last executing test programs: 35.108774352s ago: executing program 1 (id=8): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) sendto$auto(r0, &(0x7f0000000100), 0x5, 0x9, 0x0, 0x2) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x8004) socket(0x2, 0x3, 0xa) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xc}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_datapath\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) mmap$auto(0x546, 0x0, 0x6, 0x2000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x501, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x9, 0x4, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x81, 0x8000000000000001, 0x800000000000, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) socket(0x2c, 0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0xc, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7fc, 0x3, 0xff, 0x200fffd, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) 33.992466903s ago: executing program 1 (id=13): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) write$auto(0x3, 0x0, 0x7fffffff) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0x100000000) socket(0xa, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x8004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(r1, 0x0, 0x40100000a3d5) socket(0x2, 0x3, 0xa) mmap$auto(0x546, 0x0, 0x6, 0x2000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x501, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xb137, 0xdf, 0x16, r2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x9, 0x4, 0x6, 0x8000004, 0x9, 0x5, 0x1, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x81, 0x8000000000000001, 0x800000000000, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x1, 0x2000000000000000]}, 0x4b9, 0x7d) socket(0x2c, 0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 26.089452761s ago: executing program 0 (id=47): mmap$auto(0x4, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = clone3$auto(&(0x7f00000000c0)={0xd, 0xb2, 0x0, 0x5, 0x5, 0xc, 0x1, 0xfffffffffffffff9, 0x3, 0x480000, 0x81}, 0x9) r1 = socket(0x29, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto(0x3, 0x0, 0x8080) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/memmap/2/type\x00', 0x18b740, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) ioctl$auto(r3, 0x400454ca, 0x38) r5 = ioctl$auto_TUNSETTXFILTER(r3, 0x400454d1, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), r5) sendmsg$auto_NL80211_CMD_NEW_STATION(r1, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x27c, r6, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x10}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x106, 0x124, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd}, @nested={0x16, 0x10c, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r4}, @generic="657b71f935561317c03a"]}, @typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}}, @typed={0x8, 0x73, 0x0, 0x0, @pid=r0}, @nested={0x18, 0x11e, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0xe, 0x0, 0x0, @fd=r5}]}, @typed={0xc, 0xe5, 0x0, 0x0, @u64=0x7}, @typed={0x20, 0x7e, 0x0, 0x0, @str='/sys/firmware/memmap/2/type\x00'}, @generic="5397568b12edb6e0c5a7702c443340c5a60e07f1b92e53d5da5345e2d5ff293c63eb1a61a68709bf68e6f318b1e13141518396aedfa7aa9fe6faa457762e826dbc571511e31fbc5d7bed12492c5ef2c46851c9061a2496cd1e3a6d55d1a298b020c46b0a1519790e7a5f4452f85e37ee4501f86dc3f4a19086f001c34aa31e93e176", @nested={0xc, 0x7b, 0x0, 0x1, [@typed={0x6, 0x98, 0x0, 0x0, @str='-\x00'}]}]}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2c}, @NL80211_ATTR_SAR_SPEC={0x150, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS={0x144, 0x2, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xdf40}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xa}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff9}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7f}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffffd}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3ff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xbf}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xb93}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5f1e}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x101}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x95a}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8001}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xb}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}]}]}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x82}, 0xc04c880) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/112, 0x70) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x408000, 0x110, 0x8}, 0x18) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x1, 0x717e, 0x0, 0x7, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0xfffffffffffffffe, 0x7, 0x6, 0x7f, 0x3ff, 0x1, 0xa, 0x4, 0x200, 0x6, 0x84, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x42, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x8, 0x4, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc, 0x83, 0x1, 0x6, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) r7 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r7, 0xfffffffffffffd03, &(0x7f00000001c0)) 25.059123836s ago: executing program 0 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) fchown$auto(r2, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x7, 0x98, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0090000", @ANYRES16, @ANYBLOB="131f2cbd700023723ab36bf877ac08000300", @ANYRES32=r4], 0x9c0}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) mprotect$auto(0x200000000000, 0x806121, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x2000000) mmap$auto(0x0, 0x3, 0x7, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r7 = epoll_create$auto(0x7ffffffd) epoll_pwait$auto(r7, 0x0, 0x800, 0x4d, 0x0, 0x8) ppoll$auto(&(0x7f0000000200)={r5, 0x40, 0x1ff}, 0x5, &(0x7f0000000240)={0x100000000}, &(0x7f0000000280)={0x5}, 0x8) 24.396363449s ago: executing program 0 (id=53): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x8004) socket(0x2, 0x3, 0xa) mmap$auto(0x546, 0x0, 0x6, 0x2000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x501, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x9, 0x4, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x81, 0x8000000000000001, 0x800000000000, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) socket(0x2c, 0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x60000000, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0xc, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7fc, 0x3, 0xff, 0x200fffd, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) 24.089831626s ago: executing program 1 (id=56): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/syscall\x00', 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x9}, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/vbi26/dev\x00', 0x5bb600, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x2c, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x800, 0x3b) connect$auto(r1, &(0x7f0000000040)=@generic={0x8, "00010100"}, 0x5c) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x6, 0x1a, 0x940, 0x1ffe0, 0x7f, 0x6, 0x2, 0x7f, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x20, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, [0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x478, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x7ffd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) migrate_pages$auto(0x0, 0x9b, 0x0, &(0x7f00000001c0)) 23.683286373s ago: executing program 3 (id=57): r0 = timerfd_create$auto_CLOCK_REALTIME(0x0, 0x4) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r0) r1 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) recvmmsg$auto(r1, &(0x7f0000000300)={{&(0x7f0000000080)="ceac6ffad143416d712ac69c09e78cd4b4d8ce334ee1056409236e60e5d3eb44a72410f607bb41483913cb93782cd3f5d8a48efa1894bdaa33fc534364692f1517412b00a2a26ccdc06dffae56d168859084f5ef383a4297661f1048b89d91ff28cd3042f66023f48902bc645f39221969ab136600880b2a0d349c1cbc81a438a666b0", 0x3, &(0x7f0000000240)={&(0x7f0000000140)="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", 0x6}, 0x8, &(0x7f0000000280)="99ec8fef7e1e8bf2e144e28e8ec83162418b6e09519b8016134aec4f926279c2bd4e44044634f1a42527c8039e8157a326bb45efebd89988176dde4c699c78b9e1d824d0ba1fb4aa67aae007775e9d1675a0419c6e09ed7465d4c4c3fc3598", 0x9, 0x4}, 0xf3fd}, 0xb, 0x80, &(0x7f0000000340)={0xa0, 0x1}) ioctl$auto_FITRIM2(r0, 0xc0185879, &(0x7f0000000380)={0x9, 0x1ff, 0x2}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000400), r0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$auto_XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000500)={0xd79, 0xffffffffffffffb3, 0x443f96ef, 0x9}) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000580), r0) r4 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f00000005c0), 0x1081, 0x0) stat$auto(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x6, 0xf, 0x1, 0xff, 0x0, 0xee00, 0x0, 0xbe79, 0x9000000000000000, 0x7, 0xfff, 0xb4, 0x2, 0x100, 0x0, 0x9, 0x401}) r6 = geteuid() sendmsg$auto_NL80211_CMD_ASSOCIATE(r0, &(0x7f00000009c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x244, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_CQM={0x1e3, 0x5e, 0x0, 0x1, [@nested={0xfc, 0x24, 0x0, 0x1, [@nested={0x4, 0x14e}, @typed={0xc, 0xf3, 0x0, 0x0, @u64=0x7}, @typed={0x4, 0x10b}, @generic="b49abf3d92b4072060d05a2a4ca523ed2e08d735267e90a1439ae007be69da6161cb8c350c043d14560c781759e38e9d4471a0969ac7b91b917a0d98e60c4326959c21f52432633dc439289d50607a0b11c2efb40cf5ca43d0de9957a6bf707a28e775b1d3d140fbe7b736b5434c914f9ac685082c7247f93085c2b1", @generic="f1d239c10a73b6bfcd5bebd9d409a4ae44f5ca78037959487500b3da522dc13caee47db62834557d286250271b06ec19dda163f07ac1f816b7ee159faf49c95517612d7dce89de580398438fcae95ea9e80b64cbe16a527651d64601ddcbf948", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r4}]}, @typed={0x8, 0xa9, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xa6, 0x0, 0x0, @uid=r6}, @typed={0xc, 0x156, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0xd, 0x106, 0x0, 0x0, @str='nl802154\x00'}, @generic="c8e60e79a0f78ac5", @nested={0x5b, 0xa5, 0x0, 0x1, [@nested={0x4, 0x156}, @typed={0x7, 0x29, 0x0, 0x0, @str='+)\x00'}, @typed={0xc, 0xbf, 0x0, 0x0, @u64=0x7}, @typed={0xc, 0x11d, 0x0, 0x0, @u64=0xb20}, @generic="e1108b678fd3e34431f1bfb4e2c7b7f11496e718275c3b1c480ad4d1f21301b7f4942e2cddc0e014594fad", @typed={0x4, 0x147}, @nested={0x4, 0x4e}]}, @generic="21baca9d2fe61a5c04262a2d49dda37ab8aea320d6dc61a317186211cef5b5d89f13b2b7a983de8754e56dffe0389fa1dc80da8beba70c56d4efbd39408a41aeeb51e6e583961a660a2bbdcf7a4fe3c5f05826"]}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x48, 0x131, 0x0, 0x1, [@NL80211_ATTR_MESH_ID={0x20, 0x18, "6e6dda1322069048a682106209afb99cb84f7588afc07ac555a2f5fb"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x9}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x8}}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xff35}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x4048081}, 0x20040080) ioctl$auto_XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000a00)={0x0, 0x2, 0x1, 0x3, 0x8}) sendmsg$auto_NL80211_CMD_TDLS_OPER(r0, &(0x7f00000032c0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003280)={&(0x7f0000000a80)={0x27ec, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_SAR_SPEC={0xb0, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x10001}, @NL80211_SAR_ATTR_SPECS={0x9c, 0x2, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x94e6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffff7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x36}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5e9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x401}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x58c40681}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x35ee}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x143bc022}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7f}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xef56}]}]}]}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa2, 0x1a, "6906cfa5af6a155d954435a5eddb084335bcb762b6e02c53a3f83d0eb3ce5833935bdd008289abc67006a9713c616209377fd5be2a7b4f9a24a6f0a7847127a0d0686a02f3bd7b3fd49f8a43dad98675ce9b71e60cbc07ce3a5e3e954f12d3d42172599e8604a77dd20971f60eefe7e2e45fbae96699922f7111f841db122170d2eebba3545f4f08fc6deec6a5fdfe266bb43b40bcd833e0a69a0633a5f9"}, @NL80211_ATTR_IE_ASSOC_RESP={0x298, 0x80, "a37ab3a0b69f4409d7ed91be8b4576c67c2117311e92b484cf54b187f74bb2eadef3d2864a410e446884df2ef67a3370d370d8ccd453a94a4a3f0bac69370b3278ca84be1d54ca7c2a872e3be67ced9f11c5239a28a6d46d061ec122ef08e62aa27ba3da7699d5c06f1352377c02032e11fc777c7492540b07a848b8e0225b2b7331de21b342005ada25da0e069bad240db0c74d0b87cf197576408c245caec5fa11e3240796fa8991b34b198e1a3331f36c880c038839baf22e32a1c9c27d301b2e0e4c942f4636919098c90acd860d312ca4517254c0576132d18875ab7559ec63e9728965f6f795638aca8a9e88ec2af42781cd1561af3593db242c0157a9466b7d266896f74bae7d9a76a99594b468493a46f34ad67c489b7670464ec7f092dc641abd2205c242ea9aea4cc4561c85db7f87ad4e618c90494d73625d7e779241ca54becb60af668a2609c418d05a284805d31e613b5fe7d4c401790d841c19cb7547749954228e456f8ac477dd29438c0e957333529926d8b42a75f107925b11f62d63f19b226b8f335380e574314d760d01874c8739ad067102d0155f3bc564ab05408ef185248c1795693ede7d86b56cbcbf271e7515301c51e834ca9e475102cd42a97614c33664ef592b795d5d6fd20789a2e2148ec524f3a70a5010b9f79cabfbe39122b96b69515d34d5f1a886888f6230e9681f3534f3358d9145686ac8c70b10f03a36ab627795130d14b115a5dc65fee6091f829f0dd0471b985ce51c44b8e959c5642a7fd62a30b56083c14d7613fffe18e3b3bd89a6f018b66b8ed8ed7574f45e8ab7b401aea31957aa73e8645af17059066ab0909ef72d74d4dbe9bb72636a134d79934f47efd3003e31fd93da291d237740cc66d67662bc1c151359d68277ba1e0506aba4a961db0233decb"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CQM={0x23a7, 0x5e, 0x0, 0x1, [@nested={0x10c0, 0x99, 0x0, 0x1, [@generic="587fbdb47100e8fed4ac14fbf7a3e6ae079d4f6880f92a90e35595e88d8968679953eb63db9bbfcd775f96b47ebd0bef4412b457ec8f3b9186498afdbd3a69d32a8f", @typed={0x14, 0x11e, 0x0, 0x0, @ipv6=@private2}, @generic="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", @generic="9c015374e639df18b058912bbc69aaa570c892ea0cbbff4922706c0edc64617972818aeecc5048acca68b159651a904fd968b88f911ab946fb3e3284581b5897132699a9193160bdb375ed377be8fc16dffed7cc36b9a79ffa13e014c4fa", @typed={0x8, 0x3, 0x0, 0x0, @uid=r5}]}, @generic="43d65fda2dc691b0b46ad9c0c2b528c938a8537a71810225da15c2ea12434d43279600ed23ee896e18855fdb3a7bf0ab4183d0c0", @nested={0x122e, 0xbf, 0x0, 0x1, [@nested={0x4, 0x25}, @generic="122ba5c8e20dee0bba88a786570a07328a576022ac2ab8452c1aa608c98610c2c7b062b390b78fd9c47210dea715eee50b3df1fde5ea9766f5ee1d879ddd8fcec47df2efc35ec463e25988090451c772e53a9599b56d617b3a0faa78d4610f743a884bb356e1e41946aeab287ef46f96b2f8c31d5bb99c60016e4a274025921d319b35fc897eb542dcf61719bce233dd0aebe7c15e758239fd6c79cae4f3d9c41d834ac2c43194bee60de13334c60e8f9bb1a2de7f7f63d76b34ca4795918b696de4bbc9bda719277f3db01f8584", @nested={0x4, 0x137}, @generic="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", @typed={0xdc, 0xd4, 0x0, 0x0, @binary="c6b2e8d64a5a6a79186451837e060cf18e07cc06778c7f9fe1dda41365dff4b1a8dc3ade38d6f0e0ddf7b2b68c5838cd3faceeb5e6b5ebb029fe9f3bdd20f7bece648e6f4574654a593725d5a72fc31d59bfb989b371eda1ed75ab98b023a6b3b8fafe02ced52946b6978e8f6ca282d8ae453965be8ddb9590857255e7930d3f3822dfaac97df58c6fe3783add168786801da6345c8a1691f6c9f418718bee16e85d516b38cd96cfa73ae9209a473e179f66aecd41ae10f366cf842d5946b9275fb665a634ce9e1ecec663b71a0e2fd1d75f5ebf8e427d49"}, @generic="d080664dae6445353703a753fc3e7dc60d43e4aab098949de8f556bbaa519b214897f993b0dbe45c5e0e8a562cd5c5b3bda2c9915c6d1fdc0c4178219d3352a95b51bef7a8cd", @generic="b0b5804824e5fafcffc8aecf3e65f52f0d2671bdc76eb89c659575d59acd99c855a29a1b40c6012c5df78950df29", @nested={0x4, 0x14f}]}, @generic="bfd82352d9a8a185ed9c6988bd122fc1a928c54b0631dfceb3d479214bcdd520c069cd068c20753b495548317208461ddee7efb9f9692ecf7024933e8b9189f421161a16437aed3c41dfdbc6c2e36c2469b60041b44b580d19c3ec5c6d695a6840c3fc7896cf4d5933cae0f737de9777827792d23d6644cbca82811d2fe495"]}, @NL80211_ATTR_AUTH_DATA={0x2d, 0x9c, "978e46054ea03be5f1812b7f734eb99cce550c5fb6222af0a0997030d1efe2d5ae087e3ea1d87e5e6e"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xfff}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x4}]}, 0x27ec}, 0x1, 0x0, 0x0, 0x200c8884}, 0x4000080) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000033c0)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x3c, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x5}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2728}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090) ioctl$auto_SCSI_IOCTL_START_UNIT(r0, 0x5, &(0x7f0000003400)="e843d65481ebebb7e167730202d7e2a7146c0fe6754b77435b5250029fc36341207a11b045b941") r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000003440)='/proc/thread-self/fail-nth\x00', 0x100, 0x0) r8 = ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f00000034c0)={0xa, &(0x7f0000003480)={0x10, 0x3, 0x6, @inferred=r7}}) r10 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000003500)=@link_create={@prog_fd=r1, @target_fd=r9, 0x0, 0x2, @tcx={@relative_fd=r7, 0xffffffff}}, 0x4) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r13 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000003640), r10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000003680)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000036c0)={'macvtap0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000003780)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x2c, r13, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r14}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r15}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) madvise$auto(0xfb, 0x6, 0xb96) lseek$auto(r4, 0x2, 0x30000000) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r12, 0x4010e501, &(0x7f00000037c0)={r1, 0x6}) close_range$auto(r16, r8, 0x4) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000003980)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x44, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x90) 23.404436591s ago: executing program 3 (id=59): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) gettid() mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000100)='./file0\x00', 0x161302, 0x14c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/use_zero_pages\x00', 0x101082, 0x0) write$auto(r0, &(0x7f0000000700)='!$(}$[\x00', 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000080), 0x20540, 0x0) ioctl$auto(r1, 0x40046103, 0x81) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) 22.866609666s ago: executing program 0 (id=60): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x8004) socket(0x2, 0x3, 0xa) mmap$auto(0x546, 0x0, 0x6, 0x2000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x501, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x9, 0x4, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x81, 0x8000000000000001, 0x800000000000, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) socket(0x2c, 0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0xc, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7fc, 0x3, 0xff, 0x200fffd, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) 22.398367288s ago: executing program 3 (id=61): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x40000000000a5, 0x0) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100000a0000000000000a000100"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x4, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x2, 0x1, 0x7, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100253d7000fddbdf2501000000140007800c00010008000180000000000400ffffffff02000600000000000000ecd93bd0051e3562912c8af74fd4910d6d"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 21.510902839s ago: executing program 3 (id=64): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x40000000000a5, 0x0) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100000a0000000000000a000100"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x4, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x2, 0x1, 0x7, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100253d7000fddbdf2501000000140007800c00010008000180000000000400ffffffff02000600000000000000ecd93bd0051e3562912c8af74fd4910d6d"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 20.732788125s ago: executing program 0 (id=65): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000840)="13") openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x8004) socket(0x2, 0x3, 0xa) mmap$auto(0x546, 0x0, 0x6, 0x2000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x501, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x9, 0x4, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x81, 0x8000000000000001, 0x800000000000, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) socket(0x2c, 0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0xc, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7fc, 0x3, 0xff, 0x200fffd, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) 20.731082816s ago: executing program 3 (id=66): pwrite64$auto(0xc8, &(0x7f0000000480)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x04@X\xb9_\xdd\xee\xc4\xd06,|\xfe.\xa6\x00\x00\x00\x00\x00\x00\x00\x1ch*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe4\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\b\x00\x00\x00wU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R}\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1a:w9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x890\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80\x00\x00\x00\xc3aB\xa0\xd7\xf8C\xde\xcc\xeaoNs\f\x86\x06<\x17\xcd\xd7\xf7\xc3\xba\xd0\xb9\x0e\xd0v\xeb\xe5$_\xd7\x9f\x8e\xac \x9a\xa3\xfd\x83(\xcc\xcd!%Kv\x13\xe9rR\xbc\xc1\x89\xd3vpA\x8a\xa6\xdc<\xaa\xdcsdCA\x19\xe3\xdf&\xea\x00f /X\xc6\x9b\xaa\x86\xa6\x8a\x80\xc0w\xb2S\xba\x9f\xef\xa5\xea\xff\x86\xb6l_M\x8b\xffj\xbc\x19\xa0\x81aBq\x85\x9b\xc4\x92\xc3\x87', 0x84, 0xe83) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xfffffffb}, 0x5) r2 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ubifs/chk_orphans\x00', 0x1a3080, 0x0) r3 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000100)=@test={r0, 0x10000, 0x10001, 0x1ff, 0x5, 0x7, 0x4, 0x6, 0x5, 0x8, 0x6, 0x10, 0x2, 0x4, 0x9}, 0x400) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) shmctl$auto_IPC_STAT(0x800, 0x2, &(0x7f0000000400)={{0x8b7a, 0xee00, 0x0, 0x0, 0x1, 0xd, 0xfff}, 0x5, 0xff, 0x10001, 0x7f, @raw=0x4, @raw=0x59, 0x8, 0x0, &(0x7f0000000240)="1cc3d45a3683e960081c0ede9728859a4a50455ea4a75f29112b9ae9952894d6a2cbb8a9f397667724fa7f922a844d842b8c1cafe37e08dc39ebcfcb2dc72c95cc5d7e31a78161a22dbf9b0c71336240464330c0841c6451154a05d7baa3401bcb47c3dae2c75ee6d497bb2c56c78a81acb004f8af810b3f213f919d632712e703df7a00f102bf6e49c2059b3131c26c855f531edc62e7574345fe7d4f31903846240b816328052c0ceb1f6abe90040545c4c01f92ecb9d1cb58bc3b28e065682c0b69547c974bd55a25db8972a4180ca20832f2f9f0f6fb334f8df735181f26c1", &(0x7f0000000340)="dabf5d3f950bb36e763706128d60e7c5d9e5f7c5bd6460c6613de76cfecd8a281b4da0328d4621d1adb93e5935519502f5a6ce7212953cec92a367a32a81edb99cbaba298a45a4630e0239101662f8963a61d9d26ef97c767e758ca90362cbd88c5b823b88cddcd797559c8dd9a2da886f2584c28e068f4dc49193f99c053a6006b239be4d7e997bb33110ded0"}) sendmsg$auto_NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000740)={0x434, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_FILS_ERP_RRK={0x1e, 0xfc, "64e65da6c5100c12f50d643a455d3be43e7c1e0c3b0742a27fd6"}, @NL80211_ATTR_SAR_SPEC={0x64, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x60, 0x2, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1b}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2c}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffc}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0x394, 0x5a, 0x0, 0x1, [@nested={0x88, 0x12c, 0x0, 0x1, [@generic="21c639c4f41cd6f1b5a1e92d8331ae59553b90062a0ec5ad1c31461ae1b209fd392b616597e511f4bd58b9c370d867c4cf7d8bf472ac752686d65f72c05838ca09230e58f9f051ee879a84acaf381752b1f5092accfc9567b3b3bfe54f269bcc5f0c41e22c0a7e3bed100c99e31eb74252f94f8d7ead13fed924af82e0d2bf8838da59c7"]}, @typed={0x14, 0xaa, 0x0, 0x0, @ipv6=@loopback}, @nested={0xc, 0x130, 0x0, 0x1, [@typed={0x8, 0x7a, 0x0, 0x0, @uid=r5}]}, @generic="49c42990f3ece7449616ed6cdac5039218f96132a59edc768cf02678d81ee0091b3d653b55d1c47f50a40d64fd6b03f37e16cf002799621321a1e816dbc5125b12ba371d9d45e871ce3e5a7ffcc66bae77737e7bdab4f5abb97d5355bcfb583af89a12ab7f71d43c4d53a19e2edfa71aba73439cecacf51fbfad0f274c41b522df69cc1001675ef40e7064718afee49752fe9294a10beebe2063c05dea4b56da86118b7f8326830512d4df66f97ffc0d9bbdfe1d3841", @generic="0d0ddc32fd8d893549c841a5bff18f113bc9fe3024d061b93b55139cb20fb81bae24dccfdea24be493a7827ea99c7734bff3", @nested={0x1fd, 0x20, 0x0, 0x1, [@generic="ec4a9905ad1162cf79188211dbc5e7819cda9f4920ee761d9f8148734976151e7804f47994f64914b1d25d45c08ec871fb5ba73471871a06de7c168c70c87b9b14f43fd4", @nested={0x4, 0x125}, @generic="26ee036847fdb05ccd876981c19f4af5ec6a7dc066bf1e05fc4cda9b9163dd9470abaa7f12c405be5dd629cbd41704d1275b2ab689f57125a6970aa5d4d533d101a022d51454582dd48d9dfad115472b1e14a05c1e435557a0d37bdef8fdcd1758139cfb0b3345713163f9b6a48b262eb5f80bc4d6612ccf8a04d0d61d44f9249ff1f26a4c713eb0fcff6c4fdace06a7b669f7328ebc958497c3f623c2126a3d38d4684e566a150073f89dd201b7cf3f9f6cdb8d65207b0796a7114c9141af32a5e654bfd79ca873dc26854aecdc4a7a33140123f35d6f991600bdfff37a78ea50", @typed={0x4, 0x28}, @generic="331520952b40a8206a6481d575fbf10e7fc035ac31bcfb4999e03ee937af760261ecfe66a592b0fa74ad868e8c0258e99a2cc3b01df5ae0d402f40542060d2225831a50fd99a3b6520a6dc8321cc688fb3f5f964a4bc660bcc6d3846f2a28939b1d966b4408fc4bb9716fdb9f95d6e2059e4ae04ce1451f7b8acf278d0d566f2b7068b806acb76a435165f637b0999aaf3b608468afe486cc3ca3918e44c001ab78d27609066cc7d51422cfbb527cd68bd8da12cd796558b", @generic, @typed={0x14, 0x15d, 0x0, 0x0, @ipv6=@mcast1}]}]}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7f}]}, 0x434}, 0x1, 0x0, 0x0, 0x80}, 0x84) read$auto_dfs_global_fops_debug(r2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) ustat$auto(0x801, 0x0) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) memfd_secret$auto(0x0) 19.867203061s ago: executing program 0 (id=67): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x7}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x4}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044095}, 0x4000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/netdev_group\x00', 0x102, 0x0) write$auto(r4, 0x0, 0x8311) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000000c0)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) 19.734996693s ago: executing program 3 (id=68): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x40000000000a5, 0x0) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100000a0000000000000a000100"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x4, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x2, 0x1, 0x7, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100253d7000fddbdf2501000000140007800c00010008000180000000000400ffffffff02000600000000000000ecd93bd0051e3562912c8af74fd4910d6d"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 19.686746805s ago: executing program 1 (id=69): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c0016"], 0x28}}, 0x4c810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0d566b3dd008a4ed4d0902"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000e4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES64=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40051}, 0x4c000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @remote}, 0x54) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x7}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x8, 0x0) r4 = socket(0x11, 0x80003, 0x8) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) r5 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x5d, &(0x7f0000000340)={0x7fffffff, 0xd, 0x6, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x5, 0x0, 0x76c5, 0x8, 0x9}}) socket(0x1, 0x803, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba831b", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) r8 = socket(0x3, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES64=r8, @ANYRES64=r7, @ANYRES16=r6], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x50002000000003a, 0x0) r9 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r9, 0x5, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 18.839121367s ago: executing program 1 (id=70): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) fchown$auto(r3, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x7, 0x98, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0090000", @ANYRES16=r0, @ANYBLOB="131f2cbd700023723ab36bf877ac", @ANYRES32=r5], 0x9c0}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) mprotect$auto(0x200000000000, 0x806121, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x2000000) mmap$auto(0x0, 0x3, 0x7, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r8 = epoll_create$auto(0x7ffffffd) epoll_pwait$auto(r8, 0x0, 0x800, 0x4d, 0x0, 0x8) ppoll$auto(&(0x7f0000000200)={r6, 0x40, 0x1ff}, 0x5, &(0x7f0000000240)={0x100000000}, &(0x7f0000000280)={0x5}, 0x8) 18.289024983s ago: executing program 1 (id=73): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x40000000000a5, 0x0) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100000a0000000000000a000100"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x4, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x2, 0x1, 0x7, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100253d7000fddbdf2501000000140007800c00010008000180000000000400ffffffff02000600000000000000ecd93bd0051e3562912c8af74fd4910d6d"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 17.363872338s ago: executing program 2 (id=74): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x2, 0x3, 0x100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x5441, 0xffffffffffffffff) fcntl$auto_F_UNLCK(r0, 0xf, 0x2) 16.338044008s ago: executing program 2 (id=75): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c0016"], 0x28}}, 0x4c810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0d566b3dd008a4ed4d0902"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000e4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES64=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40051}, 0x4c000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @remote}, 0x54) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x7}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x8, 0x0) r4 = socket(0x11, 0x80003, 0x8) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) r5 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x5d, &(0x7f0000000340)={0x7fffffff, 0xd, 0x6, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x5, 0x0, 0x76c5, 0x8, 0x9}}) socket(0x1, 0x803, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba831b", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) r8 = socket(0x3, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES64=r8, @ANYRES64=r7, @ANYRES16=r6], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x50002000000003a, 0x0) r9 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r9, 0x5, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 16.23707202s ago: executing program 2 (id=76): socket(0x2, 0x5, 0xfffffffe) mmap$auto(0x7, 0x20005, 0xe2, 0xeb1, 0x405, 0xff) sched_setscheduler$auto(0x0, 0x5, &(0x7f0000000000)={0x2}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = io_uring_setup$auto(0x5b, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4038ae7a, r2) bpf$auto(0x0, &(0x7f0000000280)=@task_fd_query={0x2, 0x4, 0x3, 0x2001, 0x400, 0xc, r0, 0x400000000e, 0x3}, 0x6f4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x11, 0xffffffffffffffff, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = prctl$auto(0x1000000003b, 0xfffffffffffffffd, r4, 0x2000005, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2, 0x2, 0x16, 0x602, 0x5) madvise$auto(0x0, 0x20499d, 0x9) r6 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) read$auto_ptdump_curknl_fops_(r5, &(0x7f0000000180)=""/55, 0x37) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40040010) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r3, 0x8000) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/039/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, 0x0) ioctl$auto_USBDEVFS_IOCTL32(r7, 0xc00c5512, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/hotplug/force_remove\x00', 0x101000, 0x0) 16.096451696s ago: executing program 2 (id=77): add_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff9) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b4b", 0xfdef) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = socket(0x2, 0x1, 0x400104) getsockopt$auto_SO_MEMINFO(r2, 0x1, 0x37, &(0x7f0000000100)='/dev/kvm\x00', &(0x7f0000000180)=0x7) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_EPCS_CFG(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x2fc, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MBSSID_ELEMS={0x2b2, 0x133, 0x0, 0x1, [@generic="8a31764425ba5497951d909dda4463c465a089aa1b458c2f3446e344d01447a48b03372087d3f41a9888ba9c3710eb2a8e48cd0b19f1babb1e806706260077178b9a28944272f99a3fce88a3966c8fd6809975e84d14499189512640339601ab6245feaa5aefb92e0d0a011ae1f24daecbb6d02935f3178a89a081dbb496093c6b2aba46ee48fbd1142873a47a759ef8a01b790f70f439127add03286d68a6fa86c8a6cb085ce1d745a9a9b88bda", @generic="90fda3f54235", @typed={0x8, 0x97, 0x0, 0x0, @ipv4=@local}, @generic="ec89dd15001972e6867c1cc343323eb91bcf7e4f7db2a7c880dcd2af808406bad715fb55ddc82da416d3a66656214eade9a6c8d0e1af56dacc4ef0f0e11a06c7a0dec80b", @generic="58c5e88d2cad2a8dc5e4d68756c5e251ddfea544c1540a035314daf4f22e32300e50d350b8249a0fdfd72a59770956b930469c952bffe82a07d21512f66ad85cc4c8dc6977f9622a2cfe1e7197167b4aa7510cb26c52ab3d581b3e20c3d7444448e1ea95620906e01cc69d84cdb227777d5c17f939b8b9b4f2a092d782161af44ff5206739e57c3274933bdb752a844631bfccc1802f2b5b94e25aa32f3d3926b22322596c8475e9984402476d86ae1d232db96f1a12daf1dd8f50d2f6944244ad247fa7f859d17179de8f382ba2c540a1b1b5c6df8951fe", @generic="77b44dc92596132cce727e20e64cc729ff8e1631412b7b8f5d3a2557e18812dcd84e4e48b684da504b7da347dc864f396f7715d62f506140599d04a645642eb1bab7b3d98f1ff7318dc34f42fbcfc3744a8d6cbe80bf98f72748da0757b6ee4f9deb2fb20ef395f68d06ae2e3f6b6bc42342cffd89e6f53f208f324df9c0498fbb4bdc7a3fb048dbb6cdb2dfdb719efe82f0d71ee9cf4b180b1c35fd2079a48139bcdd9e5205c62922132b7374d3720799fd838d3280e91eb4aaacde1771421cde71e1b95bc7cb35b40e9478bde4e5089ad7c53ee589"]}, @NL80211_ATTR_FILS_NONCES={0x23, 0xf3, "a4f7a2451d2860d45ce9dafde3a50e29657b7e112b868c9e7fb0d8dfc59640"}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x7}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4080}, 0x4040845) sendmsg$auto_NL80211_CMD_ADD_LINK(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2cc, r3, 0x208, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x7}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_PROBE_RESP={0x28d, 0x91, "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"}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xadfd}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x984}, 0x4000058) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x287f, 0x2, 0x3}, 0x0, 0x0, 0x7fffffff, 0x9, 0xb, 0xffffffff, 0xfffffffffffffffe, 0x1, 0xfc2, 0x26f, @inferred, @raw=0x9}) setresgid$auto(0x0, 0xffffffffffffffff, r4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xe, 0x940, 0xfffffff8, 0x3, 0x1004, 0x1, 0x9, 0x5, 0x6, 0x7, 0x1001000, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9]}, 0x4, 0x40000081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x52, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x8044) mmap$auto(0x0, 0xeb80, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 15.922242268s ago: executing program 2 (id=78): mmap$auto(0x0, 0x5, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x183040, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00000002c0)='./file0\x00', 0x161342, 0x36) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) socket(0x10, 0x2, 0xc) io_uring_setup$auto(0x1, 0x0) acct$auto(&(0x7f0000000000)='/dev/v4l-subdev0\x00') pipe$auto(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-subdev0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/stable_node_chains_prune_millisecs\x00', 0x82942, 0x0) write$auto(r3, &(0x7f0000000000)='-\\\x00', 0x9) r4 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) bpf$auto(0x9, &(0x7f0000000000)=@test={r0, 0x20000001, 0xa93f, 0x9, 0x3, 0x3, 0x35a1, 0x0, 0xb4, 0x5, 0x140000000000, 0x0, 0x3, 0x9, 0x1}, 0x171) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES16, @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) r5 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) r6 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r6, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0x10c}, 0x1, 0x0, 0x0, 0x24048005}, 0x24008044) ioctl$auto(r2, 0xc040564a, r1) 15.837147144s ago: executing program 2 (id=79): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x40000000000a5, 0x0) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100000a0000000000000a000100"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x4, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x2, 0x1, 0x7, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100253d7000fddbdf2501000000140007800c00010008000180000000000400ffffffff02000600000000000000ecd93bd0051e3562912c8af74fd4910d6d"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 4.504687218s ago: executing program 32 (id=67): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x7}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x4}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044095}, 0x4000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/netdev_group\x00', 0x102, 0x0) write$auto(r4, 0x0, 0x8311) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000000c0)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) 4.468607788s ago: executing program 33 (id=68): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x40000000000a5, 0x0) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100000a0000000000000a000100"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x4, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x2, 0x1, 0x7, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100253d7000fddbdf2501000000140007800c00010008000180000000000400ffffffff02000600000000000000ecd93bd0051e3562912c8af74fd4910d6d"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 2.961309715s ago: executing program 34 (id=73): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x40000000000a5, 0x0) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100000a0000000000000a000100"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x4, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x2, 0x1, 0x7, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100253d7000fddbdf2501000000140007800c00010008000180000000000400ffffffff02000600000000000000ecd93bd0051e3562912c8af74fd4910d6d"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 0s ago: executing program 35 (id=79): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x40000000000a5, 0x0) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100000a0000000000000a000100"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x4, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x2, 0x1, 0x7, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100253d7000fddbdf2501000000140007800c00010008000180000000000400ffffffff02000600000000000000ecd93bd0051e3562912c8af74fd4910d6d"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. [ 76.317137][ T5613] cgroup: Unknown subsys name 'net' [ 76.428177][ T5613] cgroup: Unknown subsys name 'cpuset' [ 76.437463][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.956285][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.762785][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.772963][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.781475][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.783587][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.791515][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.796625][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.804899][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.812440][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.820465][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.832556][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.833954][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.841567][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.857785][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.864145][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.866397][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.874083][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.879895][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.898694][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.907651][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.915759][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.306018][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.314439][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.321960][ T5624] bridge_slave_0: entered allmulticast mode [ 81.329135][ T5624] bridge_slave_0: entered promiscuous mode [ 81.362826][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.370070][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.377368][ T5624] bridge_slave_1: entered allmulticast mode [ 81.384688][ T5624] bridge_slave_1: entered promiscuous mode [ 81.431147][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.438498][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.446583][ T5625] bridge_slave_0: entered allmulticast mode [ 81.453842][ T5625] bridge_slave_0: entered promiscuous mode [ 81.490855][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.498307][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.505621][ T5625] bridge_slave_1: entered allmulticast mode [ 81.512824][ T5625] bridge_slave_1: entered promiscuous mode [ 81.570789][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.610498][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.638690][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.673954][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.701029][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.709145][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.716691][ T5627] bridge_slave_0: entered allmulticast mode [ 81.723666][ T5627] bridge_slave_0: entered promiscuous mode [ 81.752784][ T5624] team0: Port device team_slave_0 added [ 81.758723][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.766156][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.773336][ T5627] bridge_slave_1: entered allmulticast mode [ 81.780551][ T5627] bridge_slave_1: entered promiscuous mode [ 81.798165][ T5625] team0: Port device team_slave_0 added [ 81.805997][ T5624] team0: Port device team_slave_1 added [ 81.820161][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.827590][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.835259][ T5626] bridge_slave_0: entered allmulticast mode [ 81.842262][ T5626] bridge_slave_0: entered promiscuous mode [ 81.851412][ T5625] team0: Port device team_slave_1 added [ 81.873896][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.881871][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.889367][ T5626] bridge_slave_1: entered allmulticast mode [ 81.896634][ T5626] bridge_slave_1: entered promiscuous mode [ 81.923958][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.953381][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.961349][ T5634] Bluetooth: hci2: command tx timeout [ 81.961436][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.967289][ T50] Bluetooth: hci0: command tx timeout [ 81.993110][ T5631] Bluetooth: hci3: command tx timeout [ 81.999021][ T5641] Bluetooth: hci1: command tx timeout [ 82.006179][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.023613][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.046535][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.054136][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.080103][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.091876][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.099278][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.125427][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.149196][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.159170][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.166182][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.192119][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.230670][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.267002][ T5626] team0: Port device team_slave_0 added [ 82.274364][ T5627] team0: Port device team_slave_0 added [ 82.282853][ T5627] team0: Port device team_slave_1 added [ 82.299977][ T5626] team0: Port device team_slave_1 added [ 82.386914][ T5625] hsr_slave_0: entered promiscuous mode [ 82.393299][ T5625] hsr_slave_1: entered promiscuous mode [ 82.400439][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.407602][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.433953][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.446323][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.453367][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.479353][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.496200][ T5624] hsr_slave_0: entered promiscuous mode [ 82.502483][ T5624] hsr_slave_1: entered promiscuous mode [ 82.508774][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 82.514563][ T5624] Cannot create hsr debugfs directory [ 82.522402][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.529416][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.555516][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.567252][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.574224][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.600468][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.731759][ T5627] hsr_slave_0: entered promiscuous mode [ 82.738339][ T5627] hsr_slave_1: entered promiscuous mode [ 82.744352][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 82.750397][ T5627] Cannot create hsr debugfs directory [ 82.784174][ T5626] hsr_slave_0: entered promiscuous mode [ 82.791444][ T5626] hsr_slave_1: entered promiscuous mode [ 82.797637][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 82.803372][ T5626] Cannot create hsr debugfs directory [ 83.185753][ T5625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.198607][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.206697][ T5625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.217386][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.227297][ T5625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.238892][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.247294][ T5625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.257741][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.330076][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.341938][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.350682][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.360175][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.371809][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.381391][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.390933][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.400452][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.483327][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.494439][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.512042][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.521881][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.538317][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.547594][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.557195][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.567845][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.681104][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.692136][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.702465][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.710543][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.720151][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.734917][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.744277][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.753435][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.763814][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.807404][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.848040][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.855684][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.896084][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.907064][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.914219][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.996859][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.021490][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.030817][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.034914][ T50] Bluetooth: hci3: command tx timeout [ 84.038566][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.050740][ T50] Bluetooth: hci0: command tx timeout [ 84.052125][ T5641] Bluetooth: hci1: command tx timeout [ 84.057332][ T50] Bluetooth: hci2: command tx timeout [ 84.079303][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.086448][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.138912][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.171208][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.192061][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.199270][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.258681][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.265836][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.300261][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.349824][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.357048][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.390040][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.397278][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.098041][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.241737][ T5625] veth0_vlan: entered promiscuous mode [ 85.258651][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.303510][ T5625] veth1_vlan: entered promiscuous mode [ 85.450521][ T5625] veth0_macvtap: entered promiscuous mode [ 85.495791][ T5625] veth1_macvtap: entered promiscuous mode [ 85.512784][ T5627] veth0_vlan: entered promiscuous mode [ 85.538692][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.549777][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.572215][ T5627] veth1_vlan: entered promiscuous mode [ 85.587167][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.607944][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.650530][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.659961][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.677269][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.687808][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.740900][ T5624] veth0_vlan: entered promiscuous mode [ 85.767183][ T5627] veth0_macvtap: entered promiscuous mode [ 85.793307][ T5626] veth0_vlan: entered promiscuous mode [ 85.804157][ T5627] veth1_macvtap: entered promiscuous mode [ 85.822012][ T5624] veth1_vlan: entered promiscuous mode [ 85.863284][ T5626] veth1_vlan: entered promiscuous mode [ 85.878745][ T3303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.891976][ T3303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.918647][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.949334][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.979514][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.988480][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.991181][ T5624] veth0_macvtap: entered promiscuous mode [ 86.024318][ T3303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.033388][ T3303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.049207][ T1105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.068811][ T1105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.078133][ T5624] veth1_macvtap: entered promiscuous mode [ 86.106867][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.118773][ T50] Bluetooth: hci2: command tx timeout [ 86.123268][ T5641] Bluetooth: hci3: command tx timeout [ 86.129145][ T50] Bluetooth: hci1: command tx timeout [ 86.132452][ T5634] Bluetooth: hci0: command tx timeout [ 86.166000][ T5626] veth0_macvtap: entered promiscuous mode [ 86.189520][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.203982][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.237391][ T5626] veth1_macvtap: entered promiscuous mode [ 86.307957][ T1105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.317697][ T1105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.341935][ T1105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.350984][ T1105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.363468][ T5779] FAULT_INJECTION: forcing a failure. [ 86.363468][ T5779] name failslab, interval 1, probability 0, space 0, times 1 [ 86.363530][ T5779] CPU: 0 UID: 0 PID: 5779 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 86.363565][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 86.363588][ T5779] Call Trace: [ 86.363597][ T5779] [ 86.363608][ T5779] dump_stack_lvl+0x100/0x190 [ 86.363648][ T5779] should_fail_ex.cold+0x5/0xa [ 86.363686][ T5779] should_failslab+0xc2/0x120 [ 86.363720][ T5779] __kmalloc_cache_noprof+0x7a/0x6f0 [ 86.363761][ T5779] ? device_create_groups_vargs+0x8a/0x270 [ 86.363800][ T5779] ? lockdep_unlock+0x5a/0xc0 [ 86.363836][ T5779] ? __lock_acquire+0xd73/0x2630 [ 86.363868][ T5779] device_create_groups_vargs+0x8a/0x270 [ 86.363917][ T5779] device_create+0xed/0x130 [ 86.363956][ T5779] ? __pfx_device_create+0x10/0x10 [ 86.363991][ T5779] ? do_raw_spin_lock+0x128/0x260 [ 86.364026][ T5779] ? is_console_locked+0x9/0x20 [ 86.364068][ T5779] ? con_is_visible+0x65/0x150 [ 86.364100][ T5779] ? csi_J+0x57e/0xad0 [ 86.364146][ T5779] vcs_make_sysfs+0x32/0x80 [ 86.364182][ T5779] vc_allocate+0x539/0x880 [ 86.364223][ T5779] ? __pfx_vc_allocate+0x10/0x10 [ 86.364276][ T5779] con_install+0xa1/0x620 [ 86.364320][ T5779] ? __pfx_con_install+0x10/0x10 [ 86.364374][ T5779] ? __pfx_con_install+0x10/0x10 [ 86.364418][ T5779] tty_init_dev.part.0+0x9e/0x470 [ 86.364450][ T5779] tty_open+0xa63/0xfa0 [ 86.364484][ T5779] ? __pfx_tty_open+0x10/0x10 [ 86.364509][ T5779] ? chrdev_open+0x589/0x6a0 [ 86.364543][ T5779] ? chrdev_open+0x589/0x6a0 [ 86.364583][ T5779] ? __pfx_tty_open+0x10/0x10 [ 86.364607][ T5779] chrdev_open+0x234/0x6a0 [ 86.364638][ T5779] ? __pfx_chrdev_open+0x10/0x10 [ 86.364670][ T5779] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 86.364709][ T5779] do_dentry_open+0x6d8/0x1660 [ 86.364736][ T5779] ? __pfx_chrdev_open+0x10/0x10 [ 86.364775][ T5779] vfs_open+0x82/0x3f0 [ 86.364814][ T5779] path_openat+0x208c/0x31a0 [ 86.364858][ T5779] ? __pfx_path_openat+0x10/0x10 [ 86.364904][ T5779] do_file_open+0x20e/0x430 [ 86.364939][ T5779] ? __pfx_do_file_open+0x10/0x10 [ 86.364996][ T5779] ? alloc_fd+0x476/0x790 [ 86.365031][ T5779] ? do_getname+0x191/0x390 [ 86.365071][ T5779] do_sys_openat2+0x10d/0x1e0 [ 86.365114][ T5779] ? __pfx_do_sys_openat2+0x10/0x10 [ 86.365163][ T5779] ? __sys_sendmsg+0x18f/0x220 [ 86.365205][ T5779] __x64_sys_openat+0x12d/0x210 [ 86.365250][ T5779] ? __pfx___x64_sys_openat+0x10/0x10 [ 86.365293][ T5779] ? rcu_is_watching+0x12/0xc0 [ 86.365327][ T5779] do_syscall_64+0x10b/0xf80 [ 86.365372][ T5779] ? clear_bhb_loop+0x40/0x90 [ 86.365406][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.365430][ T5779] RIP: 0033:0x7fe44399cdd9 [ 86.365461][ T5779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.365492][ T5779] RSP: 002b:00007fe441bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.365523][ T5779] RAX: ffffffffffffffda RBX: 00007fe443c15fa0 RCX: 00007fe44399cdd9 [ 86.365542][ T5779] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 86.365558][ T5779] RBP: 00007fe443a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 86.365575][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.365592][ T5779] R13: 00007fe443c16038 R14: 00007fe443c15fa0 R15: 00007ffd81ac68c8 [ 86.365630][ T5779] [ 86.421910][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.457450][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.513047][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.819038][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.902786][ T176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.931195][ T176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.950769][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.962593][ T176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.976011][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.023138][ T176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.153325][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.163197][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.352076][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.393095][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.510517][ T3303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.550717][ T3303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.612603][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.640420][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.195156][ T5641] Bluetooth: hci1: command tx timeout [ 88.201298][ T5634] Bluetooth: hci2: command tx timeout [ 88.201333][ T5631] Bluetooth: hci0: command tx timeout [ 88.212892][ T50] Bluetooth: hci3: command tx timeout [ 88.994112][ T5802] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.208897][ T5805] Zero length message leads to an empty skb [ 89.445716][ T5807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 90.276361][ T5814] process 'syz.3.9' launched '/dev/fd/2' with NULL argv: empty string added [ 91.809431][ T5854] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.890358][ T1224] cfg80211: failed to load regulatory.db [ 94.378927][ T5898] bond0: no command found in slaves file - use +ifname or -ifname [ 94.468843][ T5898] FAULT_INJECTION: forcing a failure. [ 94.468843][ T5898] name fail_futex, interval 1, probability 0, space 0, times 1 [ 94.482576][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT(full) [ 94.482614][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 94.482629][ T5898] Call Trace: [ 94.482638][ T5898] [ 94.482647][ T5898] dump_stack_lvl+0x100/0x190 [ 94.482691][ T5898] should_fail_ex.cold+0x5/0xa [ 94.482726][ T5898] get_futex_key+0x1d2/0x1510 [ 94.482759][ T5898] ? __pfx_get_futex_key+0x10/0x10 [ 94.482798][ T5898] futex_wait_setup+0x83/0x510 [ 94.482839][ T5898] __futex_wait+0x19f/0x300 [ 94.482876][ T5898] ? __pfx___futex_wait+0x10/0x10 [ 94.482914][ T5898] ? __pfx_futex_wake_mark+0x10/0x10 [ 94.482951][ T5898] ? futex_hash+0x2ad/0x370 [ 94.482978][ T5898] ? futex_hash+0x141/0x370 [ 94.483013][ T5898] futex_wait+0xe6/0x370 [ 94.483050][ T5898] ? __pfx_futex_wait+0x10/0x10 [ 94.483088][ T5898] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 94.483129][ T5898] ? fault_signal_pending+0x28/0x1d0 [ 94.483173][ T5898] do_futex+0x1ef/0x350 [ 94.483203][ T5898] ? __pfx_do_futex+0x10/0x10 [ 94.483237][ T5898] __x64_sys_futex+0x34f/0x4d0 [ 94.483268][ T5898] ? __might_fault+0xc5/0x140 [ 94.483308][ T5898] ? __pfx___x64_sys_futex+0x10/0x10 [ 94.483346][ T5898] ? rcu_is_watching+0x12/0xc0 [ 94.483382][ T5898] do_syscall_64+0x10b/0xf80 [ 94.483420][ T5898] ? clear_bhb_loop+0x40/0x90 [ 94.483453][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.483480][ T5898] RIP: 0033:0x7f3d57d9cdd9 [ 94.483502][ T5898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.483525][ T5898] RSP: 002b:00007f3d58cf30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 94.483550][ T5898] RAX: ffffffffffffffda RBX: 00007f3d58015fa8 RCX: 00007f3d57d9cdd9 [ 94.483566][ T5898] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3d58015fa8 [ 94.483580][ T5898] RBP: 00007f3d58015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 94.483596][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.483609][ T5898] R13: 00007f3d58016038 R14: 00007ffdbb188110 R15: 00007ffdbb1881f8 [ 94.483643][ T5898] [ 97.505503][ T5949] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.40'. [ 97.603758][ T5951] bond0: invalid ARP target specified [ 97.680190][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 97.705939][ T5954] nbd: must specify a size in bytes for the device [ 97.826613][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.43'. [ 97.960542][ T5962] random: crng reseeded on system resumption [ 98.193214][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 98.515982][ T5978] netlink: 'syz.3.48': attribute type 22 has an invalid length. [ 98.524924][ T5978] netlink: 330 bytes leftover after parsing attributes in process `syz.3.48'. [ 98.882520][ T5984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.49'. [ 98.900904][ T5984] ipvlan1: entered promiscuous mode [ 98.948736][ T5984] ipvlan1: entered allmulticast mode [ 98.965944][ T5984] veth0_vlan: entered allmulticast mode [ 99.179522][ T5971] random: crng reseeded on system resumption [ 100.022405][ T5998] netlink: 'syz.3.52': attribute type 22 has an invalid length. [ 100.044332][ T5998] netlink: 330 bytes leftover after parsing attributes in process `syz.3.52'. [ 100.276239][ T50] Bluetooth: hci1: command 0x2016 tx timeout [ 100.604333][ T6002] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.54'. [ 100.680002][ T6007] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.55'. [ 100.789206][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.56'. [ 101.462041][ T6026] zswap: compressor not available [ 102.278453][ T6038] bond0: invalid ARP target specified [ 102.362517][ T5631] Bluetooth: hci1: command 0x2016 tx timeout [ 102.417068][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.61'. [ 102.449458][ T6040] nbd: must specify a size in bytes for the device [ 103.214821][ T6050] bond0: invalid ARP target specified [ 103.373099][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 103.417040][ T6053] nbd: must specify a size in bytes for the device [ 103.883513][ T6061] FAULT_INJECTION: forcing a failure. [ 103.883513][ T6061] name failslab, interval 1, probability 0, space 0, times 0 [ 103.897093][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: syz.3.66 Not tainted syzkaller #0 PREEMPT(full) [ 103.897130][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.897146][ T6061] Call Trace: [ 103.897155][ T6061] [ 103.897166][ T6061] dump_stack_lvl+0x100/0x190 [ 103.897203][ T6061] should_fail_ex.cold+0x5/0xa [ 103.897239][ T6061] should_failslab+0xc2/0x120 [ 103.897273][ T6061] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 103.897317][ T6061] ? security_inode_alloc+0x3b/0x2c0 [ 103.897345][ T6061] ? lockdep_init_map_type+0x5c/0x250 [ 103.897380][ T6061] security_inode_alloc+0x3b/0x2c0 [ 103.897409][ T6061] inode_init_always_gfp+0xcc0/0x1000 [ 103.897450][ T6061] alloc_inode+0x8e/0x250 [ 103.897492][ T6061] sock_alloc+0x44/0x280 [ 103.897525][ T6061] ? security_socket_create+0x7f/0x250 [ 103.897568][ T6061] __sock_create+0xc2/0x860 [ 103.897619][ T6061] __sys_socket+0x14d/0x260 [ 103.897659][ T6061] ? exc_page_fault+0x6f/0xd0 [ 103.897700][ T6061] ? __pfx___sys_socket+0x10/0x10 [ 103.897751][ T6061] __x64_sys_socket+0x72/0xb0 [ 103.897791][ T6061] ? lockdep_hardirqs_on+0x78/0x100 [ 103.897839][ T6061] do_syscall_64+0x10b/0xf80 [ 103.897880][ T6061] ? clear_bhb_loop+0x40/0x90 [ 103.897914][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.897943][ T6061] RIP: 0033:0x7f41a9f9e647 [ 103.897966][ T6061] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.897992][ T6061] RSP: 002b:00007f41aade8f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 103.898018][ T6061] RAX: ffffffffffffffda RBX: 00007f41aa215fa0 RCX: 00007f41a9f9e647 [ 103.898036][ T6061] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 103.898053][ T6061] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 103.898068][ T6061] R10: 0000200000000200 R11: 0000000000000286 R12: 0000000000000000 [ 103.898084][ T6061] R13: 00007f41aa216038 R14: 00007f41aa215fa0 R15: 00007ffffbc06ef8 [ 103.898117][ T6061] [ 103.898649][ T6061] socket: no more sockets [ 104.176943][ T30] audit: type=1326 audit(1778415687.772:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.3.66" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41a9f9cdd9 code=0x0 [ 104.699587][ T6066] netlink: 'syz.0.67': attribute type 11 has an invalid length. [ 104.857988][ T6068] bond0: invalid ARP target specified [ 104.997128][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 105.071066][ T6073] nbd: must specify a size in bytes for the device [ 105.086363][ T6065] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.712759][ T6065] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.827610][ T6065] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.953925][ T6065] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.999186][ T6081] netlink: 2404 bytes leftover after parsing attributes in process `syz.1.70'. [ 106.331302][ T6089] bond0: invalid ARP target specified [ 106.399803][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'. [ 106.429536][ T6092] nbd: must specify a size in bytes for the device [ 108.449754][ T6104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.77'. [ 108.704966][ T6111] bond0: invalid ARP target specified [ 108.759664][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'. [ 108.770454][ T6111] nbd: must specify a size in bytes for the device [ 120.099757][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.109658][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.119700][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.128203][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.136540][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.146851][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.168627][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.179878][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.188435][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.198019][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.880158][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.887461][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.896341][ T6125] bridge_slave_0: entered allmulticast mode [ 120.903364][ T6125] bridge_slave_0: entered promiscuous mode [ 120.923276][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.930780][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.938284][ T6125] bridge_slave_1: entered allmulticast mode [ 120.945678][ T6125] bridge_slave_1: entered promiscuous mode [ 120.995880][ T6125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.012270][ T6125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.060312][ T6127] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.068165][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.075533][ T6127] bridge_slave_0: entered allmulticast mode [ 121.082548][ T6127] bridge_slave_0: entered promiscuous mode [ 121.091831][ T6125] team0: Port device team_slave_0 added [ 121.100481][ T6125] team0: Port device team_slave_1 added [ 121.106449][ T6127] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.113641][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.121221][ T6127] bridge_slave_1: entered allmulticast mode [ 121.128501][ T6127] bridge_slave_1: entered promiscuous mode [ 121.184345][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.191345][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.217455][ T6125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.231556][ T6127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.241392][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.248668][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.276145][ T6125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.289082][ T6127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.326175][ T6127] team0: Port device team_slave_0 added [ 121.344129][ T6127] team0: Port device team_slave_1 added [ 121.376159][ T6125] hsr_slave_0: entered promiscuous mode [ 121.382570][ T6125] hsr_slave_1: entered promiscuous mode [ 121.388800][ T6125] debugfs: 'hsr0' already exists in 'hsr' [ 121.394530][ T6125] Cannot create hsr debugfs directory [ 121.422534][ T6127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.429805][ T6127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.456929][ T6127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.479307][ T6127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.493577][ T6127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.521432][ T6127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.640601][ T6127] hsr_slave_0: entered promiscuous mode [ 121.647312][ T6127] hsr_slave_1: entered promiscuous mode [ 121.655399][ T6127] debugfs: 'hsr0' already exists in 'hsr' [ 121.656513][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 121.661258][ T6127] Cannot create hsr debugfs directory [ 121.678553][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 121.687473][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 121.697036][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 121.704930][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 122.205289][ T5641] Bluetooth: hci4: command tx timeout [ 122.211882][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.219106][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.226597][ T6161] bridge_slave_0: entered allmulticast mode [ 122.233655][ T6161] bridge_slave_0: entered promiscuous mode [ 122.241916][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.249269][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.256491][ T6161] bridge_slave_1: entered allmulticast mode [ 122.263489][ T6161] bridge_slave_1: entered promiscuous mode [ 122.284776][ T5641] Bluetooth: hci5: command tx timeout [ 122.290802][ T6161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.293877][ T6161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.331009][ T6161] team0: Port device team_slave_0 added [ 122.339225][ T6161] team0: Port device team_slave_1 added [ 122.361512][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.368547][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.394482][ T6161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.407412][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.414355][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.440556][ T6161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.480355][ T6161] hsr_slave_0: entered promiscuous mode [ 122.486593][ T6161] hsr_slave_1: entered promiscuous mode [ 122.492580][ T6161] debugfs: 'hsr0' already exists in 'hsr' [ 122.498355][ T6161] Cannot create hsr debugfs directory [ 123.794728][ T5641] Bluetooth: hci6: command tx timeout [ 124.274810][ T5641] Bluetooth: hci4: command tx timeout [ 124.364751][ T5641] Bluetooth: hci5: command tx timeout [ 124.533148][ T5631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 124.542997][ T5631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 124.552799][ T5631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 124.562331][ T5631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 124.570194][ T5631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 124.980522][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.987879][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.996225][ T6179] bridge_slave_0: entered allmulticast mode [ 125.003366][ T6179] bridge_slave_0: entered promiscuous mode [ 125.011561][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.018844][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.026059][ T6179] bridge_slave_1: entered allmulticast mode [ 125.033039][ T6179] bridge_slave_1: entered promiscuous mode [ 125.057500][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.069940][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.098432][ T6179] team0: Port device team_slave_0 added [ 125.106323][ T6179] team0: Port device team_slave_1 added [ 125.129343][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.136336][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.164281][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.176716][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.183673][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.209791][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.250098][ T6179] hsr_slave_0: entered promiscuous mode [ 125.256365][ T6179] hsr_slave_1: entered promiscuous mode [ 125.262356][ T6179] debugfs: 'hsr0' already exists in 'hsr' [ 125.268619][ T6179] Cannot create hsr debugfs directory [ 125.874924][ T5641] Bluetooth: hci6: command tx timeout [ 126.354985][ T5641] Bluetooth: hci4: command tx timeout [ 126.434841][ T5641] Bluetooth: hci5: command tx timeout [ 126.595665][ T5641] Bluetooth: hci7: command tx timeout [ 127.954854][ T5641] Bluetooth: hci6: command tx timeout [ 128.434920][ T5641] Bluetooth: hci4: command tx timeout [ 128.515138][ T5641] Bluetooth: hci5: command tx timeout [ 128.675042][ T5641] Bluetooth: hci7: command tx timeout [ 130.034798][ T5641] Bluetooth: hci6: command tx timeout [ 130.754807][ T5641] Bluetooth: hci7: command tx timeout [ 132.837169][ T5641] Bluetooth: hci7: command tx timeout [ 132.837304][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.851328][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 180.659091][ T5631] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 180.669164][ T5631] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 180.679939][ T5631] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 180.688039][ T5631] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 180.696468][ T5631] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 180.707488][ T5631] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 180.709535][ T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 180.724317][ T5641] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 180.732904][ T5641] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 180.744383][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 181.498360][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.507193][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.514375][ T6203] bridge_slave_0: entered allmulticast mode [ 181.523111][ T6203] bridge_slave_0: entered promiscuous mode [ 181.539049][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.546331][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.553499][ T6203] bridge_slave_1: entered allmulticast mode [ 181.561334][ T6203] bridge_slave_1: entered promiscuous mode [ 181.606363][ T6203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.627564][ T6203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.668535][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.675899][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.683071][ T6200] bridge_slave_0: entered allmulticast mode [ 181.691350][ T6200] bridge_slave_0: entered promiscuous mode [ 181.701030][ T6203] team0: Port device team_slave_0 added [ 181.707368][ T6200] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.714503][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.722140][ T6200] bridge_slave_1: entered allmulticast mode [ 181.729395][ T6200] bridge_slave_1: entered promiscuous mode [ 181.738987][ T6203] team0: Port device team_slave_1 added [ 181.786294][ T6203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.793774][ T6203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.819767][ T6203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.833316][ T6200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.843183][ T6203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.851310][ T6203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.877576][ T6203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.894028][ T6200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.932700][ T6200] team0: Port device team_slave_0 added [ 181.940785][ T6200] team0: Port device team_slave_1 added [ 181.991768][ T6200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.999586][ T6200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.025713][ T6200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.041183][ T6203] hsr_slave_0: entered promiscuous mode [ 182.050101][ T6203] hsr_slave_1: entered promiscuous mode [ 182.057076][ T6203] debugfs: 'hsr0' already exists in 'hsr' [ 182.063072][ T6203] Cannot create hsr debugfs directory [ 182.070291][ T6200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.077425][ T6200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.108561][ T6200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.193702][ T6200] hsr_slave_0: entered promiscuous mode [ 182.201210][ T6200] hsr_slave_1: entered promiscuous mode [ 182.207500][ T6200] debugfs: 'hsr0' already exists in 'hsr' [ 182.213226][ T6200] Cannot create hsr debugfs directory [ 182.593439][ T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 182.603830][ T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 182.613166][ T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 182.622955][ T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 182.631159][ T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 182.768012][ T5634] Bluetooth: hci8: command tx timeout [ 182.834824][ T50] Bluetooth: hci9: command tx timeout [ 183.044441][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.051754][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.059143][ T6241] bridge_slave_0: entered allmulticast mode [ 183.066385][ T6241] bridge_slave_0: entered promiscuous mode [ 183.074192][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.081592][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.089056][ T6241] bridge_slave_1: entered allmulticast mode [ 183.096231][ T6241] bridge_slave_1: entered promiscuous mode [ 183.123309][ T6241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.134944][ T6241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.166520][ T6241] team0: Port device team_slave_0 added [ 183.174046][ T6241] team0: Port device team_slave_1 added [ 183.198001][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.204992][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.232190][ T6241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.245572][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.252517][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.278745][ T6241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.318150][ T6241] hsr_slave_0: entered promiscuous mode [ 183.325562][ T6241] hsr_slave_1: entered promiscuous mode [ 183.331713][ T6241] debugfs: 'hsr0' already exists in 'hsr' [ 183.337521][ T6241] Cannot create hsr debugfs directory [ 184.675141][ T50] Bluetooth: hci10: command tx timeout [ 184.834812][ T50] Bluetooth: hci8: command tx timeout [ 184.914904][ T50] Bluetooth: hci9: command tx timeout [ 185.098815][ T5634] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 185.106899][ T5634] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 185.114824][ T5634] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 185.123528][ T5634] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 185.132041][ T5634] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 185.553070][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.560273][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.567656][ T6259] bridge_slave_0: entered allmulticast mode [ 185.575003][ T6259] bridge_slave_0: entered promiscuous mode [ 185.583525][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.590775][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.598334][ T6259] bridge_slave_1: entered allmulticast mode [ 185.605645][ T6259] bridge_slave_1: entered promiscuous mode [ 185.633244][ T6259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.645646][ T6259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.673446][ T6259] team0: Port device team_slave_0 added [ 185.682491][ T6259] team0: Port device team_slave_1 added [ 185.706701][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.713683][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.739841][ T6259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.753369][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.760488][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.787015][ T6259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.826618][ T6259] hsr_slave_0: entered promiscuous mode [ 185.832962][ T6259] hsr_slave_1: entered promiscuous mode [ 185.839475][ T6259] debugfs: 'hsr0' already exists in 'hsr' [ 185.845312][ T6259] Cannot create hsr debugfs directory [ 186.754881][ T50] Bluetooth: hci10: command tx timeout [ 186.924832][ T50] Bluetooth: hci8: command tx timeout [ 186.994875][ T50] Bluetooth: hci9: command tx timeout [ 187.154862][ T50] Bluetooth: hci11: command tx timeout [ 188.834882][ T50] Bluetooth: hci10: command tx timeout [ 188.994760][ T50] Bluetooth: hci8: command tx timeout [ 189.084750][ T50] Bluetooth: hci9: command tx timeout [ 189.234709][ T50] Bluetooth: hci11: command tx timeout [ 190.914839][ T50] Bluetooth: hci10: command tx timeout [ 191.314885][ T50] Bluetooth: hci11: command tx timeout [ 193.404771][ T50] Bluetooth: hci11: command tx timeout [ 194.277682][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.286602][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.597111][ T4944] Bluetooth: hci1: command 0x2016 tx timeout [ 206.603451][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 206.609593][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 206.609658][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 240.776312][ T5642] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 240.788394][ T5642] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 240.789427][ T5633] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 240.806283][ T5633] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 240.816635][ T5633] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 240.820687][ T5642] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 240.826123][ T5633] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 240.834225][ T5642] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 240.855126][ T5641] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 240.864006][ T5641] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 241.631808][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.640547][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.647970][ T6280] bridge_slave_0: entered allmulticast mode [ 241.655331][ T6280] bridge_slave_0: entered promiscuous mode [ 241.669049][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.676259][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.683600][ T6280] bridge_slave_1: entered allmulticast mode [ 241.691366][ T6280] bridge_slave_1: entered promiscuous mode [ 241.743197][ T6280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.763837][ T6280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.773301][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.780794][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.788178][ T6282] bridge_slave_0: entered allmulticast mode [ 241.797487][ T6282] bridge_slave_0: entered promiscuous mode [ 241.805753][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.812899][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.820514][ T6282] bridge_slave_1: entered allmulticast mode [ 241.828478][ T6282] bridge_slave_1: entered promiscuous mode [ 241.864212][ T6280] team0: Port device team_slave_0 added [ 241.884115][ T6280] team0: Port device team_slave_1 added [ 241.892527][ T6282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.916554][ T6282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.943577][ T6280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.950600][ T6280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.976876][ T6280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.998066][ T6280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.006107][ T6280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.032343][ T6280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.053924][ T6282] team0: Port device team_slave_0 added [ 242.063175][ T6282] team0: Port device team_slave_1 added [ 242.110351][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.117736][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.143859][ T6282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.156522][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.163475][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.189538][ T6282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.208268][ T6280] hsr_slave_0: entered promiscuous mode [ 242.214592][ T6280] hsr_slave_1: entered promiscuous mode [ 242.220862][ T6280] debugfs: 'hsr0' already exists in 'hsr' [ 242.226709][ T6280] Cannot create hsr debugfs directory [ 242.302580][ T6282] hsr_slave_0: entered promiscuous mode [ 242.309757][ T6282] hsr_slave_1: entered promiscuous mode [ 242.316304][ T6282] debugfs: 'hsr0' already exists in 'hsr' [ 242.322051][ T6282] Cannot create hsr debugfs directory [ 242.437287][ T5641] Bluetooth: hci4: command 0x0406 tx timeout [ 242.443345][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 242.914876][ T5631] Bluetooth: hci12: command tx timeout [ 242.925166][ T5631] Bluetooth: hci13: command tx timeout [ 243.166763][ T5634] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 243.175085][ T5634] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 243.182934][ T5634] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 243.191728][ T5634] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 243.200141][ T5634] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 243.622031][ T6318] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.629366][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.636737][ T6318] bridge_slave_0: entered allmulticast mode [ 243.644480][ T6318] bridge_slave_0: entered promiscuous mode [ 243.652477][ T6318] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.659927][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.667356][ T6318] bridge_slave_1: entered allmulticast mode [ 243.674429][ T6318] bridge_slave_1: entered promiscuous mode [ 243.703027][ T6318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.715929][ T6318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.745102][ T6318] team0: Port device team_slave_0 added [ 243.752794][ T6318] team0: Port device team_slave_1 added [ 243.777146][ T6318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.784104][ T6318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.812052][ T6318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.824709][ T6318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.831665][ T6318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.858296][ T6318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.905068][ T6318] hsr_slave_0: entered promiscuous mode [ 243.911411][ T6318] hsr_slave_1: entered promiscuous mode [ 243.917785][ T6318] debugfs: 'hsr0' already exists in 'hsr' [ 243.923502][ T6318] Cannot create hsr debugfs directory [ 244.994861][ T5631] Bluetooth: hci13: command tx timeout [ 244.995203][ T5634] Bluetooth: hci12: command tx timeout [ 245.170873][ T5631] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 245.180877][ T5631] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 245.188672][ T5631] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 245.197831][ T5631] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 245.205750][ T5631] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 245.234787][ T5631] Bluetooth: hci14: command tx timeout [ 245.644923][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.652148][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.659745][ T6338] bridge_slave_0: entered allmulticast mode [ 245.667006][ T6338] bridge_slave_0: entered promiscuous mode [ 245.675111][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.682270][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.691339][ T6338] bridge_slave_1: entered allmulticast mode [ 245.698736][ T6338] bridge_slave_1: entered promiscuous mode [ 245.725760][ T6338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.738098][ T6338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.766285][ T6338] team0: Port device team_slave_0 added [ 245.773933][ T6338] team0: Port device team_slave_1 added [ 245.800805][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.807826][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.833955][ T6338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.846213][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.853156][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.879887][ T6338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.924294][ T6338] hsr_slave_0: entered promiscuous mode [ 245.930770][ T6338] hsr_slave_1: entered promiscuous mode [ 245.937618][ T6338] debugfs: 'hsr0' already exists in 'hsr' [ 245.943656][ T6338] Cannot create hsr debugfs directory [ 247.074729][ T5634] Bluetooth: hci13: command tx timeout [ 247.084928][ T5634] Bluetooth: hci12: command tx timeout [ 247.235258][ T5634] Bluetooth: hci15: command tx timeout [ 247.314913][ T5634] Bluetooth: hci14: command tx timeout [ 247.557276][ T5634] Bluetooth: hci7: command 0x0406 tx timeout [ 247.557771][ T5641] Bluetooth: hci6: command 0x0406 tx timeout [ 249.154848][ T5631] Bluetooth: hci13: command tx timeout [ 249.155070][ T50] Bluetooth: hci12: command tx timeout [ 249.324899][ T50] Bluetooth: hci15: command tx timeout [ 249.394869][ T50] Bluetooth: hci14: command tx timeout [ 251.394825][ T50] Bluetooth: hci15: command tx timeout [ 251.474730][ T50] Bluetooth: hci14: command tx timeout [ 253.474841][ T50] Bluetooth: hci15: command tx timeout [ 255.716605][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.723414][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.195180][ T31] INFO: task syz.0.67:6065 blocked for more than 143 seconds. [ 260.203615][ T31] Not tainted syzkaller #0 [ 260.208697][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 260.217438][ T31] task:syz.0.67 state:D stack:24184 pid:6065 tgid:6064 ppid:5624 task_flags:0x480140 flags:0x00080002 [ 260.230155][ T31] Call Trace: [ 260.233513][ T31] [ 260.236568][ T31] __schedule+0x1295/0x67a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 260.241152][ T31] ? __pfx___schedule+0x10/0x10 [ 260.246067][ T31] ? find_held_lock+0x2b/0x80 [ 260.251175][ T31] ? schedule+0x2bf/0x390 [ 260.256158][ T31] schedule+0xdd/0x390 [ 260.260290][ T31] schedule_timeout+0x1b2/0x280 [ 260.265233][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 260.270642][ T31] ? mark_held_locks+0x40/0x70 [ 260.275620][ T31] __wait_for_common+0x2e7/0x4c0 [ 260.304824][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 260.310347][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 260.330618][ T31] remove_one+0x312/0x420 [ 260.337579][ T31] ? find_next_child+0x18f/0x280 [ 260.342596][ T31] __simple_recursive_removal+0x148/0x5c0 [ 260.348682][ T31] ? __pfx_remove_one+0x10/0x10 [ 260.353618][ T31] debugfs_remove+0x5d/0x80 [ 260.358473][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 260.363558][ T31] nsim_dev_reload_destroy+0x144/0x4a0 [ 260.370916][ T31] nsim_drv_remove+0x52/0x1e0 [ 260.375719][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 260.381029][ T31] device_remove+0xcb/0x180 [ 260.385594][ T31] device_release_driver_internal+0x44e/0x620 [ 260.391684][ T31] bus_remove_device+0x2bc/0x560 [ 260.396691][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 260.402162][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 260.407862][ T31] device_del+0x376/0x9b0 [ 260.412207][ T31] ? __pfx_device_del+0x10/0x10 [ 260.417286][ T31] ? __lock_acquire+0x4a5/0x2630 [ 260.422263][ T31] device_unregister+0x1d/0xe0 [ 260.427090][ T31] del_device_store+0x346/0x480 [ 260.432551][ T31] ? __pfx_del_device_store+0x10/0x10 [ 260.438106][ T31] ? find_held_lock+0x2b/0x80 [ 260.442828][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 260.447837][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 260.452736][ T31] ? __pfx_del_device_store+0x10/0x10 [ 260.458174][ T31] bus_attr_store+0x74/0xb0 [ 260.462699][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 260.468016][ T31] sysfs_kf_write+0xf2/0x150 [ 260.472622][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 260.477977][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 260.483192][ T31] vfs_write+0x6ac/0x1070 [ 260.487605][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 260.493442][ T31] ? __pfx_vfs_write+0x10/0x10 [ 260.498320][ T31] ksys_write+0x12a/0x250 [ 260.502679][ T31] ? __pfx_ksys_write+0x10/0x10 [ 260.507655][ T31] ? rcu_is_watching+0x12/0xc0 [ 260.512437][ T31] do_syscall_64+0x10b/0xf80 [ 260.517326][ T31] ? clear_bhb_loop+0x40/0x90 [ 260.522087][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.528524][ T31] RIP: 0033:0x7f3d57d9cdd9 [ 260.532997][ T31] RSP: 002b:00007f3d58cf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.542085][ T31] RAX: ffffffffffffffda RBX: 00007f3d58015fa0 RCX: 00007f3d57d9cdd9 [ 260.550164][ T31] RDX: 0000000000000045 RSI: 0000200000000040 RDI: 0000000000000003 [ 260.558197][ T31] RBP: 00007f3d57e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 260.566198][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.574179][ T31] R13: 00007f3d58016038 R14: 00007f3d58015fa0 R15: 00007ffdbb1881f8 [ 260.582234][ T31] [ 260.585352][ T31] INFO: task syz.3.68:6068 blocked for more than 143 seconds. [ 260.592836][ T31] Not tainted syzkaller #0 [ 260.597959][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 260.606873][ T31] task:syz.3.68 state:D stack:26216 pid:6068 tgid:6067 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 260.618951][ T31] Call Trace: [ 260.622235][ T31] [ 260.625262][ T31] __schedule+0x1295/0x67a0 [ 260.629825][ T31] ? __pfx___schedule+0x10/0x10 [ 260.634934][ T31] ? find_held_lock+0x2b/0x80 [ 260.640074][ T31] ? schedule+0x2bf/0x390 [ 260.644456][ T31] schedule+0xdd/0x390 [ 260.648581][ T31] schedule_preempt_disabled+0x13/0x30 [ 260.654065][ T31] __mutex_lock+0xced/0x1b10 [ 260.658732][ T31] ? devlink_health_report+0x66c/0xb20 [ 260.664219][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 260.669313][ T31] ? devlink_recover_notify.constprop.0+0x1e3/0x540 [ 260.675997][ T31] ? devlink_health_report+0x66c/0xb20 [ 260.681467][ T31] devlink_health_report+0x66c/0xb20 [ 260.686862][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 260.692718][ T31] ? _copy_from_user+0x59/0xd0 [ 260.697564][ T31] nsim_dev_health_break_write+0x166/0x210 [ 260.703397][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 260.709813][ T31] full_proxy_write+0x135/0x1a0 [ 260.714731][ T31] vfs_write+0x2aa/0x1070 [ 260.719058][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 260.724420][ T31] ? __pfx_vfs_write+0x10/0x10 [ 260.729218][ T31] ? __fget_files+0x215/0x3d0 [ 260.733922][ T31] ? __fget_files+0x21f/0x3d0 [ 260.738725][ T31] ksys_write+0x12a/0x250 [ 260.743513][ T31] ? __pfx_ksys_write+0x10/0x10 [ 260.748615][ T31] ? rcu_is_watching+0x12/0xc0 [ 260.753440][ T31] do_syscall_64+0x10b/0xf80 [ 260.758347][ T31] ? clear_bhb_loop+0x40/0x90 [ 260.763099][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.769100][ T31] RIP: 0033:0x7f41a9f9cdd9 [ 260.773530][ T31] RSP: 002b:00007f41aadea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.782037][ T31] RAX: ffffffffffffffda RBX: 00007f41aa215fa0 RCX: 00007f41a9f9cdd9 [ 260.790072][ T31] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000008 [ 260.798102][ T31] RBP: 00007f41aa032d69 R08: 0000000000000000 R09: 0000000000000000 [ 260.806134][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.814095][ T31] R13: 00007f41aa216038 R14: 00007f41aa215fa0 R15: 00007ffffbc06ef8 [ 260.822157][ T31] [ 260.825252][ T31] INFO: task syz.1.73:6090 blocked for more than 143 seconds. [ 260.832714][ T31] Not tainted syzkaller #0 [ 260.838325][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 260.847672][ T31] task:syz.1.73 state:D stack:29016 pid:6090 tgid:6088 ppid:5625 task_flags:0x400040 flags:0x00080002 [ 260.859803][ T31] Call Trace: [ 260.863091][ T31] [ 260.866049][ T31] __schedule+0x1295/0x67a0 [ 260.870587][ T31] ? __pfx___schedule+0x10/0x10 [ 260.875496][ T31] ? find_held_lock+0x2b/0x80 [ 260.880245][ T31] ? schedule+0x2bf/0x390 [ 260.884577][ T31] schedule+0xdd/0x390 [ 260.888746][ T31] schedule_preempt_disabled+0x13/0x30 [ 260.894232][ T31] rwsem_down_read_slowpath+0x5af/0xb40 [ 260.899903][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 260.906049][ T31] ? __pfx___might_resched+0x10/0x10 [ 260.911346][ T31] down_read+0xed/0x450 [ 260.915712][ T31] ? __pfx_down_read+0x10/0x10 [ 260.920513][ T31] ? mnt_get_write_access+0x1e9/0x2f0 [ 260.926064][ T31] path_openat+0xa16/0x31a0 [ 260.930601][ T31] ? __pfx_path_openat+0x10/0x10 [ 260.935634][ T31] do_file_open+0x20e/0x430 [ 260.940161][ T31] ? __pfx_do_file_open+0x10/0x10 [ 260.945824][ T31] ? alloc_fd+0x476/0x790 [ 260.950183][ T31] ? do_getname+0x191/0x390 [ 260.954803][ T31] do_sys_openat2+0x10d/0x1e0 [ 260.959536][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.964997][ T31] __x64_sys_openat+0x12d/0x210 [ 260.969887][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 260.975322][ T31] ? ksys_write+0x1ac/0x250 [ 260.979842][ T31] ? rcu_is_watching+0x12/0xc0 [ 260.984678][ T31] do_syscall_64+0x10b/0xf80 [ 260.989292][ T31] ? clear_bhb_loop+0x40/0x90 [ 260.993963][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.000042][ T31] RIP: 0033:0x7fe44399cdd9 [ 261.004484][ T31] RSP: 002b:00007fe441bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 261.012980][ T31] RAX: ffffffffffffffda RBX: 00007fe443c16090 RCX: 00007fe44399cdd9 [ 261.021005][ T31] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 261.029064][ T31] RBP: 00007fe443a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 261.037130][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.045161][ T31] R13: 00007fe443c16128 R14: 00007fe443c16090 R15: 00007ffd81ac68c8 [ 261.053693][ T31] [ 261.056849][ T31] INFO: task syz.2.79:6110 blocked for more than 144 seconds. [ 261.064312][ T31] Not tainted syzkaller #0 [ 261.071235][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 261.080224][ T31] task:syz.2.79 state:D stack:28216 pid:6110 tgid:6109 ppid:5626 task_flags:0x400140 flags:0x00080002 [ 261.092263][ T31] Call Trace: [ 261.095592][ T31] [ 261.098535][ T31] __schedule+0x1295/0x67a0 [ 261.103050][ T31] ? __pfx___schedule+0x10/0x10 [ 261.107943][ T31] ? find_held_lock+0x2b/0x80 [ 261.112645][ T31] ? schedule+0x2bf/0x390 [ 261.117042][ T31] schedule+0xdd/0x390 [ 261.121133][ T31] schedule_preempt_disabled+0x13/0x30 [ 261.126658][ T31] rwsem_down_read_slowpath+0x5af/0xb40 [ 261.132225][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 261.138369][ T31] ? __pfx___might_resched+0x10/0x10 [ 261.143696][ T31] down_read+0xed/0x450 [ 261.147923][ T31] ? __pfx_down_read+0x10/0x10 [ 261.153143][ T31] ? mnt_get_write_access+0x1e9/0x2f0 [ 261.159052][ T31] path_openat+0xa16/0x31a0 [ 261.163632][ T31] ? __pfx_path_openat+0x10/0x10 [ 261.169053][ T31] do_file_open+0x20e/0x430 [ 261.173623][ T31] ? __pfx_do_file_open+0x10/0x10 [ 261.179001][ T31] ? alloc_fd+0x476/0x790 [ 261.183367][ T31] ? do_getname+0x191/0x390 [ 261.188079][ T31] do_sys_openat2+0x10d/0x1e0 [ 261.192802][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 261.198062][ T31] __x64_sys_openat+0x12d/0x210 [ 261.202934][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 261.208578][ T31] ? kcov_ioctl+0x16a/0x720 [ 261.213135][ T31] ? rcu_is_watching+0x12/0xc0 [ 261.217982][ T31] do_syscall_64+0x10b/0xf80 [ 261.222597][ T31] ? clear_bhb_loop+0x40/0x90 [ 261.227335][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.233242][ T31] RIP: 0033:0x7f081479cdd9 [ 261.237855][ T31] RSP: 002b:00007f08155f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 261.246536][ T31] RAX: ffffffffffffffda RBX: 00007f0814a15fa0 RCX: 00007f081479cdd9 [ 261.255181][ T31] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 261.263204][ T31] RBP: 00007f0814832d69 R08: 0000000000000000 R09: 0000000000000000 [ 261.271209][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.279225][ T31] R13: 00007f0814a16038 R14: 00007f0814a15fa0 R15: 00007ffc0d0387b8 [ 261.287276][ T31] [ 261.290351][ T31] [ 261.290351][ T31] Showing all locks held in the system: [ 261.298339][ T31] 1 lock held by khungtaskd/31: [ 261.303226][ T31] #0: ffffffff8e7e52e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 261.313197][ T31] 7 locks held by kworker/u8:5/176: [ 261.318836][ T31] #0: ffff8880b843b3e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 261.328842][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2f15/0x67a0 [ 261.337637][ T31] #2: ffff8880b8426358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 [ 261.347077][ T31] #3: ffffffff9b427988 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x490 [ 261.357960][ T31] #4: ffffffff8e7e52e0 (rcu_read_lock){....}-{1:3}, at: __schedule+0x2f15/0x67a0 [ 261.367323][ T31] #5: ffff8880b84284d8 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0xeb/0x1a50 [ 261.377937][ T31] #6: ffffffff9b1a4e88 (&____s->seqcount#2){----}-{0:0}, at: clockevents_program_event+0x23e/0x820 [ 261.388817][ T31] 1 lock held by klogd/4983: [ 261.393413][ T31] #0: ffff8880b843b3e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 261.403404][ T31] 2 locks held by getty/5384: [ 261.408221][ T31] #0: ffff88803804e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 261.418036][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 261.428201][ T31] 8 locks held by syz.0.67/6065: [ 261.433126][ T31] #0: ffff88807a462ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 261.442271][ T31] #1: ffff888037cae410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 261.451352][ T31] #2: ffff888059af3c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 261.462143][ T31] #3: ffff88802aba5878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 261.472340][ T31] #4: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 261.482724][ T31] #5: ffff88807682a128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 261.493345][ T31] #6: ffff888076829258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 261.503434][ T31] #7: ffff888076f30af0 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 261.515345][ T31] 3 locks held by syz.3.68/6068: [ 261.520307][ T31] #0: ffff88807b237eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 261.529449][ T31] #1: ffff8880202a2410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 261.538520][ T31] #2: ffff888076829258 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_health_report+0x66c/0xb20 [ 261.549215][ T31] 2 locks held by syz.1.73/6090: [ 261.554152][ T31] #0: ffff8880202a2410 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 261.564224][ T31] #1: ffff888076f30af0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 261.575935][ T31] 2 locks held by syz.2.79/6110: [ 261.580917][ T31] #0: ffff8880202a2410 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 261.590516][ T31] #1: ffff888076f30af0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 261.601107][ T31] 4 locks held by syz-executor/6125: [ 261.606446][ T31] #0: ffff888037cae410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 261.615531][ T31] #1: ffff888033ba0480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 261.625497][ T31] #2: ffff88802aba5878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 261.635924][ T31] #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 261.646294][ T31] 4 locks held by syz-executor/6127: [ 261.651566][ T31] #0: ffff888037cae410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 261.661246][ T31] #1: ffff88805a6a4880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 261.671122][ T31] #2: ffff88802aba5878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 261.681195][ T31] #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 261.691541][ T31] 4 locks held by syz-executor/6161: [ 261.696874][ T31] #0: ffff888037cae410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 261.705954][ T31] #1: ffff88805a148080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 261.716228][ T31] #2: ffff88802aba5878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 261.726387][ T31] #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 261.736856][ T31] 4 locks held by syz-executor/6179: [ 261.742156][ T31] #0: ffff888037cae410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 261.751198][ T31] #1: ffff88805a23b080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 261.761024][ T31] #2: ffff88802aba5878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 261.771652][ T31] #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 261.782082][ T31] 4 locks held by syz-executor/6200: [ 261.787398][ T31] #0: ffff888037cae410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 261.796760][ T31] #1: ffff88805b278c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 261.807054][ T31] #2: ffff88802aba5878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 261.817195][ T31] #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 261.827535][ T31] 4 locks held by syz-executor/6203: [ 261.832822][ T31] #0: ffff888037cae410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 261.841882][ T31] #1: ffff88805a7cc080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 261.851920][ T31] #2: ffff88802aba5878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 261.862088][ T31] #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 261.872891][ T31] 4 locks held by syz-executor/6241: [ 261.878753][ T31] #0: ffff888037cae410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 261.887848][ T31] #1: ffff88805a6df080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 261.897634][ T31] #2: ffff88802aba5878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 261.907757][ T31] #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 261.918084][ T31] 4 locks held by syz-executor/6259: [ 261.923369][ T31] #0: ffff888037cae410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 261.932416][ T31] #1: ffff888059aa9080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 261.942245][ T31] #2: ffff88802aba5878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 261.952324][ T31] #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 261.962824][ T31] 4 locks held by syz-executor/6280: [ 261.968754][ T31] #0: ffff888037cae410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 261.977848][ T31] #1: ffff88804c289880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 261.987719][ T31] #2: ffff88802aba5878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 261.997847][ T31] #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 262.008176][ T31] 4 locks held by syz-executor/6282: [ 262.013460][ T31] #0: ffff888037cae410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 262.022526][ T31] #1: ffff8880773a5880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 262.032383][ T31] #2: ffff88802aba5878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 262.042595][ T31] #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 262.052955][ T31] 4 locks held by syz-executor/6318: [ 262.058288][ T31] #0: ffff888037cae410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 262.067452][ T31] #1: ffff88802b785c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 262.077906][ T31] #2: ffff88802aba5878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 262.088052][ T31] #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 262.098572][ T31] 4 locks held by syz-executor/6338: [ 262.103863][ T31] #0: ffff888037cae410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 262.112976][ T31] #1: ffff888079a12080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 262.123009][ T31] #2: ffff88802aba5878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 262.135731][ T31] #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 262.146263][ T31] [ 262.148708][ T31] ============================================= [ 262.148708][ T31] [ 262.157255][ T31] NMI backtrace for cpu 0 [ 262.157283][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 262.157314][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.157329][ T31] Call Trace: [ 262.157337][ T31] [ 262.157345][ T31] dump_stack_lvl+0x100/0x190 [ 262.157377][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 262.157407][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 262.157435][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 262.157469][ T31] sys_info+0x141/0x190 [ 262.157491][ T31] watchdog+0xcb1/0x1030 [ 262.157534][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 262.157573][ T31] ? __pfx_watchdog+0x10/0x10 [ 262.157612][ T31] ? __kthread_parkme+0x18c/0x230 [ 262.157654][ T31] ? kthread+0x13a/0x450 [ 262.157678][ T31] ? __pfx_watchdog+0x10/0x10 [ 262.157713][ T31] kthread+0x370/0x450 [ 262.157742][ T31] ? __pfx_kthread+0x10/0x10 [ 262.157769][ T31] ret_from_fork+0x72b/0xd50 [ 262.157800][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 262.157831][ T31] ? __switch_to+0x800/0x1100 [ 262.157867][ T31] ? __switch_to_asm+0x39/0x70 [ 262.157900][ T31] ? __pfx_kthread+0x10/0x10 [ 262.157926][ T31] ret_from_fork_asm+0x1a/0x30 [ 262.157978][ T31] [ 262.157988][ T31] Sending NMI from CPU 0 to CPUs 1: [ 262.292597][ C1] NMI backtrace for cpu 1 [ 262.292615][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 262.292643][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.292656][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 262.292695][ C1] Code: e6 94 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 8f 23 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 262.292717][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 262.292735][ C1] RAX: 0000000000153d95 RBX: ffff88801e680000 RCX: ffffffff8b880095 [ 262.292751][ C1] RDX: 0000000000000000 RSI: ffffffff8df1c291 RDI: ffffffff8c1c2800 [ 262.292766][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 262.292780][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 262.292794][ C1] R13: ffffed1003cd0000 R14: 0000000000000001 R15: ffffffff90d7db50 [ 262.292810][ C1] FS: 0000000000000000(0000) GS:ffff888124477000(0000) knlGS:0000000000000000 [ 262.292831][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.292846][ C1] CR2: 00007fff00870c8c CR3: 000000000e596000 CR4: 00000000003526f0 [ 262.292861][ C1] Call Trace: [ 262.292868][ C1] [ 262.292876][ C1] default_idle+0x9/0x10 [ 262.292897][ C1] default_idle_call+0x6c/0xb0 [ 262.292919][ C1] do_idle+0x464/0x590 [ 262.292950][ C1] ? __pfx_do_idle+0x10/0x10 [ 262.292977][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 262.293012][ C1] cpu_startup_entry+0x4f/0x60 [ 262.293043][ C1] start_secondary+0x21d/0x2d0 [ 262.293069][ C1] ? __pfx_start_secondary+0x10/0x10 [ 262.293094][ C1] common_startup_64+0x13e/0x148 [ 262.293132][ C1] [ 262.465885][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 262.472749][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 262.481847][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.491890][ T31] Call Trace: [ 262.495159][ T31] [ 262.498077][ T31] dump_stack_lvl+0x100/0x190 [ 262.502745][ T31] vpanic+0x552/0x970 [ 262.506712][ T31] ? __pfx_vpanic+0x10/0x10 [ 262.511200][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 262.517353][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 262.523536][ T31] panic+0xd1/0xe0 [ 262.527251][ T31] ? __pfx_panic+0x10/0x10 [ 262.531656][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 262.537801][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 262.543942][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 262.550082][ T31] ? watchdog.cold+0x1ec/0x234 [ 262.554835][ T31] ? watchdog+0xcc1/0x1030 [ 262.559241][ T31] watchdog.cold+0x1fd/0x234 [ 262.563818][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 262.569623][ T31] ? __pfx_watchdog+0x10/0x10 [ 262.574296][ T31] ? __kthread_parkme+0x18c/0x230 [ 262.579311][ T31] ? kthread+0x13a/0x450 [ 262.583542][ T31] ? __pfx_watchdog+0x10/0x10 [ 262.588245][ T31] kthread+0x370/0x450 [ 262.592301][ T31] ? __pfx_kthread+0x10/0x10 [ 262.596873][ T31] ret_from_fork+0x72b/0xd50 [ 262.601447][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 262.606547][ T31] ? __switch_to+0x800/0x1100 [ 262.611216][ T31] ? __switch_to_asm+0x39/0x70 [ 262.615972][ T31] ? __pfx_kthread+0x10/0x10 [ 262.620548][ T31] ret_from_fork_asm+0x1a/0x30 [ 262.625309][ T31] [ 262.628783][ T31] Kernel Offset: disabled [ 262.633096][ T31] Rebooting in 86400 seconds..