last executing test programs: 15.330035964s ago: executing program 3 (id=29): mmap$auto(0x0, 0x2020009, 0x7fffffff, 0x7f, 0xfffffffffffffffa, 0x7ffe) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000200)='}[,&*}\x00', &(0x7f0000000240)='nfsd\x00', 0x3, 0x0) access$auto(&(0x7f0000000000)='}[,&*}\x00', 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x140242, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) kexec_load$auto(0x7ceb, 0x1, &(0x7f00000000c0)={@buf=&(0x7f0000000000)="e47d84feaa8d27", 0x7, 0x0, 0xffffffffffffffff}, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000080)={0x2, 0x80, 0x10001, 0x5, &(0x7f0000000000), 0x2f, 0x3, 0x2, @stream_id=0x2, 0x7, 0x476, 0x0}) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x10}, 0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r3) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r4, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) r5 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, r5, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r6, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) 13.349041899s ago: executing program 3 (id=32): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x108000, 0x800032, 0x4) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) rt_sigsuspend$auto(&(0x7f00000000c0)={0x4}, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) ioctl$auto(0x3, 0x80004509, 0x10000000000402) ioctl$auto(0x3, 0x800005411, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_open_procfs$namespace(0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3, 0x0) socket(0x2, 0xa, 0xe) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyue\x00', 0x80000, 0x0) ioctl$auto(0x1, 0x890b, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/hotplug/pci_root/enabled\x00', 0x8001, 0x0) 10.371455211s ago: executing program 0 (id=37): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x4, 0x0) write$auto(r1, &(0x7f0000000080)='/sys/module/nfs/parameters/callback_tcpport\x00', 0x401) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b) r2 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) read$auto_hwsim_fops_ps_(r2, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) io_uring_register$auto_IORING_UNREGISTER_FILES(r3, 0x3, &(0x7f0000000080)="193f32b995f0ecb4ddf8cd83baeda5c352a745214ad880cc4c561670de2d13131c656d339507302cd18f379f551569932d17bb17195ecfc677eb23ac801128003ef54e78817f1a", 0x3) sendfile$auto(r3, r3, &(0x7f0000000000)=0x3, 0xad6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4000, 0x0) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(r2, &(0x7f0000000100)={0x0, 0x10001}, 0x9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r6 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r6}, 0x6f4) ioctl$auto_FIONCLEX(r0, 0x5450, 0xff) read$auto(r5, 0x0, 0x20) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48041, 0x0) write$auto(r7, 0x0, 0x6) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) 9.367905776s ago: executing program 1 (id=40): close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = fanotify_init$auto(0x5, 0x2000000000002) r1 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r0, 0x9, 0x9, r1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x181) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80082, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)="d1") readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 9.022076905s ago: executing program 1 (id=41): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) r2 = prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VF\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xa2\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xd, 0x300000000000) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fffffffffffffff) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f00000002c0)="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") mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0xebf, r2, 0x80000001) clock_getres$auto(0xa, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x800003b, 0x1, 0x0, 0x5, 0x100000000008007) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/netstat\x00', 0xe0000, 0x0) read$auto(r4, 0x0, 0x102) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 8.951598392s ago: executing program 0 (id=43): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000010c0)=""/4090, 0xffa) socket(0x2, 0x1, 0x106) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x4f4, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) listen$auto(0x3, 0x81) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) 8.597566252s ago: executing program 2 (id=44): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d8) r1 = socket(0x2c, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x3, 0xb31, 0x8000000000000001, 0xeb5, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0xffffffffffffffff, 0x20409, 0x4000000000df, 0x800012, r1, 0x100000000000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r2, 0x0, 0x800003, 0x270) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b47, r0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x10, 0x8, 0x7fb, &(0x7f00000002c0)}) prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x4, 0x5, 0x7f) madvise$auto(0x1, 0x2003f2, 0x20000017) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004) madvise$auto(0x0, 0x400000000200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x800, 0x0) mmap$auto(0x0, 0x200006, 0x100000000000002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0xfffffffffffffffc, 0x800000420009, 0xdf, 0xfffffffffffffff2, 0x401, 0x8000) madvise$auto(0x0, 0xffffbfffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty8\x00', 0x683, 0x0) ioctl$auto_TCFLSH2(r6, 0x5453, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) 7.990943719s ago: executing program 3 (id=45): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x101083, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)={0xffe5, 0x5, 0x200, 0x6, 0x7fffffff, "05a3b1ec88daacca01cdfa58da68cbb5"}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = io_uring_setup$auto(0xc, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600070001"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x24048881) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) getcwd$auto(0x0, 0xffffffffffffffff) fanotify_init$auto(0xc00, 0x2000000000002) r2 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) mkdir$auto(&(0x7f0000000080)='}[,&*}\x00', 0x8001) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/036/001\x00', 0x204080, 0x0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_BEACON_HEAD={0xf6, 0xe, "5095b80cf68087033b919041319f19d6434310307d4fef343b0e54a6b7dd1cda1382f2e4a15bc01316c7892dfda8edc58153521d04372649b2313abf5babe6cdef0355765b4bb9f2d2d8eb210970f8a5a2208475e31e9d92e6478dad5d399cea0d18018d4a8a87a2b4d15b785bec9391193d2e2b2995c997afd45cf21271b476dd6837bdcb9617932fec69364f7b6a23aa116697d37812f8e0ffb399c419085307839eb1f687bc286dbc2b95c50a5c6be5ad7abef272ebf9871a1eff06b5bcfa65dbb76db3af04ef87e7b49a22a4bdc3fe1c1cf639a24edb59e4ef8216328a383e2a3102b59c945d0ee4222402ad62f90c23"}]}, 0x120}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) 6.783384051s ago: executing program 1 (id=46): close_range$auto(0x0, 0xffffffffffffffff, 0x2) mmap$auto(0x4, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) inotify_init1$auto(0x800) io_uring_setup$auto(0x4, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000001c0), 0x82981, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r1, 0x0, 0x400) r2 = clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r3, 0x1, 0x0, 0x0) landlock_restrict_self$auto(r0, 0x0) creat$auto(0x0, 0x3ff) read$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket(0x2, 0x801, 0x106) socketpair$auto(0x1a, 0x9, 0x8000000000000000, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) signalfd4$auto(0xffffffffffffffff, &(0x7f0000000000)={0x800000000}, 0xe57, 0xffffff5c) mmap$auto(0x0, 0x9, 0x8df, 0xf936, 0x2, 0x8000) prctl$auto(0x3e, 0x5, r2, 0x5, 0xb) 6.618901318s ago: executing program 1 (id=47): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/bpq2/statistics/rx_missed_errors\x00', 0x48500, 0x0) socket(0x2, 0x1, 0x106) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x4f4, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) listen$auto(0x3, 0x81) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) 6.526942428s ago: executing program 3 (id=48): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) r1 = fsopen$auto(&(0x7f0000000040)='/dev/dvb/adapter0/frontend0\x00', 0x100) landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)="5294a0234671cb5d47be4bece0332ac54710c91af627ad25a1d583697665b27eb270500bbbb764cbd80ec38a05689db1493bbfc4b84fea2fac1fcb4c6fe487c1ee23acbded36303b9296b2aac16cb1d6d8a9be8f887e234f0c0c3ac93a442e8be34f4d7a3cbed3281179a0b70136e99e5febc7ae91f3f77095d2944e5112e3b411951e7daa4715dc7a0ebc5271c7aead4e9c3604da3a5da16231074fc357abf21904102efa85861f8f85652a34b2619f18af08697f2f4d3bbecb8b28e98f6ff4d1e13b9235009d3210f04ecd0f9d", 0x401) read$auto(r0, 0x0, 0x1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r2, 0x0, 0x6) r3 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/o2hb/live_regions\x00', 0x1, 0x0) mmap$auto(0xe, 0x14020019, 0xdf, 0xeb1, r3, 0x2) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0) mmap$auto(0x3ff, 0x0, 0x10000, 0xebe, r5, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r6 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) mmap$auto(0x0, 0x8, 0x1df, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffffd) getsockopt$auto_SO_MEMINFO(r6, 0x8, 0x37, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_delete$auto(0x1) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r7, 0x2, 0x9) ioctl$auto(r0, 0x6, r7) 6.517841669s ago: executing program 2 (id=49): fanotify_init$auto(0x2208, 0x2) mmap$auto(0x0, 0x20009, 0xe2, 0x13, 0x405, 0x8000) mmap$auto(0x0, 0xfd6, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/ad_actor_system\x00', 0x0, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8282, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xb, 0x4, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2080, 0x48) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/queues/tx-3/xps_cpus\x00', 0x181482, 0x0) write$auto(0x3, 0x0, 0xfdef) 6.262757684s ago: executing program 2 (id=50): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x4, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x9, 0x8, 0x1ff, 0x9, 0x1ff, 0x5, 0x81, 0x5, 0x2, 0x1]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xfdffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000100)={0x3fd, 0x0, [{0x0, 0xffff5a9a, 0x7fffffff, 0x0, 0xf, 0x8, 0x6000}]}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/urbs\x00', 0x40200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0x7}, 0x5, 0x7fffffff, 0x1000) kill$auto(r3, 0x6) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000001c0)={{@raw=0x3ea8, 0x7, 0x109, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439d070a00", @raw=0x2}, 0x20006, 0x404, 0x6, @raw=0xd7, @integer64={0x442df60c, 0x81, 0x3}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x2}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x4004000) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f00000003c0)={0x5, 0x23736ae9}, &(0x7f0000000440)={0xf7, 0x9}) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/available_events\x00', 0x208000, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.831992825s ago: executing program 0 (id=51): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, r1, 0x13, 0x70bd2e, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8080) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) r4 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$auto_I2C_SMBUS(r4, 0x720, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 5.065782807s ago: executing program 0 (id=52): mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) fsopen$auto(0x0, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) 4.217358473s ago: executing program 2 (id=53): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x8, 0x3, 0x105, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x62a4]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r0 = socket(0x25, 0x1, 0x0) setsockopt$auto(r0, 0x111, 0x7f, 0x0, 0x400) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.061769085s ago: executing program 2 (id=54): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) select$auto(0x2000e, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4d, 0x5, 0x5, 0x800000000001, 0x0, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x4000000000008, 0xfffffffffffffffa, 0xab]}, 0x0) connect$auto(0x3, 0x0, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x100001000000032, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r2, 0x3, &(0x7f0000001640)='+\x00', &(0x7f0000001680)="df", 0x0) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) unshare$auto(0x40000080) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) r3 = socket(0x26, 0x1, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) syslog$auto(0x3, 0x0, 0xda) write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="c0010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x40}, 0x400c824) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times\x00', 0x82942, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x0, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/device_hdr\x00', 0x149a80, 0x0) pread64$auto(r5, 0x0, 0x100000001, 0x100) read$auto(r4, 0x0, 0x2a52) r6 = ioctl$auto_TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000280)=0xfffffffd) preadv$auto(r6, &(0x7f00000003c0)={&(0x7f00000002c0)="97025a58198987f3198c88878d6c228576a271e57b29e5e6a6ff536624e823cfc9a64f71002a76ad5ca8b4c57ade1d8eac866efe8c74c00ca031dee5ed0a6966850f4021033c48cc62cfa387b4c0b3ad1164f6e44cbdfe69e4ea5e7ab2fd3086f1084b1785ca321fee08f6f894f61aece89e194a79d392eadc32f953ba54a071a08d96680c87e6d6cc1607b3b210b5bf9d9e3f13bb5c571ae39924df8a0ed33df98dd0e4b75038547280657537839d25c7aa9cb5df9ae78674a686b3680938443d1946327cf49e4a571872027875a713275102cf182b3333c77e640a49", 0x6a4}, 0x0, 0x8, 0x7f) 4.047643821s ago: executing program 3 (id=55): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/bpq2/statistics/rx_missed_errors\x00', 0x48500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000010c0)=""/4090, 0xffa) socket(0x2, 0x1, 0x106) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x4f4, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) 4.037224164s ago: executing program 0 (id=56): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) 3.623672689s ago: executing program 1 (id=57): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/dormant_links\x00', 0x802, 0x0) read$auto(r0, &(0x7f0000000040)='\x00', 0x8) shmctl$auto(0x14000000, 0x4, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000000000000001, 0x10, 0xa, 0x3, 0x2, 0xc, 0x3, 0x2c873627, 0x4, 0x3000, 0x200, 0x6, 0x7ff, 0x83, 0x4, 0x0, 0x7, 0x1ffc, 0x202, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x4000000000001]}, 0x1fe, 0xd) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x9) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4351c3, 0x10, 0x20}, 0x18) fanotify_mark$auto(r2, 0x3, 0x10, r3, &(0x7f0000000100)='./file0\x00') r4 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$auto_userio_fops_userio(r4, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa509}, 0x800}, 0x7, 0x4008) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) read$auto(r4, &(0x7f0000000140)='[+\xf6[\x00', 0x6) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x4090ae82, 0x0) r5 = landlock_create_ruleset$auto(&(0x7f0000000380)={0x8, 0x7, 0x31}, 0x0, 0x2) mmap$auto(0xa, 0x6, 0x6, 0xad5, r5, 0x81) r6 = socket(0xa, 0x2, 0x88) setsockopt$auto(r6, 0x11, 0xa, 0x0, 0x8) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, 0x0, 0x4008040) 586.716881ms ago: executing program 1 (id=58): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff7, 0x10, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2c, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) sysfs$auto(0x1, 0x2, 0xfff) read$auto(r5, 0x0, 0xb4d3) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) mmap$auto(0xffffffff00000000, 0x2020007, 0x0, 0x100000eb1, r1, 0x529) fsopen$auto(0x0, 0x1) r6 = socket(0xa, 0x3, 0x88) setsockopt$auto(r6, 0x11, 0xa, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) 419.984111ms ago: executing program 2 (id=59): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0) pread64$auto(r0, 0x0, 0x8, 0xffff) mmap$auto(0x400, 0x81, 0x0, 0x13, 0xffffffffffffffff, 0x4) write$auto(0xffffffffffffffff, 0x0, 0x40) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) socket(0x21, 0x2, 0x7ffe) socket(0x15, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x20000000002, 0xffffffffffffffff, 0x1, 0x8, 0x4002a1, 0x95f4da0a, 0x8, 0x68ae9338, 0x62, 0x80000041, 0x4, 0x0, 0xc, 0x5, 0xfffffffffffffffe]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x213b61, 0x0) bpf$auto(0x21, &(0x7f0000000080)=@query={@target_ifindex, 0xfff, 0xafef, 0xf2, 0x1008, @count=0x7, 0x0, 0x1, 0x290, 0xa, 0xb}, 0xc4a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x2f04}, 0x2) 385.849461ms ago: executing program 0 (id=60): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r0 = io_uring_setup$auto(0xe, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0xaa02, 0x0) sendfile$auto(r2, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_register$auto(0x2, 0x2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto_SO_BSDCOMPAT(r1, 0x80000001, 0xe, &(0x7f0000000040)='/dev/mtdblock0\x00', &(0x7f00000000c0)=0x5) connect$auto(0x3, 0x0, 0x58) setsockopt$auto_SO_NO_CHECK(r0, 0x1, 0xb, &(0x7f0000000000)='{\\\x00', 0xa2be) mmap$auto(0x3, 0x2004020009, 0xe2, 0xeb1, 0x401, 0x8003) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mprotect$auto(0x110c230000, 0x41, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ftruncate$auto(0x3, 0x700) arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x5) socket(0xa, 0x4, 0x106) 0s ago: executing program 3 (id=61): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) select$auto(0x2000e, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4d, 0x5, 0x5, 0x800000000001, 0x0, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x4000000000008, 0xfffffffffffffffa, 0xab]}, 0x0) connect$auto(0x3, 0x0, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x100001000000032, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r2, 0x3, &(0x7f0000001640)='+\x00', &(0x7f0000001680)="df", 0x0) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) unshare$auto(0x40000080) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) r3 = socket(0x26, 0x1, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) write$auto(0xca, 0x0, 0x100) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="c0010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x40}, 0x400c824) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times\x00', 0x82942, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x0, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/device_hdr\x00', 0x149a80, 0x0) pread64$auto(r5, 0x0, 0x100000001, 0x100) read$auto(r4, 0x0, 0x2a52) r6 = ioctl$auto_TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000280)=0xfffffffd) preadv$auto(r6, &(0x7f00000003c0)={&(0x7f00000002c0)="97025a58198987f3198c88878d6c228576a271e57b29e5e6a6ff536624e823cfc9a64f71002a76ad5ca8b4c57ade1d8eac866efe8c74c00ca031dee5ed0a6966850f4021033c48cc62cfa387b4c0b3ad1164f6e44cbdfe69e4ea5e7ab2fd3086f1084b1785ca321fee08f6f894f61aece89e194a79d392eadc32f953ba54a071a08d96680c87e6d6cc1607b3b210b5bf9d9e3f13bb5c571ae39924df8a0ed33df98dd0e4b75038547280657537839d25c7aa9cb5df9ae78674a686b3680938443d1946327cf49e4a571872027875a713275102cf182b3333c77e640a49", 0x6a4}, 0x0, 0x8, 0x7f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. [ 88.472301][ T5816] cgroup: Unknown subsys name 'net' [ 88.668124][ T5816] cgroup: Unknown subsys name 'cpuset' [ 88.677554][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.446543][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.587692][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.605752][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.614811][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.617664][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.629981][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.637383][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.638566][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.645731][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.652072][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.667513][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.667569][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.675662][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.685094][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.697080][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.715761][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.726015][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.738574][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.747624][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.755454][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.763068][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.266947][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 93.426756][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 93.518923][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 93.530499][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.538765][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.546231][ T5828] bridge_slave_0: entered allmulticast mode [ 93.553376][ T5828] bridge_slave_0: entered promiscuous mode [ 93.588316][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.595676][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.603014][ T5828] bridge_slave_1: entered allmulticast mode [ 93.610451][ T5828] bridge_slave_1: entered promiscuous mode [ 93.647224][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 93.718167][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.755668][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.799444][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.807322][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.814845][ T5827] bridge_slave_0: entered allmulticast mode [ 93.821947][ T5827] bridge_slave_0: entered promiscuous mode [ 93.856987][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.864414][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.871705][ T5827] bridge_slave_1: entered allmulticast mode [ 93.879134][ T5827] bridge_slave_1: entered promiscuous mode [ 93.905609][ T5828] team0: Port device team_slave_0 added [ 93.911362][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.918665][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.926113][ T5829] bridge_slave_0: entered allmulticast mode [ 93.933194][ T5829] bridge_slave_0: entered promiscuous mode [ 93.963159][ T5828] team0: Port device team_slave_1 added [ 93.969133][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.976530][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.983745][ T5829] bridge_slave_1: entered allmulticast mode [ 93.991099][ T5829] bridge_slave_1: entered promiscuous mode [ 94.042001][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.051258][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.059868][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.067363][ T5830] bridge_slave_0: entered allmulticast mode [ 94.074693][ T5830] bridge_slave_0: entered promiscuous mode [ 94.104470][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.113821][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.122051][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.129873][ T5830] bridge_slave_1: entered allmulticast mode [ 94.137057][ T5830] bridge_slave_1: entered promiscuous mode [ 94.145177][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.152231][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.179239][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.194251][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.226708][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.233670][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.259620][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.276562][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.326541][ T5827] team0: Port device team_slave_0 added [ 94.335702][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.348541][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.369633][ T5827] team0: Port device team_slave_1 added [ 94.388476][ T5829] team0: Port device team_slave_0 added [ 94.446705][ T5829] team0: Port device team_slave_1 added [ 94.467722][ T5828] hsr_slave_0: entered promiscuous mode [ 94.475060][ T5828] hsr_slave_1: entered promiscuous mode [ 94.483869][ T5830] team0: Port device team_slave_0 added [ 94.501561][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.508681][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.535830][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.549890][ T5830] team0: Port device team_slave_1 added [ 94.567661][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.574920][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.602092][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.623997][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.631274][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.658358][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.701585][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.709364][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.735854][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.755025][ T5839] Bluetooth: hci1: command tx timeout [ 94.761102][ T5834] Bluetooth: hci2: command tx timeout [ 94.771187][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.778880][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.805214][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.834544][ T5834] Bluetooth: hci3: command tx timeout [ 94.834552][ T5839] Bluetooth: hci0: command tx timeout [ 94.850054][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.857161][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.883290][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.927971][ T5827] hsr_slave_0: entered promiscuous mode [ 94.934696][ T5827] hsr_slave_1: entered promiscuous mode [ 94.940918][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 94.947009][ T5827] Cannot create hsr debugfs directory [ 95.008081][ T5830] hsr_slave_0: entered promiscuous mode [ 95.014662][ T5830] hsr_slave_1: entered promiscuous mode [ 95.020856][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 95.026955][ T5830] Cannot create hsr debugfs directory [ 95.049876][ T5829] hsr_slave_0: entered promiscuous mode [ 95.056971][ T5829] hsr_slave_1: entered promiscuous mode [ 95.063025][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 95.069690][ T5829] Cannot create hsr debugfs directory [ 95.503739][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.517261][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.528432][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.548689][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.620653][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.636834][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.660608][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.672520][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.757993][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.779018][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.831746][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.842663][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.927775][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.948895][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.968878][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.981500][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.032670][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.107454][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.141603][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.148874][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.182202][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.189451][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.202813][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.255375][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.282317][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.313506][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.320721][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.356375][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.366992][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.374218][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.419372][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.426636][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.470419][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.485859][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.493148][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.636538][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.662921][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.670190][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.682108][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.690025][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.798056][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.835180][ T5834] Bluetooth: hci2: command tx timeout [ 96.835366][ T5839] Bluetooth: hci1: command tx timeout [ 96.866483][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.916276][ T5839] Bluetooth: hci0: command tx timeout [ 96.916702][ T5834] Bluetooth: hci3: command tx timeout [ 97.100515][ T5828] veth0_vlan: entered promiscuous mode [ 97.118519][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.151038][ T5828] veth1_vlan: entered promiscuous mode [ 97.242805][ T10] cfg80211: failed to load regulatory.db [ 97.246078][ T5830] veth0_vlan: entered promiscuous mode [ 97.270140][ T5828] veth0_macvtap: entered promiscuous mode [ 97.289574][ T5830] veth1_vlan: entered promiscuous mode [ 97.312100][ T5828] veth1_macvtap: entered promiscuous mode [ 97.382919][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.420030][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.461468][ T3977] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.471426][ T3977] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.485430][ T3977] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.495747][ T3977] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.523012][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.545120][ T5830] veth0_macvtap: entered promiscuous mode [ 97.570846][ T5830] veth1_macvtap: entered promiscuous mode [ 97.584379][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.668718][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.722415][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.725931][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.742527][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.761948][ T3455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.771717][ T3455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.793721][ T3455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.803473][ T3455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.828537][ T5829] veth0_vlan: entered promiscuous mode [ 97.852587][ T3977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.862029][ T3977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.911072][ T5829] veth1_vlan: entered promiscuous mode [ 97.939153][ T5827] veth0_vlan: entered promiscuous mode [ 97.985881][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.014638][ T5827] veth1_vlan: entered promiscuous mode [ 98.029777][ T5829] veth0_macvtap: entered promiscuous mode [ 98.046194][ T3977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.067204][ T3977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.138919][ T5829] veth1_macvtap: entered promiscuous mode [ 98.170502][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.181703][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.185556][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.216045][ T5928] Zero length message leads to an empty skb [ 98.249903][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.289331][ T3547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.306062][ T5827] veth0_macvtap: entered promiscuous mode [ 98.334849][ T3547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.378716][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.409400][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.457540][ T5827] veth1_macvtap: entered promiscuous mode [ 98.541498][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.603121][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.670799][ T1094] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.683662][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.698250][ T1094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.709501][ T1094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.714162][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.833571][ T5834] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 98.911570][ T1094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.924602][ T5839] Bluetooth: hci1: command tx timeout [ 98.934501][ T5834] Bluetooth: hci2: command tx timeout [ 98.994339][ T5839] Bluetooth: hci3: command tx timeout [ 99.005226][ T5839] Bluetooth: hci0: command tx timeout [ 99.046158][ T5839] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 100.160074][ T5942] NFSD: Failed to start, no listeners configured. [ 100.994292][ T5834] Bluetooth: hci2: command tx timeout [ 100.999871][ T5839] Bluetooth: hci1: command tx timeout [ 101.074682][ T5834] Bluetooth: hci3: command tx timeout [ 101.081211][ T5839] Bluetooth: hci0: command tx timeout [ 101.521501][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.535242][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.192135][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.214164][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.322038][ T5949] nbd: illegal input index 37139 [ 102.395027][ T3977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.415862][ T3977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.835280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.005804][ T5959] process 'syz.1.7' launched ':,' with NULL argv: empty string added [ 103.061629][ T5959] FAULT_INJECTION: forcing a failure. [ 103.061629][ T5959] name failslab, interval 1, probability 0, space 0, times 1 [ 103.096043][ T5959] CPU: 1 UID: 0 PID: 5959 Comm: syz.1.7 Not tainted syzkaller #0 PREEMPT(full) [ 103.096085][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.096102][ T5959] Call Trace: [ 103.096112][ T5959] [ 103.096133][ T5959] dump_stack_lvl+0x16c/0x1f0 [ 103.096187][ T5959] should_fail_ex+0x512/0x640 [ 103.096221][ T5959] ? __kmalloc_noprof+0xca/0x910 [ 103.096258][ T5959] should_failslab+0xc2/0x120 [ 103.096302][ T5959] __kmalloc_noprof+0xeb/0x910 [ 103.096336][ T5959] ? apply_wqattrs_prepare+0xf8/0xbd0 [ 103.096381][ T5959] ? apply_wqattrs_prepare+0xf8/0xbd0 [ 103.096415][ T5959] apply_wqattrs_prepare+0xf8/0xbd0 [ 103.096468][ T5959] apply_workqueue_attrs_locked+0x64/0xe0 [ 103.096503][ T5959] __alloc_workqueue+0xf42/0x1810 [ 103.096577][ T5959] alloc_workqueue_noprof+0xd2/0x200 [ 103.096618][ T5959] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 103.096673][ T5959] nci_register_device+0x21e/0xb80 [ 103.096710][ T5959] ? __pfx_nci_register_device+0x10/0x10 [ 103.096744][ T5959] ? lockdep_init_map_type+0x5c/0x270 [ 103.096773][ T5959] virtual_ncidev_open+0x141/0x220 [ 103.096797][ T5959] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 103.096819][ T5959] misc_open+0x26d/0x450 [ 103.096846][ T5959] ? __pfx_misc_open+0x10/0x10 [ 103.096871][ T5959] chrdev_open+0x234/0x6a0 [ 103.096906][ T5959] ? __pfx_chrdev_open+0x10/0x10 [ 103.096942][ T5959] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 103.096984][ T5959] do_dentry_open+0x748/0x1590 [ 103.097014][ T5959] ? __pfx_chrdev_open+0x10/0x10 [ 103.097057][ T5959] vfs_open+0x82/0x3f0 [ 103.097087][ T5959] path_openat+0x2078/0x3140 [ 103.097138][ T5959] ? __pfx_path_openat+0x10/0x10 [ 103.097183][ T5959] do_filp_open+0x20b/0x470 [ 103.097216][ T5959] ? __pfx_do_filp_open+0x10/0x10 [ 103.097273][ T5959] ? alloc_fd+0x471/0x7d0 [ 103.097314][ T5959] do_sys_openat2+0x121/0x290 [ 103.097339][ T5959] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.097367][ T5959] ? __fput+0x68d/0xb70 [ 103.097397][ T5959] __x64_sys_openat+0x174/0x210 [ 103.097422][ T5959] ? __pfx___x64_sys_openat+0x10/0x10 [ 103.097460][ T5959] do_syscall_64+0xcd/0xf80 [ 103.097483][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.097505][ T5959] RIP: 0033:0x7f91f078f7c9 [ 103.097523][ T5959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.097544][ T5959] RSP: 002b:00007f91f16f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.097565][ T5959] RAX: ffffffffffffffda RBX: 00007f91f09e5fa0 RCX: 00007f91f078f7c9 [ 103.097579][ T5959] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 103.097592][ T5959] RBP: 00007f91f0813f91 R08: 0000000000000000 R09: 0000000000000000 [ 103.097605][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.097617][ T5959] R13: 00007f91f09e6038 R14: 00007f91f09e5fa0 R15: 00007ffc238ead88 [ 103.097649][ T5959] [ 103.394628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #24a!!! [ 103.434337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.474777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.483111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.537158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.646652][ T5950] syz.2.3 (5950) used greatest stack depth: 19688 bytes left [ 103.764735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.946328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.044814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.174601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.263009][ T5978] netlink: 'syz.0.11': attribute type 16 has an invalid length. [ 104.351539][ T5978] netlink: 226 bytes leftover after parsing attributes in process `syz.0.11'. [ 104.508534][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 104.527515][ T5985] NFSD: Failed to start, no listeners configured. [ 105.442569][ T5993] binder: BINDER_SET_CONTEXT_MGR already set [ 105.473400][ T5993] binder: 5992:5993 ioctl 4018620d 9 returned -16 [ 106.285778][ T5839] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 107.964756][ T6029] FAULT_INJECTION: forcing a failure. [ 107.964756][ T6029] name failslab, interval 1, probability 0, space 0, times 0 [ 107.984600][ T6029] CPU: 0 UID: 0 PID: 6029 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) [ 107.984640][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.984657][ T6029] Call Trace: [ 107.984667][ T6029] [ 107.984679][ T6029] dump_stack_lvl+0x16c/0x1f0 [ 107.984733][ T6029] should_fail_ex+0x512/0x640 [ 107.984768][ T6029] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 107.984816][ T6029] should_failslab+0xc2/0x120 [ 107.984862][ T6029] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 107.984906][ T6029] ? __kthread_create_on_node+0x186/0x3f0 [ 107.984959][ T6029] ? kvasprintf+0xbc/0x150 [ 107.984991][ T6029] kvasprintf+0xbc/0x150 [ 107.985025][ T6029] ? __pfx_kvasprintf+0x10/0x10 [ 107.985076][ T6029] ? __pfx_rescuer_thread+0x10/0x10 [ 107.985106][ T6029] __kthread_create_on_node+0x186/0x3f0 [ 107.985149][ T6029] ? __pfx___kthread_create_on_node+0x10/0x10 [ 107.985204][ T6029] ? __pfx_vsnprintf+0x10/0x10 [ 107.985253][ T6029] ? __pfx_rescuer_thread+0x10/0x10 [ 107.985287][ T6029] kthread_create_on_node+0xc7/0x100 [ 107.985331][ T6029] ? __pfx_kthread_create_on_node+0x10/0x10 [ 107.985372][ T6029] ? __pfx_scnprintf+0x10/0x10 [ 107.985445][ T6029] init_rescuer+0x319/0x590 [ 107.985474][ T6029] ? __pfx_init_rescuer+0x10/0x10 [ 107.985515][ T6029] ? wq_adjust_max_active+0x39d/0x4a0 [ 107.985552][ T6029] __alloc_workqueue+0xda4/0x1810 [ 107.985612][ T6029] alloc_workqueue_noprof+0xd2/0x200 [ 107.985656][ T6029] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 107.985717][ T6029] nci_register_device+0x21e/0xb80 [ 107.985753][ T6029] ? __pfx_nci_register_device+0x10/0x10 [ 107.985789][ T6029] ? lockdep_init_map_type+0x5c/0x270 [ 107.985820][ T6029] virtual_ncidev_open+0x141/0x220 [ 107.985850][ T6029] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 107.985878][ T6029] misc_open+0x26d/0x450 [ 107.985910][ T6029] ? __pfx_misc_open+0x10/0x10 [ 107.985942][ T6029] chrdev_open+0x234/0x6a0 [ 107.985979][ T6029] ? __pfx_apparmor_file_open+0x10/0x10 [ 107.986007][ T6029] ? __pfx_chrdev_open+0x10/0x10 [ 107.986047][ T6029] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 107.986093][ T6029] do_dentry_open+0x748/0x1590 [ 107.986126][ T6029] ? __pfx_chrdev_open+0x10/0x10 [ 107.986174][ T6029] vfs_open+0x82/0x3f0 [ 107.986209][ T6029] path_openat+0x2078/0x3140 [ 107.986260][ T6029] ? __pfx_path_openat+0x10/0x10 [ 107.986314][ T6029] do_filp_open+0x20b/0x470 [ 107.986351][ T6029] ? __pfx_do_filp_open+0x10/0x10 [ 107.986434][ T6029] ? alloc_fd+0x471/0x7d0 [ 107.986485][ T6029] do_sys_openat2+0x121/0x290 [ 107.986516][ T6029] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.986549][ T6029] ? __fput+0x68d/0xb70 [ 107.986583][ T6029] __x64_sys_openat+0x174/0x210 [ 107.986611][ T6029] ? __pfx___x64_sys_openat+0x10/0x10 [ 107.986655][ T6029] do_syscall_64+0xcd/0xf80 [ 107.986683][ T6029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.986709][ T6029] RIP: 0033:0x7f731778f7c9 [ 107.986732][ T6029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.986755][ T6029] RSP: 002b:00007f73159f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.986781][ T6029] RAX: ffffffffffffffda RBX: 00007f73179e5fa0 RCX: 00007f731778f7c9 [ 107.986798][ T6029] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 107.986814][ T6029] RBP: 00007f7317813f91 R08: 0000000000000000 R09: 0000000000000000 [ 107.986829][ T6029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.986844][ T6029] R13: 00007f73179e6038 R14: 00007f73179e5fa0 R15: 00007ffca64cd1d8 [ 107.986883][ T6029] [ 107.993426][ T6029] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 110.256788][ T6059] syz.1.24 uses obsolete (PF_INET,SOCK_PACKET) [ 111.044680][ T6057] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.694975][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 112.286673][ T6077] NFSD: Failed to start, no listeners configured. [ 113.253751][ T6089] FAULT_INJECTION: forcing a failure. [ 113.253751][ T6089] name failslab, interval 1, probability 0, space 0, times 0 [ 113.451856][ T6089] CPU: 1 UID: 0 PID: 6089 Comm: syz.3.29 Not tainted syzkaller #0 PREEMPT(full) [ 113.451883][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.451893][ T6089] Call Trace: [ 113.451898][ T6089] [ 113.451905][ T6089] dump_stack_lvl+0x16c/0x1f0 [ 113.451936][ T6089] should_fail_ex+0x512/0x640 [ 113.451966][ T6089] ? __kmalloc_cache_noprof+0x5f/0x800 [ 113.451988][ T6089] should_failslab+0xc2/0x120 [ 113.452016][ T6089] __kmalloc_cache_noprof+0x80/0x800 [ 113.452036][ T6089] ? virtual_ncidev_open+0x49/0x220 [ 113.452058][ T6089] ? virtual_ncidev_open+0x49/0x220 [ 113.452074][ T6089] virtual_ncidev_open+0x49/0x220 [ 113.452092][ T6089] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 113.452109][ T6089] misc_open+0x26d/0x450 [ 113.452130][ T6089] ? __pfx_misc_open+0x10/0x10 [ 113.452149][ T6089] chrdev_open+0x234/0x6a0 [ 113.452174][ T6089] ? __pfx_apparmor_file_open+0x10/0x10 [ 113.452192][ T6089] ? __pfx_chrdev_open+0x10/0x10 [ 113.452219][ T6089] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 113.452250][ T6089] do_dentry_open+0x748/0x1590 [ 113.452273][ T6089] ? __pfx_chrdev_open+0x10/0x10 [ 113.452304][ T6089] vfs_open+0x82/0x3f0 [ 113.452324][ T6089] path_openat+0x2078/0x3140 [ 113.452356][ T6089] ? __pfx_path_openat+0x10/0x10 [ 113.452388][ T6089] do_filp_open+0x20b/0x470 [ 113.452413][ T6089] ? __pfx_do_filp_open+0x10/0x10 [ 113.452453][ T6089] ? alloc_fd+0x471/0x7d0 [ 113.452483][ T6089] do_sys_openat2+0x121/0x290 [ 113.452501][ T6089] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.452528][ T6089] __x64_sys_openat+0x174/0x210 [ 113.452547][ T6089] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.452575][ T6089] do_syscall_64+0xcd/0xf80 [ 113.452593][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.452609][ T6089] RIP: 0033:0x7f341a58f7c9 [ 113.452624][ T6089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.452639][ T6089] RSP: 002b:00007f341b495038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.452656][ T6089] RAX: ffffffffffffffda RBX: 00007f341a7e5fa0 RCX: 00007f341a58f7c9 [ 113.452666][ T6089] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 113.452675][ T6089] RBP: 00007f341a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 113.452685][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.452694][ T6089] R13: 00007f341a7e6038 R14: 00007f341a7e5fa0 R15: 00007ffd33cd7d58 [ 113.452715][ T6089] [ 115.027189][ T6085] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.137100][ T6120] NFSD: Failed to start, no listeners configured. [ 116.146494][ T5839] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 116.399716][ T5834] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 117.421686][ T6126] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.840978][ T6163] NFSD: Failed to start, no listeners configured. [ 120.187258][ T6161] mmap: syz.2.44 (6161) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.521037][ T6187] NFSD: Failed to start, no listeners configured. [ 122.567666][ T6201] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.567612][ T6208] netlink: 'syz.2.53': attribute type 33 has an invalid length. [ 123.576202][ T6208] netlink: 322 bytes leftover after parsing attributes in process `syz.2.53'. [ 124.157178][ T5834] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 124.165585][ T5834] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 124.177828][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 124.177866][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.177883][ T5834] Workqueue: hci2 hci_rx_work [ 124.177925][ T5834] Call Trace: [ 124.177935][ T5834] [ 124.177946][ T5834] dump_stack_lvl+0x16c/0x1f0 [ 124.177991][ T5834] sysfs_warn_dup+0x7f/0xa0 [ 124.178023][ T5834] sysfs_create_dir_ns+0x24b/0x2b0 [ 124.178052][ T5834] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 124.178089][ T5834] ? find_held_lock+0x2b/0x80 [ 124.178133][ T5834] ? do_raw_spin_unlock+0x172/0x230 [ 124.178165][ T5834] kobject_add_internal+0x2c4/0x9d0 [ 124.178199][ T5834] kobject_add+0x16e/0x240 [ 124.178230][ T5834] ? __pfx_kobject_add+0x10/0x10 [ 124.178270][ T5834] ? kobject_put+0xaf/0x6f0 [ 124.178295][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 124.178347][ T5834] device_add+0x288/0x1980 [ 124.178388][ T5834] ? __pfx_dev_set_name+0x10/0x10 [ 124.178417][ T5834] ? __pfx_device_add+0x10/0x10 [ 124.178462][ T5834] ? mgmt_send_event_skb+0x2fb/0x460 [ 124.178517][ T5834] hci_conn_add_sysfs+0x1a8/0x260 [ 124.178568][ T5834] le_conn_complete_evt+0x11ed/0x1fa0 [ 124.178612][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 124.178646][ T5834] ? __pfx_bt_warn+0x10/0x10 [ 124.178688][ T5834] hci_le_conn_complete_evt+0x23c/0x3a0 [ 124.178738][ T5834] hci_le_meta_evt+0x357/0x610 [ 124.178780][ T5834] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 124.178824][ T5834] hci_event_packet+0x685/0x1210 [ 124.178865][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 124.178909][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 124.178953][ T5834] ? kcov_remote_start+0x399/0x680 [ 124.179009][ T5834] ? lockdep_hardirqs_on+0x7c/0x110 [ 124.179047][ T5834] hci_rx_work+0x2c9/0x1020 [ 124.179104][ T5834] process_one_work+0x9ba/0x1b20 [ 124.179154][ T5834] ? __pfx_process_one_work+0x10/0x10 [ 124.179195][ T5834] ? assign_work+0x1a0/0x250 [ 124.179228][ T5834] worker_thread+0x6c8/0xf10 [ 124.179268][ T5834] ? __kthread_parkme+0x19e/0x250 [ 124.179311][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 124.179343][ T5834] kthread+0x3c5/0x780 [ 124.179371][ T5834] ? __pfx_kthread+0x10/0x10 [ 124.179402][ T5834] ? rcu_is_watching+0x12/0xc0 [ 124.179442][ T5834] ? __pfx_kthread+0x10/0x10 [ 124.179473][ T5834] ret_from_fork+0x983/0xb10 [ 124.179503][ T5834] ? __pfx_ret_from_fork+0x10/0x10 [ 124.179533][ T5834] ? rcu_is_watching+0x12/0xc0 [ 124.179572][ T5834] ? __switch_to+0x7af/0x10d0 [ 124.179609][ T5834] ? __pfx_kthread+0x10/0x10 [ 124.179638][ T5834] ret_from_fork_asm+0x1a/0x30 [ 124.179711][ T5834] [ 124.179789][ T5834] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 124.451690][ T5834] Bluetooth: hci2: failed to register connection device [ 124.462145][ T5834] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 126.365863][ T6225] NFSD: Failed to start, no listeners configured. [ 128.068380][ T6230] FAULT_INJECTION: forcing a failure. [ 128.068380][ T6230] name failslab, interval 1, probability 0, space 0, times 0 [ 128.131591][ T6230] CPU: 0 UID: 0 PID: 6230 Comm: syz.1.58 Not tainted syzkaller #0 PREEMPT(full) [ 128.131631][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.131647][ T6230] Call Trace: [ 128.131657][ T6230] [ 128.131666][ T6230] dump_stack_lvl+0x16c/0x1f0 [ 128.131715][ T6230] should_fail_ex+0x512/0x640 [ 128.131748][ T6230] ? __kmalloc_cache_noprof+0x5f/0x800 [ 128.131794][ T6230] should_failslab+0xc2/0x120 [ 128.131835][ T6230] __kmalloc_cache_noprof+0x80/0x800 [ 128.131868][ T6230] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 128.131899][ T6230] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 128.131933][ T6230] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 128.131962][ T6230] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 128.131996][ T6230] vidtv_channel_si_init+0x13d2/0x1a50 [ 128.132054][ T6230] vidtv_mux_init+0x526/0xbe0 [ 128.132098][ T6230] vidtv_start_feed+0x33e/0x4d0 [ 128.132143][ T6230] ? __pfx_vidtv_start_feed+0x10/0x10 [ 128.132185][ T6230] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 128.132236][ T6230] ? mark_held_locks+0x49/0x80 [ 128.132274][ T6230] ? __pfx_vidtv_start_feed+0x10/0x10 [ 128.132316][ T6230] dmx_ts_feed_start_filtering+0xf6/0x220 [ 128.132361][ T6230] dvb_dmxdev_start_feed+0x273/0x3f0 [ 128.132399][ T6230] dvb_dmxdev_filter_start+0x1b6/0xe10 [ 128.132439][ T6230] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 128.132478][ T6230] dvb_demux_do_ioctl+0x9de/0x12f0 [ 128.132528][ T6230] dvb_usercopy+0x167/0x340 [ 128.132557][ T6230] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 128.132594][ T6230] ? __pfx_dvb_usercopy+0x10/0x10 [ 128.132638][ T6230] ? __fget_files+0x20e/0x3c0 [ 128.132689][ T6230] dvb_demux_ioctl+0x29/0x40 [ 128.132716][ T6230] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 128.132747][ T6230] __x64_sys_ioctl+0x18e/0x210 [ 128.132796][ T6230] do_syscall_64+0xcd/0xf80 [ 128.132828][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.132858][ T6230] RIP: 0033:0x7f91f078f7c9 [ 128.132883][ T6230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.132911][ T6230] RSP: 002b:00007f91f16f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.132940][ T6230] RAX: ffffffffffffffda RBX: 00007f91f09e5fa0 RCX: 00007f91f078f7c9 [ 128.132959][ T6230] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 128.132976][ T6230] RBP: 00007f91f0813f91 R08: 0000000000000000 R09: 0000000000000000 [ 128.132993][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.133010][ T6230] R13: 00007f91f09e6038 R14: 00007f91f09e5fa0 R15: 00007ffc238ead88 [ 128.133053][ T6230] [ 128.133191][ T6230] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 128.402817][ T6230] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 128.411419][ T6230] CPU: 0 UID: 0 PID: 6230 Comm: syz.1.58 Not tainted syzkaller #0 PREEMPT(full) [ 128.420538][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.430609][ T6230] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 128.436562][ T6230] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 8d f4 b8 f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 47 4c 8b 23 49 39 ec 74 36 e8 69 f4 b8 f9 4d 85 e4 [ 128.456360][ T6230] RSP: 0018:ffffc90003e9fa20 EFLAGS: 00010247 [ 128.462439][ T6230] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000cbd9000 [ 128.470416][ T6230] RDX: 0000000000000000 RSI: ffffffff88056d33 RDI: 0000000000000005 [ 128.478393][ T6230] RBP: ffff88802ec6f440 R08: 0000000000000000 R09: 4453534204050000 [ 128.486542][ T6230] R10: 0000000000000005 R11: ffff8880301066b0 R12: 0000000000000000 [ 128.494520][ T6230] R13: ffff88803030b480 R14: ffff88801faf9340 R15: ffff88803030bdc0 [ 128.502673][ T6230] FS: 00007f91f16f36c0(0000) GS:ffff8881248f8000(0000) knlGS:0000000000000000 [ 128.511620][ T6230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.518215][ T6230] CR2: 0000001b31423ffc CR3: 0000000035da0000 CR4: 00000000003526f0 [ 128.526234][ T6230] Call Trace: [ 128.529532][ T6230] [ 128.532470][ T6230] vidtv_channel_si_init+0x1445/0x1a50 [ 128.538038][ T6230] vidtv_mux_init+0x526/0xbe0 [ 128.542731][ T6230] vidtv_start_feed+0x33e/0x4d0 [ 128.547601][ T6230] ? __pfx_vidtv_start_feed+0x10/0x10 [ 128.552994][ T6230] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 128.559610][ T6230] ? mark_held_locks+0x49/0x80 [ 128.564382][ T6230] ? __pfx_vidtv_start_feed+0x10/0x10 [ 128.569775][ T6230] dmx_ts_feed_start_filtering+0xf6/0x220 [ 128.575511][ T6230] dvb_dmxdev_start_feed+0x273/0x3f0 [ 128.580899][ T6230] dvb_dmxdev_filter_start+0x1b6/0xe10 [ 128.586372][ T6230] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 128.591583][ T6230] dvb_demux_do_ioctl+0x9de/0x12f0 [ 128.596711][ T6230] dvb_usercopy+0x167/0x340 [ 128.601224][ T6230] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 128.606781][ T6230] ? __pfx_dvb_usercopy+0x10/0x10 [ 128.611818][ T6230] ? __fget_files+0x20e/0x3c0 [ 128.616514][ T6230] dvb_demux_ioctl+0x29/0x40 [ 128.621122][ T6230] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 128.626432][ T6230] __x64_sys_ioctl+0x18e/0x210 [ 128.631224][ T6230] do_syscall_64+0xcd/0xf80 [ 128.635851][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.641766][ T6230] RIP: 0033:0x7f91f078f7c9 [ 128.646193][ T6230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.666077][ T6230] RSP: 002b:00007f91f16f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.674590][ T6230] RAX: ffffffffffffffda RBX: 00007f91f09e5fa0 RCX: 00007f91f078f7c9 [ 128.682673][ T6230] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 128.690654][ T6230] RBP: 00007f91f0813f91 R08: 0000000000000000 R09: 0000000000000000 [ 128.698633][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.706613][ T6230] R13: 00007f91f09e6038 R14: 00007f91f09e5fa0 R15: 00007ffc238ead88 [ 128.715120][ T6230] [ 128.718146][ T6230] Modules linked in: [ 128.724636][ T6230] ---[ end trace 0000000000000000 ]--- [ 128.912445][ T6230] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 128.958927][ T6230] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 8d f4 b8 f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 47 4c 8b 23 49 39 ec 74 36 e8 69 f4 b8 f9 4d 85 e4 [ 129.044222][ T5834] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 129.059177][ T6230] RSP: 0018:ffffc90003e9fa20 EFLAGS: 00010247 [ 129.087829][ T6230] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000cbd9000 [ 129.096674][ T6230] RDX: 0000000000000000 RSI: ffffffff88056d33 RDI: 0000000000000005 [ 129.104751][ T6230] RBP: ffff88802ec6f440 R08: 0000000000000000 R09: 4453534204050000 [ 129.138975][ T6230] R10: 0000000000000005 R11: ffff8880301066b0 R12: 0000000000000000 [ 129.154483][ T6230] R13: ffff88803030b480 R14: ffff88801faf9340 R15: ffff88803030bdc0 [ 129.224882][ T6230] FS: 00007f91f16f36c0(0000) GS:ffff8881248f8000(0000) knlGS:0000000000000000 [ 129.324146][ T6230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.380367][ T6230] CR2: 00002000000018c0 CR3: 0000000035da0000 CR4: 00000000003526f0 [ 129.459296][ T6230] Kernel panic - not syncing: Fatal exception [ 129.465672][ T6230] Kernel Offset: disabled [ 129.470043][ T6230] Rebooting in 86400 seconds..