last executing test programs: 2m54.206220462s ago: executing program 32 (id=623): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppol2tp\x00', 0x0, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x2021000, 0x200007, 0x19) 2m25.043728529s ago: executing program 0 (id=878): r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x40383d0c, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) close_range$auto(0x2, 0x8000, 0x0) ioctl$auto(r0, 0x6f44, 0x38) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, r3, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x801, 0x100) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r5, 0x1b, 0x70bc26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r4}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) listen$auto(0x3, 0x81) 2m10.01563883s ago: executing program 33 (id=877): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppol2tp\x00', 0x0, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x1000000, 0x200007, 0x19) 2m9.920712453s ago: executing program 34 (id=878): r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x40383d0c, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) close_range$auto(0x2, 0x8000, 0x0) ioctl$auto(r0, 0x6f44, 0x38) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, r3, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x801, 0x100) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r5, 0x1b, 0x70bc26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r4}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) listen$auto(0x3, 0x81) 1m44.672382924s ago: executing program 35 (id=995): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffc, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000240), r2) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x4c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_SCOPE={0x1e, 0x4, '/proc/thread-self/pagemap\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1500, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) mmap$auto(0x0, 0xda, 0x1, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, 0x0) 1m34.476479398s ago: executing program 36 (id=1039): ioctl$auto_BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) mmap$auto(0x0, 0x20009, 0x7ff, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f0000000280)=':,\x00', &(0x7f0000000340)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\x00\x00I\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83G\x9fO\x14\xe8\x81lI\xb5\xa5\xf4e\xb8\xa0\xfa\xb7\xc10\xe7\xe3\x96g>!\n.\xc8-Z\x9b\v\x9eN$\xaa\xff\xbc\xaenF,\xf6\xc1', 0x7, 0x0) mount$auto(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_DEL(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x80a, 0x0) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo$auto(r1, r2, 0x21, 0x0) r3 = prctl$auto(0x3e, 0x1, r2, 0x7ffffffe, 0x3) write$auto_tracing_thresh_fops_trace(0xffffffffffffffff, &(0x7f00000000c0)="97da00c4025a92d4c6d563227366d1cfe0266d72d5", 0x15) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x7f, 0x1d2d, 0x6, 0xffff, 0x15f4da0e, 0x6, 0xc, 0xfffffffffffffffd, 0x8, 0x4, 0xfca, 0x9, 0xfffffffffffffffe, 0x4000000000000d]}, 0x0) socket(0x2b, 0x1, 0xe) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, 0xffffffffffffffff, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000700) unshare$auto(0x40000080) faccessat$auto(r3, &(0x7f0000000040)=':,\x00', 0x80000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 1m31.496806981s ago: executing program 37 (id=1050): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000040), r1) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 1m24.522736178s ago: executing program 9 (id=1108): r0 = socket(0x2a, 0x2, 0x6) r1 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$auto(r0, 0x101, r1) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x101880, 0x0) fanotify_init$auto(0x1000, 0xb0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/zram0/mm_stat\x00', 0x8900, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000400)=""/217, 0xd9) 1m24.406617581s ago: executing program 9 (id=1109): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x410002, 0x4, 0x29}, 0x18) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/vulnerabilities/spec_store_bypass\x00', 0x101800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x0, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) close_range$auto(r1, r1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video57\x00', 0xa240, 0x0) ioctl$auto(r2, 0xc0585611, r2) 1m24.266271832s ago: executing program 9 (id=1110): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) keyctl$auto_KEYCTL_DH_COMPUTE(0x17, 0x7, 0x1, 0x401, 0x7cdf) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rxrpc/calls\x00', 0x40280, 0x0) r0 = socket(0x1d, 0x2, 0x6) bind$auto(r0, 0x0, 0x13) socket(0xa, 0x3, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x7, 0x637b, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0x1800000, 0x1, 0xe77, 0x3, 0x800295f4da0a, 0x400, 0x40000000000003, 0x462, 0x80000001, 0x50a9, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x20a, 0x6, 0xfffffffffffffff6, 0x7, 0x9, 0x79c, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0x400000000000f]}, 0x0) madvise$auto(0x0, 0x200007, 0x19) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a32457895897071b", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) mmap$auto(0x9, 0x4, 0x7, 0x100009000000ebe, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) creat$auto(0x0, 0x5) 1m23.641358471s ago: executing program 38 (id=1077): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) utimensat$auto(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) select$auto(0x6, &(0x7f0000000000)={[0x5, 0x4, 0x4, 0xa, 0xccf9, 0x9, 0xffffffffffffffff, 0x3, 0xb, 0x1, 0x100000000000000, 0x3, 0xfffffffffffffe8f, 0x3, 0x40000000000005, 0xfffffffffffffff5]}, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x0, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) accept$auto(r3, &(0x7f0000000240)=@hci={0x1f, 0x2, 0x1}, &(0x7f0000000280)=0x40) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x26, 0x1, 0x200000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyv0\x00', 0x20b01, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) write$auto(0xffffffffffffffff, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x40000e6) 1m23.621181931s ago: executing program 9 (id=1111): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x80002, 0x73) sysinfo$auto(0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) listen$auto(0x3, 0x81) 1m23.339702903s ago: executing program 9 (id=1112): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x3, 0x3, 0xdb, 0x9b72, r0, 0x80000000) read$auto(0x3, 0x0, 0x8080) r1 = socket(0xb, 0x1, 0x4) set_mempolicy$auto(0x1, &(0x7f0000000300)=0xffff, 0x21) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') read$auto(r2, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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", @ANYRES8=r2], 0x1ac}}, 0x4044840) getsockopt$auto(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xc9}, 0x3, 0x0, 0x80000000, 0x6}, 0x4}, 0x7, 0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/tty12\x00', 0x8804, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f1e) mmap$auto(0x200, 0x4020007, 0x9, 0x100000000001ff, 0xffffffffffffffff, 0x8000) getresgid$auto(0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x8, 0x2, 0x10, 0x5, 0x0) socketpair$auto(0x4000001e, 0x2dac, 0xb2d, 0x0) r3 = socket(0x1f, 0x3, 0x2) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x8) 1m22.393463756s ago: executing program 9 (id=1113): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppol2tp\x00', 0x0, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0xf400, 0x200007, 0x19) 1m18.134926899s ago: executing program 1 (id=1121): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x64ce, r0) wait4$auto(0x1, 0xfffffffffffffffc, 0x60000002, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000002100)={0x18, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48840}, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) r4 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r1) ioctl$auto_XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f00000000c0)={0x1, @inferred=r1, @raw=0xfff, 0x6, 0x8, '\x00', {0x1, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x7fffffff, 0x7fffffff, {0x6, 0xfb9}, {0xf, 0x81}, {0xa648, 0x17ab}, 0xe0, 0xfffffff8, 0x0, 0x9, 0x75a0fe1c, 0x9, 0x455b, 0x80, 0x4, 0x40, '\x00', 0x9, 0x7f, 0x9, 0x3}}) sendmsg$auto_TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002980)={&(0x7f0000007740)={0x26b8, r5, 0x120, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x230, 0x6, 0x0, 0x1, [@generic="729ad238dbd4d8678c7465daaae39a184ef1970f073141097f4d3c5b56c09a8ebe3b91b92ee91b", @generic="80110e3069", @generic="ecd1bc08f750d0b3d7a5ff5d6458976f3baf95193376b90545ad1b315a1ff8ad04f9b2e276f9d05958e196b739fa6886649aff4fa92d1abba042cad7a616dc9a12078b2a715a521902", @generic="6dde6ee946ce880bdca6c3e255f17a8413357c1e", @generic="58a72f847d8d2f2cc8046aaf55961546f6fc29d14afecb64908e3d4bf302c9f2da75e5", @generic="481f30eb85011d749679b9a8506f8ada0ff4505e7d0b5fd96eba042d7d23889ed28822c81450a26c4ebc65043c0d0d7da36864719753a0e93f36d9f294513346f8ff9e6bf143de5e9ab25f59f2", @generic="df91756c10263e06f10e8187f92fa6aa7fc5d0eafb2f8327ade01062e0d7c4e6642ca77d90939d28f09957aa72cc6cf1a7774b210df0c854a693dafcac40e230466481425aa9184ef6d2a3bf4d4019252ca0dc5edbd8d615b30d5c4b7bc62371c3d70fff85bb2a6f0d2eb9e02b2271f194b64ed9e20aa87f2274b410f9b889de9fd1fb050c42950d78ab301d5dcdaebff178e09a27a8f764d9a063589811d7d7dc6352b29ad1c53e2842f97eeca33852c50f6f9ae25e9253d7dfcf1ca6010d6f31658c0c66e74a0827034a0a53da8d58e1ed1ec439a77b64ad", @generic="eb6747166e41b024033f647143b7adeec5aaf117075baab806c9695dfeb221acafcd98bce2a7c41ca3316bc0f3c877209c40945d33dbff7949aeedb6074309fb230939f720afb953d9613006d2859213dd48185b98d060cca9b5"]}, @TIPC_NLA_MON={0x1184, 0x9, 0x0, 0x1, [@generic="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", @nested={0x147, 0x18, 0x0, 0x1, [@generic="fc234ef42ad9d1f319e2576d2f092bd855db5e3a041e67104d4e0b63a61c96da3091b03e05a96f3841b8322b7814e4ba3ace8d", @nested={0x4, 0x68}, @generic="80d6508477494ede5910d1aeabfb3373016d6c259b110feaf13586bb8714f2f1d4e0be62d330a67c19aef1134ecd08375eafaff6bfcf899248e6dc3886e3e0b6e70762579270ca92f334b6a80fe943a9", @generic="3ce8a6183f69eff82b5d7134a7bc30b42fb5e7405bd3434bd21347b6059c46b2275f61c4aeb9f6a531b4b60296af1be9001ec15481cb32eceb64cd5633250a68b5b73648ebe93f6cbfce9978f6fae6b5d5148853521198441dae23521943bf1d0737aa32fd1c99db5a790823d291609a6178dafa4c0b0167f9690fc05792cc8b14a00633bbb38af55106fb536857b60b0c2d0e8eb313ef7fa1fbb3f70c03325a8ab07be1ac1366ccbb05a51a022b5b0c", @nested={0x4, 0xef}, @nested={0x4, 0xb0}, @nested={0x4, 0x85}]}, @nested={0x218, 0x2e, 0x0, 0x1, [@generic="1e57b480e00e0990e815f66f450b564c4de9393b0d56c2c715f0000fd8caf8cce017bce2ac627bf02efcdeb9b4fbafe42fe42d5b5190905efc5a", @generic="7f7c40ebc2039a2d48ea79844f5b3d171c7ff09831e1747b1cbf6df77809ad8be79948effc0483f6bfb9d3287225942fe09bec64eff7f42b5e9ad9fce3c9d6abb96d93fb4913d18657bdd2d9dba7282c083f176c5581f4b35cb56eec918b7410fbe928f8817324f3241a91d381e5a39ba3daf7c4ffdd78d02384c23d15d97782c1a5d81a57e89709864d57b14e93405428e214ab0214efc0a0e3a627b06b0ce6663e4b2063d02f68bd00108360bf93bae0f0fde9", @nested={0x4, 0x126}, @generic="9057f22e552bafccd6f7da7b6faaca9dab8e27e040af46822f17a02f205351e2bdad77971ccdd0fd1b183c7c5324f1abacb976ceb5333e1e10b38f9a13d289655b13ca417aada03357ec718d0f7caec142611613f4a771a1c97b2fd4d0328e9c93c83e778bf1452ac8bba16a7a761ab182ab58daed390ab146cdc61a46055291b4cc93e009", @nested={0x4, 0x52}, @typed={0xc, 0x7c, 0x0, 0x0, @u64=0xe}, @nested={0x4, 0x9a}, @generic="254de3904038eb631c1f828bc57a3e1557cb59c1381fd221c4a236cb7942b21f29a920069dc911de3d3a3a045947fdae2a5447a3682dce47dcac05b0fc5ad676749c1e74930b4d0f9c288b9a887a5ba6488ff479503ccdc97a27b865cd16333c6d7bbc3b8aef4aee070945df1aad0dcf442c16868973eb42173fec3ed8f8c1eddf6582c3e1324aa7c2"]}, @nested={0xc, 0xf1, 0x0, 0x1, [@nested={0x4, 0x39}, @typed={0x4, 0xd0}]}, @nested={0x14, 0x47, 0x0, 0x1, [@nested={0x4, 0xf5}, @nested={0x4, 0x106}, @nested={0x4, 0x59}, @typed={0x4, 0x132}]}]}, @TIPC_NLA_NODE={0x12f0, 0x6, 0x0, 0x1, [@nested={0x1ca, 0x1a4, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @uid=r7}, @generic="c5fcec2361951af4bfb228a08210b9cee7f7c118f86d78e90d0fed98cb6d3810c9704ac6b35539a0c4d87cd3b8cfb6fe8034ef45dba93d0c4c0b03b83b64fa78f3c899610b146736c0415c775fd2b3ab6db5b7ee9b256ccd91", @generic="f369eead7a7ec69269a3b8c545f060ffaabf4b9eba", @nested={0x14f, 0x101, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@nested={0x4, 0xda}, @nested={0x4, 0x4}]}, @generic="cad7a21b633020adf20d5dd0ff53df85c1ccd3d8ebd419f636fc00a2181e115a0ad81d9200f7b6546fa5cba318a7468fde333a4824e26f88eab95b19a47a0f6a91d90e11c01a91a9a52e9f51997485a1cc5e92f6dc420a4e89b6319cd6ad987a07dec7c21667813e2e2c943e487fd3dfd76afce6e0a795558897f79f24d2ea3f5667b734f421cec3d1d767e4fd82e5b5f0d0626ed6484bc1ec4ad5f9abdf656bd20d9564651678029a3ed127ae1473ce016244e7e7d35ecb0fe402226d80b4611e88a832cb3e5e44a9269858df0c2d7b73df83e7f23d9bc39c8de6e012de99b496d959a2", @typed={0x8, 0xf3, 0x0, 0x0, @u32=0xff}, @generic="013c02e736005acde92f866d81f818abbfd1f3cb5f3d78d011bc22df4609372b644d4c1211898382dd2d643cbb5db9574b17b6176db6b6d8f6d3bfc04a8b981e949356a53d469fea40d1c2c497fec224ebd573"]}]}, @typed={0xc, 0xd, 0x0, 0x0, @u64=0x8}, @nested={0x1106, 0x76, 0x0, 0x1, [@generic="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", @generic="9191d963ef89d1185a5370b06c3b853ab18090a623c676ffa22ad11bbf47ce609efc3b6c5434a8b76a8b", @generic="3bac0f06499d5b874309d1ebf69eab83030196502128561e5334ed5b0aef01e6008042de48e5e43b841190414f655bcb66cc9fa566185084edf0959fdce5e9840da9cc383b927cf0100103d0937ef5b8f3d0e6d237c756684e613fa20d5bf7c077be7c1852b306f799405ffb78f8fd5bf9d8186f1df5c67c90398426b55baffa118b3d899acc7a0c7944670f54e80ae4c36372430a274ce3d02278a2b68312cb770ebdb8e21d0cffede6ad6cc52bc83a482eda42f0dad76c635b8bcd912279c47df8714611fa9a6991acaa24df604241b91cc8016a3e3a6ce6"]}, @nested={0xc, 0x18, 0x0, 0x1, [@nested={0x4, 0x56}, @nested={0x4, 0xb1}]}]}]}, 0x26b8}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) mmap$auto(0x0, 0x20009, 0x4, 0xeb2, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/sockstat\x00', 0x22000, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmsg$auto_NL80211_CMD_GET_COALESCE(r6, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x28, r8, 0x1, 0xb, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x82c}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1fcf8869ca53958d}, 0x4000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x40b00, 0x0) read$auto(0x3, 0x0, 0x80) 1m18.010858018s ago: executing program 1 (id=1122): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0xf8000000, 0xffffffff, 0x0, 0xe, 0x6, "938ea2d173ab8e40fe2a9879b43f6898a29bf86e6f763339cb35e64d09000000000000009e26168eeb6c1e333da4c61f57ff1de9d205133fc67c2e1d"}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x4, 0x3, 0x4, 0x9b72, r1, 0x200000000000) timer_create$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb0, 0x401, 0x300000000001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200000, 0x0) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r2 = socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4a6903, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r2) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240440c0}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x5522, 0xf15) ioctl$auto(r3, 0x5523, r3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2e93195b09a2c735577381da9b08cfc483405fa46d23d02d5b1b0881d55825a64ae5be7e20fe2358b0baf677c8ac1a6696e6b5ca29ce742e91079cdb63a4b1a0127f8041c11301109e63b5865d166d10a6eb5adca70ade8a7aae384928d7762db138e80a07927da39c7e478006", @ANYRES16=r5, @ANYBLOB="010025bd7000f9dbdf25010000000500070000000000080009000800000008000a000800000014001f00000000000000000000000000000000001400200000000000000000000000ffff64010101"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r6, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) socket(0x2, 0x5, 0x106) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) pread64$auto(r7, &(0x7f0000000240)='/kTbF\x03\x00\x00\x00\xd7aA\xb9Tgoc/scsi/sg', 0x66, 0x4) 1m16.560928856s ago: executing program 39 (id=1098): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r4 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r4, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000004c0)=""/148, 0x94) fsetxattr$auto(r5, &(0x7f0000000040)='-:\xcc+,/\x7f,\xa5:\x00', &(0x7f0000000380)="c3ed48fae4a575e69822c02c2ac479f933308ce53f2945e5885771f1bc37540540dbdc251f3172240829fbd8542e5f2746f502afe9fad788c87fea48459992a277b7028c4df036ca881e6152001b7febac6946797f1d8b9dd627e08e6686c9cb96c03b2d2fbe5348d323f3a987b8c8d1d37e50e2efba22a255aec4000bf79b01599dfb421d0aba0947c7b4815493bca28366a02033e00b63d1515aac61bbc5b6411b04b1878e96a42b38507430", 0x8, 0x9) 1m16.560852177s ago: executing program 1 (id=1124): msgctl$auto_MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000080)={{0x7, 0xee01, 0x0, 0x80, 0x6bf9, 0xfffffffe, 0x400}, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4, 0x8, 0x1, 0xf8, 0x2, 0x9, 0x7fff, 0x2, 0x1, @raw=0x66, @raw=0x5}) (async) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/status\x00', 0x220, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000080)=""/119, 0x77) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) r2 = fsopen$auto(&(0x7f0000000040)='/dev/dvb/adapter0/frontend0\x00', 0x100) execve$auto(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000300)=&(0x7f00000002c0)='/proc/self/coredump_filter\x00', &(0x7f0000000380)=&(0x7f0000000340)='/proc/self/coredump_filter\x00') (async) landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000100)="5294a0234671cb5d47be4bece0332ac54710c91af627ad25a1d583697665b27eb270500bbbb764cbd80ec38a05689db1493bbfc4b84fea2fac1fcb4c6fe487c1ee23acbded36303b9296b2aac16cb1d6d8a9be8f887e234f0c0c3ac93a442e8be34f4d7a3cbed3281179a0b70136e99e5febc7ae91f3f77095d2944e5112e3b411951e7daa4715dc7a0ebc5271c7aead4e9c3604da3a5da16231074fc357abf21904102efa85861f8f85652a34b2619f18af08697f2f4d3bbecb8b28e98f6ff4d1e13b9235009d3210f04ecd0f9d", 0x401) (async) read$auto(r1, 0x0, 0x1) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r3, 0x0, 0x6) (async) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sethostname$auto(0x0, 0xfffffff8) open(&(0x7f0000000280)='./cgroup\x00', 0x0, 0x178) 1m16.43645202s ago: executing program 1 (id=1125): r0 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000000), 0xd2f400, 0x0) mmap$auto(0x2000000000008, 0x7, 0x3, 0xeb1, r0, 0x80) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/pcm0p/sub1/status\x00', 0x40280, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x13) socket(0xa, 0x3, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x7, 0x637b, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0x1800000, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x400, 0x40000000000003, 0x462, 0x80000001, 0x50a7, 0x6d3f, 0x5, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x20a, 0x6, 0xfffffffffffffff6, 0x7, 0x9, 0x79c, 0x6, 0x100000000000000, 0x1ff, 0x400000000000f]}, 0x0) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x1, &(0x7f0000000080)={0x80000003, 0xd, 0x4002, 0x6, 0x400004, 0x8, 0xffffffffffffffff, [], {0x9, 0x5, 0xf, 0x29f, 0x100, 0x176d6fab, 0x101, 0x4000006, 0x5}, {0x100, 0x1, 0x10000, 0x0, 0x5, 0x3e, 0x104, 0x0, 0x7f8}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x9, 0x2020003, 0x7, 0x100009000000ebe, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cpu/0/cpuid\x00', 0x84c03, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/dynamic_events\x00', 0x2080, 0x0) getpid() 1m15.652919329s ago: executing program 1 (id=1126): r0 = open(0x0, 0x161342, 0x100) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x8) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x18, 0x1, 0x8) getsockopt$auto(r2, 0x114, 0x271b, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x82, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x271e, 0xfffffffffffffffc, 0x0) mmap$auto(0xffffffffffffffff, 0xc00020005, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi23\x00', 0xb01, 0x0) ioctl$auto_v4l2_fops_v4l2_dev(r4, 0x80085617, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) process_madvise$auto_MADV_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000040)="d4d9867e8131642f9adbaa410013794db979a1bc3268a9016f9490ba57e97ab04ee481224a295ea346be4e6880cb8ff6c548209b427f943fd19ac46468c3ce1025124be2", 0xfffffffffffffff7}, 0x7, 0x9, 0x2) ioctl$auto(r5, 0x560a, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40ebe, 0xffffffffffffffff, 0x308000000000) r6 = socket(0x22, 0x2, 0x1) fstat$auto(r6, 0x0) r7 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$auto(r7, 0x3b86, 0x38) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) getsockopt$auto_SO_ACCEPTCONN(0xffffffffffffffff, 0x9, 0x1e, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r8 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r8, &(0x7f0000000140)={{&(0x7f0000000100), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) 1m15.435403526s ago: executing program 1 (id=1127): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppol2tp\x00', 0x0, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0xfff2, 0x200007, 0x19) 1m12.764978893s ago: executing program 40 (id=1104): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppol2tp\x00', 0x0, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0xf2ff, 0x200007, 0x19) 1m8.758378576s ago: executing program 0 (id=1130): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = socket(0x22, 0x2, 0x1) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$auto(r1, 0x3b86, 0x38) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) getsockopt$auto_SO_ACCEPTCONN(0xffffffffffffffff, 0x9, 0x1e, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x32, 0x0, 0x7) shutdown$auto(0x200000003, 0x2) syz_genetlink_get_family_id$auto_ila(&(0x7f0000001040), r0) r4 = socket(0x2b, 0x1, 0x0) getsockopt$auto(r4, 0x0, 0x63, 0x0, &(0x7f00000000c0)=0x44) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000640), 0x8182, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000440)={0x1}) 1m7.750098316s ago: executing program 0 (id=1136): mmap$auto(0x0, 0x4020009, 0xdf, 0x420000000e31, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty30\x00', 0x62c00, 0x0) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0xc000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) socket(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x1b, 0x0, 0xfffffffffffffffc, 0x696b}, 0x6}, 0xd64d, 0x0) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe800000000400"}, 0x1c) 1m7.144500506s ago: executing program 2 (id=1137): close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40006, 0xe2, 0x20009b72, 0x7, 0x28000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(r0, 0x40044620, 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) init_module$auto(0x0, 0x1ff, &(0x7f00000002c0)='\x94\x19\xac\x80/der/S\x1auenc9\xf6a\x1b`\b\xab\xfaf\x94;\xc9\xc2,x1y\xd4\x1e\xba\xe4\x84\xcbWW\x8eK`lT\x9c\xc1\x98G \xad\v\x82U\x80w\xac\xe4OW?\xd6\x1e]\xac\x19\xf2\xc2\x98\x9d\xe3-\x95\xc1\x90\x99J\xccB\xd2,\x99R\x85\xd6h\xc8\xe4Ex\x18\x19\x8b\x9e\x05\a\x94l\xde\xc1x/lB\xf6\xe6\x00\xef6\xd6wJ') ioctl$auto_SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) mmap$auto(0x0, 0x400008, 0x803c, 0x9b72, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x40a, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x86, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x9, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0)) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) ioctl$auto(r3, 0x9000643a, 0xc35) connect$auto(0x3, 0x0, 0x55) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) 1m7.143944634s ago: executing program 0 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) shmget$auto(0x0, 0x200000005, 0x7d) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r1, 0x40}, 0x2, 0x0, 0x0, 0x8) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, &(0x7f0000000200)=""/238, 0xee) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) socketpair$auto(0x5, 0x9, 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0827c2d1", @ANYRESOCT, @ANYBLOB="01002dbd7000fddbdf250c000000100003800400038008000400", @ANYRES32=0x0, @ANYBLOB="0c0037b1a4da3d30", @ANYRES32=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x24004840}, 0x4000000) 1m7.076482704s ago: executing program 41 (id=1113): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppol2tp\x00', 0x0, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0xf400, 0x200007, 0x19) 1m6.596469706s ago: executing program 0 (id=1140): r0 = socket(0x10, 0x3, 0x6) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0020000", @ANYRES16, @ANYBLOB="01002d"], 0x2f0}, 0x1, 0x0, 0x60, 0x40000}, 0x50) 1m6.490089384s ago: executing program 0 (id=1141): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppol2tp\x00', 0x0, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x100202, 0x200007, 0x19) 1m5.278610334s ago: executing program 2 (id=1142): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x64ce, r0) wait4$auto(0x1, 0xfffffffffffffffc, 0x60000002, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000002100)={0x18, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48840}, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) r4 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r1) ioctl$auto_XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f00000000c0)={0x1, @inferred=r1, @raw=0xfff, 0x6, 0x8, '\x00', {0x1, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x7fffffff, 0x7fffffff, {0x6, 0xfb9}, {0xf, 0x81}, {0xa648, 0x17ab}, 0xe0, 0xfffffff8, 0x0, 0x9, 0x75a0fe1c, 0x9, 0x455b, 0x80, 0x4, 0x40, '\x00', 0x9, 0x7f, 0x9, 0x3}}) sendmsg$auto_TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002980)={&(0x7f0000007740)={0x26d0, r5, 0x120, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x248, 0x6, 0x0, 0x1, [@generic="729ad238dbd4d8678c7465daaae39a184ef1970f073141097f4d3c5b56c09a8ebe3b91b92ee91b", @generic="80110e3069", @generic="ecd1bc08f750d0b3d7a5ff5d6458976f3baf95193376b90545ad1b315a1ff8ad04f9b2e276f9d05958e196b739fa6886649aff4fa92d1abba042cad7a616dc9a12078b2a715a521902", @generic="6dde6ee946ce880bdca6c3e255f17a8413357c1e", @generic="58a72f847d8d2f2cc8046aaf55961546f6fc29d14afecb64908e3d4bf302c9f2da75e5", @generic="481f30eb85011d749679b9a8506f8ada0ff4505e7d0b5fd96eba042d7d23889ed28822c81450a26c4ebc65043c0d0d7da36864719753a0e93f36d9f294513346f8ff9e6bf143de5e9ab25f59f2", @generic="df91756c10263e06f10e8187f92fa6aa7fc5d0eafb2f8327ade01062e0d7c4e6642ca77d90939d28f09957aa72cc6cf1a7774b210df0c854a693dafcac40e230466481425aa9184ef6d2a3bf4d4019252ca0dc5edbd8d615b30d5c4b7bc62371c3d70fff85bb2a6f0d2eb9e02b2271f194b64ed9e20aa87f2274b410f9b889de9fd1fb050c42950d78ab301d5dcdaebff178e09a27a8f764d9a063589811d7d7dc6352b29ad1c53e2842f97eeca33852c50f6f9ae25e9253d7dfcf1ca6010d6f31658c0c66e74a0827034a0a53da8d58e1ed1ec439a77b64ad22e636011f5b08bdd8af6a9a48c8553eb9aacf8f7d3dc4ab", @generic="eb6747166e41b024033f647143b7adeec5aaf117075baab806c9695dfeb221acafcd98bce2a7c41ca3316bc0f3c877209c40945d33dbff7949aeedb6074309fb230939f720afb953d9613006d2859213dd48185b98d060cca9b5"]}, @TIPC_NLA_MON={0x1184, 0x9, 0x0, 0x1, [@generic="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", @nested={0x147, 0x18, 0x0, 0x1, [@generic="fc234ef42ad9d1f319e2576d2f092bd855db5e3a041e67104d4e0b63a61c96da3091b03e05a96f3841b8322b7814e4ba3ace8d", @nested={0x4, 0x68}, @generic="80d6508477494ede5910d1aeabfb3373016d6c259b110feaf13586bb8714f2f1d4e0be62d330a67c19aef1134ecd08375eafaff6bfcf899248e6dc3886e3e0b6e70762579270ca92f334b6a80fe943a9", @generic="3ce8a6183f69eff82b5d7134a7bc30b42fb5e7405bd3434bd21347b6059c46b2275f61c4aeb9f6a531b4b60296af1be9001ec15481cb32eceb64cd5633250a68b5b73648ebe93f6cbfce9978f6fae6b5d5148853521198441dae23521943bf1d0737aa32fd1c99db5a790823d291609a6178dafa4c0b0167f9690fc05792cc8b14a00633bbb38af55106fb536857b60b0c2d0e8eb313ef7fa1fbb3f70c03325a8ab07be1ac1366ccbb05a51a022b5b0c", @nested={0x4, 0xef}, @nested={0x4, 0xb0}, @nested={0x4, 0x85}]}, @nested={0x218, 0x2e, 0x0, 0x1, [@generic="1e57b480e00e0990e815f66f450b564c4de9393b0d56c2c715f0000fd8caf8cce017bce2ac627bf02efcdeb9b4fbafe42fe42d5b5190905efc5a", @generic="7f7c40ebc2039a2d48ea79844f5b3d171c7ff09831e1747b1cbf6df77809ad8be79948effc0483f6bfb9d3287225942fe09bec64eff7f42b5e9ad9fce3c9d6abb96d93fb4913d18657bdd2d9dba7282c083f176c5581f4b35cb56eec918b7410fbe928f8817324f3241a91d381e5a39ba3daf7c4ffdd78d02384c23d15d97782c1a5d81a57e89709864d57b14e93405428e214ab0214efc0a0e3a627b06b0ce6663e4b2063d02f68bd00108360bf93bae0f0fde9", @nested={0x4, 0x126}, @generic="9057f22e552bafccd6f7da7b6faaca9dab8e27e040af46822f17a02f205351e2bdad77971ccdd0fd1b183c7c5324f1abacb976ceb5333e1e10b38f9a13d289655b13ca417aada03357ec718d0f7caec142611613f4a771a1c97b2fd4d0328e9c93c83e778bf1452ac8bba16a7a761ab182ab58daed390ab146cdc61a46055291b4cc93e009", @nested={0x4, 0x52}, @typed={0xc, 0x7c, 0x0, 0x0, @u64=0xe}, @nested={0x4, 0x9a}, @generic="254de3904038eb631c1f828bc57a3e1557cb59c1381fd221c4a236cb7942b21f29a920069dc911de3d3a3a045947fdae2a5447a3682dce47dcac05b0fc5ad676749c1e74930b4d0f9c288b9a887a5ba6488ff479503ccdc97a27b865cd16333c6d7bbc3b8aef4aee070945df1aad0dcf442c16868973eb42173fec3ed8f8c1eddf6582c3e1324aa7c2"]}, @nested={0xc, 0xf1, 0x0, 0x1, [@nested={0x4, 0x39}, @typed={0x4, 0xd0}]}, @nested={0x14, 0x47, 0x0, 0x1, [@nested={0x4, 0xf5}, @nested={0x4, 0x106}, @nested={0x4, 0x59}, @typed={0x4, 0x132}]}]}, @TIPC_NLA_NODE={0x12f0, 0x6, 0x0, 0x1, [@nested={0x1ca, 0x1a4, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @uid=r7}, @generic="c5fcec2361951af4bfb228a08210b9cee7f7c118f86d78e90d0fed98cb6d3810c9704ac6b35539a0c4d87cd3b8cfb6fe8034ef45dba93d0c4c0b03b83b64fa78f3c899610b146736c0415c775fd2b3ab6db5b7ee9b256ccd91", @generic="f369eead7a7ec69269a3b8c545f060ffaabf4b9eba", @nested={0x14f, 0x101, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@nested={0x4, 0xda}, @nested={0x4, 0x4}]}, @generic="cad7a21b633020adf20d5dd0ff53df85c1ccd3d8ebd419f636fc00a2181e115a0ad81d9200f7b6546fa5cba318a7468fde333a4824e26f88eab95b19a47a0f6a91d90e11c01a91a9a52e9f51997485a1cc5e92f6dc420a4e89b6319cd6ad987a07dec7c21667813e2e2c943e487fd3dfd76afce6e0a795558897f79f24d2ea3f5667b734f421cec3d1d767e4fd82e5b5f0d0626ed6484bc1ec4ad5f9abdf656bd20d9564651678029a3ed127ae1473ce016244e7e7d35ecb0fe402226d80b4611e88a832cb3e5e44a9269858df0c2d7b73df83e7f23d9bc39c8de6e012de99b496d959a2", @typed={0x8, 0xf3, 0x0, 0x0, @u32=0xff}, @generic="013c02e736005acde92f866d81f818abbfd1f3cb5f3d78d011bc22df4609372b644d4c1211898382dd2d643cbb5db9574b17b6176db6b6d8f6d3bfc04a8b981e949356a53d469fea40d1c2c497fec224ebd573"]}]}, @typed={0xc, 0xd, 0x0, 0x0, @u64=0x8}, @nested={0x1106, 0x76, 0x0, 0x1, [@generic="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", @generic="9191d963ef89d1185a5370b06c3b853ab18090a623c676ffa22ad11bbf47ce609efc3b6c5434a8b76a8b", @generic="3bac0f06499d5b874309d1ebf69eab83030196502128561e5334ed5b0aef01e6008042de48e5e43b841190414f655bcb66cc9fa566185084edf0959fdce5e9840da9cc383b927cf0100103d0937ef5b8f3d0e6d237c756684e613fa20d5bf7c077be7c1852b306f799405ffb78f8fd5bf9d8186f1df5c67c90398426b55baffa118b3d899acc7a0c7944670f54e80ae4c36372430a274ce3d02278a2b68312cb770ebdb8e21d0cffede6ad6cc52bc83a482eda42f0dad76c635b8bcd912279c47df8714611fa9a6991acaa24df604241b91cc8016a3e3a6ce6"]}, @nested={0xc, 0x18, 0x0, 0x1, [@nested={0x4, 0x56}, @nested={0x4, 0xb1}]}]}]}, 0x26d0}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) mmap$auto(0x0, 0x20009, 0x4, 0xeb2, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/sockstat\x00', 0x22000, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmsg$auto_NL80211_CMD_GET_COALESCE(r6, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x28, r8, 0x1, 0xb, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x82c}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1fcf8869ca53958d}, 0x4000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x40b00, 0x0) read$auto(0x3, 0x0, 0x80) 1m4.921082691s ago: executing program 2 (id=1143): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x64ce, r0) wait4$auto(0x1, 0xfffffffffffffffc, 0x60000002, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000002100)={0x18, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48840}, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) r4 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r1) ioctl$auto_XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f00000000c0)={0x1, @inferred=r1, @raw=0xfff, 0x6, 0x8, '\x00', {0x1, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x7fffffff, 0x7fffffff, {0x6, 0xfb9}, {0xf, 0x81}, {0xa648, 0x17ab}, 0xe0, 0xfffffff8, 0x0, 0x9, 0x75a0fe1c, 0x9, 0x455b, 0x80, 0x4, 0x40, '\x00', 0x9, 0x7f, 0x9, 0x3}}) sendmsg$auto_TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002980)={&(0x7f0000007740)={0x26c8, r5, 0x120, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x240, 0x6, 0x0, 0x1, [@generic="729ad238dbd4d8678c7465daaae39a184ef1970f073141097f4d3c5b56c09a8ebe3b91b92ee91b", @generic="80110e3069", @generic="ecd1bc08f750d0b3d7a5ff5d6458976f3baf95193376b90545ad1b315a1ff8ad04f9b2e276f9d05958e196b739fa6886649aff4fa92d1abba042cad7a616dc9a12078b2a715a521902", @generic="6dde6ee946ce880bdca6c3e255f17a8413357c1e", @generic="58a72f847d8d2f2cc8046aaf55961546f6fc29d14afecb64908e3d4bf302c9f2da75e5", @generic="481f30eb85011d749679b9a8506f8ada0ff4505e7d0b5fd96eba042d7d23889ed28822c81450a26c4ebc65043c0d0d7da36864719753a0e93f36d9f294513346f8ff9e6bf143de5e9ab25f59f2", @generic="df91756c10263e06f10e8187f92fa6aa7fc5d0eafb2f8327ade01062e0d7c4e6642ca77d90939d28f09957aa72cc6cf1a7774b210df0c854a693dafcac40e230466481425aa9184ef6d2a3bf4d4019252ca0dc5edbd8d615b30d5c4b7bc62371c3d70fff85bb2a6f0d2eb9e02b2271f194b64ed9e20aa87f2274b410f9b889de9fd1fb050c42950d78ab301d5dcdaebff178e09a27a8f764d9a063589811d7d7dc6352b29ad1c53e2842f97eeca33852c50f6f9ae25e9253d7dfcf1ca6010d6f31658c0c66e74a0827034a0a53da8d58e1ed1ec439a77b64ad22e636011f5b08bdd8af6a9a48c8553e", @generic="eb6747166e41b024033f647143b7adeec5aaf117075baab806c9695dfeb221acafcd98bce2a7c41ca3316bc0f3c877209c40945d33dbff7949aeedb6074309fb230939f720afb953d9613006d2859213dd48185b98d060cca9b5"]}, @TIPC_NLA_MON={0x1184, 0x9, 0x0, 0x1, [@generic="c2a5f4d0103af4accc6fe61ce54f66cac8027fc883729dbdc14de39df749ede630a38200c420a8b12cf67a3c2b6b05e1ad902fddfc36549d7b7e45a392dfa7d662135cdb23d2ff92d4acf116bc175c29f16ab96e939d4d1a20355f3e77eb2798a7437b1c9cb585777c7099df01512a6fc003e97e46d36a7b4f2e189033e0f1ce36307ed265015441570b168806c916bb7eac8b3486dd1a1aefdfdd9c35b5d3a0da7b08293c83cd0bd50cbf7441b13fa4e5955f8e729ba9045dd808bd71553f3434cc26fcac0935112942ccb9b74e2ad255368e6aca8d30f4d4d70faf2d7c5ca94e12019b3f70119d4fd6f63d1dfc8f753c80ef1f4d25441c3f8fa084e4ec051e18113b2a45cddcd0f3fa6d5fab53a53af36c24b9a0fb352430f41dc62c48303d8faf67ac6f0102305ae93d7df5a1bbb953214afa4be62d987a819c0d17271746c4ded6935f3f90fdb6c9751846522de7f08840fcb781add869e960ff730792224c632e917e922308448f438df85716490a98d8326b75988f20fc930e93124ae2f89ea2bb7a4cdfad105da6c4c0503ebe7cf521f6b3ff28fd39bce5b7eb5f6228935689ee873977ebdf2e071f96b4a177d92c401898d7662b9d29e39f435e5841b254c6c51a7f02914f65ff0b087ba91ac18cae131b7042dc8d8df0eea0ee50492e5ef4671a352779bc2a16c85afc0bdae712bef62cff521b93d03e31970864d78baac1a0445164a88e83474d73a997f735206de6e24c97462ef2ad8f0b5a213df6d514e9d6442da0e423bc95e7c889c59ac28a6625b9b0efe7622d467819abf5b073d0044d25475e9e4d062f20f47030a15cae366009f4847907f341c3519ef08de4585036ac2e7a474f06454ed9d15b25cc2cb2031b50e455282d3ad7e53e47ec8d999d521327c5869a39be7998f4f772287c9ff1ceea5b2c550038a36826a1d2d8d145c8b391fda92ad3a1ce488853934cc51c8cd45497203f6c7f0bbd4c49bb5549ddcd1e4ee29b3708e5f06ecd18459bd30d9884fa51bf67f533ecf949df4a3f5f131570b29ae8a315f7b8b7a9cef6b9937b44344f17589ac64c7e2d9de655ef3bfa7af90a2827534480e3d7ac496ceb39343bee56c2819641b8a3b2decbc35b1c19ef185dc189faac64de352d77748540de7607380178f4d3e9114372d7d79c5ec9d73756ffc6dda04a43088ee775a0931e29924187ed3fd1eb1c26128941dd87f4043dd9e87fe7669e94698b925db19ef94c6cd05e6e6516328e7e17600a8d789cb4064cabcd92a523dc929f91683687e4837faca24623a850e690deb8d648bcdcdf82cca025a16e478ad14f172912d589c6768bfbe70a2947a8616bd5b6c2de43afafdd992763cd64d7220657e29387b45266ad6edf2e459cf83b50c6b7e8564d5977320baf662cb6832ab8c6d56c3513133d6deb57cd5a01561adf3d257fa81ab4bb1f2f455fb95c0020a577129607d3d1e024a8520bf288de3b185e9d33b053b33d7fa52781a249334ccc9f58716f388a32f4eb4f79e84c522e7f5bd568ec5a139e80f52b8ebd2de61d1d59e995928ac92952e9d0050f3852a7df1a923641d8708e3acf0b348c4495b31d47a9afc369409b8407da2c7771f9b6a68167719b743e790db5822afafdfb1743b22294f39e5564f5340dfbd91e3c87875005393ad50acbde4bef4d53c94456c18015847f1ce5d30646a719e2329929c1dcfb82630b36f4f0d34aed50772179bc91a2e274e15eff9332c1559ea4491569f3e47b31dac87a2b340818edbf34ec32c3ee3488481c43d35e61af9ed01eaacb8a9ea6b1fec6a53b16152a6f2949df6d738aea9c34ef0853406fb1dec51a4d6960cd5b74d5f11fc3c0e05af0e2f6ac545dfa714048d8ae8f3f0d1cb48e437d2b17dfb88584a83cccdd8e6571a003fcfd751569e4308f63b5d88ff2db3b5b84037349258f0d83d351793c1485f30ffff04c05cb6b7cc6c650bc654cec30f7737fe1a3c6c8b2829e5d0d02869055a7262d1b06a74f127b767a85aa55140b416dee1a4e805ecad5ab64bc12ad451c26cb6ffdf1995864674b52cb8ac0386fef57df025d9c79835abfbb862e0db7779b24bb1e8e997caf7806535e39611fdef638dac71e1a7f29e7abaa61c567787b37e9a7d22a6c60b55a751c7157b068d34f13a4080bab1067cae8e3f8ffcff729a16dc1f59d732f777552a022213e71178ab5b52435682d4be4cda17aa33c16b5e721a44cf45510c73c9f8da2ef25f6e91e46720b4650be99c00aba3ea539d237b8fb43008315cb98c2152823aae966c8bae33a22f5be8498ebae93fb38494fdb5b00fb160a51f961eda77ca3852f9d642e285d8e7fb51f1fba466b773d0796207dc413d75213fe53e47789ac87ead3e38426810384f30263b0fb6ca6146783fb295fc7d8b0e10a27f4279534c121e598c405e602333272c8f2a21b5e001705ce230c9f89b22006ba1fdec796b2a57fb12d42a62390290eba2985bcd589335f1af539eafc5c11b8d48edddfb75c9f85b503bf39ad0c64416a8038c00bbeaa79ad291093b98d8bc8f63ad12e8b11e2019053624abc77017f656c6526eb1071b6929147465707aa4a8c4b780063cf42e05fcb511489c8252fd84167d496bbdce42bd5510a613fce98dadd93691bee4409f0e18486e1a73413913efe2c3d4e1913b0a72857c40d91f373a13eee02ac170f6929c561c8727e27eb80b0685cfe75129310828657ffc0fef7cd4a867993f296d99da9dbf28fd897a68fb1541811f88bd7df819b976c682391c666d4fb98efa3df7f2cd211fd40ee8dfb46a1d2494615f597b452ebce9faf388f425e81aaed47fc42a2ee424f7ad388587cebca1d42fb26d75b5dadcbe03b8931a40b672b9d3fa088e454387dbadc8e80f29af265a1bcab8173bc2a4764c9a8b6d3044bccf71a69040913f056070f22b5f6575c98c9599db50e81d956f3b0f76cbfc45f4c2f4faccb6b0f647186d33238f5d9c5ca48be184873243ef528da894d5ed92c4623af343e7a59160c4f3563c3c08b69ebe66eab5ea2792355d7ac89e4de204d7cbf319e655c4d8c2d3bddd74042b9923ec3ccf68bcd12551d8246638a0e535782f55f30da828ecca8be59be0187882bb266294ed5e0a95e075b715abbb7d4ff0277c046ba19a49055f0010e4059610d45e8cbffdf7b43dd62f6a1db3578ea2601e6aa431df443d2a1edbe697ffbba9c88410dc5c0557a41554dcdb7ffe22973b4f0267f4d595ee2a0cd43ec859d4a1fceae9868ff50bc051988e2d0b515275b134b3a80b16775f05cb92dbb4ad1310562d1c53d76a392c6115cc12f017d8c0902187a87df5c31110364adda7c29944d93ab4a44e6b5686b762a5b611018ad366550fec1d7822030a336935ac10e6a97d7c0d1d945d234e7a1d4466f34f24c9d4bec77c10ea95ff024d53d18ee0ac931be3352c3e5abb4543678c8284f40a589d51f2298489f56da7a4c5b87ca5fa40e3467203481e4e4ce9a419836516aa37770bc570bd25bc251931becaf58e7f522191528686f12deb1224864a24d2e5b0e245451f4c44143b65c89e1218c9ed5e89c1379bbc6a34c42929fe48bb305744d8e1f1bab6e9c480a19edf45d6853fb3a6b40c70500e8f1cb4ac45f0a525a99e30f728d1895d261ba450816de1657e770a22840d1350452448f0bf2bcfea952dcf2aacd07e064e6e240e4e51aaced47a94cfd3e52e33d0afdf23feede7e8890bfebd24bd3293beee62652b8db53aa0a12d821fc7f3494ac68956cdf492ec659368ef129d5e259c38aeeb0f7fb668b4fe566a5892dcf8f82b6e4d5ccaad7b36916610ddf1d2ef51025db09aa001d290670d293376b0b6cde4c0354d6a9e5a38beb32e39c5fafdbfaf11ecfa45cf7ddd38e5dde67b6ae4b7f17283fa5d18d793472e24ab48dc5bc9e0cecff1fa5e407c19ad1f14bdcc2d7966139a2ed6c30e0f558defb43543e556ff401ec5de6133c3027b4b86df08b18fa50658a47af153d52fdb22c87821fa57946bc4bd29f64b467decbda716d93d9afc3b1e6e34b56007de8564d6c5dc578d6f4314d7571b7b845db1d006f8e5d5aa53c2f0e9ce4fcd560fc9a727c8cac421fabca352b747cc8a75f6e843b4b23e540086e08236ef07a061e5d12a1aee6aa840921c2282a1b60cbbc08542f9f79751fd4e7b0dff879f39551fde12d698901a1861b91af49d36c01fcc1ac52c6d397608650366aba18cb5f6bc0d0540fee2c9c828296af97b84f3b62ab03bde232e3c29cc6643fd84e437a1f7bd49f755f0e3ca3ec655793db57aaf3a5350d9a397911d584b5276fe68a9096b9f489937c18b110ae942ab8cbd4ef2ac0ff30c43922230a369a23af51b6b3a1e30bc4404c4d698e6c5239a0970a606b13da95f694fe569b8f20ed20cdbfc28c321dcf36aed78f0c4d920870ea2be919fcd008330112bb699316d929762b05d4fa39abdd2aa565bf29246c0438f80fcc3c61787d749d0d696f29407ece15acb7d1fc9cd01d84a0861084e63ac5d8eba8479ee3d6b239ee1415147e26d36e3cbd67d55b0f045f5760b9ccca8ce5c09ce14f3c3410a693fe93c509702dd1642ceccf0d7f7b02c17e86d90811be6423de378dbd5089a49a9431ef62e0de5d1186ca53d5d9a03bf56db14cbd60a6649d29e1c405016f05e2c42079b90f2f47456d0b0084523c8f4a9fecde2eb54598ecfa6229f16095005b65b465843e0f5b57bf210e5c5edfa0331441dadaf61b8c244511804bc1728ccb6591cd1123c719cc7d42b6c7685ab2330a439baec5d2278f5a947d7ef9910d4438c8ae3aff3851df84c7153f2546887107bc55f1fcec65a753ba8d682937f625f5ca4971d481428bf6c1f8c3e49822eee4c9b542c8a43336f4779143692faacd48516cf4d03d3b42c141f6b3fba94f892e20618b8536de19495abed664b86aa99c876f55b0c76146bd3754cbc8e152c63fc9c9f07dedf679c49b700a59a36143c9ec8ffd7702396a413b492e6b373329a4b6f4178cfb3e29ce8e1e837552155bca54622cb6d999f9ee26c3f26e8b71a768df", @nested={0x147, 0x18, 0x0, 0x1, [@generic="fc234ef42ad9d1f319e2576d2f092bd855db5e3a041e67104d4e0b63a61c96da3091b03e05a96f3841b8322b7814e4ba3ace8d", @nested={0x4, 0x68}, @generic="80d6508477494ede5910d1aeabfb3373016d6c259b110feaf13586bb8714f2f1d4e0be62d330a67c19aef1134ecd08375eafaff6bfcf899248e6dc3886e3e0b6e70762579270ca92f334b6a80fe943a9", @generic="3ce8a6183f69eff82b5d7134a7bc30b42fb5e7405bd3434bd21347b6059c46b2275f61c4aeb9f6a531b4b60296af1be9001ec15481cb32eceb64cd5633250a68b5b73648ebe93f6cbfce9978f6fae6b5d5148853521198441dae23521943bf1d0737aa32fd1c99db5a790823d291609a6178dafa4c0b0167f9690fc05792cc8b14a00633bbb38af55106fb536857b60b0c2d0e8eb313ef7fa1fbb3f70c03325a8ab07be1ac1366ccbb05a51a022b5b0c", @nested={0x4, 0xef}, @nested={0x4, 0xb0}, @nested={0x4, 0x85}]}, @nested={0x218, 0x2e, 0x0, 0x1, [@generic="1e57b480e00e0990e815f66f450b564c4de9393b0d56c2c715f0000fd8caf8cce017bce2ac627bf02efcdeb9b4fbafe42fe42d5b5190905efc5a", @generic="7f7c40ebc2039a2d48ea79844f5b3d171c7ff09831e1747b1cbf6df77809ad8be79948effc0483f6bfb9d3287225942fe09bec64eff7f42b5e9ad9fce3c9d6abb96d93fb4913d18657bdd2d9dba7282c083f176c5581f4b35cb56eec918b7410fbe928f8817324f3241a91d381e5a39ba3daf7c4ffdd78d02384c23d15d97782c1a5d81a57e89709864d57b14e93405428e214ab0214efc0a0e3a627b06b0ce6663e4b2063d02f68bd00108360bf93bae0f0fde9", @nested={0x4, 0x126}, @generic="9057f22e552bafccd6f7da7b6faaca9dab8e27e040af46822f17a02f205351e2bdad77971ccdd0fd1b183c7c5324f1abacb976ceb5333e1e10b38f9a13d289655b13ca417aada03357ec718d0f7caec142611613f4a771a1c97b2fd4d0328e9c93c83e778bf1452ac8bba16a7a761ab182ab58daed390ab146cdc61a46055291b4cc93e009", @nested={0x4, 0x52}, @typed={0xc, 0x7c, 0x0, 0x0, @u64=0xe}, @nested={0x4, 0x9a}, @generic="254de3904038eb631c1f828bc57a3e1557cb59c1381fd221c4a236cb7942b21f29a920069dc911de3d3a3a045947fdae2a5447a3682dce47dcac05b0fc5ad676749c1e74930b4d0f9c288b9a887a5ba6488ff479503ccdc97a27b865cd16333c6d7bbc3b8aef4aee070945df1aad0dcf442c16868973eb42173fec3ed8f8c1eddf6582c3e1324aa7c2"]}, @nested={0xc, 0xf1, 0x0, 0x1, [@nested={0x4, 0x39}, @typed={0x4, 0xd0}]}, @nested={0x14, 0x47, 0x0, 0x1, [@nested={0x4, 0xf5}, @nested={0x4, 0x106}, @nested={0x4, 0x59}, @typed={0x4, 0x132}]}]}, @TIPC_NLA_NODE={0x12f0, 0x6, 0x0, 0x1, [@nested={0x1ca, 0x1a4, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @uid=r7}, @generic="c5fcec2361951af4bfb228a08210b9cee7f7c118f86d78e90d0fed98cb6d3810c9704ac6b35539a0c4d87cd3b8cfb6fe8034ef45dba93d0c4c0b03b83b64fa78f3c899610b146736c0415c775fd2b3ab6db5b7ee9b256ccd91", @generic="f369eead7a7ec69269a3b8c545f060ffaabf4b9eba", @nested={0x14f, 0x101, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@nested={0x4, 0xda}, @nested={0x4, 0x4}]}, @generic="cad7a21b633020adf20d5dd0ff53df85c1ccd3d8ebd419f636fc00a2181e115a0ad81d9200f7b6546fa5cba318a7468fde333a4824e26f88eab95b19a47a0f6a91d90e11c01a91a9a52e9f51997485a1cc5e92f6dc420a4e89b6319cd6ad987a07dec7c21667813e2e2c943e487fd3dfd76afce6e0a795558897f79f24d2ea3f5667b734f421cec3d1d767e4fd82e5b5f0d0626ed6484bc1ec4ad5f9abdf656bd20d9564651678029a3ed127ae1473ce016244e7e7d35ecb0fe402226d80b4611e88a832cb3e5e44a9269858df0c2d7b73df83e7f23d9bc39c8de6e012de99b496d959a2", @typed={0x8, 0xf3, 0x0, 0x0, @u32=0xff}, @generic="013c02e736005acde92f866d81f818abbfd1f3cb5f3d78d011bc22df4609372b644d4c1211898382dd2d643cbb5db9574b17b6176db6b6d8f6d3bfc04a8b981e949356a53d469fea40d1c2c497fec224ebd573"]}]}, @typed={0xc, 0xd, 0x0, 0x0, @u64=0x8}, @nested={0x1106, 0x76, 0x0, 0x1, [@generic="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", @generic="9191d963ef89d1185a5370b06c3b853ab18090a623c676ffa22ad11bbf47ce609efc3b6c5434a8b76a8b", @generic="3bac0f06499d5b874309d1ebf69eab83030196502128561e5334ed5b0aef01e6008042de48e5e43b841190414f655bcb66cc9fa566185084edf0959fdce5e9840da9cc383b927cf0100103d0937ef5b8f3d0e6d237c756684e613fa20d5bf7c077be7c1852b306f799405ffb78f8fd5bf9d8186f1df5c67c90398426b55baffa118b3d899acc7a0c7944670f54e80ae4c36372430a274ce3d02278a2b68312cb770ebdb8e21d0cffede6ad6cc52bc83a482eda42f0dad76c635b8bcd912279c47df8714611fa9a6991acaa24df604241b91cc8016a3e3a6ce6"]}, @nested={0xc, 0x18, 0x0, 0x1, [@nested={0x4, 0x56}, @nested={0x4, 0xb1}]}]}]}, 0x26c8}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) mmap$auto(0x0, 0x20009, 0x4, 0xeb2, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/sockstat\x00', 0x22000, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmsg$auto_NL80211_CMD_GET_COALESCE(r6, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x28, r8, 0x1, 0xb, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x82c}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1fcf8869ca53958d}, 0x4000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x40b00, 0x0) read$auto(0x3, 0x0, 0x80) 1m4.445239606s ago: executing program 2 (id=1144): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) pread64$auto(r0, &(0x7f0000000380)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000)="057fd608090060444da799", 0x8, &(0x7f0000000040)={&(0x7f00000000c0)="a20743887b1d50a293f8829593a6af4d0d9de42dc8357e0ea776cf01a801f46858ad459fab46d110a5b7d0342f3292a7c1a93569302c3e60f2d420559bdcbb12aa115e63ed727d7cf6c28476086bf1d82a3f4c300f8ee32bf38c51151c80afc6bf83502f62d944f4d6a9ee54e1483498880a3b7fb29d02987520f513c8aa33330c463533dc40311303d48ab5ff", 0x7}, 0x6b6f, &(0x7f0000000180)="23d9e298691a277f1434f5f2803b339ec380f9926142827f09b87f65526fcc7cb54ee16fd3c5d2cd67", 0xfffffffffffffffd, 0x9}, 0xfffff7af}, 0x0, 0x7) 1m4.335467064s ago: executing program 2 (id=1145): r0 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000200), 0xc0400, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x22100, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) ioctl$auto_TIOCGDEV2(r1, 0x5452, 0x0) ioctl$auto_BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000240)={"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", 0x4, 0x1}) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/status\x00', 0x220, 0x0) read$auto_proc_single_file_operations_base(r2, &(0x7f0000000080)=""/119, 0x77) 1m4.219588755s ago: executing program 2 (id=1146): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1, 0x948d, 0x1ff, 0x15f4da07, 0x3, 0x8003, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x0, 0x3, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x10001, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppol2tp\x00', 0x0, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x59, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xeca9c19}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) 1m2.170899814s ago: executing program 6 (id=1139): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) fstat$auto(0xffffffffffffffff, 0x0) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$auto(r0, 0x3b86, 0x38) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) getsockopt$auto_SO_ACCEPTCONN(0xffffffffffffffff, 0x9, 0x1e, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x32, 0x0, 0x7) shutdown$auto(0x200000003, 0x2) syz_genetlink_get_family_id$auto_ila(&(0x7f0000001040), 0xffffffffffffffff) r3 = socket(0x2b, 0x1, 0x0) getsockopt$auto(r3, 0x0, 0x63, 0x0, &(0x7f00000000c0)=0x44) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000640), 0x8182, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000440)={0x1}) 1m1.226947787s ago: executing program 6 (id=1147): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r1, 0xc1205531, r0) (fail_nth: 8) 1m0.892005712s ago: executing program 6 (id=1148): close_range$auto(0x2, 0xffffffffffffffff, 0x80000001) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x73) (async) r1 = io_uring_setup$auto(0x9, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) (async) close_range$auto(0x2, r1, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x742, 0x0) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r2, 0x1, 0xb, 0x0, 0x4) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100008, 0x4000843, 0x3, 0xfffff000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) (async) read$auto_severities_coverage_fops_severity(r1, &(0x7f0000000380)=""/220, 0xdc) (async) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x2, 0x801, 0x106) (async) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r6) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r5) close_range$auto(r3, r0, 0x8) (async) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400f03a", @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="0800010006000000"], 0x24}, 0x1, 0x0, 0x0, 0x20044494}, 0x4000000) (async) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000226bd7000ffdbdf2501000000000000000f0008000000aac88dec51d04e77796c1e600ba8ab8b4c4dd38756341f2dcc597bce05a7c40a5b299ce3024ccd7b9a4d9372c53bb6e8e45793c3022f3eda16a046a0101c94141129345a0131800a18f7a2689b69bf3b4d9568c41f9b01b3fc53b1908f6974c9581c9c6566f26d27edb180610be4e8343f9dfd179d6df61cbb413bc75638345b3119d57cb47f530d5cbc770861f666b8710c32b4e3ae418c332c51ef3eca577b36"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40040) (async) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x80000, 0x0) (async) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0xdb, 0x0, [{0xc0010141, 0x3fd, 0x4}]}) 59.959524083s ago: executing program 42 (id=1127): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppol2tp\x00', 0x0, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0xfff2, 0x200007, 0x19) 59.944985433s ago: executing program 6 (id=1150): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) getpid() sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048804}, 0x4000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0x2c000044) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) io_uring_setup$auto(0x1, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/hid\x00', 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) 58.964214063s ago: executing program 6 (id=1151): quotactl$auto(0x9, 0x0, 0x62a0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2000c, 0x800000000de, 0xe31, 0x40000000000a5, 0x8000) r0 = inotify_init1$auto(0x7fff) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto_SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000080)="351547") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) r3 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000001240)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/ipsec\x00', 0x400, 0x0) read$auto_ipsec_dbg_fops_ipsec(r3, 0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x2, 0xa94e, 0x66, 0x0, 0x0, 0x0, 0x1000000006, 0xfffffffffffffffe, 0x7ffffffffffffffd, 0x5, 0x7fffffff, 0x6, 0x7, 0x7, 0x61, 0x40000103}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r1, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRESOCT=r5], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x0) r6 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DROP2(r6, 0x4143, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) lseek$auto(r1, 0x7, 0x401) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) sendfile$auto(r1, r0, 0x0, 0x5) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) prctl$auto(0x4000002a, 0x3, 0x0, 0x1, 0x0) 58.016129463s ago: executing program 6 (id=1152): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x81) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppol2tp\x00', 0x0, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x40, 0x0) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) 51.405790956s ago: executing program 43 (id=1141): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppol2tp\x00', 0x0, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x100202, 0x200007, 0x19) 49.124914922s ago: executing program 44 (id=1146): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1, 0x948d, 0x1ff, 0x15f4da07, 0x3, 0x8003, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x0, 0x3, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x10001, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppol2tp\x00', 0x0, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x59, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xeca9c19}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) 49.081212024s ago: executing program 5 (id=1168): openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000002b00)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x20900, 0x0) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x5, 0x2020009, 0x3, 0x800000eb1, 0xfffffffffffffffa, 0x1008010) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x2, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x38020000) write$auto_proc_page_owner_threshold_(r1, &(0x7f00000001c0)="ffca3d37aaf06857288cdb8ab93c5c1bcdbf0904604b1b737dbb689ae4f64a1e59f389e67b555d4d703fc1e689d94c5b2d23bcdaf83f58330cf1451d51569eb48b9632705fc6fa10ba365f331a3e263c5ba7daed50edf20548f1966f5cd8053b66bb6489e7145a", 0x67) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x20004, 0x20d3e, 0x1, 0x6, 0x100000003, 0x800295f4da0d, 0x5, 0x3, 0x62, 0x80000001, 0x50a7, 0xc2, 0x6, 0xfffffffffffffff8, 0x3]}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd4\x00', 0x101842, 0x0) 48.03715791s ago: executing program 5 (id=1169): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/vulnerabilities/spec_store_bypass\x00', 0x101800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x0, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video57\x00', 0xa240, 0x0) ioctl$auto(r1, 0xc0585611, r1) 47.86317902s ago: executing program 5 (id=1170): keyctl$auto_KEYCTL_NEGATE(0xd, 0x2, 0xe, 0x1, 0x6) keyctl$auto_KEYCTL_NEGATE(0xd, 0x2, 0x4, 0x4, 0x10001) (async) keyctl$auto_KEYCTL_NEGATE(0xd, 0x4, 0x95b, 0xfffffffffffffffb, 0x600000000000000) (async) keyctl$auto_KEYCTL_NEGATE(0xd, 0x9, 0x7, 0x6, 0x9) (async) keyctl$auto_KEYCTL_NEGATE(0xd, 0x800, 0x7, 0xaa4b, 0x80000001) keyctl$auto_KEYCTL_NEGATE(0xd, 0x7fff, 0xfff, 0x0, 0x0) (async) keyctl$auto_KEYCTL_NEGATE(0xd, 0x0, 0x6, 0xf, 0xf) (async) keyctl$auto_KEYCTL_NEGATE(0xd, 0x8, 0x7f, 0xffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_UNSPEC={0xc2, 0x0, "00bc59441823009c6dfacc8bcadea5926d22d7b1b782b00d8f6449025d7bd90f1376d618fee1a9348b2050fe3e98309c13e5e852555729becd51eb366f5382a61f2b877fbabd5a3469cc604e6ec4f971069a58a2c70441dd76914a3e0b7687bdbc9b1339c55570952263b9798ddcf2abb82ac1e57e56859f4c976383ade4e887f313f275401034c441f35e6743708b60f132a23642f296f447b07b0d3cfbc99e483df14d10a22bc3464de382a106ac053610144c5ca0a1710a81a5071cfb"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000040}, 0x810) (async) keyctl$auto_KEYCTL_NEGATE(0xd, 0x6, 0x8, 0xed, 0x3) (async) keyctl$auto_KEYCTL_NEGATE(0xd, 0x2, 0x3, 0xfffffffc00000000, 0x80000001) (async) keyctl$auto_KEYCTL_NEGATE(0xd, 0x1, 0x1000000, 0x7, 0x80000001) (async) execve$auto(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=&(0x7f0000000240)='\xa0,%@.[.]-(%\'\x00', &(0x7f0000000300)=&(0x7f00000002c0)='-') (async) keyctl$auto_KEYCTL_NEGATE(0xd, 0xcd3, 0x8, 0x1, 0xc) keyctl$auto_KEYCTL_NEGATE(0xd, 0x9d7, 0x9, 0x100, 0x100) keyctl$auto_KEYCTL_NEGATE(0xd, 0x5, 0x6, 0x400, 0x1ff) (async) keyctl$auto_KEYCTL_NEGATE(0xd, 0x2, 0x1000, 0x8, 0x0) keyctl$auto_KEYCTL_NEGATE(0xd, 0x3, 0x6, 0x80000000, 0xffffffffffffffff) (async) keyctl$auto_KEYCTL_NEGATE(0xd, 0x607, 0xfffffffffffff6c9, 0xe156, 0x1) keyctl$auto_KEYCTL_NEGATE(0xd, 0x101, 0x8000, 0x102000, 0x4) (async) keyctl$auto_KEYCTL_NEGATE(0xd, 0x400, 0x2, 0x88e, 0x53) (async, rerun: 32) bind$auto(r0, &(0x7f0000000340)=@ax25={0x3, @bcast}, 0x9) (rerun: 32) keyctl$auto_KEYCTL_NEGATE(0xd, 0x0, 0x2, 0x5, 0x7ff) (async) keyctl$auto_KEYCTL_NEGATE(0xd, 0x7f, 0x3, 0x7ff, 0x100000000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptyy4\x00', 0x4801, 0x0) (async) keyctl$auto_KEYCTL_NEGATE(0xd, 0xc, 0x1, 0xd8123fb, 0x3fc000) (async, rerun: 32) keyctl$auto_KEYCTL_NEGATE(0xd, 0xfffffffffffffffb, 0x5, 0x4, 0x0) (rerun: 32) mknod$auto(&(0x7f00000003c0)='./file0\x00', 0x1, 0x4) 47.679017781s ago: executing program 5 (id=1171): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/bond0/queues/rx-4/rps_cpus\x00', 0xa0666, 0x0) pread64$auto(r0, 0x0, 0x8001, 0xb2b0) (async) unshare$auto(0x40000080) (async) connect$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x2}, 0x52) (async) r1 = socket(0x2, 0x802, 0x1) (async) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r2, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) (async) close_range$auto(0x2, 0x8, 0x0) (async) setsockopt$auto_SO_WIFI_STATUS(r1, 0x0, 0x29, &(0x7f0000000080)='\xef', 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/usb_storage/parameters/delay_use\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/40, 0x28) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketcall$auto_SYS_ACCEPT4(0x12, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x22) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r6 = socket(0x1e, 0x805, 0x0) (async) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) socketpair$auto(0xffffff6c, 0x4, 0x8000000, 0x0) socket(0x11, 0x3, 0x2) (async) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) (async) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="37bf3a07b3ccc7a68818ac00dfb188e1367113a8f857d477218f2c997dd5e05154fd4d96cf91ad8096cf4b25e798e9e62423e60a1c4d6e9be3be76468960f9ff6b21ce191886ad2fcceadbd41313e6d1ef7d7b7feb0dd1304d171bd739577f14e6cd3c17", @ANYRES16=r7, @ANYRESHEX=0x0, @ANYRESOCT=r6], 0x2c}, 0x1, 0x0, 0x0, 0x20008094}, 0x0) (async) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x10000}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x4}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x1}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x22000800) writev$auto(r5, &(0x7f00000001c0)={0x0, 0x6}, 0x3) (async) unshare$auto(0x80000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nbd13\x00', 0x2000, 0x0) (async) syz_clone(0x40000, &(0x7f0000000200)="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", 0xff, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000300)) 46.961852065s ago: executing program 5 (id=1172): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/zram0/mm_stat\x00', 0x8900, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000400)=""/217, 0xd9) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) semctl$auto_IPC_INFO(0x4, 0x8, 0x3, 0x5) 46.819890314s ago: executing program 5 (id=1173): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, r0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer2\x00', 0x101001, 0x0) getsockopt$auto_SO_NO_CHECK(r3, 0x4, 0xb, &(0x7f0000000040)='/dev/kvm\x00', &(0x7f0000000080)=0x1) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r4) 42.403386794s ago: executing program 45 (id=1152): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x81) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/pppol2tp\x00', 0x0, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x40, 0x0) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) 31.467501668s ago: executing program 46 (id=1173): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, r0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer2\x00', 0x101001, 0x0) getsockopt$auto_SO_NO_CHECK(r3, 0x4, 0xb, &(0x7f0000000040)='/dev/kvm\x00', &(0x7f0000000080)=0x1) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r4) 11.064757134s ago: executing program 8 (id=1282): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r1, 0x9, r0) utimensat$auto(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8, 0xfffffffffffffffa}, 0x6) 10.665727329s ago: executing program 8 (id=1284): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(0x3, 0x5521, 0x1) ioctl$auto(r0, 0x4bfa, 0x1) fcntl$auto(0xffffffffffffffff, 0x400, 0x1) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0000000000000400000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x8000000000, 0xc3a, 0xe2, 0x9b72, 0x7, 0x1000) sysfs$auto(0x2, 0x4d, 0x7fffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) sysfs$auto(0x200, 0x8, 0x200) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a001ee", @ANYRES16=r1, @ANYBLOB], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24048000) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000300), r2) 9.398048334s ago: executing program 7 (id=1288): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x70001, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r1, 0x5) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) r3 = socket(0x2a, 0x2, 0x6) getsockname$auto(r3, 0x0, 0x0) ioctl$auto_XFS_IOC_ERROR_CLEARALL(r1, 0x40085875, &(0x7f0000000180)={r3, 0x7}) fadvise64$auto_POSIX_FADV_DONTNEED(r1, 0x6, 0x4cfc, 0x4) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) arch_prctl$auto(0x5003, 0x800000000800) pipe$auto(&(0x7f0000000100)=r0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0\x00', 0x109501, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r4, 0x80204d01, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x58200, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) read$auto(r0, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) mbind$auto(0x0, 0x800605, 0x1, &(0x7f0000000500)=0xffff, 0xa, 0x3) ioctl$auto(0x3, 0x402c542b, r1) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 9.327819996s ago: executing program 4 (id=1289): epoll_create$auto(0x4) (async) socket(0x2, 0x5, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xe6xMeO\xae\x1e\xb6\xb7va\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a3\xfa\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(w3\xef\xcaX\x9dy', 0xa) (async) unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe8) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_score_adj\x00', 0x142, 0x0) (async) write$auto(0x3, 0x0, 0x100086) r3 = socket(0x2b, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r3, @ANYBLOB="010031bd7000fddbdf250c000000", @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x404802, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 7.837253707s ago: executing program 8 (id=1291): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/dev_snmp6/batadv_slave_0\x00', 0x1c9802, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) read$auto(r0, &(0x7f0000000100)='\x98g\x8c=\xcd`\n\x80\xe7\xc8\xd5Zq\x86ifX\'R\n\x1c\t\x00\x8c/a#%\xca}H3\xf0\xd4\t\xf8\xfb\xbfV\xa0\xdc\xc4\xc8\xd2\xbd\x9dZ\xdc\xa1\xed-W\x80z\x03\x1e\xe8\x1bR\x9a\'\xddM\xbf6\xcf8p\xf3\xd2\xa5\xc9\xc8a&m\r', 0x400006) (fail_nth: 3) 6.608626124s ago: executing program 3 (id=1293): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r1, 0x9, r0) utimensat$auto(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8, 0xfffffffffffffffa}, 0x6) 6.606877812s ago: executing program 8 (id=1301): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) (async) r1 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0) write$auto(r1, 0x0, 0x4000000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) (async) getpid() (async) mmap$auto(0xd3, 0x4, 0x401, 0x12, r1, 0x100) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) (async) unshare$auto(0x40000080) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101401, 0x0) (async) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) (async) mprotect$auto(0x0, 0x806121, 0x6) (async) r5 = bpf$auto(0x5, 0x0, 0xa) mmap$auto(0x0, 0x20004, 0x3, 0xeb1, r5, 0x8001) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip_vs_conn\x00', 0x8880, 0x0) setitimer$auto(0x32aaa370, &(0x7f0000001a00)={{0x5, 0x6}, {0x1, 0x8000000000000001}}, 0x0) getitimer$auto_ITIMER_REAL(0x0, &(0x7f0000001bc0)={{0x2, 0x7fffffffffffffff}, {0x7, 0x1000}}) (async) r7 = fcntl$auto_F_DUPFD_CLOEXEC(r6, 0x406, r6) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000100)={@inferred=r3, 0x8, 0x100000002, @btrfs_ioctl_vol_args_v2_3_0={0x6, &(0x7f0000001100)={0xfffffffffffffffa, 0x1, 0xffffffff80000001, 0xc2c, {0xfffffffffffffffc, 0x2, 0x9, 0x7, 0x4c}, [0x4, 0x5, 0x3, 0x7fffffff]}}, @name="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"}) 6.563297419s ago: executing program 7 (id=1294): r0 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev$auto(r0, &(0x7f0000000bc0)={0x0, 0x7}, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/rose14/statistics/rx_length_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) write$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, &(0x7f0000000300)="a04f", 0x2) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/he_capa\x00', 0xa0080, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(r3, r3, 0x0, 0x9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x20) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x2, 0x80802, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r6) sendmsg$auto_NL80211_CMD_ADD_LINK(r5, &(0x7f0000000080)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14850a00", @ANYRES16, @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44) r7 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 6.52732936s ago: executing program 4 (id=1295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x5000000, 0x0, 0x8000}, 0x8000) 6.232065908s ago: executing program 3 (id=1296): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/cgroup\x00') 5.432694937s ago: executing program 4 (id=1297): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/dev_snmp6/batadv_slave_0\x00', 0x1c9802, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) read$auto(r0, &(0x7f0000000100)='\x98g\x8c=\xcd`\n\x80\xe7\xc8\xd5Zq\x86ifX\'R\n\x1c\t\x00\x8c/a#%\xca}H3\xf0\xd4\t\xf8\xfb\xbfV\xa0\xdc\xc4\xc8\xd2\xbd\x9dZ\xdc\xa1\xed-W\x80z\x03\x1e\xe8\x1bR\x9a\'\xddM\xbf6\xcf8p\xf3\xd2\xa5\xc9\xc8a&m\r', 0x400006) 5.431208724s ago: executing program 3 (id=1298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_KEY_SET(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@typed={0x4, 0x8c}]}]}, 0x1c}, 0x1, 0x0, 0xffff000000000000, 0x80}, 0x42000) 5.218843806s ago: executing program 4 (id=1299): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0xfffffc96) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r1 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon37\x00', 0x630940, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x108, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, "13c366f9244357d432f6e44cc4bf4e5878fe5d"}, @NL80211_ATTR_WIPHY_NAME={0x8, 0x2, '/${\x00'}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_HT_CAPABILITY={0x45, 0x1f, "ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e9"}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x5c, 0x75, 0x0, 0x1, [@generic="ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e35af6d0f2356f99129b14dfb3c040f557f81b", @typed={0x8, 0x138, 0x0, 0x0, @u32=0x400}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r2}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, 0x108}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r1, 0x2, 0x1007ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r1, 0x2, 0x9193) 5.218259365s ago: executing program 3 (id=1300): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(0x3, 0x5521, 0x1) ioctl$auto(r0, 0x4bfa, 0x1) fcntl$auto(0xffffffffffffffff, 0x400, 0x1) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0000000000000400000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x8000000000, 0xc3a, 0xe2, 0x9b72, 0x7, 0x1000) sysfs$auto(0x2, 0x4d, 0x7fffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) sysfs$auto(0x200, 0x8, 0x200) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a001ee", @ANYRES16=r1, @ANYBLOB], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24048000) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000300), r2) 3.875550263s ago: executing program 8 (id=1302): mmap$auto(0x0, 0x4020009, 0xdf, 0x420000000e31, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty30\x00', 0x62c00, 0x0) sendmsg$auto_NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0xc000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) socket(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x1b, 0x0, 0xfffffffffffffffc, 0x696b}, 0x6}, 0xd64d, 0x0) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000fff400"}, 0x1c) 2.968163493s ago: executing program 8 (id=1303): select$auto(0x8, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) fsconfig$auto_HIDEPID_NO_ACCESS(0xffffffffffffffff, 0xffff0000, 0x0, 0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/version\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0xf42f, 0x7f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffe2, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="906f1995", @ANYRES16=0x0, @ANYBLOB="10002cbd0000fddb79a71c"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) pidfd_open$auto(0x1, 0x0) waitid$auto_P_PID(0x1, 0x0, 0x0, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mount$auto(0x0, 0x0, &(0x7f00000001c0)='\x00', 0x5, 0x0) 2.285839608s ago: executing program 4 (id=1304): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x70001, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r1, 0x5) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) r3 = socket(0x2a, 0x2, 0x6) getsockname$auto(r3, 0x0, 0x0) ioctl$auto_XFS_IOC_ERROR_CLEARALL(r1, 0x40085875, &(0x7f0000000180)={r3, 0x7}) fadvise64$auto_POSIX_FADV_DONTNEED(r1, 0x6, 0x4cfc, 0x4) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) arch_prctl$auto(0x5003, 0x800000000800) pipe$auto(&(0x7f0000000100)=r0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0\x00', 0x109501, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r4, 0x80204d01, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x58200, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) read$auto(r0, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) mbind$auto(0x0, 0x800605, 0x1, &(0x7f0000000500)=0xffff, 0xa, 0x3) ioctl$auto(0x3, 0x402c542b, r1) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.165148942s ago: executing program 7 (id=1305): openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, 0x0, 0x102, 0x0) (async, rerun: 64) socket(0x2, 0x80002, 0x73) (async, rerun: 64) ioctl$auto(0xffffffffffffffff, 0x40045109, 0xffffffffffffffff) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x4e20, @loopback}, 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0xa, 0x1, 0x84) r1 = getsockopt$auto(r0, 0x84, 0x3, 0x0, 0x0) (async, rerun: 64) r2 = open(&(0x7f00000002c0)='&&\x00', 0x595102, 0x550) (rerun: 64) write$auto(r2, 0x0, 0xfffffdf1) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000140), r1) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="81f71516", @ANYRES16=r4, @ANYBLOB="00012dbd7000fedbdf250200000008000200050000000800020008000000080002002a05000008000200020000000800020009000000080002000100000008000200faffffff080002000200000008000200080000000800020003000000"], 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x40001) (async) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) open(&(0x7f0000000040)='./file0\x00', 0x222000, 0x154) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r5, 0x4b48, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) io_uring_setup$auto(0x9e6, 0x0) (async) r6 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r6, 0x6a, 0x5, 0x0, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000003c0), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r7 = socket(0x2, 0x1, 0x106) (rerun: 32) bind$auto(r7, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) 1.709607455s ago: executing program 3 (id=1306): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) ioctl$auto(r0, 0x8922, 0x24) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r2, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) r4 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$auto_NLBL_MGMT_C_ADD(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/2t\x00', 0xb00, 0x0) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r5, 0x5, 0x0) getdents$auto(r5, &(0x7f00000004c0)={0x100, 0x7fffffffffffffff, 0x4}, 0x62d4) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x646502, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) 1.551376152s ago: executing program 7 (id=1307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x6000000, 0x0, 0x8000}, 0x8000) 887.370236ms ago: executing program 7 (id=1308): r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/dev_snmp6/batadv_slave_0\x00', 0x1c9802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) read$auto(r1, &(0x7f0000000100)='\x98g\x8c=\xcd`\n\x80\xe7\xc8\xd5Zq\x86ifX\'R\n\x1c\t\x00\x8c/a#%\xca}H3\xf0\xd4\t\xf8\xfb\xbfV\xa0\xdc\xc4\xc8\xd2\xbd\x9dZ\xdc\xa1\xed-W\x80z\x03\x1e\xe8\x1bR\x9a\'\xddM\xbf6\xcf8p\xf3\xd2\xa5\xc9\xc8a&m\r', 0x400006) 553.815101ms ago: executing program 7 (id=1309): mmap$auto(0x200000003, 0x6b7, 0x20000001000009, 0x17, 0xffffffffffffffff, 0x304000000000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x50e}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x9}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040800}, 0x24008005) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x3, 0x2) (async) getsockopt$auto(r0, 0x0, 0xd0, 0x0, 0x0) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) time$auto(&(0x7f00000001c0)=0x400) (async) prctl$auto_PR_SCHED_CORE_GET(0x476, 0x0, 0x0, 0x5, 0x7) (async) socket(0xa, 0x1, 0x84) (async, rerun: 32) socket(0xf, 0x2, 0x6) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$auto(0xf, &(0x7f0000000100)=@bpf_attr_11={0xb2, 0x7, 0xfffffffe, 0x3264, 0xb, 0x4b, 0x3}, 0xa3) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) unshare$auto(0x40000080) mmap$auto(0x2, 0x400008, 0xdf, 0x49b72, 0xffffffffffffffff, 0x6) (async, rerun: 32) write$auto(0x1, 0x0, 0x80000000) (rerun: 32) mmap$auto(0x100001, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x111800, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 64) madvise$auto(0x0, 0x2003f0, 0x15) (rerun: 64) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) (async, rerun: 32) shmctl$auto_SHM_STAT(0x5, 0xd, &(0x7f0000000140)={{0x10001, 0xffffffffffffffff, 0x0, 0x8, 0x3, 0x3, 0x6}, 0x5, 0x9, 0x1, 0x9, @inferred, @raw=0x4, 0x0, 0x0, &(0x7f0000000000)="a92cc5b95cbadeeec0c80a78f129b552aff38f", &(0x7f0000000100)="899f6eff00"}) (rerun: 32) 348.843062ms ago: executing program 4 (id=1310): r0 = openat$auto_objects_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) waitid$auto(0x7a, 0xffffffffffffffff, &(0x7f0000001280)={@siginfo_0_0={0x4, 0x32d1bc5f, 0xffffffff, @_sigpoll={0x5, r0}}}, 0xffffd7a6, 0x0) shmctl$auto_IPC_STAT(0x2, 0x2, &(0x7f00000011c0)={{0xffff7fff, 0x0, 0xee01, 0x100, 0x36, 0x119, 0xfff4}, 0x6de9, 0x4, 0x0, 0x4, @inferred=0xffffffffffffffff, @raw=0x2, 0x3ff, 0x0, 0x0, &(0x7f00000001c0)="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"}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x2, 0x5, 0x0) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) socket(0x1e, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="01002dbd70fcfedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02", @ANYRES32=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) 0s ago: executing program 3 (id=1311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_KEY_SET(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@typed={0x4, 0x8c}]}]}, 0x1c}, 0x1, 0x0, 0xffffffffffffff9e, 0x80}, 0x42000) kernel console output (not intermixed with test programs): 180/0x3e0 [ 250.495951][ T8997] do_mmap+0xc63/0x12f0 [ 250.496003][ T8997] ? __pfx_do_mmap+0x10/0x10 [ 250.496050][ T8997] ? __pfx_down_write_killable+0x10/0x10 [ 250.496100][ T8997] vm_mmap_pgoff+0x29e/0x470 [ 250.496152][ T8997] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 250.496216][ T8997] ? __x64_sys_futex+0x34f/0x4d0 [ 250.496257][ T8997] ? __x64_sys_futex+0x358/0x4d0 [ 250.496305][ T8997] ksys_mmap_pgoff+0x7d/0x5b0 [ 250.496357][ T8997] __x64_sys_mmap+0x125/0x190 [ 250.496390][ T8997] do_syscall_64+0xc9/0xf80 [ 250.496430][ T8997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.496462][ T8997] RIP: 0033:0x7fbccb39aeb9 [ 250.496485][ T8997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.496514][ T8997] RSP: 002b:00007fbccc190028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 250.496543][ T8997] RAX: ffffffffffffffda RBX: 00007fbccb615fa0 RCX: 00007fbccb39aeb9 [ 250.496562][ T8997] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 250.496580][ T8997] RBP: 00007fbccb408c1f R08: 0000000000000401 R09: 0000000000008000 [ 250.496598][ T8997] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 250.496615][ T8997] R13: 00007fbccb616038 R14: 00007fbccb615fa0 R15: 00007fff0db9c188 [ 250.496655][ T8997] [ 250.818090][ T8971] hsr_slave_0: entered promiscuous mode [ 250.824625][ T8971] hsr_slave_1: entered promiscuous mode [ 250.831102][ T8971] debugfs: 'hsr0' already exists in 'hsr' [ 250.836897][ T8971] Cannot create hsr debugfs directory [ 251.004142][ T8994] netlink: 'syz.0.721': attribute type 3 has an invalid length. [ 251.044282][ T8971] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.085990][ T8971] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.118059][ T8971] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.145340][ T8321] Bluetooth: hci4: command tx timeout [ 251.196913][ T8971] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.683125][ T8971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.755696][ T9016] Invalid ELF header magic: != ELF [ 251.947326][ T8971] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.979600][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.987199][ T7807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.046630][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.053900][ T7798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.678556][ T8971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.225543][ T8321] Bluetooth: hci4: command tx timeout [ 253.618388][ T8971] veth0_vlan: entered promiscuous mode [ 253.644001][ T8971] veth1_vlan: entered promiscuous mode [ 253.729208][ T8971] veth0_macvtap: entered promiscuous mode [ 253.781206][ T8971] veth1_macvtap: entered promiscuous mode [ 253.872262][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.921671][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.278884][ T7798] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.287829][ T7798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.514864][ T7798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.527769][ T7798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.537826][ T7081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.549635][ T7081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.666403][ T7798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.684059][ T7798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.305214][ T8321] Bluetooth: hci4: command tx timeout [ 256.502830][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 257.384791][ T8321] Bluetooth: hci4: command tx timeout [ 258.783146][ T9137] Line length is too long: Should be less than 4094 [ 259.173346][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 260.149787][ T9164] netlink: 'syz.3.762': attribute type 1 has an invalid length. [ 261.665633][ T9202] ICMPv6: process `syz.3.773' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 261.812366][ T9205] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 262.032704][ T9212] netlink: 504 bytes leftover after parsing attributes in process `syz.3.775'. [ 262.097558][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 262.674701][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 263.762277][ T9247] FAULT_INJECTION: forcing a failure. [ 263.762277][ T9247] name failslab, interval 1, probability 0, space 0, times 0 [ 263.778920][ T9247] CPU: 1 UID: 0 PID: 9247 Comm: syz.3.786 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.778970][ T9247] Tainted: [L]=SOFTLOCKUP [ 263.778978][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 263.778990][ T9247] Call Trace: [ 263.778997][ T9247] [ 263.779005][ T9247] dump_stack_lvl+0x100/0x190 [ 263.779036][ T9247] should_fail_ex.cold+0x5/0xa [ 263.779072][ T9247] should_failslab+0xc2/0x120 [ 263.779122][ T9247] kmem_cache_alloc_noprof+0x83/0x780 [ 263.779154][ T9247] ? security_file_alloc+0x34/0x2c0 [ 263.779197][ T9247] ? security_file_alloc+0x34/0x2c0 [ 263.779241][ T9247] security_file_alloc+0x34/0x2c0 [ 263.779276][ T9247] init_file+0x93/0x4c0 [ 263.779307][ T9247] alloc_empty_file+0x73/0x1c0 [ 263.779340][ T9247] dentry_open+0x46/0xd0 [ 263.779379][ T9247] acct_on+0x1a3/0xa10 [ 263.779415][ T9247] ? __pfx_acct_on+0x10/0x10 [ 263.779450][ T9247] ? bpf_lsm_capable+0x9/0x10 [ 263.779475][ T9247] __x64_sys_acct+0x81/0x1e0 [ 263.779493][ T9247] ? lockdep_hardirqs_on+0x78/0x100 [ 263.779519][ T9247] do_syscall_64+0xc9/0xf80 [ 263.779548][ T9247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.779570][ T9247] RIP: 0033:0x7fbccb39aeb9 [ 263.779587][ T9247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.779608][ T9247] RSP: 002b:00007fbccc190028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 263.779628][ T9247] RAX: ffffffffffffffda RBX: 00007fbccb615fa0 RCX: 00007fbccb39aeb9 [ 263.779642][ T9247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 263.779673][ T9247] RBP: 00007fbccb408c1f R08: 0000000000000000 R09: 0000000000000000 [ 263.779687][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.779700][ T9247] R13: 00007fbccb616038 R14: 00007fbccb615fa0 R15: 00007fff0db9c188 [ 263.779729][ T9247] [ 264.583222][ T9267] netlink: 504 bytes leftover after parsing attributes in process `syz.3.792'. [ 264.681023][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 264.736992][ T9270] openvswitch: netlink: Flow actions attr not present in new flow. [ 266.028078][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.034693][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.403441][ T9213] [U]  [ 266.558185][ T8321] Bluetooth: hci0: unexpected event 0x32 length: 727 > 9 [ 266.564387][ T9298] netlink: zone id is out of range [ 266.616684][ T9298] netlink: zone id is out of range [ 266.621857][ T9298] netlink: zone id is out of range [ 266.720358][ T9298] netlink: zone id is out of range [ 266.794363][ T9298] netlink: zone id is out of range [ 266.840374][ T9298] netlink: zone id is out of range [ 266.885112][ T9298] netlink: zone id is out of range [ 266.890457][ T9298] netlink: zone id is out of range [ 266.964495][ T9298] netlink: zone id is out of range [ 268.043315][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 269.651229][ T9350] delete_channel: no stack [ 269.789743][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'. [ 269.992648][ T9366] netlink: 'syz.4.820': attribute type 3 has an invalid length. [ 270.596743][ T9389] netlink: 504 bytes leftover after parsing attributes in process `syz.2.826'. [ 271.534850][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 272.090144][ T9420] netlink: 'syz.4.834': attribute type 3 has an invalid length. [ 272.695646][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 274.089703][ T9476] netlink: 'syz.2.851': attribute type 3 has an invalid length. [ 274.244586][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 275.116465][ T9495] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.123039][ T9495] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 275.212980][ T9495] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.236940][ T9495] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 275.280876][ T9495] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.287650][ T9495] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 275.330329][ T9495] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.367456][ T9495] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 275.387355][ T9495] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.402155][ T9495] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 275.450574][ T9495] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 275.871879][ T9520] netlink: 504 bytes leftover after parsing attributes in process `syz.2.862'. [ 276.165128][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 277.154522][ T8321] Bluetooth: hci0: command 0x0406 tx timeout [ 277.224831][ T8321] Bluetooth: hci1: command 0x2016 tx timeout [ 277.316518][ T8321] Bluetooth: hci2: command 0x0406 tx timeout [ 277.384567][ T8321] Bluetooth: hci3: command 0x0406 tx timeout [ 277.474644][ T8321] Bluetooth: hci4: command 0x0c1a tx timeout [ 277.907502][ T9562] vivid-009: ================= START STATUS ================= [ 277.935105][ T9562] vivid-009: Radio HW Seek Mode: Bounded [ 277.942398][ T9562] vivid-009: Radio Programmable HW Seek: false [ 277.954695][ T9562] vivid-009: RDS Rx I/O Mode: Block I/O [ 277.967378][ T9562] vivid-009: Generate RBDS Instead of RDS: false [ 278.000392][ T9562] vivid-009: RDS Reception: true [ 278.020306][ T9562] vivid-009: RDS Program Type: 0 inactive [ 278.020383][ T9562] vivid-009: RDS PS Name: inactive [ 278.020416][ T9562] vivid-009: RDS Radio Text: inactive [ 278.020448][ T9562] vivid-009: RDS Traffic Announcement: false inactive [ 278.020481][ T9562] vivid-009: RDS Traffic Program: false inactive [ 278.020513][ T9562] vivid-009: RDS Music: false inactive [ 278.020547][ T9562] vivid-009: ================== END STATUS ================== [ 278.648956][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 279.234829][ T8321] Bluetooth: hci0: command 0x0406 tx timeout [ 279.304799][ T8321] Bluetooth: hci1: command 0x2016 tx timeout [ 279.384986][ T8321] Bluetooth: hci2: command 0x0406 tx timeout [ 279.416903][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'. [ 279.464835][ T8321] Bluetooth: hci3: command 0x0406 tx timeout [ 279.555957][ T8321] Bluetooth: hci4: command 0x0c1a tx timeout [ 281.204841][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 281.624723][ T8321] Bluetooth: hci4: command 0x0c1a tx timeout [ 282.255783][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'. [ 284.211621][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 284.524104][ T9701] Process accounting resumed [ 285.715510][ T9716] futex_wake_op: syz.3.918 tries to shift op by -2048; fix this program [ 285.724201][ T9716] futex_wake_op: syz.3.918 tries to shift op by -2048; fix this program [ 285.741989][ T9716] 0x000000000001-0x000000020000 : "" [ 285.766830][ T9716] ftl_cs: FTL header corrupt! [ 287.479341][ T9753] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 289.209486][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 289.608452][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 290.279933][ T9815] netlink: 504 bytes leftover after parsing attributes in process `syz.4.941'. [ 291.311951][ T9833] nvme_fcloop: unknown parameter or missing value '€' [ 292.914893][ T9863] netlink: 504 bytes leftover after parsing attributes in process `syz.3.952'. [ 293.256644][ T7082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.269723][ T7082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.304809][ T7082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.317737][ T7082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.329577][ T7082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.444092][ T7082] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 293.454135][ T7082] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 293.462346][ T7082] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 293.472198][ T7082] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 293.480153][ T7082] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.954710][ T30] audit: type=1800 audit(2131.430:9): pid=9892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.961" name="features" dev="configfs" ino=28666 res=0 errno=0 [ 294.242053][ T9869] chnl_net:caif_netlink_parms(): no params data found [ 294.252595][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.963'. [ 294.438032][ T9873] chnl_net:caif_netlink_parms(): no params data found [ 294.678213][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.687994][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.704703][ T9869] bridge_slave_0: entered allmulticast mode [ 294.714039][ T9869] bridge_slave_0: entered promiscuous mode [ 294.760651][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.774537][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.825866][ T9869] bridge_slave_1: entered allmulticast mode [ 294.839192][ T9869] bridge_slave_1: entered promiscuous mode [ 294.936702][ T9873] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.944022][ T9873] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.951499][ T9873] bridge_slave_0: entered allmulticast mode [ 294.960076][ T9873] bridge_slave_0: entered promiscuous mode [ 294.970314][ T9869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.979831][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.988212][ T9873] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.999710][ T9873] bridge_slave_1: entered allmulticast mode [ 295.007448][ T9873] bridge_slave_1: entered promiscuous mode [ 295.017540][ T9869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.076116][ T9873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.087604][ T9869] team0: Port device team_slave_0 added [ 295.096807][ T9873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.112096][ T9869] team0: Port device team_slave_1 added [ 295.222527][ T9873] team0: Port device team_slave_0 added [ 295.230888][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.238273][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.303228][ T9869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.317373][ T9873] team0: Port device team_slave_1 added [ 295.332766][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.341537][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.382277][ T9869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.384874][ T7082] Bluetooth: hci5: command tx timeout [ 295.482734][ T9873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.514051][ T9873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.545105][ T7082] Bluetooth: hci6: command tx timeout [ 295.565023][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 295.609324][ T9873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.665762][ T9873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.672767][ T9873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.782605][ T9873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.884372][ T9869] hsr_slave_0: entered promiscuous mode [ 295.896356][ T9869] hsr_slave_1: entered promiscuous mode [ 295.910802][ T9869] debugfs: 'hsr0' already exists in 'hsr' [ 295.917473][ T9869] Cannot create hsr debugfs directory [ 296.128281][ T9873] hsr_slave_0: entered promiscuous mode [ 296.134635][ T9933] zswap: compressor not available [ 296.139591][ T9873] hsr_slave_1: entered promiscuous mode [ 296.148300][ T9873] debugfs: 'hsr0' already exists in 'hsr' [ 296.154186][ T9873] Cannot create hsr debugfs directory [ 297.038328][ T9869] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.105534][ T9869] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.147885][ T9869] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.181415][ T9869] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 297.323273][ T9873] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 297.338138][ T9873] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 297.349441][ T9873] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 297.365162][ T9873] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 297.465125][ T7082] Bluetooth: hci5: command tx timeout [ 297.507962][ T9869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.528719][ T9873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.544083][ T9869] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.561416][ T7810] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.568592][ T7810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.583222][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.590407][ T7081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.626499][ T7082] Bluetooth: hci6: command tx timeout [ 297.638827][ T9873] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.659231][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.666346][ T7081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.691089][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.698774][ T7081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.279490][ T9873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.314477][ T9869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.226812][ T9873] veth0_vlan: entered promiscuous mode [ 299.263501][ T9869] veth0_vlan: entered promiscuous mode [ 299.292775][ T9873] veth1_vlan: entered promiscuous mode [ 299.344481][ T9869] veth1_vlan: entered promiscuous mode [ 299.387275][ T9873] veth0_macvtap: entered promiscuous mode [ 299.419906][ T9873] veth1_macvtap: entered promiscuous mode [ 299.473086][ T9873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.505875][ T9873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.527129][ T9869] veth0_macvtap: entered promiscuous mode [ 299.544254][ T7810] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.554704][ T7082] Bluetooth: hci5: command tx timeout [ 299.562712][ T7810] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.586340][ T7810] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.595852][ T7810] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.616658][ T9869] veth1_macvtap: entered promiscuous mode [ 299.682723][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.705133][ T7082] Bluetooth: hci6: command tx timeout [ 299.743378][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.800289][ T7810] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.834290][ T7810] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.862070][ T7810] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.910864][ T7810] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.952614][ T7807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.963069][ T7807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.107016][ T7811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.138204][ T7811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.188009][ T7810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.224694][ T7810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.307644][ T7810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.322727][ T7810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.754693][T10020] program syz.3.984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.624810][ T7082] Bluetooth: hci5: command tx timeout [ 301.790626][ T7082] Bluetooth: hci6: command tx timeout [ 303.922438][T10084] FAULT_INJECTION: forcing a failure. [ 303.922438][T10084] name failslab, interval 1, probability 0, space 0, times 0 [ 303.964948][T10084] CPU: 1 UID: 0 PID: 10084 Comm: syz.3.997 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.965008][T10084] Tainted: [L]=SOFTLOCKUP [ 303.965020][T10084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 303.965038][T10084] Call Trace: [ 303.965048][T10084] [ 303.965060][T10084] dump_stack_lvl+0x100/0x190 [ 303.965105][T10084] should_fail_ex.cold+0x5/0xa [ 303.965160][T10084] should_failslab+0xc2/0x120 [ 303.965206][T10084] kmem_cache_alloc_noprof+0x83/0x780 [ 303.965250][T10084] ? __proc_create+0xc2/0x8c0 [ 303.965301][T10084] ? __proc_create+0x2cb/0x8c0 [ 303.965359][T10084] ? __proc_create+0x2cb/0x8c0 [ 303.965409][T10084] __proc_create+0x2cb/0x8c0 [ 303.965462][T10084] ? __pfx___proc_create+0x10/0x10 [ 303.965529][T10084] _proc_mkdir+0xb9/0x210 [ 303.965560][T10084] ? __pfx__proc_mkdir+0x10/0x10 [ 303.965588][T10084] ? net_generic+0xea/0x2a0 [ 303.965633][T10084] ? __pfx_vlan_init_net+0x10/0x10 [ 303.965682][T10084] vlan_proc_init+0x93/0x160 [ 303.965729][T10084] ops_init+0x1e2/0x5f0 [ 303.965783][T10084] setup_net+0x118/0x3a0 [ 303.965813][T10084] ? __pfx_setup_net+0x10/0x10 [ 303.965839][T10084] ? lockdep_init_map_type+0x5c/0x250 [ 303.965886][T10084] ? mutex_init_lockep+0x110/0x150 [ 303.965938][T10084] copy_net_ns+0x46f/0x7c0 [ 303.965975][T10084] create_new_namespaces+0x3ea/0xab0 [ 303.966030][T10084] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 303.966073][T10084] ksys_unshare+0x455/0xab0 [ 303.966128][T10084] ? __pfx_ksys_unshare+0x10/0x10 [ 303.966165][T10084] ? xfd_validate_state+0x129/0x190 [ 303.966215][T10084] __x64_sys_unshare+0x31/0x40 [ 303.966253][T10084] do_syscall_64+0xc9/0xf80 [ 303.966287][T10084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.966313][T10084] RIP: 0033:0x7fbccb39aeb9 [ 303.966333][T10084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.966360][T10084] RSP: 002b:00007fbccc190028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 303.966385][T10084] RAX: ffffffffffffffda RBX: 00007fbccb615fa0 RCX: 00007fbccb39aeb9 [ 303.966401][T10084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 303.966416][T10084] RBP: 00007fbccb408c1f R08: 0000000000000000 R09: 0000000000000000 [ 303.966431][T10084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.966446][T10084] R13: 00007fbccb616038 R14: 00007fbccb615fa0 R15: 00007fff0db9c188 [ 303.966479][T10084] [ 303.971290][T10084] 8021q: can't create entry in proc filesystem! [ 304.958960][T10105] netlink: 504 bytes leftover after parsing attributes in process `syz.5.1004'. [ 309.643166][T10194] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 309.785415][ T30] audit: type=1800 audit(2147.260:10): pid=10190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1025" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 309.832486][T10190] syz.3.1025(10190): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 310.226992][T10207] input: f¬ as /devices/virtual/input/input12 [ 310.349386][T10229] zram: Removed device: zram0 [ 312.284748][T10267] FAULT_INJECTION: forcing a failure. [ 312.284748][T10267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.310138][T10267] CPU: 1 UID: 0 PID: 10267 Comm: syz.3.1034 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.310188][T10267] Tainted: [L]=SOFTLOCKUP [ 312.310199][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 312.310218][T10267] Call Trace: [ 312.310228][T10267] [ 312.310240][T10267] dump_stack_lvl+0x100/0x190 [ 312.310284][T10267] should_fail_ex.cold+0x5/0xa [ 312.310338][T10267] _copy_to_user+0x32/0xd0 [ 312.310390][T10267] rng_dev_read+0x226/0x860 [ 312.310425][T10267] ? __pfx_virtio_read+0x10/0x10 [ 312.310457][T10267] ? __pfx_rng_dev_read+0x10/0x10 [ 312.310493][T10267] ? common_file_perm+0x1ab/0x4f0 [ 312.310548][T10267] ? bpf_lsm_file_permission+0x9/0x10 [ 312.310594][T10267] ? security_file_permission+0x76/0x210 [ 312.310657][T10267] ? rw_verify_area+0xce/0x6d0 [ 312.310689][T10267] ? __pfx_rng_dev_read+0x10/0x10 [ 312.310721][T10267] vfs_read+0x1e4/0xb30 [ 312.310761][T10267] ? __pfx_vfs_read+0x10/0x10 [ 312.310794][T10267] ? find_held_lock+0x2b/0x80 [ 312.310826][T10267] ? __fget_files+0x215/0x3d0 [ 312.310860][T10267] ? __fget_files+0x215/0x3d0 [ 312.310902][T10267] ? __fget_files+0x21f/0x3d0 [ 312.310947][T10267] ksys_read+0x12a/0x250 [ 312.310983][T10267] ? __pfx_ksys_read+0x10/0x10 [ 312.311029][T10267] do_syscall_64+0xc9/0xf80 [ 312.311072][T10267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.311104][T10267] RIP: 0033:0x7fbccb39aeb9 [ 312.311129][T10267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.311160][T10267] RSP: 002b:00007fbccc190028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.311190][T10267] RAX: ffffffffffffffda RBX: 00007fbccb615fa0 RCX: 00007fbccb39aeb9 [ 312.311210][T10267] RDX: 00000000fffffe82 RSI: 0000200000000040 RDI: 0000000000000005 [ 312.311229][T10267] RBP: 00007fbccc190090 R08: 0000000000000000 R09: 0000000000000000 [ 312.311247][T10267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.311265][T10267] R13: 00007fbccb616038 R14: 00007fbccb615fa0 R15: 00007fff0db9c188 [ 312.311305][T10267] [ 314.358784][T10300] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1042'. [ 314.599495][T10299] Process accounting paused [ 318.300918][ T8321] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 318.313089][ T8321] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.321273][ T8321] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 318.329264][ T8321] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 318.337696][ T8321] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.587849][T10350] chnl_net:caif_netlink_parms(): no params data found [ 318.675687][T10350] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.682990][T10350] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.690585][T10350] bridge_slave_0: entered allmulticast mode [ 318.698276][T10350] bridge_slave_0: entered promiscuous mode [ 318.706995][T10350] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.714174][T10350] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.721781][T10350] bridge_slave_1: entered allmulticast mode [ 318.729433][T10350] bridge_slave_1: entered promiscuous mode [ 318.766652][T10350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.779119][T10350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.813016][T10350] team0: Port device team_slave_0 added [ 318.821386][T10350] team0: Port device team_slave_1 added [ 318.855774][T10350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.862795][T10350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.889161][T10350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.901644][T10350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.909460][T10350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.935716][T10350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.988637][T10350] hsr_slave_0: entered promiscuous mode [ 318.995381][T10350] hsr_slave_1: entered promiscuous mode [ 319.001631][T10350] debugfs: 'hsr0' already exists in 'hsr' [ 319.007662][T10350] Cannot create hsr debugfs directory [ 319.162689][T10363] FAULT_INJECTION: forcing a failure. [ 319.162689][T10363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.180322][T10363] CPU: 0 UID: 0 PID: 10363 Comm: syz.4.1056 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.180370][T10363] Tainted: [L]=SOFTLOCKUP [ 319.180381][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 319.180400][T10363] Call Trace: [ 319.180410][T10363] [ 319.180421][T10363] dump_stack_lvl+0x100/0x190 [ 319.180476][T10363] should_fail_ex.cold+0x5/0xa [ 319.180527][T10363] _copy_to_user+0x32/0xd0 [ 319.180577][T10363] rng_dev_read+0x226/0x860 [ 319.180628][T10363] ? __pfx_virtio_read+0x10/0x10 [ 319.180660][T10363] ? __pfx_rng_dev_read+0x10/0x10 [ 319.180688][T10363] ? common_file_perm+0x1ab/0x4f0 [ 319.180744][T10363] ? bpf_lsm_file_permission+0x9/0x10 [ 319.180789][T10363] ? security_file_permission+0x76/0x210 [ 319.180841][T10363] ? rw_verify_area+0xce/0x6d0 [ 319.180872][T10363] ? __pfx_rng_dev_read+0x10/0x10 [ 319.180903][T10363] vfs_read+0x1e4/0xb30 [ 319.180944][T10363] ? __pfx_vfs_read+0x10/0x10 [ 319.180976][T10363] ? find_held_lock+0x2b/0x80 [ 319.181008][T10363] ? __fget_files+0x215/0x3d0 [ 319.181041][T10363] ? __fget_files+0x215/0x3d0 [ 319.181083][T10363] ? __fget_files+0x21f/0x3d0 [ 319.181138][T10363] ksys_read+0x12a/0x250 [ 319.181175][T10363] ? __pfx_ksys_read+0x10/0x10 [ 319.181221][T10363] do_syscall_64+0xc9/0xf80 [ 319.181265][T10363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.181297][T10363] RIP: 0033:0x7fa47a99aeb9 [ 319.181321][T10363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.181351][T10363] RSP: 002b:00007fa47b85d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.181382][T10363] RAX: ffffffffffffffda RBX: 00007fa47ac15fa0 RCX: 00007fa47a99aeb9 [ 319.181403][T10363] RDX: 00000000fffffe82 RSI: 0000200000000040 RDI: 0000000000000005 [ 319.181422][T10363] RBP: 00007fa47b85d090 R08: 0000000000000000 R09: 0000000000000000 [ 319.181441][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.181459][T10363] R13: 00007fa47ac16038 R14: 00007fa47ac15fa0 R15: 00007ffe02c93cc8 [ 319.181502][T10363] [ 319.459838][T10350] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 319.480143][T10350] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 319.497849][T10350] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 319.510102][T10350] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 319.549677][T10350] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.557033][T10350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.565190][T10350] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.572374][T10350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.588977][T10217] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.596996][T10217] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.692275][T10350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.715427][T10350] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.753896][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.761108][T10219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.801790][T10365] can: request_module (can-proto-0) failed. [ 319.825818][T10219] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.832949][T10219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.192379][T10350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.430164][ T8321] Bluetooth: hci7: command tx timeout [ 320.618263][T10350] veth0_vlan: entered promiscuous mode [ 320.646402][T10350] veth1_vlan: entered promiscuous mode [ 320.722584][T10350] veth0_macvtap: entered promiscuous mode [ 320.736718][T10350] veth1_macvtap: entered promiscuous mode [ 320.758753][T10350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.779307][T10350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.796810][T10219] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.811794][T10219] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.822924][T10219] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.835723][T10219] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.001867][T10217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.032330][T10217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.082233][T10215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.092990][T10215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.330846][T10407] netlink: 504 bytes leftover after parsing attributes in process `syz.7.1063'. [ 321.349202][T10402] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 322.364906][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1068'. [ 322.506050][ T8321] Bluetooth: hci7: command tx timeout [ 322.728572][T10431] zswap: compressor not available [ 323.367048][T10447] FAULT_INJECTION: forcing a failure. [ 323.367048][T10447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.380504][T10447] CPU: 1 UID: 0 PID: 10447 Comm: syz.4.1072 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.380579][T10447] Tainted: [L]=SOFTLOCKUP [ 323.380599][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 323.380627][T10447] Call Trace: [ 323.380647][T10447] [ 323.380668][T10447] dump_stack_lvl+0x100/0x190 [ 323.380741][T10447] should_fail_ex.cold+0x5/0xa [ 323.380827][T10447] _copy_to_user+0x32/0xd0 [ 323.380917][T10447] rng_dev_read+0x226/0x860 [ 323.380969][T10447] ? __pfx_virtio_read+0x10/0x10 [ 323.381020][T10447] ? __pfx_rng_dev_read+0x10/0x10 [ 323.381072][T10447] ? common_file_perm+0x1ab/0x4f0 [ 323.381187][T10447] ? bpf_lsm_file_permission+0x9/0x10 [ 323.381265][T10447] ? security_file_permission+0x76/0x210 [ 323.381352][T10447] ? rw_verify_area+0xce/0x6d0 [ 323.381404][T10447] ? __pfx_rng_dev_read+0x10/0x10 [ 323.381435][T10447] vfs_read+0x1e4/0xb30 [ 323.381487][T10447] ? __pfx_vfs_read+0x10/0x10 [ 323.381541][T10447] ? find_held_lock+0x2b/0x80 [ 323.381596][T10447] ? __fget_files+0x215/0x3d0 [ 323.381652][T10447] ? __fget_files+0x215/0x3d0 [ 323.381728][T10447] ? __fget_files+0x21f/0x3d0 [ 323.381807][T10447] ksys_read+0x12a/0x250 [ 323.381866][T10447] ? __pfx_ksys_read+0x10/0x10 [ 323.381956][T10447] do_syscall_64+0xc9/0xf80 [ 323.382026][T10447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.382077][T10447] RIP: 0033:0x7fa47a99aeb9 [ 323.382122][T10447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.382171][T10447] RSP: 002b:00007fa47b85d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.382240][T10447] RAX: ffffffffffffffda RBX: 00007fa47ac15fa0 RCX: 00007fa47a99aeb9 [ 323.382271][T10447] RDX: 00000000fffffe82 RSI: 0000200000000040 RDI: 0000000000000005 [ 323.382311][T10447] RBP: 00007fa47b85d090 R08: 0000000000000000 R09: 0000000000000000 [ 323.382342][T10447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.382372][T10447] R13: 00007fa47ac16038 R14: 00007fa47ac15fa0 R15: 00007ffe02c93cc8 [ 323.382467][T10447] [ 323.852923][T10456] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1073'. [ 323.979276][T10458] netlink: 'syz.4.1076': attribute type 11 has an invalid length. [ 323.987325][T10458] netlink: 'syz.4.1076': attribute type 11 has an invalid length. [ 323.995832][T10458] netlink: 'syz.4.1076': attribute type 11 has an invalid length. [ 324.003763][T10458] netlink: 'syz.4.1076': attribute type 11 has an invalid length. [ 324.016556][T10458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.185916][T10464] netlink: 146 bytes leftover after parsing attributes in process `syz.7.1078'. [ 324.584498][ T8321] Bluetooth: hci7: command tx timeout [ 325.277266][T10479] FAULT_INJECTION: forcing a failure. [ 325.277266][T10479] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 325.294590][T10479] CPU: 1 UID: 0 PID: 10479 Comm: syz.7.1081 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.294639][T10479] Tainted: [L]=SOFTLOCKUP [ 325.294651][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 325.294669][T10479] Call Trace: [ 325.294679][T10479] [ 325.294690][T10479] dump_stack_lvl+0x100/0x190 [ 325.294743][T10479] should_fail_ex.cold+0x5/0xa [ 325.294791][T10479] ? prepare_alloc_pages+0x16d/0x5f0 [ 325.294846][T10479] should_fail_alloc_page+0xeb/0x140 [ 325.294897][T10479] prepare_alloc_pages+0x1f0/0x5f0 [ 325.294947][T10479] ? kfree+0x1c7/0x690 [ 325.294976][T10479] ? tomoyo_path_number_perm+0x46d/0x580 [ 325.295027][T10479] __alloc_frozen_pages_noprof+0x193/0x2410 [ 325.295089][T10479] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 325.295150][T10479] ? kasan_quarantine_put+0x104/0x240 [ 325.295188][T10479] ? lockdep_hardirqs_on+0x78/0x100 [ 325.295226][T10479] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 325.295265][T10479] ? policy_nodemask+0xed/0x4f0 [ 325.295316][T10479] alloc_pages_mpol+0x1fb/0x550 [ 325.295365][T10479] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 325.295411][T10479] ? tomoyo_path_number_perm+0x188/0x580 [ 325.295468][T10479] ___kmalloc_large_node+0x104/0x150 [ 325.295523][T10479] __kmalloc_large_node_noprof+0x1c/0x70 [ 325.295575][T10479] ? dma_heap_ioctl+0x13b/0x5e0 [ 325.295629][T10479] __kmalloc_noprof+0x6b1/0x9c0 [ 325.295662][T10479] ? do_vfs_ioctl+0x226/0x13e0 [ 325.295730][T10479] ? dma_heap_ioctl+0x13b/0x5e0 [ 325.295777][T10479] dma_heap_ioctl+0x13b/0x5e0 [ 325.295831][T10479] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 325.295880][T10479] ? find_held_lock+0x2b/0x80 [ 325.295933][T10479] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 325.295985][T10479] __x64_sys_ioctl+0x18e/0x210 [ 325.296040][T10479] do_syscall_64+0xc9/0xf80 [ 325.296084][T10479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.296116][T10479] RIP: 0033:0x7f8752b9aeb9 [ 325.296142][T10479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.296172][T10479] RSP: 002b:00007f8753a55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.296203][T10479] RAX: ffffffffffffffda RBX: 00007f8752e15fa0 RCX: 00007f8752b9aeb9 [ 325.296224][T10479] RDX: 0000000000000000 RSI: ffffffffffdffe00 RDI: 0000000000000005 [ 325.296244][T10479] RBP: 00007f8752c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 325.296263][T10479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.296281][T10479] R13: 00007f8752e16038 R14: 00007f8752e15fa0 R15: 00007fff4c467ee8 [ 325.296324][T10479] [ 325.749883][T10483] FAULT_INJECTION: forcing a failure. [ 325.749883][T10483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.763070][T10483] CPU: 0 UID: 0 PID: 10483 Comm: syz.7.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.763105][T10483] Tainted: [L]=SOFTLOCKUP [ 325.763113][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 325.763127][T10483] Call Trace: [ 325.763135][T10483] [ 325.763143][T10483] dump_stack_lvl+0x100/0x190 [ 325.763175][T10483] should_fail_ex.cold+0x5/0xa [ 325.763213][T10483] _copy_to_user+0x32/0xd0 [ 325.763250][T10483] rng_dev_read+0x226/0x860 [ 325.763274][T10483] ? __pfx_virtio_read+0x10/0x10 [ 325.763297][T10483] ? __pfx_rng_dev_read+0x10/0x10 [ 325.763317][T10483] ? common_file_perm+0x1ab/0x4f0 [ 325.763356][T10483] ? bpf_lsm_file_permission+0x9/0x10 [ 325.763389][T10483] ? security_file_permission+0x76/0x210 [ 325.763427][T10483] ? rw_verify_area+0xce/0x6d0 [ 325.763449][T10483] ? __pfx_rng_dev_read+0x10/0x10 [ 325.763471][T10483] vfs_read+0x1e4/0xb30 [ 325.763501][T10483] ? __pfx_vfs_read+0x10/0x10 [ 325.763536][T10483] ? find_held_lock+0x2b/0x80 [ 325.763558][T10483] ? __fget_files+0x215/0x3d0 [ 325.763582][T10483] ? __fget_files+0x215/0x3d0 [ 325.763620][T10483] ? __fget_files+0x21f/0x3d0 [ 325.763661][T10483] ksys_read+0x12a/0x250 [ 325.763682][T10483] ? __pfx_ksys_read+0x10/0x10 [ 325.763710][T10483] do_syscall_64+0xc9/0xf80 [ 325.763741][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.763762][T10483] RIP: 0033:0x7f8752b9aeb9 [ 325.763778][T10483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.763796][T10483] RSP: 002b:00007f8753a55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.763833][T10483] RAX: ffffffffffffffda RBX: 00007f8752e15fa0 RCX: 00007f8752b9aeb9 [ 325.763847][T10483] RDX: 00000000fffffe82 RSI: 0000200000000040 RDI: 0000000000000005 [ 325.763859][T10483] RBP: 00007f8753a55090 R08: 0000000000000000 R09: 0000000000000000 [ 325.763871][T10483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.763883][T10483] R13: 00007f8752e16038 R14: 00007f8752e15fa0 R15: 00007fff4c467ee8 [ 325.763921][T10483] [ 326.664667][ T8321] Bluetooth: hci7: command tx timeout [ 327.467049][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.473437][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.524241][ T7082] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 328.535178][ T7082] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 328.544781][ T7082] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 328.554020][ T7082] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 328.562177][ T7082] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 328.879614][T10518] chnl_net:caif_netlink_parms(): no params data found [ 329.001704][T10518] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.009011][T10518] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.016533][T10518] bridge_slave_0: entered allmulticast mode [ 329.045826][T10518] bridge_slave_0: entered promiscuous mode [ 329.066527][T10518] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.073749][T10518] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.082478][T10518] bridge_slave_1: entered allmulticast mode [ 329.105896][T10518] bridge_slave_1: entered promiscuous mode [ 329.158325][T10518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.188940][T10518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.237813][T10518] team0: Port device team_slave_0 added [ 329.249756][T10518] team0: Port device team_slave_1 added [ 329.311353][T10518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.318488][T10518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.345527][T10518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.358684][T10518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.365965][T10518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.405686][T10518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.452200][T10518] hsr_slave_0: entered promiscuous mode [ 329.512158][T10518] hsr_slave_1: entered promiscuous mode [ 329.518996][T10518] debugfs: 'hsr0' already exists in 'hsr' [ 329.524945][T10518] Cannot create hsr debugfs directory [ 329.761671][T10518] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 329.773470][T10518] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 329.785018][T10518] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 329.796223][T10518] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 329.833871][T10518] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.841029][T10518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.848588][T10518] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.855927][T10518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.873080][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.882147][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.946600][T10518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.972005][T10518] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.989391][T10215] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.996653][T10215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.013162][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.020327][ T7081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.325442][T10518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.667379][ T8321] Bluetooth: hci8: command tx timeout [ 330.829714][T10518] veth0_vlan: entered promiscuous mode [ 330.852221][T10518] veth1_vlan: entered promiscuous mode [ 330.898268][T10518] veth0_macvtap: entered promiscuous mode [ 330.911017][T10518] veth1_macvtap: entered promiscuous mode [ 330.939985][T10518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.960295][T10518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.993067][ T7081] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.005484][ T7081] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.027088][ T7081] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.041810][ T7081] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.155860][T10217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.163737][T10217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.269490][ T7081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.285334][ T7081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.544158][T10564] netlink: 338 bytes leftover after parsing attributes in process `syz.8.1094'. [ 331.564758][T10564] netlink: 338 bytes leftover after parsing attributes in process `syz.8.1094'. [ 331.758249][ T7082] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 331.766972][ T7082] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 331.787284][ T7082] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 331.799595][ T7082] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 331.808702][ T7082] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 332.308351][T10566] chnl_net:caif_netlink_parms(): no params data found [ 332.396309][T10566] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.403567][T10566] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.411218][T10566] bridge_slave_0: entered allmulticast mode [ 332.418912][T10566] bridge_slave_0: entered promiscuous mode [ 332.428748][T10566] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.436317][T10566] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.443849][T10566] bridge_slave_1: entered allmulticast mode [ 332.452463][T10566] bridge_slave_1: entered promiscuous mode [ 332.490025][T10566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.502729][T10566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.538074][T10566] team0: Port device team_slave_0 added [ 332.547373][T10566] team0: Port device team_slave_1 added [ 332.576155][T10566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.583159][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.612379][T10566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.626292][T10566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.633275][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.660928][T10566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.714971][T10566] hsr_slave_0: entered promiscuous mode [ 332.721511][T10566] hsr_slave_1: entered promiscuous mode [ 332.728056][T10566] debugfs: 'hsr0' already exists in 'hsr' [ 332.733802][T10566] Cannot create hsr debugfs directory [ 332.745336][ T7082] Bluetooth: hci8: command tx timeout [ 333.157039][T10566] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 333.169746][T10566] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 333.180240][T10566] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 333.196336][T10566] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 333.300067][T10566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.321894][T10566] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.335776][T10221] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.342990][T10221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.359541][T10221] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.366749][T10221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.622429][T10566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.868418][ T7082] Bluetooth: hci9: command tx timeout [ 334.523309][T10566] veth0_vlan: entered promiscuous mode [ 334.544319][T10566] veth1_vlan: entered promiscuous mode [ 334.604874][T10566] veth0_macvtap: entered promiscuous mode [ 334.618683][T10566] veth1_macvtap: entered promiscuous mode [ 334.640300][T10566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.658411][T10566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.695316][T10217] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.713133][T10217] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.737802][T10217] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.773489][T10217] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.825610][ T7082] Bluetooth: hci8: command tx timeout [ 334.863162][T10217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.873499][T10217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.086636][T10221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.099811][T10221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.945460][ T7082] Bluetooth: hci9: command tx timeout [ 336.905439][ T7082] Bluetooth: hci8: command tx timeout [ 338.034683][ T7082] Bluetooth: hci9: command tx timeout [ 339.353237][ T8321] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 339.362203][ T8321] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 339.370445][ T8321] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 339.388071][ T8321] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 339.396970][ T8321] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 339.811591][T10641] chnl_net:caif_netlink_parms(): no params data found [ 339.906603][T10641] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.913836][T10641] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.921754][T10641] bridge_slave_0: entered allmulticast mode [ 339.929472][T10641] bridge_slave_0: entered promiscuous mode [ 339.937989][T10641] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.946370][T10641] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.953662][T10641] bridge_slave_1: entered allmulticast mode [ 339.961700][T10641] bridge_slave_1: entered promiscuous mode [ 340.001127][T10641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.013632][T10641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.048316][T10641] team0: Port device team_slave_0 added [ 340.057404][T10641] team0: Port device team_slave_1 added [ 340.085469][T10641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.092503][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.120411][T10641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.129982][ T8321] Bluetooth: hci9: command tx timeout [ 340.139095][T10641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.146270][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.172290][T10641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.226094][T10641] hsr_slave_0: entered promiscuous mode [ 340.232677][T10641] hsr_slave_1: entered promiscuous mode [ 340.239182][T10641] debugfs: 'hsr0' already exists in 'hsr' [ 340.245175][T10641] Cannot create hsr debugfs directory [ 340.494345][T10641] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.588192][T10641] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.733853][T10641] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.822814][T10641] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.019154][T10641] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.031610][T10641] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.047270][T10641] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.062367][T10641] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 341.193256][T10641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.223704][T10641] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.242580][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.249803][T10219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.269549][T10221] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.276693][T10221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.465315][ T8321] Bluetooth: hci10: command tx timeout [ 341.641515][T10641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.687512][T10641] veth0_vlan: entered promiscuous mode [ 341.700738][T10641] veth1_vlan: entered promiscuous mode [ 341.734367][T10641] veth0_macvtap: entered promiscuous mode [ 341.745697][T10641] veth1_macvtap: entered promiscuous mode [ 341.767035][T10641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.782233][T10641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.796978][T10219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.812145][T10219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.821590][T10219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.836059][T10219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.919323][ T7081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.937079][ T7081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.971339][T10217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.981434][T10217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.544643][ T8321] Bluetooth: hci10: command tx timeout [ 343.587192][T10685] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 344.712437][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 345.624819][ T8321] Bluetooth: hci10: command tx timeout [ 346.427844][ T7082] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 346.436930][ T7082] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 346.448175][ T7082] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 346.458149][ T7082] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 346.466332][ T7082] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 346.736028][T10710] chnl_net:caif_netlink_parms(): no params data found [ 346.842273][T10710] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.849670][T10710] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.857821][T10710] bridge_slave_0: entered allmulticast mode [ 346.866041][T10710] bridge_slave_0: entered promiscuous mode [ 346.875405][T10710] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.882934][T10710] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.890807][T10710] bridge_slave_1: entered allmulticast mode [ 346.899399][T10710] bridge_slave_1: entered promiscuous mode [ 346.947452][T10710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.960934][T10710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.020332][T10710] team0: Port device team_slave_0 added [ 347.028583][T10710] team0: Port device team_slave_1 added [ 347.071825][T10710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.079237][T10710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.106073][T10710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.119414][T10710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.127019][T10710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.159852][T10710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.230111][T10710] hsr_slave_0: entered promiscuous mode [ 347.236989][T10710] hsr_slave_1: entered promiscuous mode [ 347.243509][T10710] debugfs: 'hsr0' already exists in 'hsr' [ 347.251507][T10710] Cannot create hsr debugfs directory [ 347.457642][T10710] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.531585][T10710] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.650903][T10710] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.704495][ T7082] Bluetooth: hci10: command tx timeout [ 347.741710][T10710] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.922616][T10710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 347.979098][T10710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 347.995454][T10710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.007654][T10710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 348.170041][T10710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.201078][T10710] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.217261][T10217] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.224456][T10217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.265720][T10217] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.272846][T10217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.506506][ T7082] Bluetooth: hci11: command tx timeout [ 348.629044][T10710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.679997][T10710] veth0_vlan: entered promiscuous mode [ 348.692108][T10710] veth1_vlan: entered promiscuous mode [ 348.721966][T10710] veth0_macvtap: entered promiscuous mode [ 348.731963][T10710] veth1_macvtap: entered promiscuous mode [ 348.755177][T10710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.769608][T10710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.787367][ T7081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.797948][ T7081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.808805][ T7081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.818172][ T7081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.901140][T10216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.915175][T10216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.950370][T10215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.963795][T10215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.194950][ T8321] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 350.204680][ T8321] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 350.215553][ T8321] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 350.226586][ T8321] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 350.234953][ T8321] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 350.315936][T10752] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 350.594875][ T8321] Bluetooth: hci11: command tx timeout [ 350.638538][T10753] chnl_net:caif_netlink_parms(): no params data found [ 350.786146][T10753] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.793483][T10753] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.800912][T10753] bridge_slave_0: entered allmulticast mode [ 350.824105][T10753] bridge_slave_0: entered promiscuous mode [ 350.834304][T10753] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.845448][T10753] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.852793][T10753] bridge_slave_1: entered allmulticast mode [ 350.861033][T10753] bridge_slave_1: entered promiscuous mode [ 350.937420][T10753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.952471][T10753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.000099][T10753] team0: Port device team_slave_0 added [ 351.016008][T10753] team0: Port device team_slave_1 added [ 351.063481][T10753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.072314][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.100181][T10753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.124635][T10753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.131623][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.179028][T10753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.232569][T10753] hsr_slave_0: entered promiscuous mode [ 351.258957][T10753] hsr_slave_1: entered promiscuous mode [ 351.270831][T10753] debugfs: 'hsr0' already exists in 'hsr' [ 351.299660][T10753] Cannot create hsr debugfs directory [ 351.563253][T10753] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.730631][T10753] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.868624][T10753] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.961367][T10753] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.108834][T10753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.124300][T10753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.152582][T10753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.206909][T10753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.265055][ T8321] Bluetooth: hci12: command tx timeout [ 352.405040][T10753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.455074][T10753] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.471611][T10221] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.478749][T10221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.522179][T10215] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.529433][T10215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.664764][ T8321] Bluetooth: hci11: command tx timeout [ 352.742067][T10780] FAULT_INJECTION: forcing a failure. [ 352.742067][T10780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.774941][T10780] CPU: 1 UID: 0 PID: 10780 Comm: syz.2.1132 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.774987][T10780] Tainted: [L]=SOFTLOCKUP [ 352.774997][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 352.775031][T10780] Call Trace: [ 352.775041][T10780] [ 352.775052][T10780] dump_stack_lvl+0x100/0x190 [ 352.775103][T10780] should_fail_ex.cold+0x5/0xa [ 352.775152][T10780] _copy_to_user+0x32/0xd0 [ 352.775201][T10780] rng_dev_read+0x226/0x860 [ 352.775234][T10780] ? __pfx_virtio_read+0x10/0x10 [ 352.775265][T10780] ? __pfx_rng_dev_read+0x10/0x10 [ 352.775292][T10780] ? common_file_perm+0x1ab/0x4f0 [ 352.775345][T10780] ? bpf_lsm_file_permission+0x9/0x10 [ 352.775389][T10780] ? security_file_permission+0x76/0x210 [ 352.775441][T10780] ? rw_verify_area+0xce/0x6d0 [ 352.775470][T10780] ? __pfx_rng_dev_read+0x10/0x10 [ 352.775500][T10780] vfs_read+0x1e4/0xb30 [ 352.775541][T10780] ? __pfx_vfs_read+0x10/0x10 [ 352.775573][T10780] ? find_held_lock+0x2b/0x80 [ 352.775602][T10780] ? __fget_files+0x215/0x3d0 [ 352.775636][T10780] ? __fget_files+0x215/0x3d0 [ 352.775676][T10780] ? __fget_files+0x21f/0x3d0 [ 352.775722][T10780] ksys_read+0x12a/0x250 [ 352.775756][T10780] ? __pfx_ksys_read+0x10/0x10 [ 352.775802][T10780] do_syscall_64+0xc9/0xf80 [ 352.775842][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.775873][T10780] RIP: 0033:0x7f4917d9aeb9 [ 352.775897][T10780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.775926][T10780] RSP: 002b:00007f4918c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 352.775955][T10780] RAX: ffffffffffffffda RBX: 00007f4918015fa0 RCX: 00007f4917d9aeb9 [ 352.775975][T10780] RDX: 00000000fffffe82 RSI: 0000200000000040 RDI: 0000000000000005 [ 352.775993][T10780] RBP: 00007f4918c25090 R08: 0000000000000000 R09: 0000000000000000 [ 352.776011][T10780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 352.776029][T10780] R13: 00007f4918016038 R14: 00007f4918015fa0 R15: 00007ffdc7d65e88 [ 352.776076][T10780] [ 353.321968][T10753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.408249][T10753] veth0_vlan: entered promiscuous mode [ 353.431143][T10753] veth1_vlan: entered promiscuous mode [ 353.497911][T10753] veth0_macvtap: entered promiscuous mode [ 353.509070][T10753] veth1_macvtap: entered promiscuous mode [ 353.541336][T10753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.592218][T10753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.622256][ T7081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.637230][ T7081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.662707][ T7081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.710134][ T7081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.843698][T10221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.870768][T10221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.986762][T10215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.995372][T10215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.375798][ T8321] Bluetooth: hci12: command tx timeout [ 354.745164][ T8321] Bluetooth: hci11: command tx timeout [ 355.280772][T10791] hub 1-0:1.0: USB hub found [ 355.294718][T10791] hub 1-0:1.0: 1 port detected [ 355.986966][T10811] Invalid ELF header magic: != ELF [ 356.046382][ T7082] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 356.059647][ T7082] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 356.067842][ T7082] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 356.076332][ T7082] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 356.084036][ T7082] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 356.424588][ T7082] Bluetooth: hci12: command tx timeout [ 357.687138][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 357.700450][T10816] chnl_net:caif_netlink_parms(): no params data found [ 357.969059][T10816] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.980818][T10816] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.988831][T10816] bridge_slave_0: entered allmulticast mode [ 357.999648][T10816] bridge_slave_0: entered promiscuous mode [ 358.008938][T10816] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.016484][T10816] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.023859][T10816] bridge_slave_1: entered allmulticast mode [ 358.032861][T10816] bridge_slave_1: entered promiscuous mode [ 358.074980][T10816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.088872][T10816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.104804][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 358.147297][T10816] team0: Port device team_slave_0 added [ 358.157501][T10816] team0: Port device team_slave_1 added [ 358.231171][ T7082] Bluetooth: hci13: command tx timeout [ 358.242481][T10816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.250234][T10816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.278309][T10816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.292601][T10816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.302099][T10816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.350647][T10816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.421094][T10816] hsr_slave_0: entered promiscuous mode [ 358.430057][T10816] hsr_slave_1: entered promiscuous mode [ 358.437832][T10816] debugfs: 'hsr0' already exists in 'hsr' [ 358.443611][T10816] Cannot create hsr debugfs directory [ 358.505387][ T7082] Bluetooth: hci12: command tx timeout [ 358.656165][T10816] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.741849][T10816] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.868800][T10816] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.933359][T10816] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.438602][T10816] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 359.453179][T10816] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 359.558617][T10816] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 359.569929][T10816] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 359.717107][T10816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.749142][T10816] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.761588][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.768843][ T7081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.790754][T10219] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.797921][T10219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.037966][T10816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.267275][ T7082] Bluetooth: hci13: command tx timeout [ 360.310190][T10816] veth0_vlan: entered promiscuous mode [ 360.321694][T10816] veth1_vlan: entered promiscuous mode [ 360.355505][T10816] veth0_macvtap: entered promiscuous mode [ 360.367187][T10816] veth1_macvtap: entered promiscuous mode [ 360.387724][T10816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.403453][T10816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.417800][T10215] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.434033][T10215] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.446741][T10215] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.455858][T10215] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.539074][T10221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.556293][T10221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.590058][T10215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.600539][T10215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.620860][T10875] FAULT_INJECTION: forcing a failure. [ 361.620860][T10875] name failslab, interval 1, probability 0, space 0, times 0 [ 361.639267][T10875] CPU: 0 UID: 0 PID: 10875 Comm: syz.6.1147 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.639299][T10875] Tainted: [L]=SOFTLOCKUP [ 361.639306][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 361.639318][T10875] Call Trace: [ 361.639325][T10875] [ 361.639332][T10875] dump_stack_lvl+0x100/0x190 [ 361.639362][T10875] should_fail_ex.cold+0x5/0xa [ 361.639396][T10875] should_failslab+0xc2/0x120 [ 361.639426][T10875] __kmalloc_cache_noprof+0x80/0x810 [ 361.639448][T10875] ? snd_pcm_info_user+0x48/0xe0 [ 361.639483][T10875] ? snd_pcm_info_user+0x48/0xe0 [ 361.639541][T10875] snd_pcm_info_user+0x48/0xe0 [ 361.639583][T10875] snd_pcm_control_ioctl+0x394/0x700 [ 361.639634][T10875] snd_ctl_ioctl+0x6c0/0x1330 [ 361.639656][T10875] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 361.639681][T10875] ? find_held_lock+0x2b/0x80 [ 361.639701][T10875] ? hook_file_ioctl_common+0x146/0x410 [ 361.639739][T10875] ? __fget_files+0x21f/0x3d0 [ 361.639768][T10875] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 361.639791][T10875] __x64_sys_ioctl+0x18e/0x210 [ 361.639827][T10875] do_syscall_64+0xc9/0xf80 [ 361.639856][T10875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.639877][T10875] RIP: 0033:0x7fd06d39aeb9 [ 361.639894][T10875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.639914][T10875] RSP: 002b:00007fd06e27f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.639934][T10875] RAX: ffffffffffffffda RBX: 00007fd06d615fa0 RCX: 00007fd06d39aeb9 [ 361.639947][T10875] RDX: 0000000000000003 RSI: 00000000c1205531 RDI: 0000000000000004 [ 361.639959][T10875] RBP: 00007fd06e27f090 R08: 0000000000000000 R09: 0000000000000000 [ 361.639972][T10875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.639983][T10875] R13: 00007fd06d616038 R14: 00007fd06d615fa0 R15: 00007ffcc88a02d8 [ 361.640010][T10875] [ 362.344758][ T7082] Bluetooth: hci13: command tx timeout [ 363.009424][ T8321] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 363.018405][ T8321] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 363.026195][ T8321] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 363.034770][ T8321] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 363.044791][ T8321] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 363.428678][T10888] chnl_net:caif_netlink_parms(): no params data found [ 363.519363][T10888] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.526755][T10888] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.534092][T10888] bridge_slave_0: entered allmulticast mode [ 363.541683][T10888] bridge_slave_0: entered promiscuous mode [ 363.551177][T10888] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.558701][T10888] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.567807][T10888] bridge_slave_1: entered allmulticast mode [ 363.581731][T10888] bridge_slave_1: entered promiscuous mode [ 363.618454][T10888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.632219][T10888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.667405][T10888] team0: Port device team_slave_0 added [ 363.677190][T10888] team0: Port device team_slave_1 added [ 363.709573][T10888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.716658][T10888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.744559][T10888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.774578][T10888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.781714][T10888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.819798][T10888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.910887][T10888] hsr_slave_0: entered promiscuous mode [ 363.917874][T10888] hsr_slave_1: entered promiscuous mode [ 363.924327][T10888] debugfs: 'hsr0' already exists in 'hsr' [ 363.930710][T10888] Cannot create hsr debugfs directory [ 364.213386][T10888] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.326845][T10888] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.394297][T10888] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.426850][ T8321] Bluetooth: hci13: command tx timeout [ 364.465320][T10888] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.613315][T10888] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 364.625066][T10888] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 364.646204][T10888] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 364.658984][T10888] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 364.817019][T10888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.868416][T10888] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.889924][T10221] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.897064][T10221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.921033][T10216] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.928299][T10216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.146407][ T8321] Bluetooth: hci14: command tx timeout [ 365.341829][T10888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.730384][T10888] veth0_vlan: entered promiscuous mode [ 365.766582][T10888] veth1_vlan: entered promiscuous mode [ 365.826720][T10888] veth0_macvtap: entered promiscuous mode [ 365.907420][T10888] veth1_macvtap: entered promiscuous mode [ 365.929020][T10888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.948022][T10888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.974800][T10219] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.983591][T10219] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.011927][T10219] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.021438][T10219] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.134685][T10221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.142532][T10221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.193283][T10214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.201836][T10214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.224689][ T8321] Bluetooth: hci14: command tx timeout [ 368.149310][T10944] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 369.304741][ T8321] Bluetooth: hci14: command tx timeout [ 371.245856][T10967] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1160'. [ 371.395984][ T8321] Bluetooth: hci14: command tx timeout [ 371.655332][ T7082] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 371.666360][ T7082] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 371.674237][ T7082] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 371.682945][ T7082] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 371.690811][ T7082] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 371.985472][T10973] chnl_net:caif_netlink_parms(): no params data found [ 372.223111][T10973] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.232056][T10973] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.239949][T10973] bridge_slave_0: entered allmulticast mode [ 372.248025][T10973] bridge_slave_0: entered promiscuous mode [ 372.256963][T10973] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.264132][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.273730][T10973] bridge_slave_1: entered allmulticast mode [ 372.282228][T10973] bridge_slave_1: entered promiscuous mode [ 372.321174][T10973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.333740][T10973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.382578][T10973] team0: Port device team_slave_0 added [ 372.390463][T10973] team0: Port device team_slave_1 added [ 372.429074][T10973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.443361][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.471358][T10973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.484038][T10973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.491347][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.534109][T10973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.588769][T10973] hsr_slave_0: entered promiscuous mode [ 372.595464][T10973] hsr_slave_1: entered promiscuous mode [ 372.601626][T10973] debugfs: 'hsr0' already exists in 'hsr' [ 372.607559][T10973] Cannot create hsr debugfs directory [ 373.020898][T10973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.117251][T10973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.200646][T10973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.260508][T10973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.459911][T10973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 373.472387][T10973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 373.484641][T10973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 373.501271][T10973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 373.782530][T10973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.794843][ T7082] Bluetooth: hci15: command tx timeout [ 373.837665][T10973] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.884105][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.891333][T10219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.952285][T10214] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.959436][T10214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.098332][ T8321] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 374.105788][T10973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.130104][ T8321] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 374.138745][ T8321] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 374.159750][ T8321] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 374.172902][ T8321] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 374.580691][T11008] chnl_net:caif_netlink_parms(): no params data found [ 374.716193][T11008] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.723559][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.738176][T11008] bridge_slave_0: entered allmulticast mode [ 374.747063][T11008] bridge_slave_0: entered promiscuous mode [ 374.792097][T11008] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.807455][T11008] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.823834][T11008] bridge_slave_1: entered allmulticast mode [ 374.834571][T11008] bridge_slave_1: entered promiscuous mode [ 374.845913][T10973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.918848][T11008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.955332][T11008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.041378][T10973] veth0_vlan: entered promiscuous mode [ 375.049814][T11008] team0: Port device team_slave_0 added [ 375.067822][T11008] team0: Port device team_slave_1 added [ 375.140409][T11008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.155552][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.190378][T11008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.209466][T11008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.216978][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.243460][T11008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.266479][T10973] veth1_vlan: entered promiscuous mode [ 375.319650][T11008] hsr_slave_0: entered promiscuous mode [ 375.326620][T11008] hsr_slave_1: entered promiscuous mode [ 375.332977][T11008] debugfs: 'hsr0' already exists in 'hsr' [ 375.338840][T11008] Cannot create hsr debugfs directory [ 375.537238][T10973] veth0_macvtap: entered promiscuous mode [ 375.561815][T10973] veth1_macvtap: entered promiscuous mode [ 375.649589][T11008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.674271][T10973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.701274][T10973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.731436][T11008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.753192][T10221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.767908][T10221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.778367][T10221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.826931][T11008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.857914][T10221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.867389][ T7082] Bluetooth: hci15: command tx timeout [ 375.973955][T11008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.039880][T10217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.054083][T10217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.117978][T10217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.137343][T10217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.230676][T11008] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 376.265250][ T7082] Bluetooth: hci16: command tx timeout [ 376.279121][T11008] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 376.290133][T11008] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 376.317041][T11008] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 376.491693][T11008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.512818][T11008] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.530885][T10216] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.538021][T10216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.553659][T10217] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.560807][T10217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.948821][T11008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.237994][T11008] veth0_vlan: entered promiscuous mode [ 377.264156][T11008] veth1_vlan: entered promiscuous mode [ 377.326901][T11008] veth0_macvtap: entered promiscuous mode [ 377.342282][T11008] veth1_macvtap: entered promiscuous mode [ 377.381352][T11008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.419652][T11008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.438045][T10214] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.450285][T10214] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.467434][T10214] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.485562][T10214] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.620965][T10216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.641628][T10216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.690140][T10214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.707721][T10214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.954824][ T7082] Bluetooth: hci15: command tx timeout [ 378.181469][T11068] Invalid ELF header magic: != ELF [ 378.355211][ T7082] Bluetooth: hci16: command tx timeout [ 378.822251][ T5908] smpboot: CPU 1 is now offline [ 379.356498][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1180'. [ 379.630860][T11079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1181'. [ 380.026013][ T7082] Bluetooth: hci15: command tx timeout [ 380.433192][ T7082] Bluetooth: hci16: command tx timeout [ 380.504077][T11097] FAULT_INJECTION: forcing a failure. [ 380.504077][T11097] name fail_futex, interval 1, probability 0, space 0, times 0 [ 380.581996][T11097] CPU: 0 UID: 0 PID: 11097 Comm: syz.3.1184 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.582035][T11097] Tainted: [L]=SOFTLOCKUP [ 380.582043][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 380.582058][T11097] Call Trace: [ 380.582065][T11097] [ 380.582074][T11097] dump_stack_lvl+0x100/0x190 [ 380.582107][T11097] should_fail_ex.cold+0x5/0xa [ 380.582143][T11097] ? kasan_save_stack+0x3f/0x50 [ 380.582176][T11097] get_futex_key+0x1d2/0x1620 [ 380.582211][T11097] ? __pfx_get_futex_key+0x10/0x10 [ 380.582253][T11097] futex_wake+0xea/0x530 [ 380.582294][T11097] ? __pfx_futex_wake+0x10/0x10 [ 380.582340][T11097] ? proc_id_connector+0x2ed/0x650 [ 380.582392][T11097] do_futex+0x32b/0x350 [ 380.582427][T11097] ? __pfx_do_futex+0x10/0x10 [ 380.582461][T11097] ? find_held_lock+0x2b/0x80 [ 380.582491][T11097] __x64_sys_futex+0x34f/0x4d0 [ 380.582529][T11097] ? __pfx___x64_sys_futex+0x10/0x10 [ 380.582568][T11097] ? __sys_setresgid+0x645/0x12f0 [ 380.582601][T11097] do_syscall_64+0xc9/0xf80 [ 380.582633][T11097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.582658][T11097] RIP: 0033:0x7f5ea9f9aeb9 [ 380.582676][T11097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.582700][T11097] RSP: 002b:00007f5eaae730e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 380.582723][T11097] RAX: ffffffffffffffda RBX: 00007f5eaa215fa8 RCX: 00007f5ea9f9aeb9 [ 380.582739][T11097] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5eaa215fac [ 380.582753][T11097] RBP: 00007f5eaa215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 380.582768][T11097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.582782][T11097] R13: 00007f5eaa216038 R14: 00007ffd5ebe4e00 R15: 00007ffd5ebe4ee8 [ 380.582813][T11097] [ 380.928954][ T8321] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 380.937991][ T8321] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 380.946250][ T8321] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 380.954140][ T8321] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 380.962039][ T8321] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 380.999645][T11097] FAULT_INJECTION: forcing a failure. [ 380.999645][T11097] name failslab, interval 1, probability 0, space 0, times 0 [ 381.045615][T11097] CPU: 0 UID: 0 PID: 11097 Comm: syz.3.1184 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.045651][T11097] Tainted: [L]=SOFTLOCKUP [ 381.045659][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 381.045672][T11097] Call Trace: [ 381.045679][T11097] [ 381.045688][T11097] dump_stack_lvl+0x100/0x190 [ 381.045719][T11097] should_fail_ex.cold+0x5/0xa [ 381.045755][T11097] should_failslab+0xc2/0x120 [ 381.045786][T11097] kmem_cache_alloc_noprof+0x83/0x780 [ 381.045816][T11097] ? __kernfs_new_node+0xd2/0x960 [ 381.045851][T11097] ? __kernfs_new_node+0xd2/0x960 [ 381.045879][T11097] __kernfs_new_node+0xd2/0x960 [ 381.045913][T11097] ? __pfx___kernfs_new_node+0x10/0x10 [ 381.045950][T11097] ? find_held_lock+0x2b/0x80 [ 381.045972][T11097] ? kernfs_root+0xee/0x2a0 [ 381.046000][T11097] ? kernfs_root+0xee/0x2a0 [ 381.046036][T11097] kernfs_new_node+0x11b/0x1a0 [ 381.046074][T11097] __kernfs_create_file+0x53/0x350 [ 381.046101][T11097] sysfs_add_file_mode_ns+0x207/0x3c0 [ 381.046137][T11097] internal_create_group+0x593/0xf40 [ 381.046174][T11097] ? __pfx_internal_create_group+0x10/0x10 [ 381.046210][T11097] ? kernfs_create_link+0x1bd/0x240 [ 381.046239][T11097] internal_create_groups+0x9d/0x150 [ 381.046273][T11097] device_add+0x71a/0x1950 [ 381.046305][T11097] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 381.046329][T11097] ? __pfx_device_add+0x10/0x10 [ 381.046367][T11097] ? lockdep_init_map_type+0x5c/0x250 [ 381.046398][T11097] ? __init_waitqueue_head+0xca/0x150 [ 381.046440][T11097] netdev_register_kobject+0x1a9/0x3d0 [ 381.046467][T11097] register_netdevice+0x12b3/0x21d0 [ 381.046493][T11097] ? __pfx_register_netdevice+0x10/0x10 [ 381.046521][T11097] __tun_chr_ioctl+0x1ded/0x47c0 [ 381.046554][T11097] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 381.046594][T11097] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 381.046634][T11097] ? find_held_lock+0x2b/0x80 [ 381.046655][T11097] ? hook_file_ioctl_common+0x146/0x410 [ 381.046694][T11097] ? __fget_files+0x21f/0x3d0 [ 381.046722][T11097] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 381.046759][T11097] __x64_sys_ioctl+0x18e/0x210 [ 381.046796][T11097] do_syscall_64+0xc9/0xf80 [ 381.046826][T11097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.046849][T11097] RIP: 0033:0x7f5ea9f9aeb9 [ 381.046866][T11097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.046887][T11097] RSP: 002b:00007f5eaae73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.046909][T11097] RAX: ffffffffffffffda RBX: 00007f5eaa215fa0 RCX: 00007f5ea9f9aeb9 [ 381.046923][T11097] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000007 [ 381.046936][T11097] RBP: 00007f5eaa008c1f R08: 0000000000000000 R09: 0000000000000000 [ 381.046949][T11097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.046962][T11097] R13: 00007f5eaa216038 R14: 00007f5eaa215fa0 R15: 00007ffd5ebe4ee8 [ 381.046990][T11097] [ 381.595666][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1187'. [ 381.605898][T11106] FAULT_INJECTION: forcing a failure. [ 381.605898][T11106] name failslab, interval 1, probability 0, space 0, times 0 [ 381.618680][T11106] CPU: 0 UID: 0 PID: 11106 Comm: syz.4.1187 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.618714][T11106] Tainted: [L]=SOFTLOCKUP [ 381.618721][T11106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 381.618734][T11106] Call Trace: [ 381.618741][T11106] [ 381.618749][T11106] dump_stack_lvl+0x100/0x190 [ 381.618779][T11106] should_fail_ex.cold+0x5/0xa [ 381.618815][T11106] should_failslab+0xc2/0x120 [ 381.618846][T11106] __kmalloc_cache_noprof+0x80/0x810 [ 381.618870][T11106] ? call_usermodehelper_setup+0xaf/0x360 [ 381.618892][T11106] ? __kmalloc_node_track_caller_noprof+0x373/0x9d0 [ 381.618922][T11106] ? __pfx_free_modprobe_argv+0x10/0x10 [ 381.618958][T11106] ? call_usermodehelper_setup+0xaf/0x360 [ 381.618979][T11106] call_usermodehelper_setup+0xaf/0x360 [ 381.619006][T11106] __request_module+0x3c7/0x650 [ 381.619040][T11106] ? __pfx___request_module+0x10/0x10 [ 381.619085][T11106] ? find_held_lock+0x2b/0x80 [ 381.619106][T11106] ? inet_create+0xa72/0x1060 [ 381.619137][T11106] inet_create+0xd45/0x1060 [ 381.619163][T11106] ? inet_create+0x94/0x1060 [ 381.619192][T11106] __sock_create+0x339/0x860 [ 381.619222][T11106] __sys_socket+0x14d/0x260 [ 381.619246][T11106] ? fput+0x79/0x100 [ 381.619276][T11106] ? __pfx___sys_socket+0x10/0x10 [ 381.619306][T11106] ? xfd_validate_state+0x129/0x190 [ 381.619348][T11106] __x64_sys_socket+0x72/0xb0 [ 381.619374][T11106] ? lockdep_hardirqs_on+0x78/0x100 [ 381.619400][T11106] do_syscall_64+0xc9/0xf80 [ 381.619428][T11106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.619451][T11106] RIP: 0033:0x7fe4b959aeb9 [ 381.619468][T11106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.619489][T11106] RSP: 002b:00007fe4ba413028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 381.619510][T11106] RAX: ffffffffffffffda RBX: 00007fe4b9815fa0 RCX: 00007fe4b959aeb9 [ 381.619524][T11106] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 381.619537][T11106] RBP: 00007fe4b9608c1f R08: 0000000000000000 R09: 0000000000000000 [ 381.619550][T11106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.619562][T11106] R13: 00007fe4b9816038 R14: 00007fe4b9815fa0 R15: 00007ffc46495868 [ 381.619589][T11106] [ 381.957418][T11108] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 381.971752][T11108] i2c i2c-0: new_device: Invalid device name [ 382.467274][T11099] chnl_net:caif_netlink_parms(): no params data found [ 382.514863][ T8321] Bluetooth: hci16: command tx timeout [ 382.781641][T11099] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.813023][T11099] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.842253][T11099] bridge_slave_0: entered allmulticast mode [ 382.873457][T11099] bridge_slave_0: entered promiscuous mode [ 382.908772][T11099] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.940492][T11099] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.981841][T11099] bridge_slave_1: entered allmulticast mode [ 383.017555][T11099] bridge_slave_1: entered promiscuous mode [ 383.070870][ T7082] Bluetooth: hci17: command tx timeout [ 383.171265][T11099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.219215][T11099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.378449][T11099] team0: Port device team_slave_0 added [ 383.413061][T11099] team0: Port device team_slave_1 added [ 383.507046][T11133] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 383.526983][T11099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.560211][T11099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.650107][T11099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.688921][T11099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.704012][T11099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.813529][T11099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.919577][T11099] hsr_slave_0: entered promiscuous mode [ 383.935724][T11099] hsr_slave_1: entered promiscuous mode [ 383.961752][T11099] debugfs: 'hsr0' already exists in 'hsr' [ 383.991797][T11099] Cannot create hsr debugfs directory [ 384.406589][T11099] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.604009][T11099] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.770033][T11099] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.909733][T11099] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.158625][ T7082] Bluetooth: hci17: command tx timeout [ 385.223018][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 385.426789][T11099] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 385.466541][T11099] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 385.541131][T11099] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 385.590780][T11099] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 386.019438][T11099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.166809][T11099] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.242391][T10217] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.249582][T10217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.355305][T10216] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.362453][T10216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.047094][T11189] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 387.218696][T11099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.227852][ T7082] Bluetooth: hci17: command tx timeout [ 387.804324][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 387.992373][T11099] veth0_vlan: entered promiscuous mode [ 388.051227][T11099] veth1_vlan: entered promiscuous mode [ 388.206290][T11099] veth0_macvtap: entered promiscuous mode [ 388.234032][T11099] veth1_macvtap: entered promiscuous mode [ 388.332819][T11099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.378498][T11099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.493401][ T7081] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.512343][ T7081] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.558041][ T7081] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.617845][ T7081] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.847354][T10214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.879724][T10214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.962999][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.971209][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.289460][T10219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.317194][ T7082] Bluetooth: hci17: command tx timeout [ 389.364954][T10219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.973277][T11245] nvme_fcloop: unknown parameter or missing value '€' [ 390.300338][T11250] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 391.948022][ T8321] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 391.957152][ T8321] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 391.965242][ T8321] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 391.980546][ T8321] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 391.992818][ T8321] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 394.054485][ T8321] Bluetooth: hci18: command tx timeout [ 394.083998][T11271] chnl_net:caif_netlink_parms(): no params data found [ 394.764805][T11271] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.797365][T11271] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.838280][T11271] bridge_slave_0: entered allmulticast mode [ 394.866048][T11271] bridge_slave_0: entered promiscuous mode [ 394.915144][T11271] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.974611][T11271] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.026007][T11271] bridge_slave_1: entered allmulticast mode [ 395.059050][T11271] bridge_slave_1: entered promiscuous mode [ 395.256641][T11271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.275517][T11320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1236'. [ 395.331558][T11271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.371903][T11320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.510859][T11320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.851649][T11271] team0: Port device team_slave_0 added [ 395.938496][T11271] team0: Port device team_slave_1 added [ 396.106007][ T7082] Bluetooth: hci18: command tx timeout [ 396.155545][T11271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.162547][T11271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.345478][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 396.392199][T11271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.572449][T11271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.654465][T11271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.840787][T11271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.038017][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 397.094295][T11271] hsr_slave_0: entered promiscuous mode [ 397.126815][T11271] hsr_slave_1: entered promiscuous mode [ 397.156003][T11271] debugfs: 'hsr0' already exists in 'hsr' [ 397.165973][T11345] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1249'. [ 397.195573][T11271] Cannot create hsr debugfs directory [ 398.184615][ T7082] Bluetooth: hci18: command tx timeout [ 398.531459][T11271] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.548587][T11365] net_ratelimit: 5 callbacks suppressed [ 398.548603][T11365] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 398.560771][T11365] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 398.870586][T11271] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.096422][T11271] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.502473][T11271] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.265790][ T7082] Bluetooth: hci18: command tx timeout [ 400.357264][T11271] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 400.423566][T11271] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 400.509638][T11271] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 400.561032][T11271] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 401.080053][T11271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.236020][T11271] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.347681][T10217] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.354872][T10217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.444639][T10217] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.451824][T10217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.459491][T11398] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1253'. [ 401.638660][T11271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.399690][T11416] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1256'. [ 402.497155][T11416] macvlan1: entered promiscuous mode [ 402.544341][T11416] macvlan1: entered allmulticast mode [ 402.566680][T11416] veth1_vlan: entered allmulticast mode [ 402.772056][T11271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.204701][T11271] veth0_vlan: entered promiscuous mode [ 404.264234][T11271] veth1_vlan: entered promiscuous mode [ 404.482859][T11271] veth0_macvtap: entered promiscuous mode [ 404.537356][T11271] veth1_macvtap: entered promiscuous mode [ 404.641670][T11271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.701767][T11271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.758534][T10214] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.855523][T10214] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.978705][T10216] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.048693][T10216] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.312238][T10217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.359645][T10217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.496121][T10217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.530603][T10217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.455136][T11479] FAULT_INJECTION: forcing a failure. [ 407.455136][T11479] name failslab, interval 1, probability 0, space 0, times 0 [ 407.529302][T11479] CPU: 0 UID: 0 PID: 11479 Comm: syz.4.1269 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.529340][T11479] Tainted: [L]=SOFTLOCKUP [ 407.529348][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 407.529362][T11479] Call Trace: [ 407.529370][T11479] [ 407.529378][T11479] dump_stack_lvl+0x100/0x190 [ 407.529411][T11479] should_fail_ex.cold+0x5/0xa [ 407.529450][T11479] should_failslab+0xc2/0x120 [ 407.529484][T11479] ? __register_sysctl_table+0xbe4/0x1650 [ 407.529532][T11479] __kmalloc_noprof+0xf6/0x9c0 [ 407.529554][T11479] ? __register_sysctl_table+0xbc8/0x1650 [ 407.529588][T11479] ? __register_sysctl_table+0xbc8/0x1650 [ 407.529628][T11479] ? __register_sysctl_table+0xbe4/0x1650 [ 407.529662][T11479] __register_sysctl_table+0xbe4/0x1650 [ 407.529702][T11479] ? __pfx___register_sysctl_table+0x10/0x10 [ 407.529736][T11479] ? is_module_address+0x69/0xf0 [ 407.529773][T11479] ? register_net_sysctl_sz+0x222/0x430 [ 407.529830][T11479] ? __asan_memcpy+0x3c/0x60 [ 407.529858][T11479] sctp_sysctl_net_register+0x15e/0x200 [ 407.529906][T11479] ? __pfx_sctp_defaults_init+0x10/0x10 [ 407.529938][T11479] sctp_defaults_init+0x6d2/0xd90 [ 407.529970][T11479] ? __pfx_sctp_defaults_init+0x10/0x10 [ 407.530002][T11479] ops_init+0x1e2/0x5f0 [ 407.530039][T11479] setup_net+0x118/0x3a0 [ 407.530059][T11479] ? __pfx_setup_net+0x10/0x10 [ 407.530076][T11479] ? lockdep_init_map_type+0x5c/0x250 [ 407.530108][T11479] ? mutex_init_lockep+0x110/0x150 [ 407.530143][T11479] copy_net_ns+0x46f/0x7c0 [ 407.530167][T11479] create_new_namespaces+0x3ea/0xab0 [ 407.530199][T11479] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 407.530226][T11479] ksys_unshare+0x455/0xab0 [ 407.530260][T11479] ? __pfx_ksys_unshare+0x10/0x10 [ 407.530291][T11479] ? xfd_validate_state+0x129/0x190 [ 407.530345][T11479] __x64_sys_unshare+0x31/0x40 [ 407.530397][T11479] do_syscall_64+0xc9/0xf80 [ 407.530426][T11479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.530449][T11479] RIP: 0033:0x7fe4b959aeb9 [ 407.530466][T11479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.530487][T11479] RSP: 002b:00007fe4ba413028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 407.530507][T11479] RAX: ffffffffffffffda RBX: 00007fe4b9815fa0 RCX: 00007fe4b959aeb9 [ 407.530522][T11479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 407.530535][T11479] RBP: 00007fe4b9608c1f R08: 0000000000000000 R09: 0000000000000000 [ 407.530548][T11479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.530561][T11479] R13: 00007fe4b9816038 R14: 00007fe4b9815fa0 R15: 00007ffc46495868 [ 407.530588][T11479] [ 408.114453][T11479] sysctl could not get directory: /net/sctp -12 [ 409.382243][T11500] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1273'. [ 413.299767][T11553] FAULT_INJECTION: forcing a failure. [ 413.299767][T11553] name failslab, interval 1, probability 0, space 0, times 0 [ 413.559136][T11553] CPU: 0 UID: 0 PID: 11553 Comm: syz.3.1286 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.559175][T11553] Tainted: [L]=SOFTLOCKUP [ 413.559183][T11553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 413.559197][T11553] Call Trace: [ 413.559204][T11553] [ 413.559212][T11553] dump_stack_lvl+0x100/0x190 [ 413.559244][T11553] should_fail_ex.cold+0x5/0xa [ 413.559283][T11553] should_failslab+0xc2/0x120 [ 413.559317][T11553] kmem_cache_alloc_noprof+0x83/0x780 [ 413.559347][T11553] ? futex_wait+0x125/0x380 [ 413.559368][T11553] ? prepare_creds+0x2c/0x950 [ 413.559403][T11553] ? prepare_creds+0x2c/0x950 [ 413.559422][T11553] prepare_creds+0x2c/0x950 [ 413.559444][T11553] lookup_user_key+0x8e9/0x1300 [ 413.559482][T11553] ? __pfx_lookup_user_key+0x10/0x10 [ 413.559517][T11553] ? do_futex+0x192/0x350 [ 413.559550][T11553] ? __pfx_do_futex+0x10/0x10 [ 413.559595][T11553] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 413.559631][T11553] ? __x64_sys_futex+0x34f/0x4d0 [ 413.559661][T11553] ? __x64_sys_futex+0x358/0x4d0 [ 413.559692][T11553] ? fput+0x79/0x100 [ 413.559724][T11553] keyctl_watch_key+0x52/0x500 [ 413.559757][T11553] __do_sys_keyctl+0x29f/0x5a0 [ 413.559788][T11553] do_syscall_64+0xc9/0xf80 [ 413.559817][T11553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.559839][T11553] RIP: 0033:0x7f5ea9f9aeb9 [ 413.559855][T11553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.559877][T11553] RSP: 002b:00007f5eaae73028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 413.559897][T11553] RAX: ffffffffffffffda RBX: 00007f5eaa215fa0 RCX: 00007f5ea9f9aeb9 [ 413.559929][T11553] RDX: 0000000000000005 RSI: ffffffffffffffff RDI: 0200000000000020 [ 413.559943][T11553] RBP: 00007f5eaa008c1f R08: 0000000000000008 R09: 0000000000000000 [ 413.559957][T11553] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 413.559970][T11553] R13: 00007f5eaa216038 R14: 00007f5eaa215fa0 R15: 00007ffd5ebe4ee8 [ 413.559999][T11553] [ 414.180318][T11564] futex_wake_op: syz.7.1288 tries to shift op by -2048; fix this program [ 414.241950][T11564] 0x000000000001-0x000000020000 : "" [ 414.355077][T11564] ftl_cs: FTL header corrupt! [ 414.437623][T11569] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 414.560638][T11569] ep_00: uevent: failed to send synthetic uevent: -22 [ 415.116547][T11573] FAULT_INJECTION: forcing a failure. [ 415.116547][T11573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.204729][T11573] CPU: 0 UID: 0 PID: 11573 Comm: syz.8.1291 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.204764][T11573] Tainted: [L]=SOFTLOCKUP [ 415.204771][T11573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 415.204784][T11573] Call Trace: [ 415.204791][T11573] [ 415.204799][T11573] dump_stack_lvl+0x100/0x190 [ 415.204831][T11573] should_fail_ex.cold+0x5/0xa [ 415.204868][T11573] _copy_to_user+0x32/0xd0 [ 415.204904][T11573] simple_read_from_buffer+0xcb/0x170 [ 415.204930][T11573] proc_fail_nth_read+0x1af/0x230 [ 415.204958][T11573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.204986][T11573] ? rw_verify_area+0xce/0x6d0 [ 415.205008][T11573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.205035][T11573] vfs_read+0x1e4/0xb30 [ 415.205063][T11573] ? __pfx_vfs_read+0x10/0x10 [ 415.205086][T11573] ? find_held_lock+0x2b/0x80 [ 415.205109][T11573] ? __fget_files+0x215/0x3d0 [ 415.205139][T11573] ? __fget_files+0x21f/0x3d0 [ 415.205171][T11573] ksys_read+0x12a/0x250 [ 415.205195][T11573] ? __pfx_ksys_read+0x10/0x10 [ 415.205228][T11573] do_syscall_64+0xc9/0xf80 [ 415.205258][T11573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.205287][T11573] RIP: 0033:0x7fe76f95b78e [ 415.205305][T11573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 415.205326][T11573] RSP: 002b:00007fe7708c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.205348][T11573] RAX: ffffffffffffffda RBX: 00007fe7708c66c0 RCX: 00007fe76f95b78e [ 415.205363][T11573] RDX: 000000000000000f RSI: 00007fe7708c60a0 RDI: 0000000000000005 [ 415.205377][T11573] RBP: 00007fe7708c6090 R08: 0000000000000000 R09: 0000000000000000 [ 415.205390][T11573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.205403][T11573] R13: 00007fe76fc16038 R14: 00007fe76fc15fa0 R15: 00007ffeef6f1a28 [ 415.205432][T11573] [ 416.588308][ T7096] Bluetooth: hci5: command 0x0406 tx timeout [ 416.594421][ T7766] Bluetooth: hci6: command 0x0406 tx timeout [ 416.858265][T11604] FAULT_INJECTION: forcing a failure. [ 416.858265][T11604] name fail_futex, interval 1, probability 0, space 0, times 0 [ 416.949300][T11604] CPU: 0 UID: 0 PID: 11604 Comm: syz.3.1296 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.949349][T11604] Tainted: [L]=SOFTLOCKUP [ 416.949357][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 416.949369][T11604] Call Trace: [ 416.949376][T11604] [ 416.949384][T11604] dump_stack_lvl+0x100/0x190 [ 416.949414][T11604] should_fail_ex.cold+0x5/0xa [ 416.949450][T11604] get_futex_key+0x1d2/0x1620 [ 416.949492][T11604] ? __pfx_get_futex_key+0x10/0x10 [ 416.949527][T11604] futex_wake+0xea/0x530 [ 416.949562][T11604] ? __pfx_futex_wake+0x10/0x10 [ 416.949593][T11604] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 416.949631][T11604] ? kmem_cache_free+0x48f/0x720 [ 416.949655][T11604] do_futex+0x32b/0x350 [ 416.949684][T11604] ? __pfx_do_futex+0x10/0x10 [ 416.949713][T11604] ? __pfx___might_resched+0x10/0x10 [ 416.949745][T11604] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 416.949774][T11604] __x64_sys_futex+0x34f/0x4d0 [ 416.949804][T11604] ? __pfx_task_work_run+0x10/0x10 [ 416.949836][T11604] ? __pfx___x64_sys_futex+0x10/0x10 [ 416.949875][T11604] do_syscall_64+0xc9/0xf80 [ 416.949902][T11604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.949923][T11604] RIP: 0033:0x7f5ea9f9aeb9 [ 416.949938][T11604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.949958][T11604] RSP: 002b:00007f5eaae730e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 416.949978][T11604] RAX: ffffffffffffffda RBX: 00007f5eaa215fa8 RCX: 00007f5ea9f9aeb9 [ 416.949992][T11604] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5eaa215fac [ 416.950004][T11604] RBP: 00007f5eaa215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 416.950017][T11604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.950028][T11604] R13: 00007f5eaa216038 R14: 00007ffd5ebe4e00 R15: 00007ffd5ebe4ee8 [ 416.950054][T11604] [ 419.666138][ T8648] NFSD: Failed to start, no listeners configured. [ 421.033808][T11659] futex_wake_op: syz.4.1304 tries to shift op by -2048; fix this program [ 421.144823][T11659] 0x000000000001-0x000000020000 : "" [ 421.202654][T11659] ftl_cs: FTL header corrupt! [ 421.482855][T11648] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1303'. [ 422.678588][T11692] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1310'. [ 422.826844][ T31] INFO: task syz-executor:5833 blocked for more than 142 seconds. [ 422.835644][ T31] Tainted: G L syzkaller #0 [ 422.842154][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 422.954930][ T31] task:syz-executor state:D stack:23256 pid:5833 tgid:5833 ppid:1 task_flags:0x400140 flags:0x00080002 [ 423.044459][ T31] Call Trace: [ 423.074205][ T31] [ 423.100668][ T31] ? __schedule+0xf65/0x5e10 [ 423.140620][ T31] __schedule+0xfe4/0x5e10 [ 423.164353][ T31] ? __lock_acquire+0x4a5/0x2630 [ 423.177802][ T31] ? __pfx___schedule+0x10/0x10 [ 423.209778][ T31] ? find_held_lock+0x2b/0x80 [ 423.219052][ T31] ? schedule+0x2bf/0x390 [ 423.234927][ T31] schedule+0xdd/0x390 [ 423.243449][ T31] schedule_preempt_disabled+0x13/0x30 [ 423.354573][ T31] __mutex_lock+0xc9a/0x1b90 [ 423.359233][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 423.444466][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 423.449550][ T31] ? net_generic+0xea/0x2a0 [ 423.454084][ T31] ? net_generic+0xea/0x2a0 [ 423.519402][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 423.534529][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 423.539712][ T31] nfsd_umount+0x3b/0x60 [ 423.543971][ T31] deactivate_locked_super+0xc1/0x1b0 [ 423.566376][ T31] deactivate_super+0xe7/0x110 [ 423.571177][ T31] cleanup_mnt+0x21f/0x450 [ 423.584519][ T31] task_work_run+0x150/0x240 [ 423.589148][ T31] ? __pfx_task_work_run+0x10/0x10 [ 423.594279][ T31] ? __x64_sys_umount+0x124/0x1a0 [ 423.625828][ T31] exit_to_user_mode_loop+0x100/0x4b0 [ 423.631251][ T31] ? rcu_is_watching+0x12/0xc0 [ 423.654571][ T31] do_syscall_64+0x4ea/0xf80 [ 423.659302][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.677696][ T31] RIP: 0033:0x7fbbb8b9c117 [ 423.682528][ T31] RSP: 002b:00007ffcdd45d6e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 423.709933][ T31] RAX: 0000000000000000 RBX: 00007fbbb8c0471f RCX: 00007fbbb8b9c117 [ 423.734648][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdd45d7a0 [ 423.742645][ T31] RBP: 00007ffcdd45d7a0 R08: 00007ffcdd45e7a0 R09: 00000000ffffffff [ 423.787723][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdd45e830 [ 423.805299][ T31] R13: 00007fbbb8c0471f R14: 0000000000043c98 R15: 00007ffcdd45e870 [ 423.830223][ T31] [ 423.934481][ T31] INFO: task syz.2.877:9565 blocked for more than 143 seconds. [ 423.942189][ T31] Tainted: G L syzkaller #0 [ 424.006290][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.064492][ T31] task:syz.2.877 state:D stack:27368 pid:9565 tgid:9561 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 424.144547][ T31] Call Trace: [ 424.147859][ T31] [ 424.150793][ T31] ? __schedule+0xf65/0x5e10 [ 424.204499][ T31] __schedule+0xfe4/0x5e10 [ 424.208967][ T31] ? __lock_acquire+0x4a5/0x2630 [ 424.213928][ T31] ? __pfx___schedule+0x10/0x10 [ 424.269886][ T31] ? find_held_lock+0x2b/0x80 [ 424.284652][ T31] ? schedule+0x2bf/0x390 [ 424.289172][ T31] schedule+0xdd/0x390 [ 424.293338][ T31] schedule_preempt_disabled+0x13/0x30 [ 424.324427][ T31] __mutex_lock+0xc9a/0x1b90 [ 424.369094][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 424.389793][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 424.414480][ T31] ? net_generic+0xea/0x2a0 [ 424.419030][ T31] ? net_generic+0xea/0x2a0 [ 424.423597][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 424.482197][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 424.492231][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 424.499688][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 424.506453][ T31] ? genl_get_cmd+0x3ef/0x720 [ 424.511150][ T31] ? bpf_lsm_capable+0x9/0x10 [ 424.516573][ T31] ? security_capable+0x80/0x260 [ 424.521551][ T31] genl_rcv_msg+0x560/0x800 [ 424.526382][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.537897][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 424.543999][ T31] netlink_rcv_skb+0x159/0x420 [ 424.549055][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.554105][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.559774][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 424.565282][ T31] genl_rcv+0x28/0x40 [ 424.569299][ T31] netlink_unicast+0x5aa/0x870 [ 424.574108][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 424.579881][ T31] netlink_sendmsg+0x8b0/0xda0 [ 424.591319][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.601107][ T31] ? __import_iovec+0x1d2/0x640 [ 424.606731][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 424.612497][ T31] ____sys_sendmsg+0xa54/0xc30 [ 424.617572][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.622868][ T31] ? __pfx___futex_wait+0x10/0x10 [ 424.628591][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 424.639748][ T31] ___sys_sendmsg+0x190/0x1e0 [ 424.644663][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.649893][ T31] ? find_held_lock+0x2b/0x80 [ 424.654868][ T31] __sys_sendmsg+0x170/0x220 [ 424.659478][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 424.665882][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 424.670868][ T31] do_syscall_64+0xc9/0xf80 [ 424.675841][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.681747][ T31] RIP: 0033:0x7f1ee939aeb9 [ 424.686591][ T31] RSP: 002b:00007f1eea2f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.700181][ T31] RAX: ffffffffffffffda RBX: 00007f1ee9616180 RCX: 00007f1ee939aeb9 [ 424.712763][ T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000005 [ 424.721189][ T31] RBP: 00007f1ee9408c1f R08: 0000000000000000 R09: 0000000000000000 [ 424.729368][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.744068][ T31] R13: 00007f1ee9616218 R14: 00007f1ee9616180 R15: 00007ffe19ec9978 [ 424.777108][ T31] [ 424.844264][ T31] [ 424.844264][ T31] Showing all locks held in the system: [ 424.876942][ T31] 1 lock held by khungtaskd/31: [ 424.881822][ T31] #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 424.956519][ T31] 2 locks held by syz-executor/5833: [ 424.961840][ T31] #0: ffff88807e4b00e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 425.027125][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 425.072268][ T31] 3 locks held by kworker/0:4/5878: [ 425.077761][ T31] #0: ffff88813fe15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 425.104469][ T31] #1: ffffc900045afc98 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 425.124457][ T31] #2: ffffffff8e5ef7c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 425.162625][ T31] 2 locks held by syz.1.623/8648: [ 425.174749][ T31] #0: ffffffff904a26d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.183014][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 425.214428][ T31] 2 locks held by getty/8888: [ 425.219521][ T31] #0: ffff88814de870a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 425.255612][ T31] #1: ffffc900180452f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 425.270661][ T31] 2 locks held by syz.2.877/9565: [ 425.275881][ T31] #0: ffffffff904a26d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.284083][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 425.294939][ T31] 2 locks held by syz.6.995/10076: [ 425.300058][ T31] #0: ffffffff904a26d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.309044][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 425.319721][ T31] 5 locks held by kworker/u10:32/10215: [ 425.325813][ T31] #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 425.336435][ T31] #1: ffffc90003b1fc98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 425.346622][ T31] #2: ffffffff903dcf30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830 [ 425.365365][ T31] #3: ffffffff903f5868 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 425.380298][ T31] #4: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 425.393420][ T31] 2 locks held by syz.5.1039/10282: [ 425.398852][ T31] #0: ffff888053ad00e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 425.409669][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 425.419549][ T31] 1 lock held by syz.5.1039/10285: [ 425.425539][ T31] #0: ffff888053ad00e0 (&type->s_umount_key#51){++++}-{4:4}, at: super_lock+0x1ca/0x3f0 [ 425.435654][ T31] 2 locks held by syz.3.1050/10332: [ 425.440858][ T31] #0: ffffffff904a26d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.449351][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 425.469661][ T31] 2 locks held by syz.4.1077/10462: [ 425.475103][ T31] #0: ffffffff904a26d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.483311][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 425.497840][ T31] 2 locks held by syz.7.1098/10554: [ 425.503063][ T31] #0: ffffffff904a26d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.511602][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 425.522108][ T31] 2 locks held by syz.8.1104/10608: [ 425.527861][ T31] #0: ffffffff904a26d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.536669][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 425.547030][ T31] 2 locks held by syz.9.1113/10659: [ 425.552240][ T31] #0: ffffffff904a26d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.568071][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 425.580993][ T31] 2 locks held by syz.1.1127/10726: [ 425.586426][ T31] #0: ffffffff904a26d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.595604][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 425.610141][ T31] 2 locks held by syz.0.1141/10826: [ 425.615538][ T31] #0: ffffffff904a26d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.623746][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 425.634723][ T31] 2 locks held by syz.2.1146/10853: [ 425.639924][ T31] #0: ffffffff904a26d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.648808][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 425.665282][ T31] 2 locks held by syz-executor/10888: [ 425.670669][ T31] #0: ffff88807baf80e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 425.681295][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 425.694904][ T31] 2 locks held by syz.6.1152/10914: [ 425.700118][ T31] #0: ffffffff904a26d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 425.710490][ T31] #1: ffffffff8ea472a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 425.725854][ T31] 1 lock held by syz-executor/10973: [ 425.731481][ T31] #0: ffffffff903f5868 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 425.740808][ T31] 1 lock held by syz-executor/11008: [ 425.746552][ T31] #0: ffffffff903f5868 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 425.756176][ T31] 1 lock held by syz-executor/11271: [ 425.769071][ T31] #0: ffffffff903f5868 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 425.778347][ T31] 4 locks held by syz.7.1309/11685: [ 425.783580][ T31] #0: ffff88808d8fcec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 425.800448][ T31] #1: ffff88808d8fc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 425.810395][ T31] #2: ffffffff9068e928 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 425.821371][ T31] #3: ffff888088165b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 [ 425.875159][ T31] [ 425.877541][ T31] ============================================= [ 425.877541][ T31] [ 425.920257][ T31] NMI backtrace for cpu 0 [ 425.920276][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 425.920305][ T31] Tainted: [L]=SOFTLOCKUP [ 425.920312][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 425.920324][ T31] Call Trace: [ 425.920330][ T31] [ 425.920338][ T31] dump_stack_lvl+0x100/0x190 [ 425.920368][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 425.920396][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 425.920431][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 425.920467][ T31] sys_info+0x141/0x190 [ 425.920494][ T31] watchdog+0xcc3/0xfe0 [ 425.920523][ T31] ? __pfx_watchdog+0x10/0x10 [ 425.920546][ T31] ? __kthread_parkme+0x18c/0x230 [ 425.920572][ T31] ? __pfx_watchdog+0x10/0x10 [ 425.920595][ T31] ? __pfx_watchdog+0x10/0x10 [ 425.920615][ T31] kthread+0x3b3/0x730 [ 425.920645][ T31] ? __pfx_kthread+0x10/0x10 [ 425.920678][ T31] ? ret_from_fork+0x79/0xaf0 [ 425.920697][ T31] ? ret_from_fork+0x79/0xaf0 [ 425.920717][ T31] ? rcu_is_watching+0x12/0xc0 [ 425.920738][ T31] ? __pfx_kthread+0x10/0x10 [ 425.920769][ T31] ret_from_fork+0x754/0xaf0 [ 425.920789][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 425.920811][ T31] ? __switch_to+0x7b9/0x10c0 [ 425.920838][ T31] ? __pfx_kthread+0x10/0x10 [ 425.920868][ T31] ret_from_fork_asm+0x1a/0x30 [ 425.920911][ T31] [ 426.160121][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 426.167003][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 426.177686][ T31] Tainted: [L]=SOFTLOCKUP [ 426.182015][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 426.192079][ T31] Call Trace: [ 426.195360][ T31] [ 426.198287][ T31] dump_stack_lvl+0x100/0x190 [ 426.202977][ T31] vpanic+0x20d/0x630 [ 426.206983][ T31] panic+0xd1/0xd1 [ 426.210718][ T31] ? __pfx_panic+0x10/0x10 [ 426.215137][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 426.221303][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 426.227470][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 426.233640][ T31] ? watchdog.cold+0x198/0x1ca [ 426.238426][ T31] ? watchdog+0xcd3/0xfe0 [ 426.242762][ T31] watchdog.cold+0x1a9/0x1ca [ 426.247367][ T31] ? __pfx_watchdog+0x10/0x10 [ 426.252048][ T31] ? __kthread_parkme+0x18c/0x230 [ 426.257080][ T31] ? __pfx_watchdog+0x10/0x10 [ 426.261787][ T31] ? __pfx_watchdog+0x10/0x10 [ 426.266558][ T31] kthread+0x3b3/0x730 [ 426.270647][ T31] ? __pfx_kthread+0x10/0x10 [ 426.275259][ T31] ? ret_from_fork+0x79/0xaf0 [ 426.279935][ T31] ? ret_from_fork+0x79/0xaf0 [ 426.284619][ T31] ? rcu_is_watching+0x12/0xc0 [ 426.289391][ T31] ? __pfx_kthread+0x10/0x10 [ 426.294103][ T31] ret_from_fork+0x754/0xaf0 [ 426.298704][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 426.303825][ T31] ? __switch_to+0x7b9/0x10c0 [ 426.308521][ T31] ? __pfx_kthread+0x10/0x10 [ 426.313133][ T31] ret_from_fork_asm+0x1a/0x30 [ 426.317943][ T31] [ 426.321017][ T31] Kernel Offset: disabled [ 426.325344][ T31] Rebooting in 86400 seconds..