last executing test programs: 3m3.380799827s ago: executing program 32 (id=1847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) futex$auto(&(0x7f0000000000)=0x3ff, 0x0, 0x0, &(0x7f0000000040)={0x3, 0x80000000}, &(0x7f00000000c0)=0xfffffff8, 0x401) unshare$auto(0x8100000) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000) 2m38.208349492s ago: executing program 1 (id=1952): r0 = socket(0xa, 0x3, 0x3a) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x1, 0xc, 0xdf, 0x11, 0xff1, 0x2000000009) setresuid$auto(0x60, 0x1000, 0x8000) ioctl$auto(r0, 0x890c, 0x1) 2m37.817028751s ago: executing program 1 (id=1956): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto(r1, 0x40045542, 0xffffffffffffffff) write$auto(r0, &(0x7f0000000640)='/sys/devices/virtual/bdi/43:352/str\xfdc\x06_limit\x00', 0x8000000006) 2m36.711798513s ago: executing program 1 (id=1962): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto(r0, &(0x7f0000000080)='/dev/i2c-0\x00', 0x1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x85, 0x0, 0x0) bpf$auto(0x80, &(0x7f00000001c0)=@link_create={@map_fd=r0, @target_fd=r0, 0x6, 0xfffffff8, @bpf_attr_link_create_4_1={0xa7, 0x2}}, 0xc) bpf$auto(0x1b, &(0x7f0000000380)=@task_fd_query={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x8, 0xffffffffffffffff, 0x8}, 0x92) mmap$auto(0x0, 0x400008, 0x20000000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) 2m36.569392684s ago: executing program 1 (id=1963): mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x59, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xfffffdef) read$auto(0x3, 0x0, 0x5) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_BTRFS_IOC_SEND_32(r0, 0x40449426, &(0x7f0000000040)={@inferred=r1, 0x1, 0x2, 0xbe, 0x1, 0x9, "08f04bc2f12a09d8b5b0de727dd265b979928c9f635793ec26801c61"}) close_range$auto(0x2, 0x8, 0x0) 2m36.233121987s ago: executing program 1 (id=1965): set_mempolicy$auto(0x3c, &(0x7f0000000080)=0x2, 0x0) mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) bind$auto(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x4006b) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x400008000) io_uring_setup$auto(0x6, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) mmap$auto(0x3, 0x840, 0xae8, 0x10, 0x401, 0x8000) (async) mmap$auto(0x3, 0x840, 0xae8, 0x10, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) recvfrom$auto(r0, 0x0, 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc) (async) recvfrom$auto(r0, 0x0, 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc) ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0) (async) ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) pwrite64$auto(0xc8, 0x0, 0xedef, 0x3) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) (async) write$auto(r2, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bbf, 0x7ff, 0x3, 0xff, 0x10001, 0x1, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0ef1, 0xffffdfffffffff81, 0x4]}, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) 2m34.91278338s ago: executing program 1 (id=1968): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) socket(0x3, 0x4, 0x1000002) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x280, 0x0) io_setup$auto(0xffff, 0x0) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17) 2m19.5563812s ago: executing program 33 (id=1968): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) socket(0x3, 0x4, 0x1000002) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x280, 0x0) io_setup$auto(0xffff, 0x0) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17) 2m16.122095311s ago: executing program 3 (id=2024): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x9) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x20009, 0x7f, 0xeb2, 0x8, 0x1008000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="13"], 0x1ac}}, 0x4004) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r3, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4211000}, 0xc, &(0x7f0000000940)={&(0x7f0000001380)=ANY=[@ANYBLOB="24060000", @ANYRES16, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14003400fe8000000000000000000000000000aa00dc01038004000f80d40169803c247c7ae52f1a7c1530a87ff1d7c1535204d2c47de979f00cb6e4ff93101b906805f98df424b0090c3ec1fe11c3cd51e684cba826c4077fa44a4234d74cbe2e312ea93715f82a1f2e6307450627d2b235a8b4b974d999124c83ee31783ddffefa7d9a93cdfe20c8b37a3ea8c98a28dcb38dcdc03d33a869c1d8b317aec7640205136f0db07397bb6e66c9b8b57ec73fc20228fd91b17dbb755bed809f0285ce12c1925ee61afa9f81854c4bde156aaa603d9d31647359ae92a03245d3a37e459265408c4cbf4d8072a0e193f981a465564d9f5735d5caa6aa62b81513f3da8ba22ab39dfe9b812e9008008c00", @ANYRES32=0x0, @ANYBLOB="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"], 0x624}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000680), 0x402000, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0x5, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1cd856f7000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf25030000000800010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0xe98fff7d489031bd}, 0x20044000) unshare$auto(0x40000080) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES16, @ANYBLOB="e958e86e5bafd39a3f8aa96117ffbe687c"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000004c0), r2) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, r5, 0x60a, 0x70bd27, 0x25dfdbfc, {}, [@HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x9}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x34500}, @HWSIM_ATTR_ADDR_RECEIVER={0x17, 0x1, "cf62134651fb5c3c09fae09d96b148ed3d1209"}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x6}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0x8}, @HWSIM_ATTR_RADIO_NAME={0x17, 0x11, '/proc/self/pagemap\x00'}, @HWSIM_ATTR_CIPHER_SUPPORT={0x8, 0x18, "a718d139"}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1080) listmount$auto(&(0x7f0000000600)={0x4, @inferred=r0, 0x27c3, 0x5, 0x8000000000000000}, &(0x7f0000000640)=0x500000000000000, 0x3d7, 0x1000) recvmmsg$auto(r4, &(0x7f0000000180)={{0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000340), 0xfff}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) renameat2$auto(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file0\x00', 0x0) 2m14.462516407s ago: executing program 3 (id=2026): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) fstatfs$auto(0xffffffffffffffff, &(0x7f0000000140)={0x8001, 0x100000000003, 0x1, 0x9, 0x5d, 0x0, 0x75, {[0x80000000]}, 0x0, 0x7ff, 0x68a6, [0x5, 0x8, 0x5, 0x4]}) r1 = socket(0x2, 0x1, 0x106) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/20, 0xfffffcc4) bind$auto(r1, &(0x7f0000000040)=@l2={0x1f, 0xa, @any, 0xfffe, 0x1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x6) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f00000000c0)='cifs\x00s \xfe\xcd\x94=\xbf\xfd\x02;\xffP\xf26\xea\x97\x95\xad\xb6\x1d\\\xd3\x89\xe0\n\x0f\xf7]\xafa\xcc\xbbgv7\x04\"\xb4\xe1\xc8#\x1b\xf0&\xc3\x15\xea\x1f\xcf0#e\x14\xe6\xf9\xc9\xec\x1d\x1d\xa7\xcd\x94\xae\x01\x00\x00\x00\x00\x00\x00\x000\xc3\xeem\x8e\xfb`\x1a[\x01\xf6Re\xad x\xbc\x00\x0f\x0f\xc6f\x82\x16\x8e\xab\xf6)^\xbe{=\xa3\xeb\xc44\f\r\xf6\x17\x87\xe8\xb0\xd9V\xfb\xc6U\xe9\xb7\xe6\xa2\xdb\xbbP\xf14S\xe6\xce|?\xa0\xf3\x8f^?5\x1bb^R\x11\xf6\xe8\xfc\v\xfa\x96\x89%\x02\xc0\xa9\xc9\xd2\xb0b\x86\xd1\x1c\xa2\xca\xc9\x90\xd7\xe1\xbf%\xdbzh\xfc\xaa4KhoD\xe7\xda\x12^\x8b\x81\xb3B5\xfd-\x83\x9f\xe7ZHh^9\x18z*\x02\xa8Fu\x80\xee\xc6\x98v\xf6\xa7\xdf\xd8\x9ans\x16\xa7\x03\xd9\xc2\xee\"\xa7\xefx\xd5,Q\xfe\xe6\va\x06\x00\x00\x00\x00\x00\x00\x00\xaa\x89!,m\x16M\x19no\x1e+ 1\xa7\x1c\x95\xa0\xd6`\xd1\xf8r\xea\x13sFn)\x05\xc8\x1e\xf8a\xf5H\x86\x9a\xc4\x81\xbf\xa1h`\xe0\xd8\xdd\xeb9k\xa4\x1fA}\x80\x9e\x8a\x031\\D@\a\x8b\xc7.\xc1\xe4Z\xd4C\x19g^\x06\x06\x82', 0x8002, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) getpid() mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) r2 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x272981, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r3, 0x0, 0x800000008) r4 = fsopen$auto(&(0x7f00000000c0)='./cgroup/cgroup.stat\x00', 0x1) setsockopt$auto_SO_MARK(r4, 0x2, 0x24, 0x0, 0xc8e) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) sendfile$auto(r5, r5, 0x0, 0x7fffe000) write$auto(0x3, 0x0, 0x7fffffff) 2m13.130137687s ago: executing program 3 (id=2030): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m12.910845404s ago: executing program 3 (id=2032): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/boot_params/data\x00', 0x2c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4109, 0x100d) r1 = socket(0x27, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x894}, 0x4) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x8000, 0x200fa9d, 0x1, 0x0, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r5, 0x29, 0x14, 0x0, 0x56b) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000a00)=0x101) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRES32=r6, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) recvfrom$auto(0x3, 0x0, 0x8000000003, 0xfffff4a5, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) ioctl$auto(0x3, 0x541b, 0x38) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r7) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r8, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000d9c436e010fcd792ade764cd13a8711096402dcdf890dff4c86804300ee770d21c72", @ANYRES16=r8, @ANYBLOB="00012abd7000fcdbdf250a000000130002002f6465762f736e642f74696d65720000130002002f6465762f736e642f74696d65720000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000814}, 0x20048860) 2m12.258691572s ago: executing program 3 (id=2033): read$auto(0xffffffffffffffff, 0x0, 0x4) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000002c0)="a23258b1ac53", 0x6) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x44840, 0x0) fanotify_mark$auto(0xffffffffffffffff, 0x80, 0x5e50ee86, 0xffffffffffffffff, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20500, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x5958c2, 0x408) write$auto(r1, 0x0, 0xfffffdf1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x87e9, 0x0, 0x20) unshare$auto(0x40000080) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x48085}, 0x20008000) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x410500, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x82000, 0x0) ioctl$auto_BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000001c0)=0x1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 2m10.910378484s ago: executing program 3 (id=2039): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r0, 0x300000000000) r2 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) io_uring_setup$auto(0x5, &(0x7f00000001c0)={0x400, 0x6, 0xc564, 0x3, 0xd, 0x200, r2, [0x3, 0x1, 0x6], {0x14d0, 0x2, 0x1868, 0x1, 0x6e, 0x6568, 0x6, 0x5, 0x5}, {0x9, 0x10000000, 0x8, 0x100, 0x0, 0xc52, 0x5, 0x4, 0x9}}) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) getsockopt$auto_SO_RCVBUF(r0, 0x9, 0x8, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x9) mmap$auto(0xf5e, 0x2020001, 0x80000002, 0x4fa, 0xfffffffffffffffa, 0x7ffb) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x567) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, r3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) rt_sigpending$auto(0x0, 0x7ffffffff000) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) socket(0x25, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x6c) keyctl$auto_KEY_SPEC_THREAD_KEYRING(0x20003, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x165000, 0x0) 2m0.593181787s ago: executing program 4 (id=2065): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) r1 = socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000000000)=0x9) pwrite64$auto(r1, &(0x7f0000000040)='$\x1b\x00', 0x6, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xe7, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242395, 0x7ff, 0x8, 0x8, 0x10002, 0x1, 0x81, 0x68198}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) 1m58.938786738s ago: executing program 4 (id=2069): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_pgetevents$auto(0xe7, 0x8, 0x200000000000000, 0x0, &(0x7f00000000c0)={0x1, 0xb0}, 0x0) chown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020005, 0x3, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) socket(0x15, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x765c83, 0x0) socket(0x10, 0x3, 0x6) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev5\x00', 0x8a240, 0x0) socket(0x21, 0x2, 0x2) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) 1m58.074262653s ago: executing program 4 (id=2072): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/amidi2\x00', 0x2, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000001d00)=0x800) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mincore$auto(0x0, 0x10000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socketpair$auto(0x1e, 0x6, 0x8, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r1, 0x40095505, 0x0) r2 = socket(0xa, 0x3, 0x3c) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) socket(0x2c, 0x8180b, 0x67) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0x28, 0x2, '/proc/sys/net/gore/rps_defaur\xc4B+\x96\x06\xc3\xa3'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48050) write$auto(r2, &(0x7f0000000080)='+&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r6}, 0x18) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) 1m56.3617968s ago: executing program 4 (id=2076): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x200000000000, 0x7, 0x3fd6, 0x3, 0x200000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x44) socket(0x23, 0x4, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/modules\x00', 0x88000, 0x0) pread64$auto(r2, &(0x7f0000000040), 0x7fff, 0x3) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/nr_anon\x00', 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptybe\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(0xffffffffffffffff, 0x1d3b, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(r4, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)=ANY=[@ANYBLOB="099a7d98ef34b7de0fdd938a63a8ea73c1bb17018e8d28", @ANYRES16=r6, @ANYBLOB="050727bd7000fbdbdf2567000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1m55.932925795s ago: executing program 4 (id=2077): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000001c0)={0xdfb, 0x5, "7bca2a383576271a11047c0be2eb5c25fc6745bc8e"}) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r4, 0x40085503, &(0x7f0000000000)={0xf, 0x0, 0x404000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x29, 0x5, 0x0) write$auto(r5, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x0, 0x1) 1m54.8152403s ago: executing program 34 (id=2039): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r0, 0x300000000000) r2 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) io_uring_setup$auto(0x5, &(0x7f00000001c0)={0x400, 0x6, 0xc564, 0x3, 0xd, 0x200, r2, [0x3, 0x1, 0x6], {0x14d0, 0x2, 0x1868, 0x1, 0x6e, 0x6568, 0x6, 0x5, 0x5}, {0x9, 0x10000000, 0x8, 0x100, 0x0, 0xc52, 0x5, 0x4, 0x9}}) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) getsockopt$auto_SO_RCVBUF(r0, 0x9, 0x8, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x9) mmap$auto(0xf5e, 0x2020001, 0x80000002, 0x4fa, 0xfffffffffffffffa, 0x7ffb) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x567) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, r3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) rt_sigpending$auto(0x0, 0x7ffffffff000) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) socket(0x25, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x6c) keyctl$auto_KEY_SPEC_THREAD_KEYRING(0x20003, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x165000, 0x0) 1m54.181229913s ago: executing program 4 (id=2081): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="720100", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m48.738547728s ago: executing program 5 (id=2094): mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) read$auto_transaction_log_fops_(r0, &(0x7f0000000040)=""/99, 0x63) 1m48.210731149s ago: executing program 5 (id=2097): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) fstatfs$auto(0xffffffffffffffff, &(0x7f0000000140)={0x8001, 0x100000000003, 0x1, 0x9, 0x5d, 0x0, 0x75, {[0x80000000]}, 0x0, 0x7ff, 0x68a6, [0x5, 0x8, 0x5, 0x4]}) r1 = socket(0x2, 0x1, 0x106) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/20, 0xfffffcc4) bind$auto(r1, &(0x7f0000000040)=@l2={0x1f, 0xa, @any, 0xfffe, 0x1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x6) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f00000000c0)='cifs\x00s \xfe\xcd\x94=\xbf\xfd\x02;\xffP\xf26\xea\x97\x95\xad\xb6\x1d\\\xd3\x89\xe0\n\x0f\xf7]\xafa\xcc\xbbgv7\x04\"\xb4\xe1\xc8#\x1b\xf0&\xc3\x15\xea\x1f\xcf0#e\x14\xe6\xf9\xc9\xec\x1d\x1d\xa7\xcd\x94\xae\x01\x00\x00\x00\x00\x00\x00\x000\xc3\xeem\x8e\xfb`\x1a[\x01\xf6Re\xad x\xbc\x00\x0f\x0f\xc6f\x82\x16\x8e\xab\xf6)^\xbe{=\xa3\xeb\xc44\f\r\xf6\x17\x87\xe8\xb0\xd9V\xfb\xc6U\xe9\xb7\xe6\xa2\xdb\xbbP\xf14S\xe6\xce|?\xa0\xf3\x8f^?5\x1bb^R\x11\xf6\xe8\xfc\v\xfa\x96\x89%\x02\xc0\xa9\xc9\xd2\xb0b\x86\xd1\x1c\xa2\xca\xc9\x90\xd7\xe1\xbf%\xdbzh\xfc\xaa4KhoD\xe7\xda\x12^\x8b\x81\xb3B5\xfd-\x83\x9f\xe7ZHh^9\x18z*\x02\xa8Fu\x80\xee\xc6\x98v\xf6\xa7\xdf\xd8\x9ans\x16\xa7\x03\xd9\xc2\xee\"\xa7\xefx\xd5,Q\xfe\xe6\va\x06\x00\x00\x00\x00\x00\x00\x00\xaa\x89!,m\x16M\x19no\x1e+ 1\xa7\x1c\x95\xa0\xd6`\xd1\xf8r\xea\x13sFn)\x05\xc8\x1e\xf8a\xf5H\x86\x9a\xc4\x81\xbf\xa1h`\xe0\xd8\xdd\xeb9k\xa4\x1fA}\x80\x9e\x8a\x031\\D@\a\x8b\xc7.\xc1\xe4Z\xd4C\x19g^\x06\x06\x82', 0x8002, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) getpid() mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) r2 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x272981, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r3, 0x0, 0x800000008) r4 = fsopen$auto(&(0x7f00000000c0)='./cgroup/cgroup.stat\x00', 0x1) setsockopt$auto_SO_MARK(r4, 0x2, 0x24, 0x0, 0xc8e) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) sendfile$auto(r5, r5, 0x0, 0x7fffe000) write$auto(0x3, 0x0, 0x7fffffff) 1m47.013560233s ago: executing program 5 (id=2101): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x8, 0x4, 0x8000000000000000, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x430740, 0x0) (async) mmap$auto(0x7, 0x4, 0x7, 0x10, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r1 = open(0x0, 0x163340, 0x16e) getsockname$auto(0xffffffffffffffff, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, &(0x7f0000000080)=0x8) (async) ioctl$auto_RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)=[0x7, 0x5]) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = socket(0x8, 0x800, 0x4) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r3 = socket(0x15, 0x5, 0x0) r4 = getsockopt$auto(r3, 0x114, 0x2715, 0xfffffffffffffffc, 0x0) r5 = socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) (async, rerun: 64) write$auto(r4, &(0x7f00000000c0)='%:\x00', 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) fcntl$auto(r5, 0x280003, 0x0) quotactl_fd$auto(r1, 0x3ff, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xe2, 0x735, 0x401, 0x8000) (async) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) 1m46.578502847s ago: executing program 5 (id=2103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_QUEUES={0x14, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x13}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 1m46.422594738s ago: executing program 5 (id=2104): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x1, 0x3fda, 0x3, 0x7fffffffb000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x2, 0x8, 0xffffffff) memfd_create$auto(0x0, 0xe) socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x2, 0xb, 0x0, 0x4f5) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x14) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x203) ioctl$auto_BLKDISCARDZEROES(r0, 0x127c, 0x0) r4 = io_uring_setup$auto(0x8, 0x0) r5 = socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r6 = bpf$auto(0x0, &(0x7f00000001c0)=@link_update={r3, @new_map_fd, 0x2, @old_map_fd=r4}, 0x6) r7 = bpf$auto(0x1a, &(0x7f0000000380)=@task_fd_query={0x0, r6, 0xc, 0x3, 0x10000, 0x8, r5, 0x100000001, 0x401}, 0x92) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(r7, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback, 0x3}, 0x2) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) 1m45.974224373s ago: executing program 5 (id=2107): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) (async, rerun: 32) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x7, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0xffffffffffffffff, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x200240c1) (async) r3 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x26, 0x20009, 0x4000000000df, 0x810, r1, 0x8000) (async, rerun: 64) ustat$auto(0x801, 0x0) (async, rerun: 64) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x10040026f34, 0x0) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) r6 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_sco_debugfs_fops_(r6, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async) recvmmsg$auto(r3, 0x0, 0x6, 0x86, 0x0) 1m38.945944701s ago: executing program 35 (id=2081): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="720100", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m32.636221424s ago: executing program 0 (id=2134): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, "7729ecac5e9239d0c4058eac0405576c2cd59ffc84b3098afa677190f34d1790"}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x7ffffffd, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0225020000000800030080"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x20040004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m32.135453923s ago: executing program 0 (id=2135): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip_vti0/threaded\x00', 0x1a1842, 0x0) write$auto(r0, &(0x7f0000000080)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x1, 0x106) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon13\x00', 0x440, 0x0) socket(0x29, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x20b82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc7c, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40c0}, 0x48050) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip_vti0/threaded\x00', 0x1a1842, 0x0) (async) write$auto(r0, &(0x7f0000000080)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) socket(0x2, 0x1, 0x106) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon13\x00', 0x440, 0x0) (async) socket(0x29, 0x2, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x20b82, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x14) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc7c, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40c0}, 0x48050) (async) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) (async) 1m31.658035482s ago: executing program 0 (id=2137): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x3, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0xa, &(0x7f0000000340)="1816359d", 0x3) mmap$auto(0x0, 0x20009, 0x7f, 0xeb2, 0x8, 0x1008000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=0xffffffffffffffff], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="13"], 0x1ac}}, 0x4004) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r4 = syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r5, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4211000}, 0xc, &(0x7f0000000940)={&(0x7f0000001380)=ANY=[@ANYBLOB="24060015", @ANYRES16, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="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"], 0x624}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000680), 0x402000, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0x5, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0001255182b12e86e03301896b73ff858fea7b9c9080bd4c650000000800010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0xe98fff7d489031bd}, 0x20044000) unshare$auto(0x40000080) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c6787b795a289ff6797171200", @ANYBLOB='^\x00', @ANYRES16, @ANYBLOB="e958e86e5bafd39a3f8aa96117ffbe687c"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000004c0), r3) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, r7, 0x60a, 0x70bd27, 0x25dfdbfc, {}, [@HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x9}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x34500}, @HWSIM_ATTR_ADDR_RECEIVER={0x17, 0x1, "cf62134651fb5c3c09fae09d96b148ed3d1209"}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x6}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0x8}, @HWSIM_ATTR_RADIO_NAME={0x17, 0x11, '/proc/self/pagemap\x00'}, @HWSIM_ATTR_CIPHER_SUPPORT={0x8, 0x18, "a718d139"}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1080) listmount$auto(&(0x7f0000000600)={0x4, @inferred=r0, 0xfffffffffffffff3, 0x1, 0x8000000000000000}, &(0x7f0000000640)=0x4ffffffffffffff, 0x2e2, 0x65f) recvmmsg$auto(r6, &(0x7f0000000180)={{0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000340), 0xfff}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) renameat2$auto(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file0\x00', 0x0) 1m30.776809423s ago: executing program 36 (id=2107): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) (async, rerun: 32) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x7, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0xffffffffffffffff, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x200240c1) (async) r3 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x26, 0x20009, 0x4000000000df, 0x810, r1, 0x8000) (async, rerun: 64) ustat$auto(0x801, 0x0) (async, rerun: 64) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x10040026f34, 0x0) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) r6 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_sco_debugfs_fops_(r6, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async) recvmmsg$auto(r3, 0x0, 0x6, 0x86, 0x0) 1m30.280884694s ago: executing program 0 (id=2142): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) (fail_nth: 2) fstatfs$auto(0xffffffffffffffff, &(0x7f0000000140)={0x8001, 0x100000000003, 0x1, 0x9, 0x5d, 0x0, 0x75, {[0x80000000]}, 0x0, 0x7ff, 0x68a6, [0x5, 0x8, 0x5, 0x4]}) r1 = socket(0x2, 0x1, 0x106) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/20, 0xfffffcc4) bind$auto(r1, &(0x7f0000000040)=@l2={0x1f, 0xa, @any, 0xfffe, 0x1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x6) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f00000000c0)='cifs\x00s \xfe\xcd\x94=\xbf\xfd\x02;\xffP\xf26\xea\x97\x95\xad\xb6\x1d\\\xd3\x89\xe0\n\x0f\xf7]\xafa\xcc\xbbgv7\x04\"\xb4\xe1\xc8#\x1b\xf0&\xc3\x15\xea\x1f\xcf0#e\x14\xe6\xf9\xc9\xec\x1d\x1d\xa7\xcd\x94\xae\x01\x00\x00\x00\x00\x00\x00\x000\xc3\xeem\x8e\xfb`\x1a[\x01\xf6Re\xad x\xbc\x00\x0f\x0f\xc6f\x82\x16\x8e\xab\xf6)^\xbe{=\xa3\xeb\xc44\f\r\xf6\x17\x87\xe8\xb0\xd9V\xfb\xc6U\xe9\xb7\xe6\xa2\xdb\xbbP\xf14S\xe6\xce|?\xa0\xf3\x8f^?5\x1bb^R\x11\xf6\xe8\xfc\v\xfa\x96\x89%\x02\xc0\xa9\xc9\xd2\xb0b\x86\xd1\x1c\xa2\xca\xc9\x90\xd7\xe1\xbf%\xdbzh\xfc\xaa4KhoD\xe7\xda\x12^\x8b\x81\xb3B5\xfd-\x83\x9f\xe7ZHh^9\x18z*\x02\xa8Fu\x80\xee\xc6\x98v\xf6\xa7\xdf\xd8\x9ans\x16\xa7\x03\xd9\xc2\xee\"\xa7\xefx\xd5,Q\xfe\xe6\va\x06\x00\x00\x00\x00\x00\x00\x00\xaa\x89!,m\x16M\x19no\x1e+ 1\xa7\x1c\x95\xa0\xd6`\xd1\xf8r\xea\x13sFn)\x05\xc8\x1e\xf8a\xf5H\x86\x9a\xc4\x81\xbf\xa1h`\xe0\xd8\xdd\xeb9k\xa4\x1fA}\x80\x9e\x8a\x031\\D@\a\x8b\xc7.\xc1\xe4Z\xd4C\x19g^\x06\x06\x82', 0x8002, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) getpid() mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) r2 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x272981, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r3, 0x0, 0x800000008) r4 = fsopen$auto(&(0x7f00000000c0)='./cgroup/cgroup.stat\x00', 0x1) setsockopt$auto_SO_MARK(r4, 0x2, 0x24, 0x0, 0xc8e) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) sendfile$auto(r5, r5, 0x0, 0x7fffe000) write$auto(0x3, 0x0, 0x7fffffff) 1m28.814782948s ago: executing program 0 (id=2144): mmap$auto(0x0, 0x2000c, 0x800000df, 0x20eb1, 0x40000000000a5, 0x8000) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x80000000) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch8\x00', 0x40, 0x0) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04\x02\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7d) ioctl$auto(r0, 0x5646, r0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/40, 0x28) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000001, 0x0, 0x3, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x6) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x44415}, 0x20000000) r1 = getpid() sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='.'], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4080) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mmap$auto(0xfffffffffffffdff, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mknod$auto(0x0, 0x1001, 0x4) r2 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) pwrite64$auto(r2, 0x0, 0x4, 0x2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x301000, 0x0) 1m27.709183059s ago: executing program 0 (id=2146): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x12, 0x1, "5e1f970f497f9f23d63e72850177"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) read$auto_proc_pagemap_operations_internal(0xffffffffffffffff, &(0x7f0000001540)=""/209, 0xd1) (async, rerun: 64) mremap$auto(0x3, 0xe, 0x9, 0xb, 0x4000000000000000) (async) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x1, 0x84) (async, rerun: 32) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) (async, rerun: 32) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r2, 0x0, 0x400018) (async, rerun: 32) ioctl$auto(0x3, 0x4020565a, 0x38) (rerun: 32) ioctl$auto(0x3, 0x4020565b, 0x38) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0x105800, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) r4 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) (async) r5 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r5, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async, rerun: 64) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (rerun: 64) capset$auto(0x0, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)={0x21c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "7775d7fef7"}, @NL80211_ATTR_SCAN_SSIDS={0x1d9, 0x2d, 0x0, 0x1, [@generic="07fd98675848479c098c3b1a30139cffcf35e70f4162ed469330fd1dbd63248013eeb003755e121bbc246ffa5c9919b21ef9bcd6dd9040b402eb0b62c4a8c69c8dfcc5d933bab0664b36852f62b5568d76aa52adf79ceb519cc8c9ca101cdc5b4c76a4363572480acbe128cb0c546b4fd1acf4ecdc3c1be99cd3b5c24413208d8ede838b6f675fae0eee3a5927f639a179e10634748ce3af016a76671e55785219820ffdbbb4a102a7d361e71aa220fc4f90c6db3966100468409a18db9feb82efe9def8ab148f63ef0aa552c3604f43eee6519fbc9e5094b95cb56b006b79e883c983f9886e0e06b49fb0b77818ba9e9c59f09d55ec3bf111", @typed={0x8, 0xee, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x9e, 0x0, 0x0, @fd=r4}, @nested={0xca, 0xc1, 0x0, 0x1, [@generic="07a3bb11c3989a073c014bf8cb978ce07368d19ff4af34b48dbd4cea122757e4bbe65a13e1e4e21f4e7779fec84e22c9358f7f3b07460dcb0bed8b882b1f1cfa2ccfbd03c41fe9b1ebb3180394b3f74c3cbae9333d8156fb86755861782e31679259b1438ae8de50a281", @nested={0x59, 0x32, 0x0, 0x1, [@typed={0xb, 0x99, 0x0, 0x0, @str='!&(/-*\x00'}, @generic="f731daa7cdeaa2d300b65b2a3d0e2a8b239a0f1beaa538f907bf58cf21ad7612087b215dc3de848c778e3c74fcd478c72128cd19e7457bd97028c2b1ddec553a853ff9bd30447dbaea"]}]}]}, @NL80211_ATTR_STA_FLAGS2={0x1e, 0x43, "a1b8ae05df1988fe85c61869fa972dadf3fadafa20443983de70"}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20000051}, 0x14) (async, rerun: 32) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)="2d296699eb5df9d24db978ee2ae789f693d6325d33d31c0a16", 0x19) 1m12.340893222s ago: executing program 37 (id=2146): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x12, 0x1, "5e1f970f497f9f23d63e72850177"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) read$auto_proc_pagemap_operations_internal(0xffffffffffffffff, &(0x7f0000001540)=""/209, 0xd1) (async, rerun: 64) mremap$auto(0x3, 0xe, 0x9, 0xb, 0x4000000000000000) (async) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x1, 0x84) (async, rerun: 32) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) (async, rerun: 32) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r2, 0x0, 0x400018) (async, rerun: 32) ioctl$auto(0x3, 0x4020565a, 0x38) (rerun: 32) ioctl$auto(0x3, 0x4020565b, 0x38) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0x105800, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) r4 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) (async) r5 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r5, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async, rerun: 64) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (rerun: 64) capset$auto(0x0, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)={0x21c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "7775d7fef7"}, @NL80211_ATTR_SCAN_SSIDS={0x1d9, 0x2d, 0x0, 0x1, [@generic="07fd98675848479c098c3b1a30139cffcf35e70f4162ed469330fd1dbd63248013eeb003755e121bbc246ffa5c9919b21ef9bcd6dd9040b402eb0b62c4a8c69c8dfcc5d933bab0664b36852f62b5568d76aa52adf79ceb519cc8c9ca101cdc5b4c76a4363572480acbe128cb0c546b4fd1acf4ecdc3c1be99cd3b5c24413208d8ede838b6f675fae0eee3a5927f639a179e10634748ce3af016a76671e55785219820ffdbbb4a102a7d361e71aa220fc4f90c6db3966100468409a18db9feb82efe9def8ab148f63ef0aa552c3604f43eee6519fbc9e5094b95cb56b006b79e883c983f9886e0e06b49fb0b77818ba9e9c59f09d55ec3bf111", @typed={0x8, 0xee, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x9e, 0x0, 0x0, @fd=r4}, @nested={0xca, 0xc1, 0x0, 0x1, [@generic="07a3bb11c3989a073c014bf8cb978ce07368d19ff4af34b48dbd4cea122757e4bbe65a13e1e4e21f4e7779fec84e22c9358f7f3b07460dcb0bed8b882b1f1cfa2ccfbd03c41fe9b1ebb3180394b3f74c3cbae9333d8156fb86755861782e31679259b1438ae8de50a281", @nested={0x59, 0x32, 0x0, 0x1, [@typed={0xb, 0x99, 0x0, 0x0, @str='!&(/-*\x00'}, @generic="f731daa7cdeaa2d300b65b2a3d0e2a8b239a0f1beaa538f907bf58cf21ad7612087b215dc3de848c778e3c74fcd478c72128cd19e7457bd97028c2b1ddec553a853ff9bd30447dbaea"]}]}]}, @NL80211_ATTR_STA_FLAGS2={0x1e, 0x43, "a1b8ae05df1988fe85c61869fa972dadf3fadafa20443983de70"}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20000051}, 0x14) (async, rerun: 32) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)="2d296699eb5df9d24db978ee2ae789f693d6325d33d31c0a16", 0x19) 1m5.06932427s ago: executing program 6 (id=2190): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x9, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x181742, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) ioctl$auto_XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f00000000c0)={0x38fd, @raw=0xeafd, @inferred=r0, 0x59, 0x7, '\x00', {0x9, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x4, 0x3d, 0x24, {0x8000, 0x7fff}, {0x0, 0x2}, {0xffffffff, 0x8}, 0x10, 0xb, 0x8, 0x3483, 0x2, 0xff, 0xa42, 0x1b, 0x7, 0x3, '\x00', 0x9, 0x1, 0xcf6d, 0xa}}) socket(0x2, 0xa, 0x1) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(r1, 0x0, 0x10000, 0x80000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) preadv$auto(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x4) setsockopt$auto(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000700)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{d2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcax)\xb4\xdf\xfe/\xe40\xc6y\x13\x8d\bfJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xbc\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"', 0x7) sendmmsg$auto(0x4, 0x0, 0x9a3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r2, 0x0, 0x9) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/free_buffer\x00', 0x109100, 0xebff) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x1000000000010, 0x8f9, 0x8) 1m3.386557772s ago: executing program 6 (id=2193): mmap$auto(0x0, 0x4020009, 0xdb, 0xebe, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling\x00', 0x82002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)="2dfc", 0x2) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x800, 0xfffffffd) mmap$auto(0x80000000000000, 0x400008, 0x100000000de, 0x14, 0x2, 0x8000) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, &(0x7f0000000040)=0x3) socket(0x15, 0x5, 0x3) eventfd$auto(0x7) r3 = open(&(0x7f0000004080)='./file0\x00', 0x40, 0x23) socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto(r2, 0xfffffffc, 0x21, 0xfffffffffffffffe, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x763935f0, 0x3, 0x2) mmap$auto(0x2, 0x20009, 0x1, 0xeb1, r0, 0x8000) r4 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) write$auto(r4, 0x0, 0x6) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) ustat$auto(0x801, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket(0xa, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) 1m0.939782607s ago: executing program 6 (id=2195): mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0x5, 0x0) r0 = pipe$auto(0x0) mmap$auto(0x3ff, 0x3, 0x3, 0x18, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x20082, 0x0) mmap$auto(0x7, 0x1, 0x3, 0xeb1, r1, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r1, 0x300000000000) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130026bd7000fcdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) readv$auto(0x3, 0x0, 0x800000000000003) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000100), 0xffffffffffffffff) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0xf5ff, 0x6}, 0x0, 0x5, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x3e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) write$auto(0x1, 0x0, 0x80000000) socket$nl_generic(0x10, 0x3, 0x10) 59.183918003s ago: executing program 6 (id=2198): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="130026bd7000fcdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x44, r3, 0x522, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FLAG_BEST={0x4}, @BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x2}, @BATADV_ATTR_BLA_BACKBONE={0xa, 0x21, @random="b6c9fc7a4350"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0xa505}, 0xffffdfff}, 0x7, 0x4008) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card1/timer_source\x00', 0x8a9eafcb2b62597c, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x1}, 0x9) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x68b82, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r8) ioctl$auto(0x3, 0xae41, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r9 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x6, 0x6, 0x5, 0x80000000, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0xffff, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0xf}}) io_uring_enter$auto(r9, 0x9, 0x820e, 0x8b, 0x0, 0x18) r10 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/kvm/insn_emulation_fail\x00', 0xa2540, 0x0) read$auto_stat_fops_per_vm_kvm_main(r10, 0x0, 0x0) mmap$auto(0x0, 0x2000a, 0xcf, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) 57.511844769s ago: executing program 6 (id=2203): epoll_create1$auto(0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/location\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) r2 = getpid() r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x288800, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$auto(0x9, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, r3, 0x9, 0x0, 0xffffffffffffffff, @relative_fd, 0x1}, 0x17) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000040)={@inferred=r2, 0x555c, 0xffff, 0x1, "8f9638544ae4bbdf48e497dbb5a3760f9b6b2c854e493a712fcbb4034dde3ba72adae5bfa41dba811bf5488f", @inferred=r2}) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r6 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x4) sendmsg$auto_GTP_CMD_NEWPDP(r0, 0x0, 0x800) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r7, 0x5608, r7) write$auto(0xca, &(0x7f0000000000)='\x0462\x0f\x00\x00\x96\x18am\xea\xf4\x1b\xf8', 0x7e) 56.888685838s ago: executing program 6 (id=2206): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_forward_update_priority\x00', 0x202, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae41, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x40, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe6}, @NFSD_A_SERVER_SCOPE={0x13, 0x4, '/dev/mtdblock0\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x814}, 0x80) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x2008881) sendfile$auto(r0, r0, 0x0, 0x7ffff000) 41.423162818s ago: executing program 38 (id=2206): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_forward_update_priority\x00', 0x202, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae41, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x40, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xe6}, @NFSD_A_SERVER_SCOPE={0x13, 0x4, '/dev/mtdblock0\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x814}, 0x80) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x2008881) sendfile$auto(r0, r0, 0x0, 0x7ffff000) 19.631777746s ago: executing program 8 (id=2271): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0xa, 0x1) r3 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r2, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008011, r3, 0x8000) ioctl$auto_TCSBRK2(r3, 0x5409, &(0x7f0000000080)="fe05ae527721f0b8017e7149a3d5a5cba156d5feb690c5d895e5f6ac1d3b106f492184e8b89f230e1d6e48c338753402") sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = gettid() rt_sigqueueinfo$auto(r4, 0xe, &(0x7f0000000000)={@siginfo_0_0={0x76bb, 0x3, 0x4, @_sigfault={0x0}}}) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2) sendmsg$auto_NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) r6 = epoll_create$auto(0x70c) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptya3\x00', 0x80000, 0x0) epoll_ctl$auto(r6, 0x1, r0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x40006) 18.827648715s ago: executing program 8 (id=2272): unshare$auto(0x40000080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(r0, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000001a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f00000004c0)={0x1514, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x14ff, 0xa, 0x0, 0x1, [@nested={0x17c, 0xd8, 0x0, 0x1, [@typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@loopback}, @generic="8c5e7904b62ded848c5a778ccb9fcd960d5745f5cea399f1393201d03ff61c8faad2714a3f3cb433cf059ecaabcadab9b937fa6270f5834c8977b164f51f8a5010c2391b321a51ed2e59e62b82050afea490c39f241c0bccc4eca2a23856a7463f5922c1e87d7c003922ae40afeb062934923dd36f2ebb228b936966e22c6ef66079c2fc3021977473b17d917d82c4b34eb65f", @generic="20bd151f080442ea1e9e9145df1e2826836b038d77a91cf3bc1c8e336491d9e593c9de15e694a026b12d4b60593ccff1177b10e75c4ddc060f10dd75faa446540cd4d2789346397d7ec6ef83a74728f306d8a679df003a270e6bbe6d9d34a5c5bff4578c2b78df5f7a0108d105b44a38f769e5a4266a314301bc9d1f94d274645b0c1e5912937fa615ad900e00f090e3c8983552b54cea92f0821b21b88777ffb0b5bf967a7fb3d02a41fdbbbb8516b63c42db43e832d8619d2907d24873200a68c154338a239ec64a", @nested={0x4, 0x3ff8}, @nested={0x4, 0xe5}]}, @generic="cea3b1eb5035f2ada7a6b369d9cae80acbce4557f0a5750e99a779e2b15337c19c29137b5f3c8b42c22922d5fc413ad50eac5db9d9600a977494ac571a4cc04d4ef62f297b19171852125f670e0986874ebd14c9069aa95a53648686fd3687a6e1b112d0f14449ee614bc9253faa00f7e2cb1278c5cb429df67247106ca668", @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@broadcast}, @generic="a2e51c731e48c1c636ffffe1588d1951c13ab2c929acd0618de874f0", @nested={0x12c7, 0x4b, 0x0, 0x1, [@nested={0x4, 0x74}, @typed={0x14, 0x105, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x146}, @generic="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", @generic="5ff77e4ad21dd42b1392491d534b63fb1aae4e2e5f3ffcd818ed6693a63d260bf76118ebdb0907505a66d6c8cd91e916af9c590fad10485dca7b11b67b7aa70069d9b8b1192e04635a0b4ce37724474ee086", @generic="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", @generic="ade57f643a14595b914c973a369390e6bfb2fe25a488f8967b8d2912c14299b8b4f9d6d8a46c6c6bd54c6c937a45a412bc7311a20162a1ee859a7ec087e3c4895833e0323c4837d09ce4f000672e1fa0ebeb59fb041bcf4d6d46fc508712950a58514d6151b7675cbf7ba9eaaf23cd9e9bf56ab078b56d0ed50b1839e3db54d3420c1b4042dddd7867fcb86f3abed33f49040326091e384f124cc9d0afeceefa55525b630647420f1fb7764ba6909c52d36d58e188e5aa204bc9aa96081303a5d8b8bf603147f0617a97437db03901171e66970c3da1", @typed={0x8, 0x5b, 0x0, 0x0, @pid}, @nested={0x4, 0x12b}, @generic="adf48e04e73054f71b07a4239ba09ad16e9dce9003cd01e018d9d0ea489e666d38b2ac571a354aadd3b421b6bbaf6679abcf99079928a799cdae635b5a5e829be1c44a06dc28517ecf045ad2b5433644a384b2e2fc573d77a8f1322f17af348a71626c3abc72cc22a764446162708f4c7e40de82"]}, @typed={0x14, 0x11c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0x1514}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r3, r3, 0x0, 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0xecf, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7fd, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xf90, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x2000000008000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x4bd, 0x0, 0x1000, &(0x7f0000000040)=0x2) write$auto(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf25f500000006001000010000000400ae00080027004d29000004004a01"], 0x3}, 0x1, 0x0, 0x0, 0x890}, 0x800c5) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) 15.142724636s ago: executing program 8 (id=2278): socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/rt6_stats\x00', 0x28102, 0x0) (async) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) (rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) (async) r2 = socket(0x10, 0x2, 0x6) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x5, 0x400a) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async, rerun: 32) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) (async) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0xfffffffe, 0x8000000000000000, 0x0) (async, rerun: 64) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x430740, 0x0) (rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r3, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) 13.890283193s ago: executing program 8 (id=2281): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4100, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x207, 0x4006) r2 = socket(0x2b, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptywf\x00', 0x0, 0x0) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0x10001}, 0x5, 0x20000000) r3 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000d40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000380)={0x958, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfffffffb}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x40}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x43}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xf, 0x13, "125773088675ee33497f83"}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_PROBE_RESP={0x8e8, 0x91, "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"}]}, 0x958}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0x4, 0x2cd0, 0x6, 0xd2}, "3fddb0040879dd4a0400a87e6d8d751f823b0fa5ae41d23d00154fc20394f2e1bc33967a34092f60f89c52fcfb1895b9dd9731c00b66eb3e0957f8082af55ebab311238a1c9ab5710c3a2049f24ffcac", 0x18}) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) rt_sigsuspend$auto(&(0x7f0000000300)={0x2}, 0x8) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="fa90c0a0", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf2500000000050014000400000006000e0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 11.487098921s ago: executing program 8 (id=2287): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/phys_port_id\x00', 0x100b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r2 = fcntl$auto_F_DUPFD_CLOEXEC(r1, 0x406, r1) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000040)={0xff800000, 0x144, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r3) mmap$auto(0x42, 0x88000008000000a, 0xdf, 0x9b70, 0xffffffffffffffff, 0x207fff) read$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffffff, 0x0, 0x0) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x5) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x24, 0x1001, 0x1, 0x717e, 0x0, 0x7, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffff9, 0x224a, 0x2, 0x7, 0x6, 0x7f, 0x3ff, 0x2, 0xa, 0x4, 0x200, 0x6, 0x84, 0x3, 0x0, 0x2, 0x4, 0xfffffffc, [0x2, 0x0, 0x10000000000000, 0x4002401, 0x0, 0x7, 0x8, 0xffffffff80000000, 0x0, 0x42, 0xfffffffffffffffe, 0x3, 0x0, 0x80000000000000, 0x8, 0x4, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x668, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x14, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff9, 0x83, 0x400, 0x6, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, 0x2]}, 0x200000001fe, 0xd) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000140)=""/33, 0x21) r7 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r7, 0xfffffffffffffd01, &(0x7f00000001c0)) ioctl$auto(0xffffffffffffffff, 0x4008af23, r5) r8 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r8, 0xc0686611, &(0x7f0000000080)={0x17, 0x36, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x2, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x9}) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$auto(r9, 0x8004b706, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000400)=@bpf_attr_1={r2, 0x0, @next_key=0x2, 0x2}, 0x3) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r10, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="ff070000", @ANYRES16, @ANYBLOB="01002cbd7000fddbdf2528000000080007000000"], 0x1c}, 0x1, 0x6000, 0x0, 0x1}, 0x20008800) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES16=r4, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001003a66520008000200", @ANYRES32=0x9, @ANYRESDEC=r11], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$auto_BLKRRPART(r1, 0x125f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11.235831178s ago: executing program 8 (id=2288): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = io_uring_setup$auto(0x82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf25020000000800010000020000170004002f6465762f736e642f636f6e74726f6c43300000ae43587fd656dab9eea8e13bdf46881d6d3f267cd73b68484911c4cf05ac69f71597c93aea7187f6093ce656671f0cf6b7f241d161afac"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1) msgctl$auto_MSG_INFO(0x454d, 0xc, &(0x7f0000000240)={{0x3f, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x7f, 0x4}, 0x0, &(0x7f00000000c0)=0xc1, 0xb2ae, 0x7ff, 0x7, 0x6, 0x508, 0xfff, 0x3, 0xb, @raw=0x8, @raw=0x80000000}) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r0, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f00000017c0)=ANY=[], 0x1280}, 0x1, 0x0, 0x0, 0x4880}, 0x800) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x40000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3c, 0x1, 0x0, 0x2, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC0\x00', 0x80, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x203, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0) sigaltstack$auto(0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) setfsgid$auto(0x0) 8.660047252s ago: executing program 7 (id=2294): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x24, 0x0, 0x0) socket(0x2, 0x80002, 0x73) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 7.823932254s ago: executing program 2 (id=2296): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0x7ff) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="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", 0x14a) ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0) fcntl$auto_F_CREATED_QUERY(r1, 0x404, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000040)="158f4a2b") r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) bpf$auto(0x0, 0x0, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x40a02, 0x0) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x2, 0x2, 0x9, 0x105, &(0x7f0000000380)}) ioctl$auto_USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000100)=&(0x7f0000000040)="717758d4f4622e3283aa14b04d1bf4054f7fa29a7a8ea202381df064da24bf032ad58bd0efc43ab9c5a2b0f5727b6c28a8729fc2aa251c2dfaa385051ab1c0f37aa42ec0fd9e0bfb46fea75287a21c13f18cf2c2903065f69650c0d838767f6ba28e4eaffe0f476ce84d02a920d3db24475e61ad387fa4662b4d304a6820189735fde8cce6f41d3036183e31afd4ef9efe73d4f81e5fe3b1b51df3bf225388") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r7, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_NAME={0x19, 0x3, '/dev/bus/usb/037/001\x00'}, @OVS_VPORT_ATTR_NAME={0x19, 0x3, '/dev/bus/usb/037/001\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) arch_prctl$auto(0xfffffffa, 0x80000001) 7.165943737s ago: executing program 9 (id=2297): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a0a548, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r3, 0x28000) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r4], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18b040, 0x0) close_range$auto(0x2, r6, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x902, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_CREATE_VM(r6, 0xc040aed5, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae47, r1) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_SNAPSHOT_FREEZE(r4, 0xc0045878, 0x0) ioctl$auto(r8, 0x5393, r0) 7.15044361s ago: executing program 7 (id=2298): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) ioctl$auto(r0, 0x40, r0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) fstatfs$auto(0xffffffffffffffff, &(0x7f0000000140)={0x8001, 0x100000000003, 0x1, 0x9, 0x5d, 0x0, 0x75, {[0x80000000]}, 0x0, 0x7ff, 0x68a6, [0x5, 0x8, 0x5, 0x4]}) r2 = socket(0x2, 0x1, 0x106) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/20, 0xfffffcc4) bind$auto(r2, &(0x7f0000000040)=@l2={0x1f, 0xa, @any, 0xfffe, 0x1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x6) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f00000000c0)='cifs\x00s \xfe\xcd\x94=\xbf\xfd\x02;\xffP\xf26\xea\x97\x95\xad\xb6\x1d\\\xd3\x89\xe0\n\x0f\xf7]\xafa\xcc\xbbgv7\x04\"\xb4\xe1\xc8#\x1b\xf0&\xc3\x15\xea\x1f\xcf0#e\x14\xe6\xf9\xc9\xec\x1d\x1d\xa7\xcd\x94\xae\x01\x00\x00\x00\x00\x00\x00\x000\xc3\xeem\x8e\xfb`\x1a[\x01\xf6Re\xad x\xbc\x00\x0f\x0f\xc6f\x82\x16\x8e\xab\xf6)^\xbe{=\xa3\xeb\xc44\f\r\xf6\x17\x87\xe8\xb0\xd9V\xfb\xc6U\xe9\xb7\xe6\xa2\xdb\xbbP\xf14S\xe6\xce|?\xa0\xf3\x8f^?5\x1bb^R\x11\xf6\xe8\xfc\v\xfa\x96\x89%\x02\xc0\xa9\xc9\xd2\xb0b\x86\xd1\x1c\xa2\xca\xc9\x90\xd7\xe1\xbf%\xdbzh\xfc\xaa4KhoD\xe7\xda\x12^\x8b\x81\xb3B5\xfd-\x83\x9f\xe7ZHh^9\x18z*\x02\xa8Fu\x80\xee\xc6\x98v\xf6\xa7\xdf\xd8\x9ans\x16\xa7\x03\xd9\xc2\xee\"\xa7\xefx\xd5,Q\xfe\xe6\va\x06\x00\x00\x00\x00\x00\x00\x00\xaa\x89!,m\x16M\x19no\x1e+ 1\xa7\x1c\x95\xa0\xd6`\xd1\xf8r\xea\x13sFn)\x05\xc8\x1e\xf8a\xf5H\x86\x9a\xc4\x81\xbf\xa1h`\xe0\xd8\xdd\xeb9k\xa4\x1fA}\x80\x9e\x8a\x031\\D@\a\x8b\xc7.\xc1\xe4Z\xd4C\x19g^\x06\x06\x82', 0x8002, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) getpid() mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) r3 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x272981, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r4, 0x0, 0x800000008) r5 = fsopen$auto(&(0x7f00000000c0)='./cgroup/cgroup.stat\x00', 0x1) setsockopt$auto_SO_MARK(r5, 0x2, 0x24, 0x0, 0xc8e) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) sendfile$auto(r6, r6, 0x0, 0x7fffe000) write$auto(0x3, 0x0, 0x7fffffff) 6.640276481s ago: executing program 9 (id=2299): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0xffff, 0x1, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) shmctl$auto_SHM_STAT_ANY(0xfffffffd, 0xf, &(0x7f0000000440)={{0xade, 0xee01, 0xee01, 0x7, 0x8, 0x0, 0x1601}, 0x8, 0x6000000000, 0x4, 0x4, @raw=0x3, @raw=0x7, 0x1, 0x0, &(0x7f0000000100)="0977b20d5258eca826a4544a5db3bfa5deebdf9b9919b9debef90d4b64633f0eb8162aa93f55d0d56687a5be1110194fbd48a603d4cb3949f65f2366e35b294c41b7069e8a0c60a7c9acaedacf5068e6d0aa1d05292bd70540e52ba410720cdbb0", &(0x7f0000000340)="5f9fe49db3b478eb5aa112d00517c1aa957d9e0f2852dad7f5c236bf8371d3b0f6d518edeaa6493a608fb25d5e4ef247c283343a661cf945418dfa1d90930d85eb4cde61cfe640e7f1d181f7939b2f542198986127b4853ed7e3309866acb8cd226f097b6b0469e947ae99d1fe614f2f7d0972073a12204d10f259ae7c3e05bc290d17e2460cdc91ea9f95b5a74077d7861c8b9c4b44d916a186054543c18576525484367482cb2e8aa1c6b42c5d1d2699904715cfce7fea171e426b886b482af2d6098cf74c3c4e"}) fsconfig$auto(r0, 0x8, &(0x7f0000000080)='[\x00', &(0x7f00000000c0)="7cc7218f60cf6b6c6ecd41b9ff6d831ea118f07fb6024b67301d9be695", r1) read$auto(0x3, 0x0, 0x8080) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) setfsuid$auto(0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='\\\x00', 0xf4a, 0x100000001) r3 = socket(0xa, 0x1, 0x100) unshare$auto(0x404) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r4, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r6, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf258c0000000800a029f506485d75beca870c88eac2eec0f527bb18b48bf68accd2ce1fb81b188700ffff0000040021010600eb00f50000000c0045800800d30066edbae5f2c4bb9076a2ffed03fe4e0f6aa3582caae27154063a8a103199a35dcf9a5e699d6cd2de2a71db63b4de111e6d1926ca2d357906000000d9cf5e0a1fbeb606591cebd0175d5e3a1b2be85b4ba8fa61cafcf900", @ANYRES32=r3, @ANYBLOB="0400b800"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20048080) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r5, &(0x7f00000005c0)='/Eev/audio1\x00O\xe2\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8*}\x97\xdfG\x8d/\xa7\xb0\x96\b\xce\xaf\vb=\x19D3\xe2\xff%v\xa4\x8b\x9bgCC\v\xabs\xd8\xfd(\xca\xad=\x80U\xda\x03d\xd1h\xb6i\xf7\xd5@\xe4H\xbfih=\x8cf;j\xb7j\xa4\x82\xc0\xd8B\x86B\ft3\xf4\xd9yWr\xb6\x00\x94\x94\x80>\xfc\x9f7z\xb4\xa5\x03\xdf\xd0', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r6, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) r7 = socket(0x10, 0x3, 0x6) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="61010000", @ANYBLOB="1200", @ANYBLOB="932e"], 0x1ac}}, 0x40000) 5.755752545s ago: executing program 7 (id=2300): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.12/usb33/33-0:1.0/usb33-port5/power/runtime_status\x00', 0x7033c0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0xa, 0x4cbd5d) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r2) unlink$auto(&(0x7f0000000000)='./file0\x00') mmap$auto(0x0, 0x1, 0xfd5, 0x12, r2, 0x40000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SURVEY(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x40c0) r4 = socketpair$auto(0x3, 0x40, 0x5, &(0x7f0000003300)=0xfffffff7) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000003440)={@raw=0x90, "45aee6d25f58cfc020e9d24045dca606342dfa6dd3c9b67b3e3a2e713bf1f3b8ff724c215a476c2f182cb4ffc1a9a07c5ece28aac2b355a329319e7af0d74ac22c9019f2fbdad3826ba6f644feb3f72d8aa516a4cba70d46aec00da80fcaf6f75dbc314a0ad94c36151db0fc7cbcc09d0d17aae8a554a4fb216f6ffe89476810e400c39d63aa4a112ca08b84b49422a30becc6545ad27d1a8f4a100717d4d3b6ed5bfb1799f5013d4f68ddc7dcd45e5ca2db9d2ccdeaa665e39060c53cfa6bd5e21f48d707e7ac54bb7feb06d7443b5399e9df76fb43ceaeaeaffa1affa899c3de3e5308c9aa3581b48f856ec2b92d2c2d1cefd39be8d3e01b4583518a4e6ded7084b07ec4858a9c3d8663d554baa3496f3883faf6e65aefb9bae75c015e13b26b7d8e5d2d2c05bdbd0ea475648db10a8a97573b2554585971eca788e4116fb72f2d0c929fbda52739326e5b2ffd781b93a1438b52ba0842a4fdba6c77e16675d3067da0b3977f9d59cc4b343026431a3019a0d5453ee12a21335a284ddec70d4e91519e02f88c4ddebd71cb0ab05273edbe9100d30d6fbc61760c51f8dc2c03aed84f85f3959c8dcb8b5578be4766cdaad2f91f0ddcaf56c94ede73b6e2f532103a3f5f28bd95b37954c95a678bd5c30a388eb50b706022b1ad9415bc29c6a57d342ef0a5cb43af47cfe3f3aada37d91abad4d866e6a2693d924aa3db788608312ce85884772212e5dab96392c9005c334f678cb0c4d7ff4049a7f183c8f0753b5860a46534fd82d2fe5c1e0a27d00734d5c43d310b3e2cc369e4c1c51e6a9a7133a7168454c238184edd43a89008f26ed487693457b463e8de7653364766beca7a73a2e3227b282b763e00481de89ba2ce7450696a13bed8873e862524df428d7c3afa1db26df957d5331bd1ee5b26db763c1452579bb57e7d3761a355727f0307b18ddaa790da6358bb0b05ef0ab6a9c47d1a2c00dc4a4dd8346442b53fc48adc1c03f85913c574794b5a307780034aba23e5b4ccb8b623e95353a2cf9bb9c4ced6f26056828cc23d3248aadfcdd191438889c322e5d3f957d6fbc77e91243516d16ece6823f2d21b59267739d428e3cf59b6432bdd05a3469ff65dfd9fe37b7c276f745d18927f2b4f7f36be1c8a5e1acf5ce734e3ac32cc185bc6a4eaaf4688dd8de7678df3bc48d8a77bf34a97b6610743ff5734de7d9c9f6792167d79771e534ceebff3f1e94bb4ca0dda91d5f64d7569883d1234e312d3405e5cd05318312ba17d6e27d0cd7cfda313d62f6adae4b85f4f750bdee6fe5e172d41a58a53e809dbd2f87fd4e8ecd8665e1c71062047920447e3e934d81ec533ed6c64ddbd266431b2ac9e3517980c648b85d06fdd2ab26242da8434f9cea29939f884cf959c5925dd401a977394b45d04f543887755ceaa00cf13e403cf8e2a25d7e27baae1c87c1f5fb0b15e4fd095432e4c3cf62f35df4a7ebfed41b08e10096d6ce463232e8173d8de575a6da1078232c1aa1b0a3133e0d480ca4013410ca9fc649abf8d0b75282be32a7b15c0c336fd7e05691a6044738ad1cb8507ecb31f02fc7cc49fba8bbb216a19b837ff31319373b1c8deaa0410c6be343a913d3793fe4fcc2e57f1da9d86c0e4323f30dd672f630429dc6e5dacbc9beb39b13ec3c17e70a09d81fb3cb312ad242dc34207a73534135fda513d32875b67b35e3f0faec5da3b8194ea7526c20c14ab161e0e50d50707ab3177ce9bc56a76bc551f31896ac85dec1824cf14afd3db0a2cea7488941e5f45d1b0ac7c79f59914abf557b37674478f29e3a85190aa763dbeda941a2f8d8b4028fbf57dfba9fd8992b3124a82f3d61913322e395d4333678c0bbe878a71b69f8609e24e2c8f0140adc043d71dec8578f2fd928963614308735cebeb76cef5dd4817cf980effdd8251108742c822b31b3b882fac977ca3e6df2e64edf42adf4b1e55fdb698260e60582e5d2ed076ef2def4e1f6128593d608a1073f5b089aee7feb4d90f8032f2b14b9bf78252deaa8d076a56c539af58341159bab70c152602a4c4fa94e8f02bc0cc2ad51d25aeab32b2263ffd267945b367294de9409ad089f6fd73b338f7ef267e567d6b21292038d7d2f53dc39537f2baf93308b8d5a341a4777445208ebada684317b52d1f71484fad83a4fc4dde85ed125473247d958e222d2b8b3ac4829402f2c7007e0d4bb2a559ada21b30c09696f73f981af1d100cb767408bd923c02092645b60b5a0652f8ace62369c40295f50bc5381aa663db469cfd629c476512979e82c3cdf278d6a6c4362e48bf5d2c52e654b68f0418e2501bd3ad6c84be5474ef38d159d98e03799fc9d694f0817b015fb08fef7b92f95f232ff3e1f29951a196b9705a4a483cf373dc05f2abae08710fd2f4005748c4ed4bdde19604355f20c578bcb389dac6bc2f7f1bff02a963c0fd5b6891d6778addb63705bb5ab3d6f09ebc4c390dc9287ad19bf9741d2a2f565cbeaccf2652fda7357fb1d9aecfe9317ebab1785972243de02b86f344bb7d1c70eb4ce9417f4c998de00a0064003cc5fcc1194e60ff29799854ed974e7099b310439d0786b87c2a73f5730c92ed16b5c881aa6178dde9259b8a24dc999c69ec7daedad56b9fd703a4295f1802d9ae8b4cbe3cad62358dbeefed8d0d138423ed2bb8b1505932a1d29c4231d84548f0e06531d6a9651d2c157e5431f19feb4b5f3277c2421078150c5ceef56696302e3c4537cd7b75f384f6f1ac925425fb0dae8d82303e4f289053c20cea04d02eff19f9529a17b472834d1df8755e3aea148d84b26ce792d4f81bbae618420d6202911d2c2cde800367d8fc185f5ef9bb3ee764946cd5e7f5c8dc54e11c2c66cf76ca4ede108a79b35967fdfab96132e3e042eb35c7c79f5b17e9377514761e0587a8f28d10fb94743173d98a07834517676513e601b41ee9f627ec4b8ce58774eff0307b64c628be904f1fb1b8084484a70fe8d03a7f04b982619ae0abb2967304ac0333dcfa46b3ef85874925adf788c7c0dfc0e3b943f157bae97b28528fa88716b42b37bf9b0cd7fa803e5e6299dcdee81ffe4cc87a66e9a28a8712c32ea1f571a4e9831c486271c1f37f57ba692b2539017e5174df503a21f45449dab93792ab30504f23b726ce5589f054a962fc81e66dafe19e2f96c29e21ca64f91c8e5f04c6560b4575964e98e4917a08c389646241ad1ba87179628a08eff952f84b5cd5a1d4eeb71d23e83bb95ad4c7db6f40859d43df68d33ea1a545df91be969103a5bba8e851a1651847695374162082c585045a1ee6721e51e8aadf4662371c0806225f1f0e7e4764c8c2e5c0aa0fb6cb4baedc4a8b192666c5ced18a67d82eb625ca9a4894f229f6638d20d4f06e14907497501c1e79934d7c66924989ad334dc481f80e43b96d6af00ed71276c2285b98595233bd7718364beff34bf04faf91a669ca5fc4a6648c852dae63ab5f978e731f7fbeefbc206615ea5398599317b672f83d2cb4a96c0f290e81615d5fdd24bd63e2a1a95558f86b98bbc99af253dce618445946bc5bac41f352bb04e567ee917c88981bbd8aa2ab86daf71039f2c5a9990f29919bf67054369b441e4d06f9ea57d2133edfae77ab47a35fa4f6db883ad7375a93da568cbe9dba3dcba9ab1f8858278f7a259a81d22d829581782213e3b131389ee9daf74e000a3e401d76046c9b8f3407044624b8a9de1227798581192abf67c43e728e64c08832bc4ab870a15a9261e8f009132ed8a197f2f5f6bc8202a74bb192aa0726076d168ea1159961aa83ad2d2caf94563b9bbd9aebb1198c14bd185b7c086756fda8fc9075f7bf7a77a449647e28c52666d861f91f644392a6fc7905a2aca6ed5f10008fe15ad89633dbf76fa50127f9a437d4f105e7f3d9e89ba13db52d5378a9f61e6276d13bfce5640cd3ada6fe36c80615eaa6dad8937bffa5e17e2f4c952bde95603c5f2cc728eb8308e1d61764a88076fe56e0b1293aa7f5ca65ae03019c9c4dc1a177c1f5e9b9d6892a9df5ad8902b45a5a08b0e5de636d051074326663a88a590adc845590cdd9aa184b64ff3efa5d368c794ba5418946522aec81dd137da6ed96ba0b1e5d09283b02e017d3435246c94e4e5e2b4a43e3034e08517c814cb7b775bb7bc0dc218ebed0e493b1054dcf4daba91cbbc0ca922b759077563cfc45cc50b7fdc7695f483182e2cd3627880fd4be2b1d8914c0383b8d758b52473ac8cf0db0d9dbe2c31af298f0290c80a899aec32f1e598f421fb0dd10f135d1b7ad961a617f4c2b1c581955ec79436bf5e76d110878a5c64429b238392b2be52cb27481344df81239ee6202e54436e9c4372877f3d12404549f2d75f0ff26e60addd5dc7b9d150bdc514b235d199bbc65363f147d5dda3942ff93e5d6dfe9ff450699c1489a2c6e777f2b8fb320b9415ab9c34bd0861d64b95e75a089a09b9b8318ab3c8564a37854c82500a197c98172219cc81ef4e355b79c02918e9fb58e801def756ed7b653d9be099dd0da7efe17ce2fda889e2cf215c07799c73293bc438eecc4af16b74af5d19671994920354f23bf52d2d12787d12387a410468ebf59455a8c2fcd781b76a82845a0a363f3de2dbec5ca32db832e75ad9da016307996363ac45c91c9dd3c704b5f71662dd08e52994833ed930a4477d521bd4276eb67855d65d083ef4910a9a7dafd6092034626d1d9c5c7f3f58b3f910ea8d3a346e95319834f890500fcc4452f9ceaa45dbafce2bcd05586b0ac19067976d6c392dac7ad10507a433f4616ad39e30da8ef152fad749adb152c1459fe5adb494b97d6baf5237797ae08e8c23f4bb7ee491b11816f8beeaf9e4a6d1f2dd404a33366ce34c2138a14de9c2c41c6a0873b28b743da78f72554b51ac0decf7ed0363e268971d90c5fdd2ffacbc0d9c3fdc7708d197a1a65105558419148fc83f3765d9ddb3cb9795ef02e31af0c2567bbe489e0052393a8eb5a17bbfe79f730961d25b0aa96a279408b0ffd11ed459130521c7e48e4e2e4e01851936f68e5dcd6c8a329165aa25046fb56f25376fab7eff469fefb3c4389825a98af814c361c6650a7cccc163381b2a1a9b7107dd88137b4534ce0981749a2a918481faca15521d2bb5c0b5117443c1d81a209c66ff3f3b942b97a48d9b688f5418768f84ee7650ff2d4a28ab0e2c193ed4f1b765be49f12320fcfff32e9f49c9c03a81637304aded454f9e75eea2903bb7b9bb9428beda05f989c0e484071654e209cbf269d80713b6dbedd9cc09252c22d9aeb6e829e897899e04dbca9937c42e858406062649963f3a6c4b79fc9b3cdac09b7489e1bbdf7cfbe7705d86e4146e5ceb29eb30771720afef5980280a2aef1790817c70b151b3d7eda712a186d7d25be89860dc4c30e600c34a891fb9763476506d97f26f7fdf24dd6ad74216e832816db1a0afd7db3c34355c87357fa760e58aa92d7c0ca4386f98adbfeb48e24d82cbd1b7898682ee9831b5c74da6c8655b86b0c12bc4fa349aea49a4a32cf27c51adee72c3569a5aa3ed7ada939783f513010d34c48f71239fa746376a9b588798ead8503b743591c63e9838273fa9d99c7ed45d41bef3b8f50dca42e40afb46794a232b961b1323a604a1e98bbb4a494374af80aaa2861509d6b51369ca77fd78698454acbea204f54d570344142852baa988b1850adb57475154fa54f68fe3bcb368b4d414e23c603818a90ec4cde7226945326ef2f28b5e576edbe56"}) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000004640), r4) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r3, &(0x7f0000004740)={&(0x7f0000004600), 0xc, &(0x7f0000004700)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="011f29bd7000fbdbdf2501003c2d50938efa8b6c0000270003000300000000000000080002d2abb42cc7de15c10004000000"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x5602, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(0xffffffffffffffff, 0x41015500, 0x0) r6 = prctl$auto(0x3, 0x1002, 0x0, 0x0, 0xfffffffffffffff7) setrlimit$auto(0x1, &(0x7f0000000240)={0x0, 0x3}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x207ffe) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0\x00', 0xaa002, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x50, 0x0, 0x9) read$auto(0x3, 0x0, 0xfffffdef) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r7, 0x0, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), r1) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) 5.568667566s ago: executing program 2 (id=2301): ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0xa, 0x3) r1 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x40, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000780), 0x8000, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x1, 0x0, 0x80000000) write$auto(0x1, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x44000000000df, 0xeb1, 0x401, 0x28000) io_uring_setup$auto(0x58, &(0x7f0000000080)={0x6, 0x5, 0xfff7fffe, 0x6, 0x7fff, 0x0, 0xffffffffffffffff, [0x4, 0x4, 0x200002], {0x0, 0x125, 0x4, 0x2de, 0x500, 0x5, 0x100, 0x6, 0xab}, {0xfff7ffff, 0x2, 0x52, 0x7b, 0x8, 0xc, 0x76c5, 0x1, 0x8002000000000000}}) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r5 = socket(0xa, 0x2, 0x3a) open(&(0x7f0000000140)='./file0\x00', 0x220240, 0x82) setsockopt$auto(r5, 0x29, 0x40, 0x0, 0x110) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x40000) sendmsg$auto_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000003280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003240)={&(0x7f00000002c0)={0x1bec, r7, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HWSIM_ATTR_PMSR_RESULT={0x1bd0, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1bcc, 0x5, 0x0, 0x1, [{0x1824, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x1b4, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x7}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x2}, @NL80211_PMSR_RESP_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x100000}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xfa}]}]}, @NL80211_PMSR_RESP_ATTR_DATA={0x164, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x14, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_NSS={0x5}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x7}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x1c, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0xe5}, @HWSIM_RATE_INFO_ATTR_MCS={0x5}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x100}]}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x11, 0x14, '/dev/media11\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x7, 0x14, '---'}]}, @NL80211_PMSR_TYPE_FTM={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xae}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xffff8001}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x1d, 0x13, '/dev/dvb/adapter0/demux0\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xb0}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x4}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x3ff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xa2b}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0xda9b}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x11, 0x14, '/dev/media11\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x7}]}]}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x2f, 0x1, "c15b7060ade1684f846b17b3fbd91fcb52bea3b34dc665c72e5e5b702032327c03ce55bfe780fc26effb36"}, @NL80211_PMSR_PEER_ATTR_RESP={0x274, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x264, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x80000001}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xffffffffffff8000}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x1c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x4}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x7}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x80000001}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0xfffffff7}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xb}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x14, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x3}, @HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0x6}]}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x9b}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0xc, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0xca}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0xf}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x28000000000000}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x1d, 0x14, '/dev/dvb/adapter0/demux0\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xfff}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x65bfda80}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x24, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0x36}, @HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x4}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x5}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0xffffffff00000000}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x3c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x62}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x6}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x4}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x2}, @HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0x64}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x2}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x20}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8}]}]}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x7ff}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x55, 0x1, "6b8e6fdd94b2a694674eaeb810d4a47379b98b93020c4e84ca9f5ec55dd32b872bddac562c859736055cbca6dd93b8dcdb0df226e0334c3c8602c9d7209aa243da759d5ee7213024da41152285eceaa53c"}, @NL80211_PMSR_PEER_ATTR_RESP={0x180, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x5, 0x14, '!'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x101}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x5e}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0xe04}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x5}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xfffffffffffffff7}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x80000001}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0xe}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x7f}]}]}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x3ff}, @NL80211_PMSR_RESP_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x10000}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0xddcf}]}]}, @NL80211_PMSR_RESP_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x14, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0xd5}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0xff}]}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x44, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x3}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0x8}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0xea}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x6c}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x1}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x6}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x4}]}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xf5, 0x1, "540959bb08b8c5bc84acad636c9dd7bc1eb187761a4a22488e0530a38c1a85a635978712eff665c0a29e584ca27f8029a18a891be30dd6c92f71c36ed4fd2b206f38d8a3c91ecfc19a7187db2977f5840fa66089b897b8b0d3ae77ee59e5120da79d83649da866a9b15c9239737c4ff3eda9d7dd6245dee1016800e846d6c9d03764f93734eeff60d30631509289eb96c1158e3c0e7032ef7dd8d8c5eef98a824eae913c2a3054ff26f231c0d3e23a6751dda5bdd8780e6ceff4c6326e5c652f930119bbb620cfb20200ec641b3d443a57904a7578303f38fd3ed6b372783b6fd238cf13b07f588ef0d1094992303d92a3"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xe1, 0x1, "8e0a13eec4c1d53c8c50c6622465b92d80ae3b68d5b797f604d8a918e7532d50f8f6a2e7a197eab929e62a78e97bee862cd64771ca93430c0950e041343ad26aee0c188033a47234c8e4506c5911662c121449486d457f7ddd6cbf2102d913dc60cf86f79f8ff3875d6c5eeeda65827a112c8673270650170dd2dc47b3b0ed8bbe4c71e48c6edf84616a7efe0ccdc6efca40011eb543a79ad69789766d9b0adaf3c2848a958f831df20975d1eaee3d2389c352772f1b9ca4482ac848145219e05de57733dd5b9dd5cecb42f63c37d250238f4a615efeef5cb3f75d6457"}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xe8, 0x1, "69bc5bc7ad348b94703598d4c0d84dc27c6b660617971a69ee874707c800c95cb53e53a21ffbca28e1845d51a5eb7b381bbcc871d6d9ef8c905ddd74da67830471e287fac880743a1c41f82a0cfc6528c2b3df53c9fdfaf714d228cf634f9a87c330343b5786b1255a2c87184eca81b40f475ff830e867495e70d1e7c57a29bb9ed0600d7dea643c66afa60ff3d5092487cb08175d29ff428cf74da559ee37aa15ae2e5ca4bd870bef0926ebf49ae219a3901f3c046ff2b36fc8090e702d408b6bcc74644a60b40c84072c986afe8981a6eef7373a40d0152da94ce6ae2ce6bcb9c392ba"}]}, {0x2b4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x1b4, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x19c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x28}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0xfffffffffffffffd}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x40}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x8b9}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x34, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0x40}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x8}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x2}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x8}, @HWSIM_RATE_INFO_ATTR_NSS={0x5}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xa}]}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x4}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x100000001}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xed}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0xc, 0x13, '!*!#:&[!'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x120000000000000}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x98}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x24, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x1}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x80}, @HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0x6}, @HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0x5}]}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xae}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x1d, 0x13, '/dev/dvb/adapter0/demux0\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x1}]}]}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x8}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x10}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xd1, 0x1, "dddaba4eeb95d561732793dcb65637c48621a0cdb57236e6573dff28a7c62bed619a3f7cc87af336bdf65434e9bf367ee28fdd0c9873f3e73f2228236e06eacda5c6bc4593f7a5bc4381774734e940a825fc089e134398e0660208502bc4022bb6d8799a576a0f7c7aa60da8935ba653c01cd978df897926fca6a2236dbd0982dbfb5d61cf25c95d80c1f7763332d0d25c723d201edcc750405cbb0b8e4d52b6616f2348174e4f61b55950eacecf794e3891059f0aa090d6674ac5349da8e3a0dbbd350569d00c2547782eab68"}, @NL80211_PMSR_PEER_ATTR_RESP={0xc, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x100}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x1c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x1}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}]}]}]}]}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_TX_INFO_FLAGS={0x4}]}, 0x1bec}}, 0x20000000) ioctl$auto_media_devnode_fops_mc_devnode(r1, 0x80047c05, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x3736f5deb8f86850, 0x0) ioctl$auto_BTRFS_IOC_TREE_SEARCH(r0, 0x7c80, 0x0) 4.846484688s ago: executing program 9 (id=2302): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) open$dir(0x0, 0x10000, 0x6) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x7) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) write$auto(r2, 0x0, 0x0) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000100)='/dev/usbmon8\x00', 0x0, 0x0) read$auto_mon_fops_binary_mon_bin(r3, 0x0, 0x30) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 4.477626838s ago: executing program 2 (id=2303): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000d40), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000d40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) (async) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0xb, 0x1, 'dummy0\x00'}, @SMC_PNETID_ETHNAME={0x10, 0x2, 'du3>\x1a\x00\f\x00\xff\xfd\x00\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041040}, 0x44c0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r1, 0x305, 0x70bd2a, 0x25dfdbfc, {}, [@NETDEV_A_QSTATS_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r6 = socket(0x2, 0x3, 0x8) r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r6) sendmsg$auto_NFC_CMD_SE_IO(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c080000c0915f15cc76ee94297f2709b9ca2f1b536ab693631519524835ceee56a8906e111715f23a21bd543317f1a13251866f2c4dde3c64631172f6afeadaaf3f7e1f53feee16dbe56cc0e07bc0f18c578a7dbac6b4ab27275ac39aea94b7c0c978e59c697fdbc6f1a634bd28957edc9c957dfa243f49d115ef9540e2fbfee8cbafdde0446adbec7ae4c766a877b5e2de359d4e1aa9cabc2517c0a37310534b0a5556af42be81ed35346b681d50241e84d125f7a78845f478f67b8776c0e6d9ac6650ef0c90c29579aadb4d1f1ca7896e2665d58cca4dd36a9c1bf38e5321e765151788b0345ad8", @ANYRES16=r8, @ANYBLOB="00032abd7000ffdbdf251b00000005000f0007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x8880) sendmsg$auto_NFC_CMD_GET_TARGET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) 4.184307525s ago: executing program 2 (id=2304): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000200), 0x280000, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x9, 0xfffffffe, [{0xffffffffffffffff, 0x0, 0x4000000000000000, 0x40000002}]}) (async) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x9, 0xfffffffe, [{0xffffffffffffffff, 0x0, 0x4000000000000000, 0x40000002}]}) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @inferred=r0}}) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0x660f, 0x5], {0x7ffd, 0x7, 0xc, 0x4, 0x4, 0x3, 0x100003ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0xfffffff7, 0x449e}}) (async) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0x660f, 0x5], {0x7ffd, 0x7, 0xc, 0x4, 0x4, 0x3, 0x100003ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0xfffffff7, 0x449e}}) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) (async) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000000), 0x4205ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x4}, 0x20000005}, 0x5, 0xcae) (async) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000000), 0x4205ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x4}, 0x20000005}, 0x5, 0xcae) 3.9770053s ago: executing program 7 (id=2305): r0 = socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x2000b, 0x1, 0xeb1, r0, 0x8000) socketpair$auto(0xb, 0x9, 0x800, 0x0) setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x10000, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, r0, 0x4) clock_adjtime$auto(0x6, &(0x7f0000000200)={0x6, 0x0, 0x504, 0x9, 0x7, 0x8ac, 0x80, 0x0, 0x3ff, 0x4, 0x350, {0x5, 0x6}, 0x3, 0x6, 0x5, 0x3a9, 0x0, 0x683, 0x78771cb, 0xf, 0x80, 0x9, 0x39bc5ade}) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0x1, 0xb8}}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x80, 0x6, 0x300, 0x3, 0x3, 0x4000000, &(0x7f0000000240)='C2&'}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x298a41, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x5, 0xd, 0x1, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x7ff]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 3.932588393s ago: executing program 2 (id=2306): r0 = socket(0xa, 0x4, 0x9000300) sendfile$auto(r0, r0, 0x0, 0x8001) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x55d042, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) lsm_set_self_attr$auto(0x7, &(0x7f0000000000)={0x102, 0x585, 0x20000000000, 0x28, "100832c8acae39f049d50ad8eb3eea1cbb950cfb17e4c1e5adbff7117e987f031501a55d4ab94486"}, 0x20, 0x12000) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x200, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) (async, rerun: 32) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) (async) preadv2$auto(r1, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) (async) r4 = fanotify_init$auto(0x1, 0x2) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f00000000c0)="e67cd06de0e4948ee1d1e6e38261e46fae3ede5b755dc3584384fcf994d1b61232435321739ebd4f58413498dd4eab50e62c051c412cbdee15da2800d7812d28ee1f2a72687198ce5955e064807cb429ecf3234ab7b36354863ab4b0755dbfd5a2ca775b5d42f24b0b92999d80dac5b8e584423f12c0ec77ada09135c3cd919a447f9b4b49b236849b98c5f3f2c717c7b6e66eede8f1cb9a5cc14f9c8bbab28057b5fca8db2650cd7139ee148495fcc665e6c99f33b95ebcaf6b5fac689da23dfab8f5e29c98270d60b6ebbfd25f6fe173053e67f6b917c32102304873b2462045999d", 0xe3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) r5 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) unshare$auto(0x40000080) mmap$auto(0x1, 0x1, 0x3, 0xeb1, r5, 0x8000) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r6, 0x921064a0, r6) r7 = semctl$auto(0x10, 0x180, 0xe, 0x3) capset$auto(&(0x7f0000000200)={0x8, r7}, &(0x7f0000000240)={0x3, 0xd0, 0x3}) (async, rerun: 32) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async, rerun: 32) madvise$auto(0x0, 0x20499d, 0x9) 2.818844046s ago: executing program 9 (id=2307): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x2) landlock_restrict_self$auto(r0, 0x1) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000100)={@sival_int=0x6d, @inferred=r0, 0x8}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x80800, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/zoneinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/166, 0xa6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_timeout\x00', 0x68041, 0x0) ioctl$auto(r1, 0x5101, 0x3) r3 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) shmctl$auto_SHM_LOCK(0xe1c, 0xb, &(0x7f0000000580)={{0x10001, 0x0, 0x0, 0x10001, 0x2, 0x7, 0x5}, 0x7678, 0x2, 0x1, 0xb, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)="44eb47967d49c7d1fc23be942cca55c0e8b7b2eb2cdd96b155ad48c9ae37f8842c31128e88c04d68f8ce190b78a37024f9e72e216790900d6234e165c1b196850e2210e5b6d17a86d038082ae05198bf908d9c304bbf774756fce5f3f81044fa879806e1f85ffa76088c0921f00477ecf707d880dd22f5e9564202badf46a5b2126606b76ae5be45a11de1e759f826b8b604a433ef0f49faba0f3455ea8b41168efcd383bda71cf0d7ac4d6698287efb7155724e13f8d88bbbfbb2f5a43ba3c7c42d26a0d362b8a8458bab14e25b532cbb701544964b6d7afb2f2ddad82962f66dda0a0934cc8d5c94fcae857bbd", &(0x7f0000000480)="b8741f64b9b5abd4bdcca4d14242eca039f57ad9b5651f55115708ea3ffd65dbefbda9a9bf19ecac0208d29707ae18d5376f8d7cff4a81ad9c5d4c3c9a979919ef7a6bb7a6df08b1cf3cfce57e90b3779dc3f24eccec2f5991e2fecce04e29a409724de5b2aa2655fd1c012bde623691fc045ccef75a00b73a44f287126eff3bf4a5fd9de9ee3003ada0229615e075b51bb0809238b295ab6daba7e2b8ac7e0ef1af2bce370a35"}) fsconfig$auto_FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000140)='@!\x00', &(0x7f0000000240)="dffdcc37693f9cc5c77f9f50b7a71204c1698054e5076081a5d9332e8541cd00ae44724b4d5882e58c8669be86bea11f1d11351ec8301934025e7cb7350feeed6776742496171698ac07ec8df3f99d15f45ca8205d9a7270e40bb8ceb299e6764c524bd859", r4) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/flags\x00', 0x189082, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)=@link_detach={r5}, 0x90) futex$auto(0x0, 0x8, 0x3d, 0x0, 0x0, 0x0) futex$auto(0x0, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x24, r6, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000400), r7) sendmsg$auto_ETHTOOL_MSG_MM_SET(r7, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c92522f5ad583e12ec8f36805f65ffa226ca797ea76640ebfc41fb5c9cac71a04ff9e0a23b5c9323c82e7c599a765a74a915857692d7e8f68d3eefe972f894961f66d919404bace9ff9cbcf20aa45f805c84af35164cb537256fe8bab4a8626d395cb4047b6534acbcdcf0432da9b7dee2047168438456064d772399bcfd113043d2f58bc964130ae892795bd70ba606584eab4f910d60fe1f36de1c9e056330708a0c84c512e9edd0982f82774a8797079bc2ee2a223eb6fb8ebc9a947ca23b74506366e0", @ANYRES16=r9, @ANYBLOB="04002cbd7000fddbdf252b0000000500070000000000050002000100000008000900fffffeff0500030000000000080005000600000008000900fffeffff0800050004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000055}, 0x200408c1) 2.581759991s ago: executing program 7 (id=2308): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) mmap$auto(0x3, 0xb2e9, 0x3, 0x18, r0, 0x400) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x480, 0x0) socket(0x10, 0x2, 0x4) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) sendmsg$auto_NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x300040c0}, 0x24000080) sendmsg$auto_NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="40001800", @ANYRES16, @ANYBLOB="200028bd70005900000003000000080001000900000005000c000500000008000e00ff7f000004001400060011000b000000050010007f000000"], 0x40}}, 0x1) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000001c0), 0x214601, 0x0) sendmsg$auto_NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0xc, 0x13, 0x0, 0x1, [@typed={0x8, 0xe9, 0x0, 0x0, @fd=r2}]}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x7}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x90) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) socket(0x10, 0x2, 0x40000008) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) mprotect$auto(0x200000000000, 0x806124, 0x8) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r4, &(0x7f0000000100)={0x0, 0x7}, 0x4000000000007) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/conf/wg2/accept_ra_rtr_pref\x00', 0xca041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) accept4$auto(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @none, 0x9}, 0x0, 0x243) r5 = socket(0x10, 0x2, 0x4) close_range$auto(r5, 0x8, 0x0) 2.04207907s ago: executing program 7 (id=2309): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/kernel/parameters/panic_print\x00', 0x80862, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x2) close_range$auto(r0, 0x8, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x7ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1, 0x9}) ioctl$auto(0x3, 0x5411, 0x38) write$auto_aoe_fops_aoechr(0xffffffffffffffff, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x561582, 0x0) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x7c7, 0x6, 0x14, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(r3, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 1.603237747s ago: executing program 9 (id=2310): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) io_setup$auto(0x7ffe, &(0x7f0000000000)) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x5, 0x202000d, 0x3, 0xfc, r0, 0x7fff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop2/queue/nomerges\x00', 0xa001, 0x0) write$auto(r1, 0x0, 0x81) socket(0x25, 0x800, 0x106) connect$auto(0x3, 0x0, 0x54) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) bpf$auto_BPF_MAP_FREEZE(0x16, 0x0, 0x42d0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x440402, 0x0) mmap$auto(0x0, 0x95, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) ptrace$auto_ARCH_SHSTK_DISABLE(0x7, 0x0, 0x3, 0x5002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x6, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x84, 0x1ff, 0x3d7e, 0x0, 0x1f, 0x4}}, 0x92) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.322329309s ago: executing program 2 (id=2311): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtd0\x00', 0x1, 0x0) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000120bd7000fcdbdf252600000008000b00ffffff7f0500250007000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xf) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x11, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) semget$auto(0x0, 0x2e4a, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) socket(0x11, 0x5, 0x100) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x7f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) unshare$auto(0x40000080) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r4, 0x8000) 0s ago: executing program 9 (id=2312): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) kernel console output (not intermixed with test programs): rcu_is_watching+0x12/0xc0 [ 736.786460][T15910] do_syscall_64+0x115/0x840 [ 736.786496][T15910] ? clear_bhb_loop+0x40/0x90 [ 736.786526][T15910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.786552][T15910] RIP: 0033:0x7f21ae19ce59 [ 736.786572][T15910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.786597][T15910] RSP: 002b:00007f21af0b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 736.786629][T15910] RAX: ffffffffffffffda RBX: 00007f21ae415fa0 RCX: 00007f21ae19ce59 [ 736.786646][T15910] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000005 [ 736.786663][T15910] RBP: 00007f21ae232d6f R08: 0000000000000000 R09: 0000000000000000 [ 736.786679][T15910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.786695][T15910] R13: 00007f21ae416038 R14: 00007f21ae415fa0 R15: 00007fffb7ba60d8 [ 736.786727][T15910] [ 737.237124][T11209] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 737.346402][T15915] can: request_module (can-proto-3) failed. [ 738.863944][T15954] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 739.307403][T11209] Bluetooth: hci2: command 0x2016 tx timeout [ 739.644426][T15971] nvme_fabrics: missing parameter 'transport=%s' [ 739.738266][T15971] nvme_fabrics: missing parameter 'nqn=%s' [ 740.049246][T15980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1791'. [ 740.208143][T15980] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 741.390428][T14622] Bluetooth: hci2: command 0x2016 tx timeout [ 743.560870][T16029] Process accounting resumed [ 744.720863][T16067] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4091327663 out of range (51000000..2150000000) [ 745.361157][T16088] can: request_module (can-proto-5) failed. [ 746.233022][T16119] FAULT_INJECTION: forcing a failure. [ 746.233022][T16119] name failslab, interval 1, probability 0, space 0, times 0 [ 746.276028][T16111] can: request_module (can-proto-5) failed. [ 746.334014][T16119] CPU: 0 UID: 0 PID: 16119 Comm: syz.0.1813 Tainted: G I L syzkaller #0 PREEMPT(full) [ 746.334057][T16119] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 746.334068][T16119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 746.334084][T16119] Call Trace: [ 746.334092][T16119] [ 746.334104][T16119] dump_stack_lvl+0x100/0x190 [ 746.334155][T16119] should_fail_ex.cold+0x5/0xa [ 746.334186][T16119] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 746.334214][T16119] should_failslab+0xc2/0x120 [ 746.334246][T16119] __kmalloc_noprof+0xe0/0x850 [ 746.334293][T16119] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 746.334324][T16119] vb2_core_reqbufs+0x382/0xf30 [ 746.334357][T16119] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 746.334401][T16119] __vb2_init_fileio+0x32d/0x1000 [ 746.334428][T16119] ? aa_file_perm+0x7f3/0x14d0 [ 746.334474][T16119] __vb2_perform_fileio+0x91e/0x1380 [ 746.334511][T16119] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 746.334538][T16119] ? __pfx___might_resched+0x10/0x10 [ 746.334574][T16119] vb2_fop_read+0x211/0x520 [ 746.334604][T16119] v4l2_read+0x229/0x2c0 [ 746.334643][T16119] ? __pfx_v4l2_read+0x10/0x10 [ 746.334682][T16119] vfs_read+0x1e4/0xb30 [ 746.334715][T16119] ? __pfx_vfs_read+0x10/0x10 [ 746.334741][T16119] ? find_held_lock+0x2b/0x80 [ 746.334772][T16119] ? __fget_files+0x215/0x3d0 [ 746.334801][T16119] ? __fget_files+0x215/0x3d0 [ 746.334835][T16119] ? __fget_files+0x21f/0x3d0 [ 746.334872][T16119] ksys_read+0x12a/0x250 [ 746.334900][T16119] ? __pfx_ksys_read+0x10/0x10 [ 746.334960][T16119] ? rcu_is_watching+0x12/0xc0 [ 746.334993][T16119] do_syscall_64+0x115/0x840 [ 746.335029][T16119] ? clear_bhb_loop+0x40/0x90 [ 746.335059][T16119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.335085][T16119] RIP: 0033:0x7f83bcd9ce59 [ 746.335106][T16119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.335137][T16119] RSP: 002b:00007f83bdc93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 746.335162][T16119] RAX: ffffffffffffffda RBX: 00007f83bd015fa0 RCX: 00007f83bcd9ce59 [ 746.335178][T16119] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000005 [ 746.335193][T16119] RBP: 00007f83bce32d6f R08: 0000000000000000 R09: 0000000000000000 [ 746.335208][T16119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.335224][T16119] R13: 00007f83bd016038 R14: 00007f83bd015fa0 R15: 00007ffd17b67b38 [ 746.335256][T16119] [ 747.942032][T16145] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[16145] [ 748.071404][T16152] netlink: 337 bytes leftover after parsing attributes in process `syz.3.1815'. [ 748.772686][T16165] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1822'. [ 749.001351][T16173] FAULT_INJECTION: forcing a failure. [ 749.001351][T16173] name failslab, interval 1, probability 0, space 0, times 0 [ 749.071767][T16173] CPU: 0 UID: 0 PID: 16173 Comm: syz.3.1823 Tainted: G I L syzkaller #0 PREEMPT(full) [ 749.071812][T16173] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 749.071822][T16173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 749.071839][T16173] Call Trace: [ 749.071847][T16173] [ 749.071857][T16173] dump_stack_lvl+0x100/0x190 [ 749.071907][T16173] should_fail_ex.cold+0x5/0xa [ 749.071940][T16173] should_failslab+0xc2/0x120 [ 749.071971][T16173] __kmalloc_cache_noprof+0x7a/0x6f0 [ 749.072009][T16173] ? fuse_dev_alloc+0xc4/0x2c0 [ 749.072133][T16173] fuse_dev_alloc+0xc4/0x2c0 [ 749.072171][T16173] fuse_dev_alloc_install+0x13/0x40 [ 749.072209][T16173] cuse_channel_open+0x100/0x7f0 [ 749.072262][T16173] ? __pfx_cuse_channel_open+0x10/0x10 [ 749.072302][T16173] misc_open+0x26d/0x450 [ 749.072331][T16173] ? __pfx_misc_open+0x10/0x10 [ 749.072356][T16173] chrdev_open+0x234/0x6a0 [ 749.072389][T16173] ? __pfx_apparmor_file_open+0x10/0x10 [ 749.072425][T16173] ? __pfx_chrdev_open+0x10/0x10 [ 749.072460][T16173] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 749.072503][T16173] do_dentry_open+0x6ab/0x14d0 [ 749.072535][T16173] ? __pfx_chrdev_open+0x10/0x10 [ 749.072575][T16173] vfs_open+0x82/0x3f0 [ 749.072616][T16173] path_openat+0x208c/0x31a0 [ 749.072658][T16173] ? __pfx_path_openat+0x10/0x10 [ 749.072701][T16173] do_file_open+0x20e/0x430 [ 749.072736][T16173] ? __pfx_do_file_open+0x10/0x10 [ 749.072789][T16173] ? alloc_fd+0x476/0x790 [ 749.072823][T16173] ? do_getname+0x191/0x390 [ 749.072863][T16173] do_sys_openat2+0x10d/0x1e0 [ 749.072903][T16173] ? __pfx_do_sys_openat2+0x10/0x10 [ 749.072953][T16173] __x64_sys_openat+0x12d/0x210 [ 749.072994][T16173] ? __pfx___x64_sys_openat+0x10/0x10 [ 749.073040][T16173] ? rcu_is_watching+0x12/0xc0 [ 749.073073][T16173] do_syscall_64+0x115/0x840 [ 749.073113][T16173] ? clear_bhb_loop+0x40/0x90 [ 749.073145][T16173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.073171][T16173] RIP: 0033:0x7ff786d9ce59 [ 749.073191][T16173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.073215][T16173] RSP: 002b:00007ff787c8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 749.073239][T16173] RAX: ffffffffffffffda RBX: 00007ff787016090 RCX: 00007ff786d9ce59 [ 749.073256][T16173] RDX: 0000000000082043 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 749.073273][T16173] RBP: 00007ff786e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 749.073288][T16173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.073304][T16173] R13: 00007ff787016128 R14: 00007ff787016090 R15: 00007fff97c4a3d8 [ 749.073337][T16173] [ 749.724621][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.735827][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.026846][T16197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1829'. [ 751.771123][T16196] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 751.808576][T16196] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 751.852105][T16196] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 751.904131][T16196] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 752.255652][T16213] netlink: 337 bytes leftover after parsing attributes in process `syz.2.1832'. [ 752.367029][T16215] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 753.070295][T11209] Bluetooth: hci0: command 0x0406 tx timeout [ 753.869415][T11209] Bluetooth: hci2: command 0x2016 tx timeout [ 753.875500][T14622] Bluetooth: hci1: command 0x0406 tx timeout [ 753.947016][T11209] Bluetooth: hci3: command 0x2016 tx timeout [ 754.462532][T16258] binder: 16257:16258 unknown command 0 [ 754.485610][T16258] binder: 16257:16258 ioctl c0306201 0 returned -22 [ 754.699989][T16273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1842'. [ 754.810311][T16274] vivid-007: ================= START STATUS ================= [ 754.848112][T16274] vivid-007: Enable Output Cropping: true [ 754.883259][T16274] vivid-007: Enable Output Composing: true [ 754.928070][T16274] vivid-007: Enable Output Scaler: true [ 754.964110][T16274] vivid-007: Tx RGB Quantization Range: Automatic [ 755.039970][T16274] vivid-007: Transmit Mode: HDMI [ 755.078511][T16274] vivid-007: Hotplug Present: 0x00000000 [ 755.120570][T16274] vivid-007: RxSense Present: 0x00000000 [ 755.182459][T16274] vivid-007: EDID Present: 0x00000000 [ 755.242336][T16274] vivid-007: ================== END STATUS ================== [ 755.555062][T16270] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 755.621872][T16270] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 755.679358][T16270] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 755.715176][T16270] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 756.414100][T16290] can: request_module (can-proto-5) failed. [ 756.747677][T11209] Bluetooth: hci0: command 0x0406 tx timeout [ 757.073663][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'. [ 757.300543][T16304] Process accounting resumed [ 757.571120][T16318] FAULT_INJECTION: forcing a failure. [ 757.571120][T16318] name failslab, interval 1, probability 0, space 0, times 0 [ 757.596715][T16312] can: request_module (can-proto-0) failed. [ 757.611534][T16318] CPU: 0 UID: 0 PID: 16318 Comm: syz.1.1849 Tainted: G I L syzkaller #0 PREEMPT(full) [ 757.611578][T16318] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 757.611590][T16318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 757.611606][T16318] Call Trace: [ 757.611614][T16318] [ 757.611624][T16318] dump_stack_lvl+0x100/0x190 [ 757.611676][T16318] should_fail_ex.cold+0x5/0xa [ 757.611707][T16318] should_failslab+0xc2/0x120 [ 757.611739][T16318] __kmalloc_cache_noprof+0x7a/0x6f0 [ 757.611777][T16318] ? __vb2_init_fileio+0x18f/0x1000 [ 757.611807][T16318] ? trace_contention_end+0x122/0x170 [ 757.611836][T16318] __vb2_init_fileio+0x18f/0x1000 [ 757.611864][T16318] ? aa_file_perm+0x7f3/0x14d0 [ 757.611910][T16318] __vb2_perform_fileio+0x91e/0x1380 [ 757.611945][T16318] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 757.611973][T16318] ? __pfx___might_resched+0x10/0x10 [ 757.612001][T16318] ? futex_hash+0x141/0x370 [ 757.612047][T16318] vb2_fop_read+0x211/0x520 [ 757.612076][T16318] v4l2_read+0x229/0x2c0 [ 757.612114][T16318] ? __pfx_v4l2_read+0x10/0x10 [ 757.612154][T16318] vfs_read+0x1e4/0xb30 [ 757.612187][T16318] ? __pfx_vfs_read+0x10/0x10 [ 757.612212][T16318] ? find_held_lock+0x2b/0x80 [ 757.612243][T16318] ? __fget_files+0x215/0x3d0 [ 757.612272][T16318] ? __fget_files+0x215/0x3d0 [ 757.612314][T16318] ? __fget_files+0x21f/0x3d0 [ 757.612352][T16318] ksys_read+0x12a/0x250 [ 757.612380][T16318] ? __pfx_ksys_read+0x10/0x10 [ 757.612411][T16318] ? rcu_is_watching+0x12/0xc0 [ 757.612446][T16318] do_syscall_64+0x115/0x840 [ 757.612481][T16318] ? clear_bhb_loop+0x40/0x90 [ 757.612513][T16318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.612540][T16318] RIP: 0033:0x7f21ae19ce59 [ 757.612564][T16318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.612589][T16318] RSP: 002b:00007f21af0b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 757.612613][T16318] RAX: ffffffffffffffda RBX: 00007f21ae415fa0 RCX: 00007f21ae19ce59 [ 757.612630][T16318] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004 [ 757.612646][T16318] RBP: 00007f21ae232d6f R08: 0000000000000000 R09: 0000000000000000 [ 757.612661][T16318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.612676][T16318] R13: 00007f21ae416038 R14: 00007f21ae415fa0 R15: 00007fffb7ba60d8 [ 757.612708][T16318] [ 757.993680][T11209] Bluetooth: hci1: command 0x0406 tx timeout [ 758.002905][T11209] Bluetooth: hci2: command 0x2016 tx timeout [ 758.010624][T11209] Bluetooth: hci3: command 0x2016 tx timeout [ 758.889046][T14622] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 759.189627][T16289] Process accounting resumed [ 759.498750][T16346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1855'. [ 760.411546][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'. [ 760.463183][T16362] FAULT_INJECTION: forcing a failure. [ 760.463183][T16362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.541238][T16362] CPU: 0 UID: 0 PID: 16362 Comm: syz.1.1857 Tainted: G I L syzkaller #0 PREEMPT(full) [ 760.541278][T16362] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 760.541288][T16362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 760.541302][T16362] Call Trace: [ 760.541310][T16362] [ 760.541318][T16362] dump_stack_lvl+0x100/0x190 [ 760.541365][T16362] should_fail_ex.cold+0x5/0xa [ 760.541395][T16362] _copy_from_user+0x2e/0xd0 [ 760.541431][T16362] copy_msghdr_from_user+0x9f/0x4f0 [ 760.541469][T16362] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 760.541511][T16362] ? __lock_acquire+0x4a5/0x2630 [ 760.541555][T16362] ___sys_recvmsg+0xdd/0x1a0 [ 760.541588][T16362] ? __pfx____sys_recvmsg+0x10/0x10 [ 760.541624][T16362] ? find_held_lock+0x2b/0x80 [ 760.541670][T16362] do_recvmmsg+0x301/0x760 [ 760.541707][T16362] ? __pfx_do_recvmmsg+0x10/0x10 [ 760.541738][T16362] ? ksys_write+0x190/0x250 [ 760.541770][T16362] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 760.541806][T16362] ? __pfx_vfs_write+0x3/0x10 [ 760.541840][T16362] ? __fget_files+0x21f/0x3d0 [ 760.541875][T16362] __x64_sys_recvmmsg+0x22a/0x280 [ 760.541904][T16362] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 760.541933][T16362] ? rcu_is_watching+0x12/0xc0 [ 760.541963][T16362] do_syscall_64+0x115/0x840 [ 760.541996][T16362] ? clear_bhb_loop+0x40/0x90 [ 760.542030][T16362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.542054][T16362] RIP: 0033:0x7f21ae19ce59 [ 760.542072][T16362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.542095][T16362] RSP: 002b:00007f21af033028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 760.542117][T16362] RAX: ffffffffffffffda RBX: 00007f21ae416360 RCX: 00007f21ae19ce59 [ 760.542132][T16362] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000007 [ 760.542146][T16362] RBP: 00007f21af033090 R08: 0000000000000000 R09: 0000000000000000 [ 760.542160][T16362] R10: 00000000000066a6 R11: 0000000000000246 R12: 0000000000000001 [ 760.542174][T16362] R13: 00007f21ae4163f8 R14: 00007f21ae416360 R15: 00007fffb7ba60d8 [ 760.542204][T16362] [ 761.522583][T16370] FAULT_INJECTION: forcing a failure. [ 761.522583][T16370] name failslab, interval 1, probability 0, space 0, times 0 [ 761.557232][T16370] CPU: 0 UID: 0 PID: 16370 Comm: syz.3.1859 Tainted: G I L syzkaller #0 PREEMPT(full) [ 761.557277][T16370] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 761.557287][T16370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 761.557304][T16370] Call Trace: [ 761.557312][T16370] [ 761.557322][T16370] dump_stack_lvl+0x100/0x190 [ 761.557372][T16370] should_fail_ex.cold+0x5/0xa [ 761.557404][T16370] should_failslab+0xc2/0x120 [ 761.557437][T16370] __kmalloc_cache_noprof+0x7a/0x6f0 [ 761.557476][T16370] ? __vb2_init_fileio+0x18f/0x1000 [ 761.557505][T16370] ? trace_contention_end+0x122/0x170 [ 761.557537][T16370] __vb2_init_fileio+0x18f/0x1000 [ 761.557565][T16370] ? aa_file_perm+0x7f3/0x14d0 [ 761.557610][T16370] __vb2_perform_fileio+0x91e/0x1380 [ 761.557647][T16370] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 761.557677][T16370] ? __pfx___might_resched+0x10/0x10 [ 761.557704][T16370] ? futex_hash+0x141/0x370 [ 761.557750][T16370] vb2_fop_read+0x211/0x520 [ 761.557779][T16370] v4l2_read+0x229/0x2c0 [ 761.557820][T16370] ? __pfx_v4l2_read+0x10/0x10 [ 761.557860][T16370] vfs_read+0x1e4/0xb30 [ 761.557893][T16370] ? __pfx_vfs_read+0x10/0x10 [ 761.557919][T16370] ? find_held_lock+0x2b/0x80 [ 761.557957][T16370] ? __fget_files+0x215/0x3d0 [ 761.557987][T16370] ? __fget_files+0x215/0x3d0 [ 761.558023][T16370] ? __fget_files+0x21f/0x3d0 [ 761.558062][T16370] ksys_read+0x12a/0x250 [ 761.558091][T16370] ? __pfx_ksys_read+0x10/0x10 [ 761.558123][T16370] ? rcu_is_watching+0x12/0xc0 [ 761.558156][T16370] do_syscall_64+0x115/0x840 [ 761.558192][T16370] ? clear_bhb_loop+0x40/0x90 [ 761.558223][T16370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.558251][T16370] RIP: 0033:0x7ff786d9ce59 [ 761.558271][T16370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.558297][T16370] RSP: 002b:00007ff787cac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 761.558321][T16370] RAX: ffffffffffffffda RBX: 00007ff787015fa0 RCX: 00007ff786d9ce59 [ 761.558337][T16370] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004 [ 761.558353][T16370] RBP: 00007ff786e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 761.558369][T16370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.558384][T16370] R13: 00007ff787016038 R14: 00007ff787015fa0 R15: 00007fff97c4a3d8 [ 761.558416][T16370] [ 762.169881][T11209] Bluetooth: hci0: command 0x0406 tx timeout [ 762.327347][T16345] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 762.334875][T16345] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 762.342723][T16345] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 762.350433][T16345] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 762.846079][T16383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1863'. [ 763.599147][T16382] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 763.606251][T16382] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 763.627963][T16382] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 763.657352][T16382] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 764.171401][T16391] can: request_module (can-proto-5) failed. [ 764.826498][T11209] Bluetooth: hci0: command 0x0406 tx timeout [ 765.636455][T11209] Bluetooth: hci1: command 0x0406 tx timeout [ 765.720874][T11209] Bluetooth: hci3: command 0x2016 tx timeout [ 765.727649][T14622] Bluetooth: hci2: command 0x2016 tx timeout [ 766.861189][T16428] FAULT_INJECTION: forcing a failure. [ 766.861189][T16428] name fail_futex, interval 1, probability 0, space 0, times 0 [ 766.916011][T16428] CPU: 0 UID: 0 PID: 16428 Comm: syz.1.1870 Tainted: G I L syzkaller #0 PREEMPT(full) [ 766.916055][T16428] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 766.916066][T16428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 766.916084][T16428] Call Trace: [ 766.916092][T16428] [ 766.916102][T16428] dump_stack_lvl+0x100/0x190 [ 766.916151][T16428] should_fail_ex.cold+0x5/0xa [ 766.916184][T16428] get_futex_key+0x1d2/0x1510 [ 766.916231][T16428] ? __pfx_get_futex_key+0x10/0x10 [ 766.916275][T16428] ? __lock_acquire+0x4a5/0x2630 [ 766.916331][T16428] futex_wake+0xea/0x530 [ 766.916365][T16428] ? __pfx_futex_wake+0x10/0x10 [ 766.916398][T16428] ? find_held_lock+0x2b/0x80 [ 766.916430][T16428] ? __might_fault+0xc5/0x140 [ 766.916478][T16428] do_futex+0x32b/0x350 [ 766.916504][T16428] ? __pfx_do_futex+0x10/0x10 [ 766.916531][T16428] ? __sys_connect+0xe4/0x170 [ 766.916580][T16428] __x64_sys_futex+0x34f/0x4d0 [ 766.916617][T16428] ? __pfx___x64_sys_futex+0x10/0x10 [ 766.916650][T16428] ? rcu_is_watching+0x12/0xc0 [ 766.916684][T16428] do_syscall_64+0x115/0x840 [ 766.916722][T16428] ? clear_bhb_loop+0x40/0x90 [ 766.916754][T16428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.916780][T16428] RIP: 0033:0x7f21ae19ce59 [ 766.916800][T16428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.916825][T16428] RSP: 002b:00007f21af0b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 766.916849][T16428] RAX: ffffffffffffffda RBX: 00007f21ae415fa8 RCX: 00007f21ae19ce59 [ 766.916866][T16428] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f21ae415fac [ 766.916881][T16428] RBP: 00007f21ae415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 766.916896][T16428] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 766.916911][T16428] R13: 00007f21ae416038 R14: 00007fffb7ba5ff0 R15: 00007fffb7ba60d8 [ 766.916942][T16428] [ 767.342082][T16431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1871'. [ 768.061468][T16430] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 768.070149][T16430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 768.101842][T16430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 768.138746][T16430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 769.309269][T14622] Bluetooth: hci0: command 0x0406 tx timeout [ 770.106715][T11209] Bluetooth: hci1: command 0x0406 tx timeout [ 770.113641][T14622] Bluetooth: hci2: command 0x2016 tx timeout [ 770.187341][T14622] Bluetooth: hci3: command 0x2016 tx timeout [ 773.182030][T16528] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 773.273732][T16528] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 773.452086][T16528] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 774.005630][T16530] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 774.047528][T16530] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 774.053699][ T5647] Process accounting paused [ 774.083387][T16530] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 774.124206][T16530] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 774.524989][T11209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 774.549914][T11209] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 774.558495][T11209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 774.579708][T11209] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 774.588747][T11209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 775.226551][T11209] Bluetooth: hci0: command 0x0406 tx timeout [ 775.463823][T16580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1895'. [ 775.489165][T11209] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 776.106569][T11231] Bluetooth: hci1: command 0x0406 tx timeout [ 776.112983][T11209] Bluetooth: hci2: command 0x2016 tx timeout [ 776.186502][T11209] Bluetooth: hci3: command 0x2016 tx timeout [ 776.219175][T16576] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 776.233704][T16576] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 776.263073][T16576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 776.284930][T16576] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 776.306278][T16576] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 776.325318][T16576] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 776.340568][T16576] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 776.381917][T16576] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 777.038191][T16557] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.064306][T16557] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.097322][T16557] bridge_slave_0: entered allmulticast mode [ 777.105173][T16615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1901'. [ 777.135086][T16557] bridge_slave_0: entered promiscuous mode [ 777.351880][T16557] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.394030][T16557] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.434781][T16557] bridge_slave_1: entered allmulticast mode [ 777.472617][T16557] bridge_slave_1: entered promiscuous mode [ 777.767646][T16557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.873514][T16557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.892506][T16614] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 777.916994][T16614] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 777.944751][T16614] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 777.988927][T16614] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 778.015763][T16614] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 778.208805][T16557] team0: Port device team_slave_0 added [ 778.248459][T16557] team0: Port device team_slave_1 added [ 778.322936][T16557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.356854][T16557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.434354][T16557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.470226][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 778.481211][T16557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.511918][T16557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.635994][T16557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.937289][T16557] hsr_slave_0: entered promiscuous mode [ 778.974668][T16557] hsr_slave_1: entered promiscuous mode [ 779.032097][T16557] debugfs: 'hsr0' already exists in 'hsr' [ 779.072011][T16557] Cannot create hsr debugfs directory [ 779.227413][T14622] Bluetooth: hci0: command 0x0406 tx timeout [ 779.946789][T14622] Bluetooth: hci2: command 0x2016 tx timeout [ 779.952886][T11209] Bluetooth: hci1: command 0x0406 tx timeout [ 780.027077][T14622] Bluetooth: hci4: command 0x041b tx timeout [ 780.034828][T11209] Bluetooth: hci3: command 0x2016 tx timeout [ 780.311013][T16666] can: request_module (can-proto-5) failed. [ 780.478899][T16661] can: request_module (can-proto-5) failed. [ 780.915999][T16557] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 780.934703][T16557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 780.978124][T16557] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 781.004183][T16557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 781.025390][T16557] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 781.056065][T16557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 781.079186][T16557] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 781.098759][T16557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 781.306719][T14622] Bluetooth: hci0: command 0x0406 tx timeout [ 781.568282][T16557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.635943][T16557] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.665109][T13917] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.672334][T13917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.717461][T13917] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.724686][T13917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.107814][T14622] Bluetooth: hci4: command 0x041b tx timeout [ 782.741951][T16557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.249187][T16714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1913'. [ 784.001428][T16713] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 784.080259][T16713] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 784.158863][T16713] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 784.188971][T14622] Bluetooth: hci4: command 0x041b tx timeout [ 784.217574][T16713] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 784.283859][T16713] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 784.456128][T16726] FAULT_INJECTION: forcing a failure. [ 784.456128][T16726] name failslab, interval 1, probability 0, space 0, times 0 [ 784.498901][T16726] CPU: 0 UID: 0 PID: 16726 Comm: syz.1.1916 Tainted: G I L syzkaller #0 PREEMPT(full) [ 784.498945][T16726] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 784.498957][T16726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 784.498972][T16726] Call Trace: [ 784.498980][T16726] [ 784.498989][T16726] dump_stack_lvl+0x100/0x190 [ 784.499040][T16726] should_fail_ex.cold+0x5/0xa [ 784.499073][T16726] should_failslab+0xc2/0x120 [ 784.499104][T16726] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 784.499150][T16726] ? sock_alloc_inode+0x26/0x290 [ 784.499180][T16726] ? madvise_unlock+0xa9/0x220 [ 784.499214][T16726] ? __pfx_sock_alloc_inode+0x10/0x10 [ 784.499246][T16726] sock_alloc_inode+0x26/0x290 [ 784.499276][T16726] ? __pfx_sock_alloc_inode+0x10/0x10 [ 784.499306][T16726] alloc_inode+0x68/0x250 [ 784.499346][T16726] sock_alloc+0x44/0x280 [ 784.499378][T16726] ? security_socket_create+0x7f/0x250 [ 784.499407][T16726] __sock_create+0xc2/0x860 [ 784.499446][T16726] __sys_socket+0x14d/0x260 [ 784.499483][T16726] ? __pfx___sys_socket+0x10/0x10 [ 784.499526][T16726] __x64_sys_socket+0x72/0xb0 [ 784.499561][T16726] ? lockdep_hardirqs_on+0x78/0x100 [ 784.499598][T16726] do_syscall_64+0x115/0x840 [ 784.499636][T16726] ? clear_bhb_loop+0x40/0x90 [ 784.499667][T16726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.499693][T16726] RIP: 0033:0x7f21ae19ce59 [ 784.499712][T16726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.499737][T16726] RSP: 002b:00007f21af0b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 784.499764][T16726] RAX: ffffffffffffffda RBX: 00007f21ae415fa0 RCX: 00007f21ae19ce59 [ 784.499781][T16726] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 784.499796][T16726] RBP: 00007f21ae232d6f R08: 0000000000000000 R09: 0000000000000000 [ 784.499812][T16726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.499827][T16726] R13: 00007f21ae416038 R14: 00007f21ae415fa0 R15: 00007fffb7ba60d8 [ 784.499858][T16726] [ 784.499888][T16726] socket: no more sockets [ 784.783922][T16557] veth0_vlan: entered promiscuous mode [ 784.794765][T16557] veth1_vlan: entered promiscuous mode [ 784.875714][T16557] veth0_macvtap: entered promiscuous mode [ 784.919359][T16557] veth1_macvtap: entered promiscuous mode [ 785.080947][T16557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.123496][T16557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.199818][T14792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.241011][T14792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.302069][T14792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.347272][T14792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.389257][T14622] Bluetooth: hci0: command 0x0406 tx timeout [ 785.751976][T14792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.809794][T14792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.033980][T14795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.082294][T14795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.108060][T14622] Bluetooth: hci1: command 0x0406 tx timeout [ 786.186628][T14622] Bluetooth: hci2: command 0x2016 tx timeout [ 786.266906][T14622] Bluetooth: hci3: command 0x2016 tx timeout [ 786.294239][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 786.346944][T14622] Bluetooth: hci4: command 0x041b tx timeout [ 787.369322][T16754] Process accounting paused [ 787.859798][T16778] can: request_module (can-proto-5) failed. [ 787.953581][T16797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1925'. [ 788.426760][T14622] Bluetooth: hci4: command 0x041b tx timeout [ 788.719012][T16794] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 788.754078][T16794] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 788.782363][T16794] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 788.813743][T16794] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 788.846637][T16794] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 789.042011][T16819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1927'. [ 789.541382][T16822] Process accounting paused [ 790.026481][T14622] Bluetooth: hci0: command 0x0406 tx timeout [ 790.826441][T11209] Bluetooth: hci2: command 0x2016 tx timeout [ 790.832589][T11231] Bluetooth: hci1: command 0x0406 tx timeout [ 790.838759][T14622] Bluetooth: hci3: command 0x2016 tx timeout [ 790.908165][T14622] Bluetooth: hci4: command 0x041b tx timeout [ 791.921305][T16859] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 792.167518][T16859] File: /dev/nullb0 PID: 16859 Comm: syz.4.1932 [ 793.530549][T16893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1939'. [ 793.551036][T16892] netlink: 337 bytes leftover after parsing attributes in process `syz.0.1938'. [ 793.598147][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'. [ 794.286207][T16890] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 794.341928][T16890] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 794.393254][T16890] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 794.425749][T16890] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 794.470867][T16890] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 795.546610][T14622] Bluetooth: hci0: command 0x0406 tx timeout [ 795.821180][T16928] ubi0: attaching mtd0 [ 795.870342][T16928] ubi0: scanning is finished [ 795.925129][T16928] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 796.332133][T16928] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 796.360736][T16941] netlink: 337 bytes leftover after parsing attributes in process `syz.3.1950'. [ 796.426445][T14622] Bluetooth: hci3: command 0x2016 tx timeout [ 796.433059][T11209] Bluetooth: hci2: command 0x2016 tx timeout [ 796.439496][T11231] Bluetooth: hci1: command 0x0406 tx timeout [ 796.508081][T11209] Bluetooth: hci4: command 0x041b tx timeout [ 797.391244][T16954] FAULT_INJECTION: forcing a failure. [ 797.391244][T16954] name fail_futex, interval 1, probability 0, space 0, times 0 [ 797.432528][ T30] audit: type=1800 audit(4294967373.950:20): pid=16961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1956" name="dbroot" dev="configfs" ino=63938 res=0 errno=0 [ 797.472760][T16954] CPU: 0 UID: 0 PID: 16954 Comm: syz.4.1954 Tainted: G I L syzkaller #0 PREEMPT(full) [ 797.472803][T16954] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 797.472814][T16954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 797.472829][T16954] Call Trace: [ 797.472837][T16954] [ 797.472846][T16954] dump_stack_lvl+0x100/0x190 [ 797.472896][T16954] should_fail_ex.cold+0x5/0xa [ 797.472928][T16954] get_futex_key+0x1d2/0x1510 [ 797.472974][T16954] ? __pfx_get_futex_key+0x10/0x10 [ 797.473017][T16954] ? __lock_acquire+0x4a5/0x2630 [ 797.473063][T16954] futex_wake+0xea/0x530 [ 797.473096][T16954] ? __pfx_futex_wake+0x10/0x10 [ 797.473127][T16954] ? find_held_lock+0x2b/0x80 [ 797.473158][T16954] ? __might_fault+0xc5/0x140 [ 797.473205][T16954] do_futex+0x32b/0x350 [ 797.473231][T16954] ? __pfx_do_futex+0x10/0x10 [ 797.473258][T16954] ? __sys_connect+0xe4/0x170 [ 797.473301][T16954] __x64_sys_futex+0x34f/0x4d0 [ 797.473331][T16954] ? __pfx___x64_sys_futex+0x10/0x10 [ 797.473363][T16954] ? rcu_is_watching+0x12/0xc0 [ 797.473395][T16954] do_syscall_64+0x115/0x840 [ 797.473431][T16954] ? clear_bhb_loop+0x40/0x90 [ 797.473460][T16954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.473486][T16954] RIP: 0033:0x7f2ef2b9ce59 [ 797.473506][T16954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.473530][T16954] RSP: 002b:00007f2ef3ac80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 797.473562][T16954] RAX: ffffffffffffffda RBX: 00007f2ef2e15fa8 RCX: 00007f2ef2b9ce59 [ 797.473579][T16954] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2ef2e15fac [ 797.473594][T16954] RBP: 00007f2ef2e15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 797.473609][T16954] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 797.473625][T16954] R13: 00007f2ef2e16038 R14: 00007ffe4b2f7110 R15: 00007ffe4b2f71f8 [ 797.473656][T16954] [ 798.069671][T16972] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 798.315814][T16961] db_root: cannot open: /sys/devices/virtual/bdi/43:352/strc_limit [ 799.164253][T16996] netlink: 337 bytes leftover after parsing attributes in process `syz.4.1964'. [ 799.621794][T17006] FAULT_INJECTION: forcing a failure. [ 799.621794][T17006] name fail_futex, interval 1, probability 0, space 0, times 0 [ 799.695780][T17006] CPU: 0 UID: 0 PID: 17006 Comm: syz.0.1967 Tainted: G I L syzkaller #0 PREEMPT(full) [ 799.695823][T17006] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 799.695834][T17006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 799.695850][T17006] Call Trace: [ 799.695858][T17006] [ 799.695867][T17006] dump_stack_lvl+0x100/0x190 [ 799.695917][T17006] should_fail_ex.cold+0x5/0xa [ 799.695948][T17006] get_futex_key+0x1d2/0x1510 [ 799.695996][T17006] ? __pfx_get_futex_key+0x10/0x10 [ 799.696038][T17006] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 799.696068][T17006] ? __pfx___might_resched+0x10/0x10 [ 799.696102][T17006] futex_wake+0xea/0x530 [ 799.696131][T17006] ? vb2_fop_read+0x1a3/0x520 [ 799.696156][T17006] ? __pfx_futex_wake+0x10/0x10 [ 799.696187][T17006] ? v4l2_read+0x1b7/0x2c0 [ 799.696229][T17006] ? vfs_read+0x243/0xb30 [ 799.696261][T17006] do_futex+0x32b/0x350 [ 799.696287][T17006] ? __pfx_do_futex+0x10/0x10 [ 799.696320][T17006] __x64_sys_futex+0x34f/0x4d0 [ 799.696354][T17006] ? fput+0x79/0x100 [ 799.696389][T17006] ? __pfx___x64_sys_futex+0x10/0x10 [ 799.696414][T17006] ? ksys_read+0x1ac/0x250 [ 799.696443][T17006] ? __pfx_ksys_read+0x10/0x10 [ 799.696474][T17006] ? rcu_is_watching+0x12/0xc0 [ 799.696508][T17006] do_syscall_64+0x115/0x840 [ 799.696543][T17006] ? clear_bhb_loop+0x40/0x90 [ 799.696574][T17006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.696600][T17006] RIP: 0033:0x7f83bcd9ce59 [ 799.696621][T17006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.696646][T17006] RSP: 002b:00007f83bdc930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 799.696670][T17006] RAX: ffffffffffffffda RBX: 00007f83bd015fa8 RCX: 00007f83bcd9ce59 [ 799.696686][T17006] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f83bd015fac [ 799.696702][T17006] RBP: 00007f83bd015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 799.696718][T17006] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 799.696734][T17006] R13: 00007f83bd016038 R14: 00007ffd17b67a50 R15: 00007ffd17b67b38 [ 799.696765][T17006] [ 803.496088][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'. [ 805.171342][T17075] syz_tun: tun_chr_ioctl cmd 1074812117 [ 805.439104][T17090] FAULT_INJECTION: forcing a failure. [ 805.439104][T17090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.501120][T17090] CPU: 0 UID: 0 PID: 17090 Comm: syz.3.1980 Tainted: G I L syzkaller #0 PREEMPT(full) [ 805.501161][T17090] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 805.501172][T17090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 805.501187][T17090] Call Trace: [ 805.501195][T17090] [ 805.501204][T17090] dump_stack_lvl+0x100/0x190 [ 805.501254][T17090] should_fail_ex.cold+0x5/0xa [ 805.501285][T17090] _copy_from_user+0x2e/0xd0 [ 805.501321][T17090] move_addr_to_kernel+0x65/0x170 [ 805.501358][T17090] __sys_connect+0xb5/0x170 [ 805.501396][T17090] ? __pfx___sys_connect+0x10/0x10 [ 805.501452][T17090] __x64_sys_connect+0x72/0xb0 [ 805.501489][T17090] ? lockdep_hardirqs_on+0x78/0x100 [ 805.501524][T17090] do_syscall_64+0x115/0x840 [ 805.501558][T17090] ? clear_bhb_loop+0x40/0x90 [ 805.501588][T17090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.501612][T17090] RIP: 0033:0x7ff786d9ce59 [ 805.501631][T17090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.501655][T17090] RSP: 002b:00007ff787cac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 805.501679][T17090] RAX: ffffffffffffffda RBX: 00007ff787015fa0 RCX: 00007ff786d9ce59 [ 805.501695][T17090] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 805.501710][T17090] RBP: 00007ff786e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 805.501724][T17090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.501738][T17090] R13: 00007ff787016038 R14: 00007ff787015fa0 R15: 00007fff97c4a3d8 [ 805.501769][T17090] [ 806.251466][T17107] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 807.237828][T17132] can: request_module (can-proto-5) failed. [ 810.788004][T17183] netlink: 337 bytes leftover after parsing attributes in process `syz.3.2001'. [ 811.072858][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.079308][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.191350][T17189] netlink: 'syz.0.2004': attribute type 28 has an invalid length. [ 811.223130][T17189] netlink: 'syz.0.2004': attribute type 3 has an invalid length. [ 811.260294][T17189] netlink: 306 bytes leftover after parsing attributes in process `syz.0.2004'. [ 812.613907][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 812.954389][T17222] FAULT_INJECTION: forcing a failure. [ 812.954389][T17222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.028730][T17222] CPU: 0 UID: 0 PID: 17222 Comm: syz.3.2012 Tainted: G I L syzkaller #0 PREEMPT(full) [ 813.028770][T17222] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 813.028781][T17222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 813.028795][T17222] Call Trace: [ 813.028803][T17222] [ 813.028811][T17222] dump_stack_lvl+0x100/0x190 [ 813.028858][T17222] should_fail_ex.cold+0x5/0xa [ 813.028889][T17222] _copy_from_user+0x2e/0xd0 [ 813.028923][T17222] copy_msghdr_from_user+0x9f/0x4f0 [ 813.028959][T17222] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 813.029005][T17222] ? __pfx__kstrtoull+0x10/0x10 [ 813.029033][T17222] ___sys_sendmsg+0x106/0x1e0 [ 813.029067][T17222] ? __pfx____sys_sendmsg+0x10/0x10 [ 813.029114][T17222] ? find_held_lock+0x2b/0x80 [ 813.029162][T17222] __sys_sendmmsg+0x205/0x430 [ 813.029190][T17222] ? __pfx___sys_sendmmsg+0x10/0x10 [ 813.029223][T17222] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 813.029271][T17222] ? fput+0x79/0x100 [ 813.029304][T17222] ? ksys_write+0x1ac/0x250 [ 813.029330][T17222] ? __pfx_ksys_write+0x10/0x10 [ 813.029362][T17222] __x64_sys_sendmmsg+0x9c/0x100 [ 813.029386][T17222] ? lockdep_hardirqs_on+0x78/0x100 [ 813.029420][T17222] do_syscall_64+0x115/0x840 [ 813.029458][T17222] ? clear_bhb_loop+0x40/0x90 [ 813.029487][T17222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.029511][T17222] RIP: 0033:0x7ff786d9ce59 [ 813.029530][T17222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.029552][T17222] RSP: 002b:00007ff787cac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 813.029574][T17222] RAX: ffffffffffffffda RBX: 00007ff787015fa0 RCX: 00007ff786d9ce59 [ 813.029590][T17222] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 813.029604][T17222] RBP: 00007ff787cac090 R08: 0000000000000000 R09: 0000000000000000 [ 813.029618][T17222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.029631][T17222] R13: 00007ff787016038 R14: 00007ff787015fa0 R15: 00007fff97c4a3d8 [ 813.029661][T17222] [ 814.126566][T17228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2014'. [ 814.885142][T17227] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 814.903759][T17227] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 814.944948][T17227] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 814.975182][T17227] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 815.003449][T17227] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 815.355683][T17236] netlink: 'syz.4.2015': attribute type 1 has an invalid length. [ 816.078569][T17249] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 816.187569][T11209] Bluetooth: hci0: command 0x0406 tx timeout [ 816.645793][T11231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 816.662220][T11231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 816.670515][T11231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 816.682953][T11231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 816.710245][T11231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 816.911944][T11231] Bluetooth: hci1: command 0x0406 tx timeout [ 816.988804][T11231] Bluetooth: hci3: command 0x2016 tx timeout [ 816.994874][T11209] Bluetooth: hci2: command 0x2016 tx timeout [ 817.066594][T11231] Bluetooth: hci4: command 0x041b tx timeout [ 818.308372][T17274] Format for adding new port is "id [perm_addr]" (uint MAC). [ 818.445868][T17276] input: jJǸ-9%vJ86 as /devices/virtual/input/input19 [ 818.750011][T11231] Bluetooth: hci5: command tx timeout [ 819.910612][T17252] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.941780][T17252] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.968877][T17263] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 819.978317][T17252] bridge_slave_0: entered allmulticast mode [ 820.008217][T17252] bridge_slave_0: entered promiscuous mode [ 820.062094][T17252] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.079597][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2024'. [ 820.103305][T17252] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.151174][T17252] bridge_slave_1: entered allmulticast mode [ 820.186943][T17252] bridge_slave_1: entered promiscuous mode [ 820.351995][T17252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.369950][T17301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2025'. [ 820.396557][T17252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.522827][T17252] team0: Port device team_slave_0 added [ 820.561516][T17252] team0: Port device team_slave_1 added [ 820.733051][T17252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.764199][T17252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.805521][T17305] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 820.829060][T11231] Bluetooth: hci5: command tx timeout [ 820.862953][T17252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.920686][T17274] Process accounting resumed [ 820.979408][T17252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.017353][T17252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.122099][T17300] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 821.149239][T17300] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 821.175513][T17252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.192287][T17300] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 821.214637][T17300] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 821.238694][T17300] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 821.278543][T17300] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 821.305714][T17300] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 821.367833][T17300] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 821.475670][T17252] hsr_slave_0: entered promiscuous mode [ 821.505709][T17252] hsr_slave_1: entered promiscuous mode [ 821.522871][T17312] zswap: compressor not available [ 821.532914][T17252] debugfs: 'hsr0' already exists in 'hsr' [ 821.553400][T17252] Cannot create hsr debugfs directory [ 822.427743][T11231] Bluetooth: hci0: command 0x0406 tx timeout [ 823.228812][T11231] Bluetooth: hci3: command 0x2016 tx timeout [ 823.234942][T11209] Bluetooth: hci2: command 0x2016 tx timeout [ 823.241010][T14622] Bluetooth: hci1: command 0x0406 tx timeout [ 823.307508][T11209] Bluetooth: hci5: command 0x0419 tx timeout [ 823.314543][T14622] Bluetooth: hci4: command 0x041b tx timeout [ 823.499069][T17252] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 823.535825][T17252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 823.592541][T17252] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 823.636471][T17252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 823.680288][T17252] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 823.732468][T17252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 823.802645][T17252] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 823.844342][T17252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 824.382876][T17252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.403756][T17367] can: request_module (can-proto-5) failed. [ 824.550518][T17252] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.683485][T14795] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.690696][T14795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.767529][T14795] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.774723][T14795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.386776][T11209] Bluetooth: hci5: command 0x0419 tx timeout [ 825.572318][T17393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2041'. [ 825.763798][T17252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.065756][T17404] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 826.615879][T17252] veth0_vlan: entered promiscuous mode [ 826.644922][T17252] veth1_vlan: entered promiscuous mode [ 826.728886][T17252] veth0_macvtap: entered promiscuous mode [ 826.752549][T17252] veth1_macvtap: entered promiscuous mode [ 826.798708][T17252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.829375][T17252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.865376][T14798] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.886174][T14798] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.914815][T14798] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.954312][T14798] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.351432][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 827.466846][T11209] Bluetooth: hci5: command 0x0419 tx timeout [ 827.501065][T14795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.540185][T14795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.680188][T14798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.714895][T14798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.032732][T17449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2050'. [ 829.170395][T17455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2052'. [ 829.365894][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2052'. [ 829.547534][T11209] Bluetooth: hci5: command 0x0419 tx timeout [ 829.990129][T17470] program syz.5.2055 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 830.013354][T17468] vmstat_refresh: nr_hugetlb -8192 [ 830.104879][T17476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2056'. [ 830.149565][T17477] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2056'. [ 830.461858][T17473] vmstat_refresh: nr_hugetlb -8192 [ 830.912720][T17493] vivid-007: ================= START STATUS ================= [ 830.912742][T17493] vivid-007: Generate PTS: true [ 830.912783][T17493] vivid-007: Generate SCR: true [ 830.912823][T17493] tpg source WxH: 320x240 (Y'CbCr) [ 830.912861][T17493] tpg field: 1 [ 830.912871][T17493] tpg crop: (0,0)/320x240 [ 830.912887][T17493] tpg compose: (0,0)/320x240 [ 830.912903][T17493] tpg colorspace: 8 [ 830.912912][T17493] tpg transfer function: 0/0 [ 830.912925][T17493] tpg Y'CbCr encoding: 0/0 [ 830.912937][T17493] tpg quantization: 0/0 [ 830.912949][T17493] tpg RGB range: 0/2 [ 830.912960][T17493] vivid-007: ================== END STATUS ================== [ 832.238431][T17507] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 832.256244][T17509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2061'. [ 833.720118][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'. [ 835.457527][T17560] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2067'. [ 835.524543][T17560] nbd: must specify at least one socket [ 835.625667][T17560] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2067'. [ 835.660087][T17558] bond0: invalid ARP target specified [ 835.855307][T17560] team0 (unregistering): Port device team_slave_0 removed [ 835.893271][T17560] team0 (unregistering): Port device team_slave_1 removed [ 836.935886][T17580] netlink: 337 bytes leftover after parsing attributes in process `syz.0.2070'. [ 840.942234][T17633] : Can't lookup blockdev [ 841.242452][T14622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 841.264903][T14622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 841.278678][T14622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 841.290671][T14622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 841.301243][T14622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 842.080475][T14622] block nbd0: Receive control failed (result -32) [ 843.386629][T14622] Bluetooth: hci6: command tx timeout [ 844.161854][T17634] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.198116][T17634] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.235719][T17634] bridge_slave_0: entered allmulticast mode [ 844.272396][T17634] bridge_slave_0: entered promiscuous mode [ 844.328560][T17634] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.352669][T17634] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.377001][T17634] bridge_slave_1: entered allmulticast mode [ 844.400368][T17634] bridge_slave_1: entered promiscuous mode [ 844.528502][T17634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.728286][T17634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.944697][T17634] team0: Port device team_slave_0 added [ 845.011505][T17634] team0: Port device team_slave_1 added [ 845.119925][T17634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.166486][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.260109][T17634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.301089][T17634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.328583][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.405051][T17634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.467303][T14622] Bluetooth: hci6: command tx timeout [ 845.730010][T17634] hsr_slave_0: entered promiscuous mode [ 845.752709][T17634] hsr_slave_1: entered promiscuous mode [ 845.773712][T17634] debugfs: 'hsr0' already exists in 'hsr' [ 845.791600][T17634] Cannot create hsr debugfs directory [ 846.329853][T17707] netlink: 1140 bytes leftover after parsing attributes in process `syz.0.2093'. [ 846.378708][T17707] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 847.074392][T17720] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 847.547024][T14622] Bluetooth: hci6: command tx timeout [ 847.869174][T17634] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 847.903699][T17634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 847.928467][T17634] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 847.982880][T17634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 848.009633][T17634] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 848.051680][T17634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 848.081613][T17634] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 848.133245][T17634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 848.473422][T17634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.580250][T17634] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.632002][T11221] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.639224][T11221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.750272][T14795] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.757472][T14795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.865530][T17758] udc dummy_udc.0: soft-connect without a gadget driver [ 849.626858][T14622] Bluetooth: hci6: command tx timeout [ 849.844706][T17634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.713965][T17634] veth0_vlan: entered promiscuous mode [ 850.774721][T17634] veth1_vlan: entered promiscuous mode [ 850.896903][T17634] veth0_macvtap: entered promiscuous mode [ 850.919204][T17634] veth1_macvtap: entered promiscuous mode [ 850.941782][T17634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.959657][T17634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.982038][T14792] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.014116][T14792] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.045543][T14792] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.105269][T14792] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.256233][T11227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.293009][T11227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.361819][T14792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.376000][T14792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.580825][T17795] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 851.800705][T17788] Process accounting paused [ 852.210374][T17803] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 853.626153][T17824] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2116'. [ 854.395071][T17822] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 854.415726][T17822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 854.450828][T17822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 854.478288][T17822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 854.493385][T17833] netlink: 337 bytes leftover after parsing attributes in process `syz.0.2117'. [ 854.507327][T17822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 854.521571][T17822] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 854.549373][T17822] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 854.573385][T17822] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 854.624450][T17822] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 855.353721][T17843] FAULT_INJECTION: forcing a failure. [ 855.353721][T17843] name failslab, interval 1, probability 0, space 0, times 0 [ 855.385154][T17843] CPU: 0 UID: 0 PID: 17843 Comm: syz.0.2120 Tainted: G I L syzkaller #0 PREEMPT(full) [ 855.385200][T17843] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 855.385211][T17843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 855.385226][T17843] Call Trace: [ 855.385234][T17843] [ 855.385243][T17843] dump_stack_lvl+0x100/0x190 [ 855.385295][T17843] should_fail_ex.cold+0x5/0xa [ 855.385328][T17843] should_failslab+0xc2/0x120 [ 855.385360][T17843] __kmalloc_cache_noprof+0x7a/0x6f0 [ 855.385397][T17843] ? __vb2_init_fileio+0x18f/0x1000 [ 855.385427][T17843] ? trace_contention_end+0x122/0x170 [ 855.385458][T17843] __vb2_init_fileio+0x18f/0x1000 [ 855.385487][T17843] ? aa_file_perm+0x7f3/0x14d0 [ 855.385536][T17843] __vb2_perform_fileio+0x91e/0x1380 [ 855.385575][T17843] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 855.385614][T17843] ? __pfx___might_resched+0x10/0x10 [ 855.385643][T17843] ? futex_hash+0x141/0x370 [ 855.385692][T17843] vb2_fop_read+0x211/0x520 [ 855.385722][T17843] v4l2_read+0x229/0x2c0 [ 855.385761][T17843] ? __pfx_v4l2_read+0x10/0x10 [ 855.385811][T17843] vfs_read+0x1e4/0xb30 [ 855.385846][T17843] ? __pfx_vfs_read+0x10/0x10 [ 855.385879][T17843] ? find_held_lock+0x2b/0x80 [ 855.385910][T17843] ? __fget_files+0x215/0x3d0 [ 855.385940][T17843] ? __fget_files+0x215/0x3d0 [ 855.385974][T17843] ? __fget_files+0x21f/0x3d0 [ 855.386012][T17843] ksys_read+0x12a/0x250 [ 855.386041][T17843] ? __pfx_ksys_read+0x10/0x10 [ 855.386072][T17843] ? rcu_is_watching+0x12/0xc0 [ 855.386106][T17843] do_syscall_64+0x115/0x840 [ 855.386144][T17843] ? clear_bhb_loop+0x40/0x90 [ 855.386175][T17843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.386203][T17843] RIP: 0033:0x7f83bcd9ce59 [ 855.386225][T17843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.386251][T17843] RSP: 002b:00007f83bdc93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 855.386277][T17843] RAX: ffffffffffffffda RBX: 00007f83bd015fa0 RCX: 00007f83bcd9ce59 [ 855.386295][T17843] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004 [ 855.386312][T17843] RBP: 00007f83bce32d6f R08: 0000000000000000 R09: 0000000000000000 [ 855.386328][T17843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.386344][T17843] R13: 00007f83bd016038 R14: 00007f83bd015fa0 R15: 00007ffd17b67b38 [ 855.386385][T17843] [ 855.722500][T14622] Bluetooth: hci0: command 0x0406 tx timeout [ 856.426942][T14622] Bluetooth: hci1: command 0x0406 tx timeout [ 856.510349][T14622] Bluetooth: hci3: command 0x2016 tx timeout [ 856.516622][T11209] Bluetooth: hci2: command 0x2016 tx timeout [ 856.586681][T11209] Bluetooth: hci6: command 0x0c1a tx timeout [ 856.593911][T14622] Bluetooth: hci5: command 0x0419 tx timeout [ 856.600296][T11231] Bluetooth: hci4: command 0x041b tx timeout [ 857.228920][T11209] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 857.242997][T11209] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 857.251682][T11209] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 857.265252][T11209] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 857.272889][T11209] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 858.163947][T17877] FAULT_INJECTION: forcing a failure. [ 858.163947][T17877] name failslab, interval 1, probability 0, space 0, times 0 [ 858.232180][T17877] CPU: 0 UID: 0 PID: 17877 Comm: syz.6.2127 Tainted: G I L syzkaller #0 PREEMPT(full) [ 858.232223][T17877] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 858.232235][T17877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 858.232250][T17877] Call Trace: [ 858.232259][T17877] [ 858.232268][T17877] dump_stack_lvl+0x100/0x190 [ 858.232318][T17877] should_fail_ex.cold+0x5/0xa [ 858.232348][T17877] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 858.232376][T17877] should_failslab+0xc2/0x120 [ 858.232406][T17877] __kmalloc_noprof+0xe0/0x850 [ 858.232460][T17877] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 858.232491][T17877] vb2_core_reqbufs+0x382/0xf30 [ 858.232524][T17877] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 858.232567][T17877] __vb2_init_fileio+0x32d/0x1000 [ 858.232595][T17877] ? aa_file_perm+0x7f3/0x14d0 [ 858.232640][T17877] __vb2_perform_fileio+0x91e/0x1380 [ 858.232676][T17877] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 858.232705][T17877] ? __pfx___might_resched+0x10/0x10 [ 858.232731][T17877] ? futex_hash+0x141/0x370 [ 858.232777][T17877] vb2_fop_read+0x211/0x520 [ 858.232806][T17877] v4l2_read+0x229/0x2c0 [ 858.232844][T17877] ? __pfx_v4l2_read+0x10/0x10 [ 858.232884][T17877] vfs_read+0x1e4/0xb30 [ 858.232916][T17877] ? __pfx_vfs_read+0x10/0x10 [ 858.232945][T17877] ? find_held_lock+0x2b/0x80 [ 858.232975][T17877] ? __fget_files+0x215/0x3d0 [ 858.233004][T17877] ? __fget_files+0x215/0x3d0 [ 858.233038][T17877] ? __fget_files+0x21f/0x3d0 [ 858.233075][T17877] ksys_read+0x12a/0x250 [ 858.233103][T17877] ? __pfx_ksys_read+0x10/0x10 [ 858.233134][T17877] ? rcu_is_watching+0x12/0xc0 [ 858.233166][T17877] do_syscall_64+0x115/0x840 [ 858.233201][T17877] ? clear_bhb_loop+0x40/0x90 [ 858.233232][T17877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.233258][T17877] RIP: 0033:0x7f973dd9ce59 [ 858.233277][T17877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.233302][T17877] RSP: 002b:00007f973ecda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 858.233325][T17877] RAX: ffffffffffffffda RBX: 00007f973e015fa0 RCX: 00007f973dd9ce59 [ 858.233341][T17877] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004 [ 858.233356][T17877] RBP: 00007f973de32d6f R08: 0000000000000000 R09: 0000000000000000 [ 858.233372][T17877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.233387][T17877] R13: 00007f973e016038 R14: 00007f973e015fa0 R15: 00007ffefee75bf8 [ 858.233418][T17877] [ 858.671541][T17870] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 858.772813][T11209] Bluetooth: hci6: command 0x0c1a tx timeout [ 859.387545][T11209] Bluetooth: hci7: command tx timeout [ 860.833894][T11209] Bluetooth: hci6: command 0x0c1a tx timeout [ 861.221083][T17916] FAULT_INJECTION: forcing a failure. [ 861.221083][T17916] name failslab, interval 1, probability 0, space 0, times 0 [ 861.277904][T17861] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.295219][T17916] CPU: 0 UID: 0 PID: 17916 Comm: syz.6.2132 Tainted: G I L syzkaller #0 PREEMPT(full) [ 861.295262][T17916] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 861.295280][T17916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 861.295295][T17916] Call Trace: [ 861.295302][T17916] [ 861.295311][T17916] dump_stack_lvl+0x100/0x190 [ 861.295361][T17916] should_fail_ex.cold+0x5/0xa [ 861.295391][T17916] ? mpi_alloc_limb_space+0x31/0x60 [ 861.295439][T17916] should_failslab+0xc2/0x120 [ 861.295470][T17916] __kmalloc_noprof+0xe0/0x850 [ 861.295517][T17916] mpi_alloc_limb_space+0x31/0x60 [ 861.295552][T17916] mpi_powm+0xae3/0x1e50 [ 861.295599][T17916] ? __pfx_mpi_powm+0x10/0x10 [ 861.295632][T17916] ? mpi_free+0xc0/0x150 [ 861.295663][T17916] ? mpi_free+0xe1/0x150 [ 861.295695][T17916] ? kfree+0x223/0x6c0 [ 861.295735][T17916] ? mpi_free+0xe6/0x150 [ 861.295771][T17916] rsa_enc+0x1fe/0x3b0 [ 861.295842][T17916] ? __pfx_rsa_enc+0x10/0x10 [ 861.295867][T17916] ? __virt_addr_valid+0x239/0x430 [ 861.295915][T17916] ? sg_init_one+0xf5/0x1b0 [ 861.295949][T17916] rsassa_pkcs1_verify+0x4eb/0xc20 [ 861.295988][T17916] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 861.296034][T17916] ? rsa_max_size+0xd/0x70 [ 861.296057][T17916] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 861.296091][T17916] public_key_verify_signature+0x5ee/0x910 [ 861.296152][T17916] ? __pfx_public_key_verify_signature+0x10/0x10 [ 861.296202][T17916] ? __kmalloc_noprof+0x320/0x850 [ 861.296253][T17916] x509_check_for_self_signed+0x325/0x510 [ 861.296302][T17916] x509_cert_parse+0x60c/0x910 [ 861.296337][T17916] ? kasan_save_stack+0x3f/0x50 [ 861.296361][T17916] ? kasan_save_stack+0x30/0x50 [ 861.296385][T17916] ? kasan_save_track+0x14/0x30 [ 861.296412][T17916] pkcs7_extract_cert+0xa4/0x380 [ 861.296457][T17916] asn1_ber_decoder+0x12b3/0x2170 [ 861.296515][T17916] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 861.296562][T17916] pkcs7_parse_message+0x289/0x870 [ 861.296608][T17916] verify_pkcs7_signature+0x30/0xa0 [ 861.296639][T17916] valid_regdb+0x211/0x590 [ 861.296700][T17916] ? __pfx_valid_regdb+0x10/0x10 [ 861.296734][T17916] reg_reload_regdb+0x11a/0x460 [ 861.296767][T17916] ? __pfx_reg_reload_regdb+0x10/0x10 [ 861.296801][T17916] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 861.296874][T17916] ? nl80211_pre_doit+0x19a/0xae0 [ 861.296917][T17916] genl_family_rcv_msg_doit+0x214/0x300 [ 861.296967][T17916] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 861.297006][T17916] ? genl_get_cmd+0x3e7/0x760 [ 861.297048][T17916] ? bpf_lsm_capable+0x9/0x10 [ 861.297076][T17916] ? security_capable+0x80/0x260 [ 861.297106][T17916] genl_rcv_msg+0x560/0x800 [ 861.297147][T17916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.297186][T17916] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 861.297224][T17916] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 861.297279][T17916] ? __pfx_nl80211_post_doit+0x10/0x10 [ 861.297330][T17916] netlink_rcv_skb+0x159/0x420 [ 861.297363][T17916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.297403][T17916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 861.297449][T17916] ? netlink_deliver_tap+0x1ae/0xcc0 [ 861.297485][T17916] genl_rcv+0x28/0x40 [ 861.297518][T17916] netlink_unicast+0x585/0x850 [ 861.297557][T17916] ? __pfx_netlink_unicast+0x10/0x10 [ 861.297598][T17916] netlink_sendmsg+0x8b0/0xda0 [ 861.297637][T17916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.297669][T17916] ? __import_iovec+0x1d2/0x640 [ 861.297708][T17916] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 861.297738][T17916] ____sys_sendmsg+0x9e1/0xb70 [ 861.297771][T17916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.297808][T17916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.297839][T17916] ? preempt_schedule_thunk+0x16/0x30 [ 861.297883][T17916] ? try_to_wake_up+0x5f6/0x1900 [ 861.297924][T17916] ___sys_sendmsg+0x190/0x1e0 [ 861.297962][T17916] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.297997][T17916] ? futex_private_hash_put+0x107/0x1c0 [ 861.298072][T17916] __sys_sendmsg+0x170/0x220 [ 861.298098][T17916] ? __pfx___sys_sendmsg+0x10/0x10 [ 861.298124][T17916] ? __x64_sys_futex+0x34f/0x4d0 [ 861.298160][T17916] ? rcu_is_watching+0x12/0xc0 [ 861.298193][T17916] do_syscall_64+0x115/0x840 [ 861.298229][T17916] ? clear_bhb_loop+0x40/0x90 [ 861.298260][T17916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.298292][T17916] RIP: 0033:0x7f973dd9ce59 [ 861.298313][T17916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.298338][T17916] RSP: 002b:00007f973ecda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.298363][T17916] RAX: ffffffffffffffda RBX: 00007f973e015fa0 RCX: 00007f973dd9ce59 [ 861.298380][T17916] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 861.298396][T17916] RBP: 00007f973de32d6f R08: 0000000000000000 R09: 0000000000000000 [ 861.298411][T17916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.298426][T17916] R13: 00007f973e016038 R14: 00007f973e015fa0 R15: 00007ffefee75bf8 [ 861.298457][T17916] [ 861.786993][T17861] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.794289][T17861] bridge_slave_0: entered allmulticast mode [ 861.801759][T17861] bridge_slave_0: entered promiscuous mode [ 861.809701][T17861] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.818383][T17861] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.825639][T17861] bridge_slave_1: entered allmulticast mode [ 861.833074][T17861] bridge_slave_1: entered promiscuous mode [ 861.863602][T17861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.875691][T17861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.907390][T17861] team0: Port device team_slave_0 added [ 861.916755][T17861] team0: Port device team_slave_1 added [ 861.943511][T17861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.950778][T17861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.977664][T17861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.989978][T17861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.997001][T17861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.024516][T17861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.071602][T17861] hsr_slave_0: entered promiscuous mode [ 862.078121][T17861] hsr_slave_1: entered promiscuous mode [ 862.084272][T17861] debugfs: 'hsr0' already exists in 'hsr' [ 862.090069][T17861] Cannot create hsr debugfs directory [ 862.307679][T17861] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 862.315109][T11209] Bluetooth: hci7: command tx timeout [ 862.345296][T17861] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 862.382535][T17920] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 862.467694][T17861] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 862.513076][T17861] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 862.540197][T17861] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 862.601987][T17861] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 862.671917][T17861] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 862.691558][T17861] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 862.932586][T17918] can: request_module (can-proto-5) failed. [ 863.079607][T17861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.153165][T17932] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2135'. [ 863.164173][T17861] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.183335][T17934] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2136'. [ 863.201824][T11353] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.209050][T11353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.255645][T11353] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.262842][T11353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.281627][T17935] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2135'. [ 863.969335][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2137'. [ 864.282076][T17957] netlink: 504 bytes leftover after parsing attributes in process `syz.6.2139'. [ 864.347109][T11231] Bluetooth: hci7: command tx timeout [ 864.981648][T17968] FAULT_INJECTION: forcing a failure. [ 864.981648][T17968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 865.062249][T17861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.077940][T17968] CPU: 0 UID: 0 PID: 17968 Comm: syz.0.2142 Tainted: G I L syzkaller #0 PREEMPT(full) [ 865.077979][T17968] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 865.077989][T17968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 865.078003][T17968] Call Trace: [ 865.078010][T17968] [ 865.078022][T17968] dump_stack_lvl+0x100/0x190 [ 865.078069][T17968] should_fail_ex.cold+0x5/0xa [ 865.078098][T17968] _copy_to_user+0x32/0xd0 [ 865.078134][T17968] simple_read_from_buffer+0xcb/0x170 [ 865.078165][T17968] proc_fail_nth_read+0x1af/0x230 [ 865.078260][T17968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 865.078299][T17968] ? rw_verify_area+0xce/0x6d0 [ 865.078323][T17968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 865.078360][T17968] vfs_read+0x1e4/0xb30 [ 865.078390][T17968] ? __pfx_vfs_read+0x10/0x10 [ 865.078416][T17968] ? __fget_files+0x215/0x3d0 [ 865.078450][T17968] ? __fget_files+0x21f/0x3d0 [ 865.078485][T17968] ksys_read+0x12a/0x250 [ 865.078511][T17968] ? __pfx_ksys_read+0x10/0x10 [ 865.078540][T17968] ? rcu_is_watching+0x12/0xc0 [ 865.078571][T17968] do_syscall_64+0x115/0x840 [ 865.078609][T17968] ? clear_bhb_loop+0x40/0x90 [ 865.078639][T17968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.078663][T17968] RIP: 0033:0x7f83bcd5d68e [ 865.078681][T17968] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 865.078704][T17968] RSP: 002b:00007f83bdc92fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 865.078726][T17968] RAX: ffffffffffffffda RBX: 00007f83bdc936c0 RCX: 00007f83bcd5d68e [ 865.078742][T17968] RDX: 000000000000000f RSI: 00007f83bdc930a0 RDI: 0000000000000005 [ 865.078756][T17968] RBP: 00007f83bdc93090 R08: 0000000000000000 R09: 0000000000000000 [ 865.078771][T17968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.078785][T17968] R13: 00007f83bd016038 R14: 00007f83bd015fa0 R15: 00007ffd17b67b38 [ 865.078815][T17968] [ 865.080833][T17969] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 865.665475][T11209] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 865.732281][T11209] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 865.801012][T11209] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 865.906412][T11209] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 865.959449][T11209] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 866.428464][T11209] Bluetooth: hci7: command tx timeout [ 866.608256][T17991] vivid-008: ================= START STATUS ================= [ 866.663378][T17991] vivid-008: ================== END STATUS ================== [ 866.794365][T17861] veth0_vlan: entered promiscuous mode [ 866.931208][T17861] veth1_vlan: entered promiscuous mode [ 867.195225][T17861] veth0_macvtap: entered promiscuous mode [ 867.250798][T17861] veth1_macvtap: entered promiscuous mode [ 867.625835][T17861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.716891][T17861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.843479][T14795] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.863980][T14795] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.918064][T14795] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.942791][T14795] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.108892][T11209] Bluetooth: hci8: command tx timeout [ 868.441422][T11353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.482273][T11353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.678639][T11221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.743042][T11221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.959505][T17971] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.996616][T17971] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.038169][T17971] bridge_slave_0: entered allmulticast mode [ 870.074984][T17971] bridge_slave_0: entered promiscuous mode [ 870.123700][T17971] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.160044][T17971] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.187269][T11209] Bluetooth: hci8: command tx timeout [ 870.193970][T17971] bridge_slave_1: entered allmulticast mode [ 870.222123][T17971] bridge_slave_1: entered promiscuous mode [ 870.495882][T17971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.595949][T17971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.864617][T17971] team0: Port device team_slave_0 added [ 870.971145][T17971] team0: Port device team_slave_1 added [ 871.091266][T17971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.148227][T17971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.252456][T17971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.281806][T17971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.317319][T17971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.462123][T17971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.735553][T17971] hsr_slave_0: entered promiscuous mode [ 871.781009][T17971] hsr_slave_1: entered promiscuous mode [ 871.817807][T17971] debugfs: 'hsr0' already exists in 'hsr' [ 871.847062][T17971] Cannot create hsr debugfs directory [ 872.267042][T11209] Bluetooth: hci8: command tx timeout [ 872.510754][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.518136][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.721260][T17971] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 873.763585][T17971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 873.813302][T17971] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 873.854116][T17971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 873.905703][T17971] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 873.941600][T18060] Invalid ELF header magic: != ELF [ 873.987556][T17971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 874.035776][T17971] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 874.078540][T17971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 874.346752][T11209] Bluetooth: hci8: command tx timeout [ 874.504649][T17971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.620798][T17971] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.695606][T11221] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.702848][T11221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.835070][T11221] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.842304][T11221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.401837][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2159'. [ 876.693454][T18101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2161'. [ 876.739189][T18101] HfR: entered promiscuous mode [ 877.044350][T17971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.415459][T17971] veth0_vlan: entered promiscuous mode [ 877.449575][T17971] veth1_vlan: entered promiscuous mode [ 877.623307][T17971] veth0_macvtap: entered promiscuous mode [ 877.659385][T18119] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 877.697953][T17971] veth1_macvtap: entered promiscuous mode [ 877.758185][T17971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.870690][T17971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.982183][T11227] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.012269][T18126] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2165'. [ 878.043419][T11227] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.083563][T11227] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.173748][T11227] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.771049][T18133] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2166'. [ 878.973885][T18125] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 879.010224][T18125] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 879.044682][T18125] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 879.081190][T18125] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 879.111690][T18125] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 879.140191][T18125] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 879.171128][T18125] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 879.187434][T18125] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 879.202465][T18125] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 879.285639][T18125] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 879.327450][T18125] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 879.340279][T18125] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 879.352691][T18125] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 879.608664][T11353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.654858][T11353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.689694][T18141] FAULT_INJECTION: forcing a failure. [ 879.689694][T18141] name failslab, interval 1, probability 0, space 0, times 0 [ 879.734867][T18141] CPU: 0 UID: 0 PID: 18141 Comm: syz.7.2168 Tainted: G I L syzkaller #0 PREEMPT(full) [ 879.734913][T18141] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 879.734925][T18141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 879.734941][T18141] Call Trace: [ 879.734956][T18141] [ 879.734966][T18141] dump_stack_lvl+0x100/0x190 [ 879.735018][T18141] should_fail_ex.cold+0x5/0xa [ 879.735049][T18141] should_failslab+0xc2/0x120 [ 879.735080][T18141] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 879.735123][T18141] ? sock_alloc_inode+0x26/0x290 [ 879.735160][T18141] ? __pfx_sock_alloc_inode+0x10/0x10 [ 879.735192][T18141] sock_alloc_inode+0x26/0x290 [ 879.735222][T18141] ? __pfx_sock_alloc_inode+0x10/0x10 [ 879.735252][T18141] alloc_inode+0x68/0x250 [ 879.735293][T18141] sock_alloc+0x44/0x280 [ 879.735318][T18141] ? security_socket_create+0x7f/0x250 [ 879.735347][T18141] __sock_create+0xc2/0x860 [ 879.735385][T18141] __sys_socket+0x14d/0x260 [ 879.735421][T18141] ? __pfx___sys_socket+0x10/0x10 [ 879.735466][T18141] __x64_sys_socket+0x72/0xb0 [ 879.735500][T18141] ? lockdep_hardirqs_on+0x78/0x100 [ 879.735537][T18141] do_syscall_64+0x115/0x840 [ 879.735572][T18141] ? clear_bhb_loop+0x40/0x90 [ 879.735604][T18141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.735630][T18141] RIP: 0033:0x7fa92059ce59 [ 879.735659][T18141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.735684][T18141] RSP: 002b:00007fa921386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 879.735709][T18141] RAX: ffffffffffffffda RBX: 00007fa920815fa0 RCX: 00007fa92059ce59 [ 879.735726][T18141] RDX: 0000000000000004 RSI: 0000000000000002 RDI: 0000000000000010 [ 879.735740][T18141] RBP: 00007fa920632d6f R08: 0000000000000000 R09: 0000000000000000 [ 879.735756][T18141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.735771][T18141] R13: 00007fa920816038 R14: 00007fa920815fa0 R15: 00007ffe44e8dba8 [ 879.735803][T18141] [ 879.735816][T18141] socket: no more sockets [ 879.992129][T13918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.009234][T13918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.085521][T11209] Bluetooth: hci0: command 0x0406 tx timeout [ 880.874222][T18150] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2140'. [ 881.030859][T18156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 881.066625][T11209] Bluetooth: hci2: command 0x2016 tx timeout [ 881.073012][T11231] Bluetooth: hci1: command 0x0406 tx timeout [ 881.115884][T18156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 881.147373][T11209] Bluetooth: hci5: command 0x0419 tx timeout [ 881.153462][T11231] Bluetooth: hci4: command 0x041b tx timeout [ 881.159610][T14622] Bluetooth: hci3: command 0x2016 tx timeout [ 881.207572][T18156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 881.230529][T11209] Bluetooth: hci7: command 0x0c1a tx timeout [ 881.236663][T14622] Bluetooth: hci6: command 0x0c1a tx timeout [ 881.276678][T18156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 881.284637][T18147] Process accounting resumed [ 881.328711][T18156] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 881.360440][T18156] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 881.387060][T11209] Bluetooth: hci8: command 0x0c1a tx timeout [ 881.404579][T18156] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 881.433631][T18156] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 881.456154][T18156] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 882.752659][T11209] Bluetooth: hci0: command 0x0406 tx timeout [ 882.831272][ T5635] Process accounting resumed [ 882.924267][T18185] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 883.148845][T11209] Bluetooth: hci1: command 0x0406 tx timeout [ 883.226903][T11209] Bluetooth: hci2: command 0x2016 tx timeout [ 883.307002][T11209] Bluetooth: hci3: command 0x2016 tx timeout [ 883.389012][T14622] Bluetooth: hci4: command 0x041b tx timeout [ 883.396070][T11209] Bluetooth: hci5: command 0x0419 tx timeout [ 883.466872][T11209] Bluetooth: hci8: command 0x0c1a tx timeout [ 883.474666][T14622] Bluetooth: hci7: command 0x0c1a tx timeout [ 883.481315][T11231] Bluetooth: hci6: command 0x0c1a tx timeout [ 883.663901][T14622] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 883.683772][T14622] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 883.700343][T14622] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 883.714561][T14622] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 883.724436][T14622] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 884.761932][T18208] FAULT_INJECTION: forcing a failure. [ 884.761932][T18208] name failslab, interval 1, probability 0, space 0, times 0 [ 884.885507][T18208] CPU: 0 UID: 0 PID: 18208 Comm: syz.8.2178 Tainted: G I L syzkaller #0 PREEMPT(full) [ 884.885551][T18208] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 884.885562][T18208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 884.885583][T18208] Call Trace: [ 884.885592][T18208] [ 884.885602][T18208] dump_stack_lvl+0x100/0x190 [ 884.885652][T18208] should_fail_ex.cold+0x5/0xa [ 884.885683][T18208] should_failslab+0xc2/0x120 [ 884.885715][T18208] __kmalloc_cache_noprof+0x7a/0x6f0 [ 884.885752][T18208] ? __vb2_init_fileio+0x18f/0x1000 [ 884.885782][T18208] ? trace_contention_end+0x122/0x170 [ 884.885811][T18208] __vb2_init_fileio+0x18f/0x1000 [ 884.885839][T18208] ? aa_file_perm+0x7f3/0x14d0 [ 884.885885][T18208] __vb2_perform_fileio+0x91e/0x1380 [ 884.885921][T18208] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 884.885949][T18208] ? __pfx___might_resched+0x10/0x10 [ 884.885977][T18208] ? futex_hash+0x141/0x370 [ 884.886023][T18208] vb2_fop_read+0x211/0x520 [ 884.886052][T18208] v4l2_read+0x229/0x2c0 [ 884.886091][T18208] ? __pfx_v4l2_read+0x10/0x10 [ 884.886131][T18208] vfs_read+0x1e4/0xb30 [ 884.886163][T18208] ? __pfx_vfs_read+0x10/0x10 [ 884.886189][T18208] ? find_held_lock+0x2b/0x80 [ 884.886220][T18208] ? __fget_files+0x215/0x3d0 [ 884.886257][T18208] ? __fget_files+0x215/0x3d0 [ 884.886292][T18208] ? __fget_files+0x21f/0x3d0 [ 884.886331][T18208] ksys_read+0x12a/0x250 [ 884.886360][T18208] ? __pfx_ksys_read+0x10/0x10 [ 884.886392][T18208] ? rcu_is_watching+0x12/0xc0 [ 884.886425][T18208] do_syscall_64+0x115/0x840 [ 884.886461][T18208] ? clear_bhb_loop+0x40/0x90 [ 884.886492][T18208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.886519][T18208] RIP: 0033:0x7f232e79ce59 [ 884.886539][T18208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.886565][T18208] RSP: 002b:00007f232f6ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 884.886596][T18208] RAX: ffffffffffffffda RBX: 00007f232ea15fa0 RCX: 00007f232e79ce59 [ 884.886615][T18208] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004 [ 884.886632][T18208] RBP: 00007f232e832d6f R08: 0000000000000000 R09: 0000000000000000 [ 884.886648][T18208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.886664][T18208] R13: 00007f232ea16038 R14: 00007f232ea15fa0 R15: 00007fffa6831908 [ 884.886696][T18208] [ 885.634760][T14622] Bluetooth: hci8: command 0x0c1a tx timeout [ 885.643599][T14622] Bluetooth: hci7: command 0x0c1a tx timeout [ 885.825883][T11209] Bluetooth: hci9: command tx timeout [ 887.068611][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2183'. [ 887.733338][T18239] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 887.808929][T18239] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 887.863453][T18239] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 887.873896][T11209] Bluetooth: hci9: command tx timeout [ 887.945339][T18239] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 887.997893][T18239] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 888.040834][T18239] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 888.094558][T18239] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 888.136521][T18239] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 888.185976][T18193] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.194549][T18239] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 888.227602][T18193] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.261634][T18239] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 888.292054][T18193] bridge_slave_0: entered allmulticast mode [ 888.303836][T18239] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 888.346882][T18193] bridge_slave_0: entered promiscuous mode [ 888.368554][T18239] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 888.405920][T18193] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.448881][T18193] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.476037][T18193] bridge_slave_1: entered allmulticast mode [ 888.533606][T18193] bridge_slave_1: entered promiscuous mode [ 888.708468][T18193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.770906][T18193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.027959][T18193] team0: Port device team_slave_0 added [ 889.129411][T11209] Bluetooth: hci6: Unable to find connection for big 0xe0 [ 889.180758][T18193] team0: Port device team_slave_1 added [ 889.227948][T11209] Bluetooth: hci0: command 0x0406 tx timeout [ 889.434232][T18193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.446182][T18193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.484697][T18193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.609682][T18193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.670928][T18193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.810877][T18193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.824529][T18298] netlink: 'syz.8.2189': attribute type 2 has an invalid length. [ 889.866750][T11209] Bluetooth: hci2: command 0x2016 tx timeout [ 889.874626][T14622] Bluetooth: hci1: command 0x0406 tx timeout [ 889.948776][T11209] Bluetooth: hci3: command 0x2016 tx timeout [ 890.028671][T11209] Bluetooth: hci4: command 0x041b tx timeout [ 890.106759][T14622] Bluetooth: hci5: command 0x0419 tx timeout [ 890.113077][T11209] Bluetooth: hci6: command 0x0c1a tx timeout [ 890.186957][T11209] Bluetooth: hci7: command 0x0c1a tx timeout [ 890.266962][T11209] Bluetooth: hci9: command 0x0419 tx timeout [ 890.274510][T14622] Bluetooth: hci8: command 0x0c1a tx timeout [ 890.502693][T18193] hsr_slave_0: entered promiscuous mode [ 890.527198][T18193] hsr_slave_1: entered promiscuous mode [ 890.543377][T18193] debugfs: 'hsr0' already exists in 'hsr' [ 890.550535][T18193] Cannot create hsr debugfs directory [ 892.348006][T11209] Bluetooth: hci9: command 0x0419 tx timeout [ 893.791451][T18193] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 893.830887][T18193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 893.869136][T18193] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 893.930570][T18193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 893.999002][T18193] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 894.074715][T18193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 894.124653][T18193] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 894.201741][T18193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 894.426599][T11209] Bluetooth: hci9: command 0x0419 tx timeout [ 894.720703][T18364] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2195'. [ 895.343686][T18384] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 895.892956][T18193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.233845][T18392] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2198'. [ 896.294792][T18394] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 896.333150][T18396] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 896.364295][T18193] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.472504][T13918] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.479705][T13918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.515891][T11209] Bluetooth: hci9: command 0x0419 tx timeout [ 896.696759][T14794] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.703974][T14794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.979704][T18388] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 897.032319][T18388] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 897.079278][T18388] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 897.115672][T18388] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 897.130098][T18193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 897.162111][T18388] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 897.191331][T18388] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 897.244679][T18388] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 897.294976][T18388] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 897.354485][T18388] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 897.402086][T18388] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 897.875241][T11209] Bluetooth: hci6: unexpected event 0x36 length: 123 > 7 [ 898.426753][T11209] Bluetooth: hci0: command 0x0406 tx timeout [ 899.066613][T11209] Bluetooth: hci1: command 0x0406 tx timeout [ 899.146823][T11209] Bluetooth: hci3: command 0x2016 tx timeout [ 899.152973][T14622] Bluetooth: hci2: command 0x2016 tx timeout [ 899.227130][T11209] Bluetooth: hci5: command 0x0419 tx timeout [ 899.233426][T14622] Bluetooth: hci4: command 0x041b tx timeout [ 899.255647][T18455] Invalid ELF header magic: != ELF [ 899.307066][T14622] Bluetooth: hci6: command 0x0c1a tx timeout [ 899.313359][T11209] Bluetooth: hci7: command 0x0c1a tx timeout [ 899.388942][T11209] Bluetooth: hci8: command 0x0c1a tx timeout [ 899.462603][T18193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.471760][T11209] Bluetooth: hci9: command 0x0419 tx timeout [ 900.444424][T18464] can: request_module (can-proto-5) failed. [ 900.521779][T18479] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 901.215605][T18193] veth0_vlan: entered promiscuous mode [ 901.281220][T18193] veth1_vlan: entered promiscuous mode [ 901.427304][T18193] veth0_macvtap: entered promiscuous mode [ 901.473700][T18193] veth1_macvtap: entered promiscuous mode [ 901.574283][T18193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.639038][T18193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.694937][T13918] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.731254][T13918] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.790369][T13918] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.824380][T13918] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.368387][T14792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.391491][T14792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.570924][T14794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.586045][T14794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.257198][T18513] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2174'. [ 903.505780][T18517] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2213'. [ 903.639877][T18517] bond0: (slave bond_slave_0): Releasing backup interface [ 904.181930][T18512] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 904.195005][T18526] netlink: 350 bytes leftover after parsing attributes in process `syz.8.2215'. [ 904.214591][T18512] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 904.252553][T18512] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 904.298829][T18512] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 904.348795][T18512] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 904.384070][T18512] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 904.424898][T18512] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 904.469794][T11209] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 904.585522][T18528] FAULT_INJECTION: forcing a failure. [ 904.585522][T18528] name failslab, interval 1, probability 0, space 0, times 0 [ 904.635871][T18528] CPU: 0 UID: 0 PID: 18528 Comm: syz.7.2216 Tainted: G I L syzkaller #0 PREEMPT(full) [ 904.635915][T18528] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 904.635927][T18528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 904.635944][T18528] Call Trace: [ 904.635953][T18528] [ 904.635963][T18528] dump_stack_lvl+0x100/0x190 [ 904.636016][T18528] should_fail_ex.cold+0x5/0xa [ 904.636050][T18528] should_failslab+0xc2/0x120 [ 904.636082][T18528] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 904.636125][T18528] ? sock_alloc_inode+0x26/0x290 [ 904.636164][T18528] ? __pfx_sock_alloc_inode+0x10/0x10 [ 904.636198][T18528] sock_alloc_inode+0x26/0x290 [ 904.636228][T18528] ? __pfx_sock_alloc_inode+0x10/0x10 [ 904.636258][T18528] alloc_inode+0x68/0x250 [ 904.636306][T18528] sock_alloc+0x44/0x280 [ 904.636333][T18528] ? security_socket_create+0x7f/0x250 [ 904.636363][T18528] sock_create_lite+0x82/0x120 [ 904.636395][T18528] __netlink_kernel_create+0xbd/0x750 [ 904.636434][T18528] ? __pfx___netlink_kernel_create+0x10/0x10 [ 904.636469][T18528] ? find_held_lock+0x2b/0x80 [ 904.636506][T18528] ? __pfx_crypto_netlink_init+0x10/0x10 [ 904.636603][T18528] crypto_netlink_init+0xb7/0x140 [ 904.636647][T18528] ? __pfx_crypto_netlink_init+0x10/0x10 [ 904.636689][T18528] ? __nf_register_net_hook+0x291/0x780 [ 904.636768][T18528] ? __pfx_crypto_netlink_rcv+0x10/0x10 [ 904.636811][T18528] ? nf_register_net_hook+0xe2/0x170 [ 904.636847][T18528] ? nf_register_net_hooks+0xb1/0xd0 [ 904.636885][T18528] ops_init+0x1e2/0x5f0 [ 904.636917][T18528] setup_net+0x118/0x3a0 [ 904.636945][T18528] ? __pfx_setup_net+0x10/0x10 [ 904.636973][T18528] ? mutex_init_lockdep+0xf1/0x120 [ 904.637003][T18528] copy_net_ns+0x46f/0x7c0 [ 904.637037][T18528] create_new_namespaces+0x3ea/0xac0 [ 904.637077][T18528] unshare_nsproxy_namespaces+0xf2/0x220 [ 904.637113][T18528] ksys_unshare+0x438/0xab0 [ 904.637152][T18528] ? __pfx_ksys_unshare+0x10/0x10 [ 904.637188][T18528] ? xfd_validate_state+0x129/0x190 [ 904.637213][T18528] ? ksys_write+0x1ac/0x250 [ 904.637251][T18528] __x64_sys_unshare+0x31/0x40 [ 904.637288][T18528] do_syscall_64+0x115/0x840 [ 904.637330][T18528] ? clear_bhb_loop+0x40/0x90 [ 904.637363][T18528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.637389][T18528] RIP: 0033:0x7fa92059ce59 [ 904.637411][T18528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.637436][T18528] RSP: 002b:00007fa921386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 904.637461][T18528] RAX: ffffffffffffffda RBX: 00007fa920815fa0 RCX: 00007fa92059ce59 [ 904.637479][T18528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 904.637495][T18528] RBP: 00007fa920632d6f R08: 0000000000000000 R09: 0000000000000000 [ 904.637511][T18528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.637527][T18528] R13: 00007fa920816038 R14: 00007fa920815fa0 R15: 00007ffe44e8dba8 [ 904.637566][T18528] [ 905.308043][T14622] Bluetooth: hci0: command 0x0406 tx timeout [ 906.266880][T14622] Bluetooth: hci2: command 0x2016 tx timeout [ 906.273229][T11231] Bluetooth: hci1: command 0x0406 tx timeout [ 906.346552][T14622] Bluetooth: hci3: command 0x2016 tx timeout [ 906.434021][T11231] Bluetooth: hci6: command 0x0c1a tx timeout [ 906.440240][T11231] Bluetooth: hci5: command 0x0419 tx timeout [ 906.446386][T11230] Bluetooth: hci4: command 0x041b tx timeout [ 906.511390][T18539] Bluetooth: hci7: command 0x0c1a tx timeout [ 906.541447][T18512] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 906.559670][T18512] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 906.572713][T18512] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 908.586857][T11209] Bluetooth: hci9: command 0x0419 tx timeout [ 908.592946][T18539] Bluetooth: hci8: command 0x0c1a tx timeout [ 908.599046][T14517] Bluetooth: hci7: command 0x0c1a tx timeout [ 908.771657][T18551] kexec: Could not allocate control_code_buffer [ 908.967055][T14517] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 910.993077][T18539] Bluetooth: hci7: command 0x0c1a tx timeout [ 913.068165][T18539] Bluetooth: hci7: command 0x0c1a tx timeout [ 914.210266][T18570] Process accounting paused [ 914.996677][T18539] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 915.015358][T18539] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 915.024511][T18539] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 915.037496][T18539] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 915.050336][T18539] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 915.140050][T18593] netlink: 354 bytes leftover after parsing attributes in process `syz.7.2230'. [ 917.060053][T18616] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 917.149363][T18539] Bluetooth: hci10: command tx timeout [ 918.450087][T18628] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 918.621755][T18628] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 918.675728][T18628] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 918.731354][T18628] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 918.761154][T18624] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2233'. [ 918.795201][T18628] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 918.842605][T18628] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 918.881137][T18628] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 918.934250][T18628] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 918.975096][T18628] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 919.033472][T18628] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 919.069394][T18628] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 919.101467][T18628] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 919.133123][T18628] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 919.786858][T18539] Bluetooth: hci0: command 0x0406 tx timeout [ 919.974444][T18644] FAULT_INJECTION: forcing a failure. [ 919.974444][T18644] name fail_futex, interval 1, probability 0, space 0, times 0 [ 920.059949][T18644] CPU: 0 UID: 0 PID: 18644 Comm: syz.8.2240 Tainted: G I L syzkaller #0 PREEMPT(full) [ 920.059994][T18644] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 920.060005][T18644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 920.060021][T18644] Call Trace: [ 920.060030][T18644] [ 920.060040][T18644] dump_stack_lvl+0x100/0x190 [ 920.060095][T18644] should_fail_ex.cold+0x5/0xa [ 920.060129][T18644] get_futex_key+0x1d2/0x1510 [ 920.060175][T18644] ? __pfx_get_futex_key+0x10/0x10 [ 920.060222][T18644] ? futex_hash+0x2ad/0x370 [ 920.060265][T18644] ? futex_hash+0x141/0x370 [ 920.060310][T18644] futex_wake+0xea/0x530 [ 920.060342][T18644] ? __pfx_futex_wait+0x10/0x10 [ 920.060376][T18644] ? __pfx_futex_wake+0x10/0x10 [ 920.060414][T18644] ? do_vfs_ioctl+0x226/0x13e0 [ 920.060443][T18644] do_futex+0x32b/0x350 [ 920.060469][T18644] ? __pfx_do_futex+0x10/0x10 [ 920.060498][T18644] ? find_held_lock+0x2b/0x80 [ 920.060534][T18644] __x64_sys_futex+0x34f/0x4d0 [ 920.060564][T18644] ? __pfx___x64_sys_futex+0x10/0x10 [ 920.060596][T18644] ? rcu_is_watching+0x12/0xc0 [ 920.060629][T18644] do_syscall_64+0x115/0x840 [ 920.060665][T18644] ? clear_bhb_loop+0x40/0x90 [ 920.060696][T18644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.060724][T18644] RIP: 0033:0x7f232e79ce59 [ 920.060745][T18644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.060770][T18644] RSP: 002b:00007f232f6ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 920.060794][T18644] RAX: ffffffffffffffda RBX: 00007f232ea15fa8 RCX: 00007f232e79ce59 [ 920.060812][T18644] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f232ea15fac [ 920.060829][T18644] RBP: 00007f232ea15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 920.060845][T18644] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 920.060861][T18644] R13: 00007f232ea16038 R14: 00007fffa6831820 R15: 00007fffa6831908 [ 920.060893][T18644] [ 920.403902][T18649] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2241'. [ 920.413378][T18650] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2241'. [ 920.668172][T18539] Bluetooth: hci1: command 0x0406 tx timeout [ 920.747313][T18539] Bluetooth: hci3: command 0x2016 tx timeout [ 920.753498][T14517] Bluetooth: hci2: command 0x2016 tx timeout [ 920.782601][T18641] can: request_module (can-proto-5) failed. [ 920.832349][T14517] Bluetooth: hci4: command 0x041b tx timeout [ 920.907008][T14517] Bluetooth: hci6: command 0x0c1a tx timeout [ 920.913128][T18539] Bluetooth: hci5: command 0x0419 tx timeout [ 920.986967][T14517] Bluetooth: hci8: command 0x0c1a tx timeout [ 920.993072][T18539] Bluetooth: hci7: command 0x0c1a tx timeout [ 921.068958][T14517] Bluetooth: hci9: command 0x0419 tx timeout [ 921.153192][T14517] Bluetooth: hci10: command 0x040f tx timeout [ 922.420022][T18673] netlink: 354 bytes leftover after parsing attributes in process `syz.9.2243'. [ 922.479325][T18590] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.543382][T18590] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.594456][T18590] bridge_slave_0: entered allmulticast mode [ 922.663031][T18590] bridge_slave_0: entered promiscuous mode [ 922.974508][T18590] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.030033][T18590] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.053449][T18684] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2246'. [ 923.091850][T18590] bridge_slave_1: entered allmulticast mode [ 923.134378][T18590] bridge_slave_1: entered promiscuous mode [ 923.189641][T18684] bond0: entered promiscuous mode [ 923.228466][T14517] Bluetooth: hci10: command 0x040f tx timeout [ 923.242426][T18684] bond_slave_0: entered promiscuous mode [ 923.286790][T18684] bond_slave_1: entered promiscuous mode [ 923.530715][T18590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.600058][T18590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.837009][T18590] team0: Port device team_slave_0 added [ 923.949374][T18590] team0: Port device team_slave_1 added [ 924.268676][T18590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.294975][T18590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.354000][T18590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.502973][T18590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.545355][T18590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.595393][T18697] can: request_module (can-proto-5) failed. [ 924.634004][T18590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.887795][T18590] hsr_slave_0: entered promiscuous mode [ 924.947391][T18590] hsr_slave_1: entered promiscuous mode [ 925.003601][T18590] debugfs: 'hsr0' already exists in 'hsr' [ 925.025766][T18590] Cannot create hsr debugfs directory [ 925.306672][T14517] Bluetooth: hci10: command 0x040f tx timeout [ 925.868058][T18715] netlink: 337 bytes leftover after parsing attributes in process `syz.9.2251'. [ 925.958182][T18703] vhci_hcd: not connected 4 [ 926.157616][T18590] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.815330][T18590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.174927][T18590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.386431][T14517] Bluetooth: hci10: command 0x040f tx timeout [ 927.722425][T18590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.990298][T18590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.467800][T14517] Bluetooth: hci10: command 0x040f tx timeout [ 929.725811][T18590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 929.791604][T18590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 929.844112][T18590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 929.915725][T18590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 929.973481][T18590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 930.051878][T18590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 930.135367][T18590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 930.243901][T18590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 930.812090][T18590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.920305][T18590] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.015688][T14794] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.022937][T14794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.124828][T11353] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.132059][T11353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.461208][ T30] audit: type=1400 audit(4294967507.980:21): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=18762 comm="syz.9.2262" [ 932.461370][T18776] ICMPv6: process `syz.9.2264' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 932.551375][T18776] loop13: detected capacity change from 0 to 8 [ 933.962230][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.968685][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.274075][T18797] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 934.340872][T18590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.675811][T18590] veth0_vlan: entered promiscuous mode [ 934.820938][T18590] veth1_vlan: entered promiscuous mode [ 935.035311][T18590] veth0_macvtap: entered promiscuous mode [ 935.121568][T18590] veth1_macvtap: entered promiscuous mode [ 935.935195][T18590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.349446][T18590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.695241][T13918] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.755218][T13918] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.037749][T13918] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.102577][T13918] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.327855][T18846] netlink: 354 bytes leftover after parsing attributes in process `syz.7.2274'. [ 937.823208][T18855] FAULT_INJECTION: forcing a failure. [ 937.823208][T18855] name failslab, interval 1, probability 0, space 0, times 0 [ 937.891771][T18855] CPU: 0 UID: 0 PID: 18855 Comm: syz.7.2275 Tainted: G I L syzkaller #0 PREEMPT(full) [ 937.891815][T18855] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 937.891827][T18855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 937.891843][T18855] Call Trace: [ 937.891852][T18855] [ 937.891862][T18855] dump_stack_lvl+0x100/0x190 [ 937.891912][T18855] should_fail_ex.cold+0x5/0xa [ 937.891944][T18855] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 937.891974][T18855] should_failslab+0xc2/0x120 [ 937.892005][T18855] __kmalloc_noprof+0xe0/0x850 [ 937.892054][T18855] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 937.892085][T18855] vb2_core_reqbufs+0x382/0xf30 [ 937.892118][T18855] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 937.892163][T18855] __vb2_init_fileio+0x32d/0x1000 [ 937.892192][T18855] ? aa_file_perm+0x7f3/0x14d0 [ 937.892240][T18855] __vb2_perform_fileio+0x91e/0x1380 [ 937.892277][T18855] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 937.892306][T18855] ? __pfx___might_resched+0x10/0x10 [ 937.892342][T18855] vb2_fop_read+0x211/0x520 [ 937.892373][T18855] v4l2_read+0x229/0x2c0 [ 937.892412][T18855] ? __pfx_v4l2_read+0x10/0x10 [ 937.892453][T18855] vfs_read+0x1e4/0xb30 [ 937.892486][T18855] ? __pfx_vfs_read+0x10/0x10 [ 937.892519][T18855] ? find_held_lock+0x2b/0x80 [ 937.892552][T18855] ? __fget_files+0x215/0x3d0 [ 937.892583][T18855] ? __fget_files+0x215/0x3d0 [ 937.892618][T18855] ? __fget_files+0x21f/0x3d0 [ 937.892656][T18855] ksys_read+0x12a/0x250 [ 937.892686][T18855] ? __pfx_ksys_read+0x10/0x10 [ 937.892717][T18855] ? rcu_is_watching+0x12/0xc0 [ 937.892751][T18855] do_syscall_64+0x115/0x840 [ 937.892788][T18855] ? clear_bhb_loop+0x40/0x90 [ 937.892819][T18855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.892846][T18855] RIP: 0033:0x7fa92059ce59 [ 937.892868][T18855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.892894][T18855] RSP: 002b:00007fa91e7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 937.892919][T18855] RAX: ffffffffffffffda RBX: 00007fa920816090 RCX: 00007fa92059ce59 [ 937.892936][T18855] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000005 [ 937.892952][T18855] RBP: 00007fa920632d6f R08: 0000000000000000 R09: 0000000000000000 [ 937.892967][T18855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.892983][T18855] R13: 00007fa920816128 R14: 00007fa920816090 R15: 00007ffe44e8dba8 [ 937.893015][T18855] [ 939.324651][T11228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.353818][T11228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.812468][T11227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.852656][T11227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.365955][T18912] can: request_module (can-proto-5) failed. [ 942.665504][T18926] FAULT_INJECTION: forcing a failure. [ 942.665504][T18926] name fail_futex, interval 1, probability 0, space 0, times 0 [ 942.744413][T18926] CPU: 0 UID: 0 PID: 18926 Comm: syz.7.2284 Tainted: G I L syzkaller #0 PREEMPT(full) [ 942.744454][T18926] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 942.744465][T18926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 942.744480][T18926] Call Trace: [ 942.744488][T18926] [ 942.744498][T18926] dump_stack_lvl+0x100/0x190 [ 942.744546][T18926] should_fail_ex.cold+0x5/0xa [ 942.744576][T18926] should_fail_futex+0x4c/0x60 [ 942.744615][T18926] __x64_sys_futex+0x1f0/0x4d0 [ 942.744644][T18926] ? __pfx___x64_sys_futex+0x10/0x10 [ 942.744674][T18926] ? rcu_is_watching+0x12/0xc0 [ 942.744705][T18926] do_syscall_64+0x115/0x840 [ 942.744741][T18926] ? clear_bhb_loop+0x40/0x90 [ 942.744775][T18926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.744800][T18926] RIP: 0033:0x7fa92059ce59 [ 942.744820][T18926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.744844][T18926] RSP: 002b:00007ffe44e8dd08 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 942.744867][T18926] RAX: ffffffffffffffda RBX: 00000000000e61e9 RCX: 00007fa92059ce59 [ 942.744883][T18926] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa920815fac [ 942.744898][T18926] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 942.744913][T18926] R10: 00007ffe44e8de10 R11: 0000000000000246 R12: 00007ffe44e8de30 [ 942.744929][T18926] R13: 00007fa920815fac R14: 00000000000e621b R15: 00007ffe44e8de10 [ 942.744959][T18926] [ 943.436397][T18934] can: request_module (can-proto-5) failed. [ 943.739910][T18940] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 944.375107][T18946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2289'. [ 944.467997][T16302] NFSD: Failed to start, no listeners configured. [ 944.489606][T18946] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.497598][T18946] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.537920][T18946] bridge0: entered promiscuous mode [ 947.384095][T18979] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 947.393434][T18979] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 947.560402][T18979] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2295'. [ 947.622394][T18979] hsr_slave_0: left promiscuous mode [ 947.650138][T18979] hsr_slave_1: left promiscuous mode [ 948.165659][T18990] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 948.978972][T19003] netlink: 337 bytes leftover after parsing attributes in process `syz.9.2299'. [ 950.054425][ T30] audit: type=1804 audit(4294967526.570:22): pid=19010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2300" name="/newroot/60/file0" dev="tmpfs" ino=326 res=1 errno=0 [ 953.284625][T19055] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 955.061388][ T31] INFO: task syz.1.1968:17015 blocked for more than 143 seconds. [ 955.085756][ T31] Tainted: G I L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 955.175688][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 955.235961][ T31] task:syz.1.1968 state:D stack:27032 pid:17015 tgid:17009 ppid:5634 task_flags:0x400140 flags:0x00080002 [ 955.342887][ T31] Call Trace: [ 955.372098][ T31] [ 955.393056][ T31] __schedule+0x1295/0x67a0 [ 955.425869][ T31] ? __pfx___schedule+0x10/0x10 [ 955.511958][ T31] ? find_held_lock+0x2b/0x80 [ 955.559566][ T31] ? schedule+0x2bf/0x390 [ 955.605716][ T31] schedule+0xdd/0x390 [ 955.619819][T17971] Process accounting resumed [ 955.660550][ T31] schedule_preempt_disabled+0x13/0x30 [ 955.697682][ T31] __mutex_lock+0xced/0x1b10 [ 955.743623][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 955.771217][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 955.792648][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 955.819787][ T31] ? net_generic+0xea/0x2a0 [ 955.836338][ T31] ? net_generic+0xea/0x2a0 [ 955.852513][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 955.880555][ T31] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 955.909491][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 955.930487][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 955.963816][ T31] ? genl_get_cmd+0x3e7/0x760 [ 955.979670][ T31] ? bpf_lsm_capable+0x9/0x10 [ 955.998183][ T31] ? security_capable+0x80/0x260 [ 956.023561][ T31] genl_rcv_msg+0x560/0x800 [ 956.036256][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 956.055453][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 956.071893][ T31] netlink_rcv_skb+0x159/0x420 [ 956.085890][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 956.104159][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 956.125765][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 956.144392][ T31] genl_rcv+0x28/0x40 [ 956.148513][ T31] netlink_unicast+0x585/0x850 [ 956.155748][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 956.171219][ T31] netlink_sendmsg+0x8b0/0xda0 [ 956.182980][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.188332][ T31] ? __import_iovec+0x1d2/0x640 [ 956.194573][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 956.200283][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 956.205493][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.210840][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 956.222538][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 956.227902][ T31] ___sys_sendmsg+0x190/0x1e0 [ 956.234335][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.239630][ T31] __sys_sendmsg+0x170/0x220 [ 956.244637][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 956.249819][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 956.258124][ T31] ? rcu_is_watching+0x12/0xc0 [ 956.264380][ T31] do_syscall_64+0x115/0x840 [ 956.269040][ T31] ? clear_bhb_loop+0x40/0x90 [ 956.275969][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.281945][ T31] RIP: 0033:0x7f21ae19ce59 [ 956.289479][ T31] RSP: 002b:00007f21af075028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.298226][ T31] RAX: ffffffffffffffda RBX: 00007f21ae416180 RCX: 00007f21ae19ce59 [ 956.307447][ T31] RDX: 000000000000c840 RSI: 0000200000000480 RDI: 0000000000000004 [ 956.320040][ T31] RBP: 00007f21ae232d6f R08: 0000000000000000 R09: 0000000000000000 [ 956.329097][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.339447][ T31] R13: 00007f21ae416218 R14: 00007f21ae416180 R15: 00007fffb7ba60d8 [ 956.348607][ T31] [ 956.434172][ T31] [ 956.434172][ T31] Showing all locks held in the system: [ 956.477847][ T31] 1 lock held by khungtaskd/31: [ 956.501055][ T31] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 956.536076][ T31] 1 lock held by dhcpcd/5297: [ 956.551072][ T31] #0: ffffffff90606c60 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_delroute+0x148/0x390 [ 956.572222][ T31] 2 locks held by syz-executor/5637: [ 956.582359][ T31] #0: ffff88807dca60d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 956.610380][ T31] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 956.643332][ T31] 3 locks held by kworker/u10:11/13918: [ 956.657069][ T31] #0: ffff8880b843b620 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 956.699659][ T31] #1: ffff88807dbc8008 (&____s->seqcount#15){.-.-}-{0:0}, at: trace_ignore_this_task+0xbc/0x100 [ 956.726256][ T31] #2: ffff8880b8426358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 [ 956.753235][ T31] 2 locks held by getty/14591: [ 956.760740][ T31] #0: ffff888037dc70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 956.791374][ T31] #1: ffffc900026a22e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 956.809489][ T31] 2 locks held by syz.2.1847/16302: [ 956.819587][ T31] #0: ffffffff906b5168 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 956.840980][ T31] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 956.855769][ T31] 2 locks held by syz-executor/16557: [ 956.865505][ T31] #0: ffff888032d120d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 956.877652][ T31] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 956.887551][ T31] 2 locks held by syz.1.1968/17015: [ 956.893734][ T31] #0: ffffffff906b5168 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 956.903568][ T31] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 956.916804][ T31] 2 locks held by syz-executor/17252: [ 956.922539][ T31] #0: ffff8880354080d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 956.937560][ T31] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 956.947501][ T31] 2 locks held by syz.0.2146/18002: [ 956.952953][ T31] #0: ffffffff906b5168 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 956.962239][ T31] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 956.981372][ T31] 2 locks held by syz.6.2206/18435: [ 956.986616][ T31] #0: ffffffff906b5168 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 956.995236][ T31] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 957.005650][ T31] 2 locks held by syz.8.2288/18947: [ 957.012357][ T31] #0: ffffffff906b5168 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 957.023429][ T31] #1: ffffffff8ec624a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 957.038245][ T31] 2 locks held by syz.7.2309/19056: [ 957.043495][ T31] #0: ffffffff905edf08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 957.055073][ T31] #1: ffffffff90606c60 (rtnl_mutex){+.+.}-{4:4}, at: cangw_pernet_exit_batch+0x15/0xa0 [ 957.065267][ T31] 2 locks held by syz.7.2309/19058: [ 957.070713][ T31] #0: ffffffff905edf08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 957.085632][ T31] #1: ffffffff90606c60 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x90/0xc10 [ 957.096366][ T31] 2 locks held by syz.2.2311/19074: [ 957.101866][ T31] #0: ffffffff905edf08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 957.111618][ T31] #1: ffffffff90606c60 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 957.122719][ T31] 2 locks held by syz.2.2311/19076: [ 957.137930][ T31] #0: ffffffff905edf08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 957.147443][ T31] #1: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 957.157971][ T31] 1 lock held by syz.9.2312/19083: [ 957.163109][ T31] #0: ffff888049538ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 957.215308][ T31] [ 957.220769][ T31] ============================================= [ 957.220769][ T31] [ 957.268917][ T31] NMI backtrace for cpu 0 [ 957.268940][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G I L syzkaller #0 PREEMPT(full) [ 957.268977][ T31] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 957.268987][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 957.269003][ T31] Call Trace: [ 957.269011][ T31] [ 957.269020][ T31] dump_stack_lvl+0x100/0x190 [ 957.269067][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 957.269095][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 957.269122][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 957.269152][ T31] sys_info+0x141/0x190 [ 957.269173][ T31] watchdog+0xcb1/0x1030 [ 957.269212][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 957.269245][ T31] ? __pfx_watchdog+0x10/0x10 [ 957.269278][ T31] ? __kthread_parkme+0x18c/0x230 [ 957.269313][ T31] ? kthread+0x13a/0x450 [ 957.269347][ T31] ? __pfx_watchdog+0x10/0x10 [ 957.269378][ T31] kthread+0x370/0x450 [ 957.269413][ T31] ? __pfx_kthread+0x10/0x10 [ 957.269450][ T31] ret_from_fork+0x72b/0xd50 [ 957.269476][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 957.269502][ T31] ? __switch_to+0x800/0x1100 [ 957.269534][ T31] ? __switch_to_asm+0x39/0x70 [ 957.269565][ T31] ? __pfx_kthread+0x10/0x10 [ 957.269602][ T31] ret_from_fork_asm+0x1a/0x30 [ 957.269646][ T31] [ 957.770999][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 957.777909][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G I L syzkaller #0 PREEMPT(full) [ 957.788606][ T31] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 957.795137][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 957.805204][ T31] Call Trace: [ 957.808490][ T31] [ 957.811455][ T31] dump_stack_lvl+0x100/0x190 [ 957.816175][ T31] vpanic+0x552/0x970 [ 957.820179][ T31] ? __pfx_vpanic+0x10/0x10 [ 957.824698][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 957.830889][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 957.837065][ T31] panic+0xd1/0xe0 [ 957.840799][ T31] ? __pfx_panic+0x10/0x10 [ 957.845227][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 957.851419][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 957.857587][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 957.863757][ T31] ? watchdog.cold+0x1ec/0x234 [ 957.868559][ T31] ? watchdog+0xcc1/0x1030 [ 957.873004][ T31] watchdog.cold+0x1fd/0x234 [ 957.877617][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 957.883473][ T31] ? __pfx_watchdog+0x10/0x10 [ 957.888177][ T31] ? __kthread_parkme+0x18c/0x230 [ 957.893225][ T31] ? kthread+0x13a/0x450 [ 957.897494][ T31] ? __pfx_watchdog+0x10/0x10 [ 957.902193][ T31] kthread+0x370/0x450 [ 957.906288][ T31] ? __pfx_kthread+0x10/0x10 [ 957.910997][ T31] ret_from_fork+0x72b/0xd50 [ 957.915607][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 957.920757][ T31] ? __switch_to+0x800/0x1100 [ 957.925458][ T31] ? __switch_to_asm+0x39/0x70 [ 957.930248][ T31] ? __pfx_kthread+0x10/0x10 [ 957.934869][ T31] ret_from_fork_asm+0x1a/0x30 [ 957.939675][ T31] [ 957.942817][ T31] Kernel Offset: disabled [ 957.947160][ T31] Rebooting in 86400 seconds..