60 [ 238.565627][ T8621] ? kasan_save_track+0x14/0x30 [ 238.565642][ T8621] ? kasan_save_free_info+0x3b/0x60 [ 238.565663][ T8621] ? __kasan_slab_free+0x60/0x70 [ 238.565678][ T8621] ? kfree+0x2b4/0x4d0 [ 238.565693][ T8621] kvm_vm_ioctl+0x1a91/0x4000 [ 238.565714][ T8621] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 238.565739][ T8621] ? kasan_quarantine_put+0x10a/0x240 [ 238.565754][ T8621] ? lockdep_hardirqs_on+0x7c/0x110 [ 238.565777][ T8621] ? find_held_lock+0x2b/0x80 [ 238.565791][ T8621] ? tomoyo_path_number_perm+0x295/0x580 [ 238.565810][ T8621] ? tomoyo_path_number_perm+0x18d/0x580 [ 238.565828][ T8621] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.565843][ T8621] ? futex_wake+0x1ad/0x530 [ 238.565868][ T8621] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 238.565889][ T8621] ? do_vfs_ioctl+0x128/0x14f0 [ 238.565910][ T8621] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 238.565936][ T8621] ? find_held_lock+0x2b/0x80 [ 238.565949][ T8621] ? hook_file_ioctl_common+0x145/0x410 [ 238.565970][ T8621] ? __fget_files+0x20e/0x3c0 [ 238.565988][ T8621] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 238.566001][ T8621] __x64_sys_ioctl+0x18e/0x210 [ 238.566024][ T8621] do_syscall_64+0xcd/0x490 [ 238.566042][ T8621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.566057][ T8621] RIP: 0033:0x7f3eb0b8ebe9 [ 238.566069][ T8621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.566083][ T8621] RSP: 002b:00007f3eb1a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.566098][ T8621] RAX: ffffffffffffffda RBX: 00007f3eb0db5fa0 RCX: 00007f3eb0b8ebe9 [ 238.566106][ T8621] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 238.566115][ T8621] RBP: 00007f3eb0c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 238.566123][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.566131][ T8621] R13: 00007f3eb0db6038 R14: 00007f3eb0db5fa0 R15: 00007ffee8265bc8 [ 238.566150][ T8621] [ 239.083249][ T6622] Bluetooth: hci7: command tx timeout [ 239.251436][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.258410][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.284903][ T8584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.356894][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.364614][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.394726][ T8584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.605658][ T8584] hsr_slave_0: entered promiscuous mode [ 239.624873][ T8584] hsr_slave_1: entered promiscuous mode [ 239.633379][ T8584] debugfs: 'hsr0' already exists in 'hsr' [ 239.639204][ T8584] Cannot create hsr debugfs directory [ 239.851930][ T8612] Bluetooth: hci0: command 0x0c1a tx timeout [ 239.857982][ T6860] Bluetooth: hci6: command 0x0c1a tx timeout [ 239.865268][ T6622] Bluetooth: hci1: command 0x0c1a tx timeout [ 240.232385][ T8634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.262557][ T8634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 240.283639][ T8634] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 240.306520][ T8634] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 240.343809][ T8634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.392128][ T8584] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 240.400406][ T8634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.421501][ T8584] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 240.428988][ T8634] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 240.440942][ T8634] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 240.446917][ T8634] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 240.457780][ T8584] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 240.471403][ T8634] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 240.483466][ T8584] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 240.828303][ T8584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.113172][ T8669] random: crng reseeded on system resumption [ 241.167956][ T8584] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.236760][ T8672] netlink: zone id is out of range [ 241.262489][ T6619] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.269747][ T6619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.278662][ T8672] netlink: zone id is out of range [ 241.284594][ T8672] netlink: zone id is out of range [ 241.308818][ T8672] netlink: zone id is out of range [ 241.319702][ T8672] netlink: zone id is out of range [ 241.328311][ T8672] netlink: zone id is out of range [ 241.346165][ T8672] netlink: zone id is out of range [ 241.363127][ T8672] netlink: zone id is out of range [ 241.376603][ T8672] netlink: zone id is out of range [ 241.382620][ T8672] netlink: zone id is out of range [ 241.488560][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.495899][ T6626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.725555][ T8584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.010104][ T6622] Bluetooth: hci2: command 0x0c1a tx timeout [ 242.330365][ T6622] Bluetooth: hci1: command 0x0c1a tx timeout [ 242.339230][ T6860] Bluetooth: hci5: command 0x040f tx timeout [ 242.346962][ T8612] Bluetooth: hci4: command 0x040f tx timeout [ 242.359238][ T7354] Bluetooth: hci3: command 0x0c1a tx timeout [ 242.413877][ T6622] Bluetooth: hci0: command 0x0c1a tx timeout [ 242.500832][ T6622] Bluetooth: hci7: command 0x040f tx timeout [ 242.510080][ T7354] Bluetooth: hci6: command 0x0c1a tx timeout [ 242.733080][ T8584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.953181][ T8697] delete_channel: no stack [ 244.256340][ T8584] veth0_vlan: entered promiscuous mode [ 244.284162][ T8584] veth1_vlan: entered promiscuous mode [ 244.577739][ T7354] Bluetooth: hci7: command 0x040f tx timeout [ 244.615056][ T8584] veth0_macvtap: entered promiscuous mode [ 244.672300][ T8584] veth1_macvtap: entered promiscuous mode [ 244.805567][ T8584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.875306][ T8584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.122913][ T6637] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.140624][ T6637] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.157431][ T6637] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.177169][ T6637] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.370338][ T8727] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 245.378013][ T8727] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 245.392509][ T8727] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 245.430673][ T8727] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 245.476786][ T8727] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 245.490211][ T8727] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 245.675554][ T8727] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 245.703299][ T8727] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 246.170682][ T8735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.222903][ T8735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.403272][ T8732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.449001][ T8732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.907434][ T8760] FAULT_INJECTION: forcing a failure. [ 246.907434][ T8760] name failslab, interval 1, probability 0, space 0, times 0 [ 247.021310][ T8760] CPU: 1 UID: 0 PID: 8760 Comm: syz.9.344 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 247.021348][ T8760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.021373][ T8760] Call Trace: [ 247.021386][ T8760] [ 247.021395][ T8760] dump_stack_lvl+0x16c/0x1f0 [ 247.021429][ T8760] should_fail_ex+0x512/0x640 [ 247.021461][ T8760] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 247.021494][ T8760] should_failslab+0xc2/0x120 [ 247.021525][ T8760] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 247.021551][ T8760] ? __d_alloc+0x32/0xae0 [ 247.021581][ T8760] __d_alloc+0x32/0xae0 [ 247.021609][ T8760] d_alloc_pseudo+0x1c/0xc0 [ 247.021639][ T8760] alloc_file_pseudo+0xcf/0x230 [ 247.021681][ T8760] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 247.021720][ T8760] ? alloc_fd+0x471/0x7d0 [ 247.021751][ T8760] sock_alloc_file+0x50/0x210 [ 247.021783][ T8760] __sys_socket+0x1c0/0x260 [ 247.021805][ T8760] ? __pfx___sys_socket+0x10/0x10 [ 247.021828][ T8760] ? xfd_validate_state+0x61/0x180 [ 247.021868][ T8760] ? __pfx_do_pwritev+0x10/0x10 [ 247.021898][ T8760] __x64_sys_socket+0x72/0xb0 [ 247.021920][ T8760] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.021947][ T8760] do_syscall_64+0xcd/0x490 [ 247.021979][ T8760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.022003][ T8760] RIP: 0033:0x7f23f878ebe9 [ 247.022026][ T8760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.022052][ T8760] RSP: 002b:00007f23f69f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 247.022076][ T8760] RAX: ffffffffffffffda RBX: 00007f23f89b5fa0 RCX: 00007f23f878ebe9 [ 247.022094][ T8760] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 0000000000000018 [ 247.022110][ T8760] RBP: 00007f23f8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 247.022127][ T8760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.022142][ T8760] R13: 00007f23f89b6038 R14: 00007f23f89b5fa0 R15: 00007ffc22c3d668 [ 247.022178][ T8760] [ 247.303904][ T8766] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 247.501392][ T7354] Bluetooth: hci5: command 0x040f tx timeout [ 247.509146][ T7354] Bluetooth: hci4: command 0x040f tx timeout [ 247.515452][ T7354] Bluetooth: hci3: command 0x0c1a tx timeout [ 247.521660][ T7354] Bluetooth: hci2: command 0x0c1a tx timeout [ 247.538150][ T7354] Bluetooth: hci1: command 0x0c1a tx timeout [ 247.544397][ T6622] Bluetooth: hci0: command 0x0c1a tx timeout [ 247.702961][ T6622] Bluetooth: hci6: command 0x0c1a tx timeout [ 247.770301][ T6622] Bluetooth: hci7: command 0x040f tx timeout [ 249.849875][ T6622] Bluetooth: hci7: command 0x040f tx timeout [ 249.942471][ T8785] random: crng reseeded on system resumption [ 250.394358][ T6622] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 250.904552][ T8818] netlink: 28 bytes leftover after parsing attributes in process `syz.6.383'. [ 251.556090][ T8833] program syz.9.386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.580080][ T8835] program syz.9.386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.930195][ T7354] Bluetooth: hci7: command 0x040f tx timeout [ 252.017323][ T8851] ksmbd: Unknown IPC event: 14, ignore. [ 252.409738][ T7354] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.586110][ T8877] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 253.870052][ T8877] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.876222][ T8877] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 253.899952][ T8877] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 253.929349][ T8877] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.989835][ T8877] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 254.135028][ T8877] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 254.187615][ T8877] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 254.223953][ T8877] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 254.922166][ T8906] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 255.529818][ T6622] Bluetooth: hci2: command 0x0c1a tx timeout [ 255.929911][ T7354] Bluetooth: hci4: command 0x040f tx timeout [ 255.935990][ T8612] Bluetooth: hci3: command 0x0c1a tx timeout [ 255.942080][ T6622] Bluetooth: hci5: command 0x040f tx timeout [ 256.009817][ T6622] Bluetooth: hci1: command 0x0c1a tx timeout [ 256.177865][ T6622] Bluetooth: hci0: command 0x0c1a tx timeout [ 256.251386][ T6622] Bluetooth: hci7: command 0x040f tx timeout [ 256.257821][ T6622] Bluetooth: hci6: command 0x0c1a tx timeout [ 257.334395][ T8943] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 257.350123][ T8943] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 257.370517][ T8943] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 257.401958][ T8943] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 257.550295][ T8943] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 257.556411][ T8943] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 257.613568][ T8943] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 257.630142][ T8943] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 259.053638][ T8612] Bluetooth: hci2: command 0x0c1a tx timeout [ 259.378263][ T8612] Bluetooth: hci3: command 0x0c1a tx timeout [ 259.450062][ T8612] Bluetooth: hci5: command 0x040f tx timeout [ 259.460340][ T8612] Bluetooth: hci4: command 0x040f tx timeout [ 259.464770][ T8983] netlink: 'syz.6.410': attribute type 1 has an invalid length. [ 259.610362][ T6622] Bluetooth: hci0: command 0x0c1a tx timeout [ 259.616433][ T6622] Bluetooth: hci1: command 0x0c1a tx timeout [ 259.692022][ T8612] Bluetooth: hci6: command 0x0c1a tx timeout [ 259.698180][ T6622] Bluetooth: hci7: command 0x040f tx timeout [ 261.000779][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.007198][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.031022][ T8731] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.200886][ T8731] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.320530][ T9003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.334417][ T9003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.387861][ T9003] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.394386][ T9003] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 261.397334][ T8731] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.418992][ T9003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.450189][ T9003] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.456378][ T9003] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 261.604836][ T8731] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.312341][ T8612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 262.329779][ T8612] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 262.338884][ T8612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 262.350352][ T8612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 262.363954][ T8612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 263.206309][ T8731] bridge_slave_1: left allmulticast mode [ 263.212479][ T8612] Bluetooth: hci2: command 0x0c1a tx timeout [ 263.221132][ T8731] bridge_slave_1: left promiscuous mode [ 263.231128][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.242393][ T8731] bridge_slave_0: left allmulticast mode [ 263.248048][ T8731] bridge_slave_0: left promiscuous mode [ 263.259954][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.370691][ T8612] Bluetooth: hci3: command 0x0c1a tx timeout [ 263.457091][ T8612] Bluetooth: hci0: command 0x0c1a tx timeout [ 263.467476][ T7354] Bluetooth: hci5: command 0x040f tx timeout [ 263.473564][ T6860] Bluetooth: hci4: command 0x040f tx timeout [ 263.480882][ T6622] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.537937][ T6622] Bluetooth: hci6: command 0x0c1a tx timeout [ 264.007319][ T8731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.030047][ T8731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.042659][ T8731] bond0 (unregistering): Released all slaves [ 264.412262][ T6622] Bluetooth: hci7: command tx timeout [ 265.019866][ T8731] hsr_slave_0: left promiscuous mode [ 265.057051][ T8731] hsr_slave_1: left promiscuous mode [ 265.086140][ T8731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.101084][ T8731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.147572][ T8731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.184738][ T8731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.569684][ T8731] veth1_macvtap: left promiscuous mode [ 265.583742][ T8731] veth0_macvtap: left promiscuous mode [ 265.614217][ T8731] veth1_vlan: left promiscuous mode [ 265.662813][ T8731] veth0_vlan: left promiscuous mode [ 266.061868][ T30] audit: type=1800 audit(6049974239.914:6): pid=9069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.422" name="dbroot" dev="configfs" ino=24543 res=0 errno=0 [ 266.489819][ T6622] Bluetooth: hci7: command tx timeout [ 267.746161][ T8731] team0 (unregistering): Port device team_slave_1 removed [ 267.853831][ T8731] team0 (unregistering): Port device team_slave_0 removed [ 268.570242][ T6622] Bluetooth: hci7: command tx timeout [ 269.095160][ T9024] chnl_net:caif_netlink_parms(): no params data found [ 269.817590][ T5870] Process accounting resumed [ 269.869458][ T9024] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.897825][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.966102][ T9024] bridge_slave_0: entered allmulticast mode [ 270.075890][ T9024] bridge_slave_0: entered promiscuous mode [ 270.096842][ T9024] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.112542][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.120728][ T9024] bridge_slave_1: entered allmulticast mode [ 270.128766][ T9024] bridge_slave_1: entered promiscuous mode [ 270.218966][ T9024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.318516][ T9024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.659773][ T6622] Bluetooth: hci7: command tx timeout [ 270.682141][ T9122] futex_wake_op: syz.6.428 tries to shift op by -2048; fix this program [ 270.814411][ T9024] team0: Port device team_slave_0 added [ 270.958888][ T9024] team0: Port device team_slave_1 added [ 271.352324][ T9024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.379609][ T9024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.495965][ T9024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.577509][ T9024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.596830][ T9024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.697776][ T9024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.142522][ T9024] hsr_slave_0: entered promiscuous mode [ 272.170888][ T9024] hsr_slave_1: entered promiscuous mode [ 272.177386][ T9024] debugfs: 'hsr0' already exists in 'hsr' [ 272.199816][ T9024] Cannot create hsr debugfs directory [ 272.805097][ T9134] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.899344][ T9134] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 272.932785][ T9134] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 272.942900][ T9134] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 272.980400][ T9134] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.006386][ T9134] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 273.016506][ T9134] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 273.057830][ T9134] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 273.141394][ T9134] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 273.181363][ T9134] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 274.340363][ T9160] netlink: 186 bytes leftover after parsing attributes in process `syz.8.435'. [ 274.524168][ T9024] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 274.672923][ T9024] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 274.783757][ T9024] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 274.810988][ T6622] Bluetooth: hci2: command 0x0c1a tx timeout [ 274.858169][ T9024] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 274.972419][ T6622] Bluetooth: hci5: command 0x040f tx timeout [ 274.978462][ T6622] Bluetooth: hci4: command 0x040f tx timeout [ 274.984525][ T8612] Bluetooth: hci3: command 0x0c1a tx timeout [ 275.052956][ T6622] Bluetooth: hci6: command 0x0c1a tx timeout [ 275.059878][ T8612] Bluetooth: hci0: command 0x0c1a tx timeout [ 275.065926][ T8612] Bluetooth: hci1: command 0x0c1a tx timeout [ 275.129736][ T8612] Bluetooth: hci7: command 0x0c1a tx timeout [ 276.054709][ T6622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.070039][ T6622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.079008][ T6622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.107999][ T6622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.117173][ T6622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.229249][ T9024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.488780][ T9024] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.572992][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.580294][ T8732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.633841][ T6680] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.641071][ T6680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.210258][ T6622] Bluetooth: hci7: command 0x0c1a tx timeout [ 277.757441][ T9204] chnl_net:caif_netlink_parms(): no params data found [ 277.914401][ T9024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.190626][ T6622] Bluetooth: hci0: command tx timeout [ 278.809907][ T9204] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.827467][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.869889][ T9204] bridge_slave_0: entered allmulticast mode [ 278.931029][ T9204] bridge_slave_0: entered promiscuous mode [ 279.038123][ T9204] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.089993][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.130734][ T9204] bridge_slave_1: entered allmulticast mode [ 279.138630][ T9204] bridge_slave_1: entered promiscuous mode [ 279.291335][ T6622] Bluetooth: hci7: command 0x0c1a tx timeout [ 279.446196][ T9204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.556406][ T9204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.805449][ T9204] team0: Port device team_slave_0 added [ 279.863470][ T9204] team0: Port device team_slave_1 added [ 280.255918][ T6622] Bluetooth: hci0: command tx timeout [ 280.724908][ T9267] random: crng reseeded on system resumption [ 280.985312][ T9204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.072431][ T9204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.100031][ T9204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.118476][ T9024] veth0_vlan: entered promiscuous mode [ 281.226321][ T9204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.274241][ T9204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.410634][ T9204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.724920][ T9204] hsr_slave_0: entered promiscuous mode [ 281.794609][ T9204] hsr_slave_1: entered promiscuous mode [ 281.865943][ T9204] debugfs: 'hsr0' already exists in 'hsr' [ 281.891789][ T9204] Cannot create hsr debugfs directory [ 282.025799][ T9024] veth1_vlan: entered promiscuous mode [ 282.329991][ T6622] Bluetooth: hci0: command tx timeout [ 283.100926][ T9024] veth0_macvtap: entered promiscuous mode [ 283.135801][ T9024] veth1_macvtap: entered promiscuous mode [ 283.173849][ T9318] Unable to find swap-space signature [ 283.593938][ T9024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.952363][ T9024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.043495][ T8733] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.088136][ T8733] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.149073][ T8733] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.170931][ T8733] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.416979][ T6622] Bluetooth: hci0: command tx timeout [ 284.543088][ T9204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.712762][ T9204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 284.764148][ T9204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 284.830387][ T6680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.863005][ T9204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.912971][ T6680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.012487][ T7289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.032293][ T7289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.269889][ T9365] random: crng reseeded on system resumption [ 285.662938][ T9204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.854818][ T9377] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 286.129378][ T9204] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.231086][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.238379][ T6637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.293330][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.300510][ T6637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.841168][ T6622] Bluetooth: hci7: Malformed LE Event: 0x1d [ 287.173112][ T9204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.450961][ T9204] veth0_vlan: entered promiscuous mode [ 287.548585][ T9204] veth1_vlan: entered promiscuous mode [ 287.678592][ T9204] veth0_macvtap: entered promiscuous mode [ 287.732585][ T9204] veth1_macvtap: entered promiscuous mode [ 287.759030][ T9204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.799088][ T9204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.838895][ T8731] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.890102][ T8731] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.993642][ T8731] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.021369][ T9413] syz.8.460 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 288.077235][ T8731] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.559698][ T8731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.567718][ T8731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.953807][ T6637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.021373][ T6637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.705065][ T9410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.715284][ T9410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.935496][ T9457] random: crng reseeded on system resumption [ 294.490225][ T9510] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 294.507148][ T9510] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 294.532022][ T9510] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 294.569951][ T9510] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 294.606189][ T9510] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 294.642618][ T9510] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 294.685023][ T9510] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 294.716827][ T9510] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 294.759811][ T9510] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 294.832125][ T9510] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 296.185539][ T9560] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.262268][ T9560] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.262484][ T9560] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.262689][ T9560] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 296.262922][ T9560] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.263135][ T9560] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 296.264583][ T9560] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 296.264805][ T9560] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 297.451564][ T6622] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.334244][ T6622] Bluetooth: hci0: command 0x0c1a tx timeout [ 298.340958][ T8612] Bluetooth: hci7: command 0x0c1a tx timeout [ 298.347002][ T8612] Bluetooth: hci6: command 0x0c1a tx timeout [ 298.359703][ T6860] Bluetooth: hci1: command 0x0c1a tx timeout [ 298.365760][ T6860] Bluetooth: hci5: command 0x040f tx timeout [ 298.371836][ T7354] Bluetooth: hci4: command 0x040f tx timeout [ 298.377872][ T7354] Bluetooth: hci3: command 0x0c1a tx timeout [ 299.267846][ T9630] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 299.320968][ T9630] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 299.328058][ T9630] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 299.370464][ T9630] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 299.387771][ T9630] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.394292][ T9630] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 299.408100][ T9630] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 299.430133][ T9630] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 300.875207][ T9677] random: crng reseeded on system resumption [ 300.975363][ T8612] Bluetooth: hci2: command 0x0c1a tx timeout [ 301.381965][ T8612] Bluetooth: hci4: command 0x040f tx timeout [ 301.388002][ T8612] Bluetooth: hci3: command 0x0c1a tx timeout [ 301.404527][ T9676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.459798][ T8612] Bluetooth: hci0: command 0x0c1a tx timeout [ 301.466117][ T7354] Bluetooth: hci7: command 0x0c1a tx timeout [ 301.472751][ T6618] Bluetooth: hci6: command 0x0c1a tx timeout [ 301.478872][ T6618] Bluetooth: hci1: command 0x0c1a tx timeout [ 301.485424][ T6860] Bluetooth: hci5: command 0x040f tx timeout [ 301.640006][ T9676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.417207][ T9713] random: crng reseeded on system resumption [ 302.745131][ T9713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.978695][ T9713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.529874][ T6618] Bluetooth: hci0: command 0x0c1a tx timeout [ 303.825054][ T9734] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 303.869370][ T9734] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 303.876501][ T9734] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 303.902958][ T9734] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 303.929869][ T9734] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 303.936179][ T9734] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 303.946339][ T9734] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 303.952842][ T9734] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.481094][ T9753] netlink: 342 bytes leftover after parsing attributes in process `syz.0.504'. [ 304.502202][ T9753] netlink: 342 bytes leftover after parsing attributes in process `syz.0.504'. [ 304.810337][ T9753] netlink: 342 bytes leftover after parsing attributes in process `syz.0.504'. [ 304.916575][ T9753] netlink: 342 bytes leftover after parsing attributes in process `syz.0.504'. [ 304.971237][ T9753] netlink: 342 bytes leftover after parsing attributes in process `syz.0.504'. [ 305.048188][ T9767] netlink: 218 bytes leftover after parsing attributes in process `syz.0.504'. [ 305.850173][ T6618] Bluetooth: hci2: command 0x0c1a tx timeout [ 305.929708][ T6618] Bluetooth: hci5: command 0x040f tx timeout [ 305.935901][ T8612] Bluetooth: hci4: command 0x040f tx timeout [ 305.942070][ T6860] Bluetooth: hci3: command 0x0c1a tx timeout [ 306.009236][ T9794] net_ratelimit: 11 callbacks suppressed [ 306.009253][ T9794] netlink: zone id is out of range [ 306.020944][ T8612] Bluetooth: hci0: command 0x0c1a tx timeout [ 306.026953][ T8612] Bluetooth: hci7: command 0x0c1a tx timeout [ 306.035226][ T6618] Bluetooth: hci6: command 0x0c1a tx timeout [ 306.042592][ T6860] Bluetooth: hci1: command 0x0c1a tx timeout [ 306.095446][ T9794] netlink: zone id is out of range [ 306.112914][ T9794] netlink: zone id is out of range [ 306.118116][ T9794] netlink: zone id is out of range [ 306.124747][ T9794] netlink: zone id is out of range [ 306.139590][ T9794] netlink: zone id is out of range [ 306.144752][ T9794] netlink: zone id is out of range [ 306.150658][ T9794] netlink: zone id is out of range [ 306.155798][ T9794] netlink: zone id is out of range [ 306.161058][ T9794] netlink: zone id is out of range [ 307.190213][ T8612] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 309.043290][ T9885] Console: switching to colour VGA+ 80x25 [ 310.866283][ T9932] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 310.887498][ T9932] device-mapper: ioctl: Invalid ioctl structure: name , dev b00010007 [ 310.922545][ T9929] Console: switching to colour frame buffer device 128x48 [ 312.179521][ T9956] random: crng reseeded on system resumption [ 312.552186][ T9943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.587064][ T9969] netlink: 342 bytes leftover after parsing attributes in process `syz.0.531'. [ 312.608921][ T9943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.093273][ T9975] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 313.581090][ T9] smpboot: CPU 1 is now offline [ 313.760967][ T9976] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 313.921816][ T9971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.532'. [ 314.606656][T10008] ICMPv6: process `syz.0.536' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 314.694557][T10008] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 317.015789][T10070] Console: switching to colour VGA+ 80x25 [ 317.468649][T10076] ptp ptp0: new virtual clock ptp1 [ 317.606429][T10076] ptp ptp0: new virtual clock ptp2 [ 317.695715][T10076] ptp ptp0: new virtual clock ptp3 [ 317.840499][T10076] ptp ptp0: guarantee physical clock free running [ 318.783260][T10104] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 318.842899][T10104] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 318.920600][T10104] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 318.996674][T10104] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 319.050267][T10104] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 319.098602][T10104] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 319.161295][T10104] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 319.225042][T10104] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 319.274231][T10104] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 319.425028][T10109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.593913][T10109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.809870][ T8612] Bluetooth: hci2: command 0x0c1a tx timeout [ 320.889946][ T8612] Bluetooth: hci3: command 0x0c1a tx timeout [ 320.970089][ T8612] Bluetooth: hci4: command 0x040f tx timeout [ 321.049756][ T8612] Bluetooth: hci5: command 0x040f tx timeout [ 321.133842][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.140322][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.148343][ T8612] Bluetooth: hci6: command 0x0c1a tx timeout [ 321.154528][ T6618] Bluetooth: hci1: command 0x0c1a tx timeout [ 321.209721][ T8612] Bluetooth: hci7: command 0x0c1a tx timeout [ 321.289809][ T8612] Bluetooth: hci0: command 0x0c1a tx timeout [ 322.840499][T10164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 322.875574][T10164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 322.905072][T10164] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 322.905228][T10164] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 322.905388][T10164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 322.905530][T10164] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 322.905670][T10164] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 322.905819][T10164] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 323.183630][ T6618] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 323.188083][ T6618] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 323.189197][ T6618] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 323.191640][ T6618] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 323.192086][ T6618] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 323.833324][T10179] chnl_net:caif_netlink_parms(): no params data found [ 324.302192][T10179] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.334598][T10179] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.360258][T10179] bridge_slave_0: entered allmulticast mode [ 324.367348][T10179] bridge_slave_0: entered promiscuous mode [ 324.417253][T10179] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.456869][T10179] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.489643][ T6618] Bluetooth: hci2: command 0x0c1a tx timeout [ 324.498141][T10179] bridge_slave_1: entered allmulticast mode [ 324.526087][T10179] bridge_slave_1: entered promiscuous mode [ 324.691400][T10179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.738072][T10179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.883516][T10179] team0: Port device team_slave_0 added [ 324.889882][ T6618] Bluetooth: hci3: command 0x0c1a tx timeout [ 324.930704][T10179] team0: Port device team_slave_1 added [ 324.970031][ T6618] Bluetooth: hci0: command 0x0c1a tx timeout [ 324.978544][ T8612] Bluetooth: hci7: command 0x0c1a tx timeout [ 324.984977][ T7354] Bluetooth: hci6: command 0x0c1a tx timeout [ 324.991323][ T7354] Bluetooth: hci1: command 0x0c1a tx timeout [ 324.997341][ T7354] Bluetooth: hci5: command 0x040f tx timeout [ 325.003891][ T8612] Bluetooth: hci4: command 0x040f tx timeout [ 325.101236][T10179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.108339][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.209748][ T7354] Bluetooth: hci8: command tx timeout [ 325.233100][T10179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.302889][T10179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.328075][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.354056][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.446816][T10179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.511369][T10233] ICMPv6: process `syz.0.577' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 325.610035][ T31] INFO: task syz-executor:6613 blocked for more than 143 seconds. [ 325.619235][ T31] Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 [ 325.637113][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 325.670078][ T31] task:syz-executor state:D stack:23992 pid:6613 tgid:6613 ppid:1 task_flags:0x400140 flags:0x00004004 [ 325.749597][ T31] Call Trace: [ 325.769686][ T31] [ 325.778165][ T31] __schedule+0x1190/0x5de0 [ 325.813383][ T31] ? __pfx___schedule+0x10/0x10 [ 325.818280][ T31] ? find_held_lock+0x2b/0x80 [ 325.864346][ T31] ? schedule+0x2d7/0x3a0 [ 325.868719][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 325.902228][ T31] schedule+0xe7/0x3a0 [ 325.906362][ T31] schedule_preempt_disabled+0x13/0x30 [ 325.959647][ T31] __mutex_lock+0x82a/0x10b0 [ 325.973213][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 326.001534][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 326.006878][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 326.050525][ T31] ? net_generic+0xea/0x2a0 [ 326.068047][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 326.147280][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 326.184420][ T31] nfsd_umount+0x48/0xe0 [ 326.188723][ T31] deactivate_locked_super+0xc1/0x1a0 [ 326.223177][ T31] deactivate_super+0xde/0x100 [ 326.228082][ T31] cleanup_mnt+0x225/0x450 [ 326.262232][ T31] task_work_run+0x150/0x240 [ 326.266871][ T31] ? __pfx_task_work_run+0x10/0x10 [ 326.299650][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 326.330000][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 326.335334][ T31] do_syscall_64+0x3f6/0x490 [ 326.359396][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.389609][ T31] RIP: 0033:0x7f5cb078ff17 [ 326.394066][ T31] RSP: 002b:00007fff358f3a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 326.429686][ T31] RAX: 0000000000000000 RBX: 00007f5cb0811c05 RCX: 00007f5cb078ff17 [ 326.437968][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff358f4bc0 [ 326.482502][ T31] RBP: 00007fff358f4bac R08: 0000000000000000 R09: 0000000000000000 [ 326.512715][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff358f4bc0 [ 326.539643][ T31] R13: 00007f5cb0811c05 R14: 0000000000029c71 R15: 00007fff358f4c00 [ 326.547667][ T31] [ 326.581881][ T31] [ 326.581881][ T31] Showing all locks held in the system: [ 326.643195][ T31] 1 lock held by khungtaskd/31: [ 326.648143][ T31] #0: ffffffff8e5c1060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 326.702398][ T31] 2 locks held by syz-executor/6613: [ 326.707740][ T31] #0: ffff888051f0e0e0 (&type->s_umount_key#56){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 326.759774][ T31] #1: ffffffff8e9d9508 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 326.789636][ T31] 2 locks held by syz.1.138/6804: [ 326.794685][ T31] #0: ffffffff90428a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 326.840299][ T31] #1: ffffffff8e9d9508 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 326.870011][ T31] 4 locks held by kworker/u10:8/7288: [ 326.875597][ T31] #0: ffff88801b889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 326.929603][ T31] #1: ffffc90003e1fd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 326.966440][ T31] #2: ffffffff903855c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 326.999822][ T31] #3: ffffffff8e5cc5f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 327.034974][ T31] 2 locks held by getty/7540: [ 327.060216][ T31] #0: ffff8880315790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 327.089617][ T31] #1: ffffc900032002f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 327.119643][ T31] 2 locks held by syz-executor/7754: [ 327.144517][ T31] #0: ffff8880691120e0 (&type->s_umount_key#56){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 327.179643][ T31] #1: ffffffff8e9d9508 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 327.189386][ T31] 2 locks held by syz-executor/8003: [ 327.227085][ T31] #0: ffff8880775800e0 (&type->s_umount_key#56){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 327.264372][ T31] #1: ffffffff8e9d9508 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 327.289667][ T7354] Bluetooth: hci8: command tx timeout [ 327.299647][ T31] 2 locks held by syz.2.301/8345: [ 327.304716][ T31] #0: ffffffff90428a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 327.349843][ T31] #1: ffffffff8e9d9508 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 327.379632][ T31] 2 locks held by syz.9.514/9839: [ 327.384685][ T31] #0: ffffffff90428a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 327.430748][ T31] #1: ffffffff8e9d9508 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 327.450036][ T31] 1 lock held by syz.0.536/10021: [ 327.455103][ T31] 1 lock held by syz-executor/10179: [ 327.496793][ T31] #0: ffffffff8e5cc5f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 327.520397][ T31] 2 locks held by syz.8.576/10230: [ 327.525530][ T31] #0: ffffffff9036f370 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 327.569834][ T31] #1: ffffffff903855c8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21d/0x7d0 [ 327.579417][ T31] 2 locks held by syz.0.577/10236: [ 327.609684][ T31] #0: ffffffff9036f370 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 327.619126][ T31] #1: ffffffff903855c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 327.649638][ T31] 2 locks held by syz.0.577/10238: [ 327.654788][ T31] #0: ffffffff9036f370 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 327.679824][ T31] #1: ffffffff903855c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 327.710932][ T31] [ 327.713305][ T31] ============================================= [ 327.713305][ T31] [ 327.769724][ T31] NMI backtrace for cpu 0 [ 327.769743][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 327.769762][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.769771][ T31] Call Trace: [ 327.769776][ T31] [ 327.769781][ T31] dump_stack_lvl+0x116/0x1f0 [ 327.769804][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 327.769825][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 327.769842][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 327.769864][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 327.769887][ T31] watchdog+0xf0e/0x1260 [ 327.769911][ T31] ? __pfx_watchdog+0x10/0x10 [ 327.769930][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 327.769948][ T31] ? __kthread_parkme+0x19e/0x250 [ 327.769966][ T31] ? __pfx_watchdog+0x10/0x10 [ 327.769985][ T31] kthread+0x3c5/0x780 [ 327.770005][ T31] ? __pfx_kthread+0x10/0x10 [ 327.770025][ T31] ? rcu_is_watching+0x12/0xc0 [ 327.770046][ T31] ? __pfx_kthread+0x10/0x10 [ 327.770066][ T31] ret_from_fork+0x5d4/0x6f0 [ 327.770087][ T31] ? __pfx_kthread+0x10/0x10 [ 327.770106][ T31] ret_from_fork_asm+0x1a/0x30 [ 327.770131][ T31] [ 327.770142][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 327.895579][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 327.907365][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.919794][ T31] Call Trace: [ 327.923069][ T31] [ 327.926001][ T31] dump_stack_lvl+0x3d/0x1f0 [ 327.930592][ T31] vpanic+0x6e8/0x7a0 [ 327.934601][ T31] ? __pfx_vpanic+0x10/0x10 [ 327.939122][ T31] panic+0xca/0xd0 [ 327.942862][ T31] ? __pfx_panic+0x10/0x10 [ 327.947308][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 327.953128][ T31] ? irq_work_queue+0xce/0x100 [ 327.957945][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 327.963935][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 327.969308][ T31] ? watchdog+0xd78/0x1260 [ 327.973855][ T31] ? watchdog+0xd6b/0x1260 [ 327.978264][ T31] watchdog+0xd89/0x1260 [ 327.982502][ T31] ? __pfx_watchdog+0x10/0x10 [ 327.987172][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 327.992463][ T31] ? __kthread_parkme+0x19e/0x250 [ 327.997690][ T31] ? __pfx_watchdog+0x10/0x10 [ 328.002364][ T31] kthread+0x3c5/0x780 [ 328.006429][ T31] ? __pfx_kthread+0x10/0x10 [ 328.011117][ T31] ? rcu_is_watching+0x12/0xc0 [ 328.015985][ T31] ? __pfx_kthread+0x10/0x10 [ 328.020610][ T31] ret_from_fork+0x5d4/0x6f0 [ 328.025311][ T31] ? __pfx_kthread+0x10/0x10 [ 328.029997][ T31] ret_from_fork_asm+0x1a/0x30 [ 328.034764][ T31] [ 328.037871][ T31] Kernel Offset: disabled [ 328.042190][ T31] Rebooting in 86400 seconds..