last executing test programs: 3.314090748s ago: executing program 2 (id=565): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa1\x00', 0x1, 0x0) write$auto_vcs_fops_vc_screen(r1, &(0x7f00000001c0)="080a0000fe", 0x5) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x8000000000000000, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x1, 0xc, 0x200) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x242543, 0x0) (async, rerun: 32) flock$auto(r0, 0xf6) (rerun: 32) 3.104253205s ago: executing program 3 (id=566): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptys4\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='\x00', 0xdb01) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) rseq$auto(0x0, 0x8000, 0x0, 0x6) prctl$auto(0xc4, 0x1, 0x4, 0x5, 0x7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vhci_hcd.11/usb32/32-0:1.0/usb32-port4/location\x00', 0x48001, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="19032cbd7000fcdbdf250300060008"], 0x58}, 0x1, 0x0, 0x0, 0x44004}, 0x4000040) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) ioctl$auto_evdev_fops_evdev(r5, 0xffffffff80004506, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/56, 0x38) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000400), r3) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xd, 0x10000000000, 0xd, 0xfb9, 0x0, 0x0, 0x0, 0x800000000000009, 0x6, 0xfffffffffffffff7, 0x5, 0x7fffffff, 0x5, 0xffffffff80000000, 0xdf1, 0x7, 0x7}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) waitid$auto(0x100000001, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffc) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_wakeup_irq\x00', 0x109040, 0x0) socket(0xa, 0x3, 0x5) io_cancel$auto(0x8, &(0x7f0000000080)={0x61, 0x3, 0x3, 0x3, 0x9, r7, 0x6, 0x6, 0x8, 0x0, 0x105e8fcb, r0}, &(0x7f00000000c0)={0xc, 0xfffffffffffffffb, 0x3, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2.863440327s ago: executing program 2 (id=569): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xf000, 0x9, 0x1000000003, 0x9b72, 0x2, 0x8000) ftruncate$auto(0x1ff, 0x0) socket(0xa, 0x4, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x6800) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) getsockopt$auto(0x6, 0x84, 0x25, 0x0, &(0x7f00000000c0)=0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000004e78c115e9ba6bc9f9e9cfc4dd6903a3d595d8d133a6dede52d0321005fce7f44b8e1b69d0e407804bc6b420141706898da87105d6117416f7880c4be3c1ef20ad2d7f615ae49cb2ca9dc6ecca624959f278a1bb11fc06bb1c17b309bb27710c4f2b7a5fd4432d1e4fed6c493e48783e594c0f89378fb62860e0fa4f6e809f599eaf30c21fc1efd2945766e0d51d", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf250100000008000900040000000800020004000000060003002a0000000400050008000800", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0xab09, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x8, 0x10001, 0x5) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x20240, 0x0) userfaultfd$auto(0x2) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) 2.833525841s ago: executing program 0 (id=570): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5e6d528a33f3c4a0ceeac390a6d66f3b34eac379ca5f9bfc242bd0c9f2442c099dda5eeee15c7bb1e76c809679ea245a00ae3fd8db9dc31981deef60b9fc8584d3591722f6fa3bf82e81887b8b573f79349bc1bed83cab2eddf68fd4a0c4357ea68cfa99af86fa2191af10c7a264fb58cd2c2f4762a800235670376547b81ab02f7cc037ec4b5903cb8a16681bc1ae5c6f907955ba3dce6d1fe304144adfa09d24", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf25030000000800040008000000060007200080000008000200532a03c0495a56919960f696e4e4e4aa756a737895bd3c2d1e9b5b1cba08740020b439f96b6b7b19d00f053d4dc7de451c943756b020d35d252f75dd402f768d6965a3148d4f05f5c565fefa1aba180ddf9d840f327a4a6de1", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000300faffffff08000400b7000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffc) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x2, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/driver/nvram\x00', 0x1a1042, 0x0) lseek$auto(r1, 0x2, 0x1) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) poll$auto(&(0x7f0000000000)={r2, 0x4, 0x100}, 0x3, 0x8) ioctl$auto_TCSBRKP(r0, 0x5425, 0x0) socket(0x2, 0x3, 0x100) setrlimit$auto(0x8, &(0x7f00000000c0)={0x5, 0x6}) userfaultfd$auto(0x6) r3 = socket(0x10, 0x2, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/thermal/cooling_device0/cur_state\x00', 0x20880, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800) r6 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x288002, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) sched_setaffinity$auto(0x9, 0x0, 0xfffffffffffffffe) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) poll$auto(&(0x7f0000000100)={r2, 0x6, 0x87}, 0xfffffffd, 0x1) mremap$auto(0x0, 0x2, 0x8, 0x3, 0x7effffffb000) ioctl$auto_PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000200)={0x800000000000, 0xffffffff, 0xfff, 0x7fffffffefff, 0xfffffffffffffffe, 0x5, 0x6, 0xbfd, 0x2c, 0x2, 0xfff}) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000063c0)={&(0x7f0000000100)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40811}, 0x10040080) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) dup2$auto(r4, r3) acct$auto(&(0x7f0000000040)='\x00') acct$auto(0x0) 2.676346237s ago: executing program 3 (id=571): mmap$auto(0x0, 0x2000d, 0x5, 0xeb1, 0x404, 0x8000) (async, rerun: 32) socket(0x2, 0x801, 0x6) (async, rerun: 32) io_uring_setup$auto(0xa, 0x0) (async, rerun: 64) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (rerun: 64) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) timerfd_create$auto(0x0, 0x0) (rerun: 32) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x2001, 0x0) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (rerun: 32) socket(0xa, 0x2, 0x0) (async, rerun: 64) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) (async, rerun: 64) setreuid$auto(0x0, 0xee00) (async, rerun: 32) mincore$auto(0x1000, 0x8001, 0x0) (rerun: 32) io_uring_setup$auto(0x2, 0x0) futex$auto(0x0, 0x8c, 0x6, 0x0, 0x0, 0xc) (async, rerun: 64) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (rerun: 64) 2.662089758s ago: executing program 1 (id=572): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r0, 0x6b, 0x2, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x540a3080}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="1800000053b0f1f641d547edde773d8a0302ae9c8ed16697a84aeeaf6d6d342b278149b7b9f9abb5ba31f1c43f18a9e0d1bd7f6adbc9fda188e4b1c117a8909211dcc1f5347f35e000a03519ab7ff44f4555808d615ef04d1d3c34dbbfa94c11ed4663d56bec5f7274d36e576f398469b84048a6920123cf9133567f23d6efbd8c591cc73f33ebd360b7dddb5a1cc1f1f692aa15587f44e969c4a2ad2ae90147aa873a29ad6900373c01fdd7e89943fb0e082d3444", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf257700000004008c00"], 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250300000008000300000200000600070000000000080002008d98c8f1e52d86c0168b9820fb6fe6f3f5ce05bcb1ca587b3418383d0a156e59b1a5a748fc730271650260d10fb4f45fad8be928363419d5467dfc3a08fbcd7a84ad03db", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000060}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc4, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xa5, 0xc5, "a00aeeb2cc820e4a5516b1771c156a9ed72d73b5fc80307adec60cda58e67d9524710d35005073b1fe54053f5f2a6ab1068ba56c31585c85b77909f5a3cd5c88272542d17b2a60e5a4a460a7b24089ecab30c29a55747a327ec71012f8ff3bc4cb0d7db409b57ef3a5dbb01ce36902d8425fe912e5b4a2d72cec2d98784be0d9b78b0a0510092af9e5bd68603e939f9673c5d3532103d5d96cffb6e589e05baed5"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4022a068bf3e1134) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4880}, 0x4004) syz_clone3(&(0x7f0000000400)={0x180102000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0xf4, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r3, 0x4008af00, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x8000) r4 = socket(0x10, 0x2, 0x0) msgrcv$auto(0x8, &(0x7f0000000640)={0x3, 0x5}, 0x1, 0xfff, 0x5a35) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x4001e}, 0x40000) 2.04958139s ago: executing program 1 (id=573): r0 = socket(0x28, 0x5, 0x28) sendmmsg$auto(r0, &(0x7f0000000280)={{&(0x7f0000000000)="14b335f8751e4c772088acbf7ec479e1db65480441001a9441617baddbf4e5ee5d2d7128d8765431e1ca6267d1b6df5a2f2afa141a4aee86ab966b0a0b8ddedbc0cee468aeea4e462a7c3728ca935bdfc714b32f6970a53f9c19af04d491b0f5dac058ffbf3e665966961efdf1d1ab3932f33a9a42fd48af2ad28887843089c4ddaec51f88f665c391d1d99bdd2f558043695e672dd8801404895fed83f5e70cbac8bad71500675a9569cb40ccb95ec0aee0594114e1c269337c8d2eb0c9317f85a86bb3773fc37d0ae45b1664d90245c62b49e7", 0x7, &(0x7f00000001c0)={&(0x7f0000000100)="bdebde470fd8a9b4d3e5f16c62b61fd7240d803963b90aeceb876c8abfd148c5aa6ed30be8cf9c5ddbad28d02d565a70eff8046a5d51b82ace89f4a482ae24a1a9a3f6369d66565738ff11123f53c021a38c4f6f69dc446b086b8e212020afe11c3bc2fd7639fc9e997a605e408d931a55752ec349ebd6c8636d87ab508849c6e4751896f855325f038960ffc6176ea85cb93f2357415509e0ef7a2b4ba38d1731fc871ebf", 0xfffffffffffffffa}, 0x7f, &(0x7f0000000200)="70eb96c32fcc5d7785cc0903df92354ebedae461c9ed6457eedc1daac5d7006a1ae6c4c239cce040642eeb0c71e52e99890394e8a3c544ca3339f31fbfc31da28caf5003df035b826488", 0x4, 0x2}, 0x7}, 0x2, 0x10) 1.947497763s ago: executing program 3 (id=574): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bridge_slave_1/base_reachable_time_ms\x00', 0x80001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x2, 0xfffff87b}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getrlimit$auto(0x6, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x83, 0x0, 0x8) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(r1, 0x0, 0x6) 1.924124023s ago: executing program 1 (id=575): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x1f, 0x0, 0x3ff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setresgid$auto(0xffffffffffffffff, 0x28000000000000, 0x7) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xae71, 0x0) 1.831894032s ago: executing program 1 (id=576): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (async) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec7\x00', 0x400000, 0x0) (async) openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) mmap$auto(0x1, 0x40000a, 0x3, 0x100009b72, r0, 0x8000) (async, rerun: 32) r1 = socket(0x26, 0x80000, 0x2) (async, rerun: 32) ioctl$auto(0x3, 0x8108551b, 0x1) (async) r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000000c0), 0x260842, 0x0) ioctl$auto_RNDCLEARPOOL2(r2, 0x5206, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = getsockopt$auto(r3, 0x88, 0x65, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r1) (async) socket(0x2, 0x801, 0x106) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) clock_gettime$auto(0x7, 0x0) (async) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async, rerun: 32) connect$auto(0x3, 0x0, 0x55) (async, rerun: 32) listen$auto(0x3, 0x81) sendmsg$auto_IPVS_CMD_ZERO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4010) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) 1.72248386s ago: executing program 0 (id=577): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r0, 0x6b, 0x2, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x540a3080}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="1800000053b0f1f641d547edde773d8a0302ae9c8ed16697a84aeeaf6d6d342b278149b7b9f9abb5ba31f1c43f18a9e0d1bd7f6adbc9fda188e4b1c117a8909211dcc1f5347f35e000a03519ab7ff44f4555808d615ef04d1d3c34dbbfa94c11ed4663d56bec5f7274d36e576f398469b84048a6920123cf9133567f23d6efbd8c591cc73f33ebd360b7dddb5a1cc1f1f692aa15587f44e969c4a2ad2ae90147aa873a29ad6900373c01fdd7e89943fb0e082d3444", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf257700000004008c00"], 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250300000008000300000200000600070000000000080002008d98c8f1e52d86c0168b9820fb6fe6f3f5ce05bcb1ca587b3418383d0a156e59b1a5a748fc730271650260d10fb4f45fad8be928363419d5467dfc3a08fbcd7a84ad03db", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000060}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc4, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xa5, 0xc5, "a00aeeb2cc820e4a5516b1771c156a9ed72d73b5fc80307adec60cda58e67d9524710d35005073b1fe54053f5f2a6ab1068ba56c31585c85b77909f5a3cd5c88272542d17b2a60e5a4a460a7b24089ecab30c29a55747a327ec71012f8ff3bc4cb0d7db409b57ef3a5dbb01ce36902d8425fe912e5b4a2d72cec2d98784be0d9b78b0a0510092af9e5bd68603e939f9673c5d3532103d5d96cffb6e589e05baed5"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4022a068bf3e1134) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) capset$auto(0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x180102000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0xf4, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r3, 0x4008af00, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x8000) r4 = socket(0x10, 0x2, 0x0) msgrcv$auto(0x8, &(0x7f0000000640)={0x3, 0x5}, 0x1, 0xfff, 0x5a35) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x4001e}, 0x40000) 1.551454214s ago: executing program 1 (id=578): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f0000001200)={0x200c0000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r0, 0xc0045103, 0x3) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdffb, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0xc0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) pread64$auto(r1, 0x0, 0x80, 0x6) 1.506543365s ago: executing program 0 (id=579): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x6}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_AGE={0x8, 0x3, 0xe}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x48, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x6}, @HSR_A_NODE_ADDR={0xa, 0x1, @broadcast}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}, @HSR_A_IF2_AGE={0x8, 0x4, 0x7fff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x890) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x5, 0x0) (async) socket(0xa, 0x801, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x5, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) (async) getsockopt$auto(0x6, 0x84, 0x22, 0x0, 0x0) (async) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0xffffffe4) setsockopt$auto(r2, 0x5, 0x1, &(0x7f0000000100)='\x00', 0x10) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.202252227s ago: executing program 3 (id=580): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/acpi/wakeup\x00', 0x22b47cd6c542b58, 0x0) mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) write$auto(r0, 0x0, 0x100000000fec) r1 = socket(0x10, 0x2, 0x14) setreuid$auto(0x4, 0x8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000214af"], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) madvise$auto(0x7, 0x1, 0x0) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000040)={0x0, 0xb2, 0x6, 0x9, 0x7, 0x9}) 1.027379623s ago: executing program 0 (id=581): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) read$auto(0x3, 0x0, 0x80) r1 = socket(0x10, 0x3, 0xa) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x80, 0x0) mmap$auto(0x8, 0x400004, 0xdf, 0x1000409b72, r2, 0x0) madvise$auto(0x33, 0xffffffffffff0005, 0x19) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001a40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_GET_RADIO(r4, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0904b8224b4f03d460aacb86aabaae1407f30af0c7a086f17c70e1608b1a0d8b8343e498ab48029e574db297814210427ac8352fdcf10800f53fd164bae611dcfd5382360b5d5d3f2f26b6b4ef5c63e614d75252ca0000000000000005b174d5688066b98052156a49fe338763386003e89c4196cafe35e6dad1ec", @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8) clone$auto(0x0, 0x80, 0x0, 0x0, 0x6) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeep\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_4={0x7, r5, 0x5, r5}, 0x92) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 885.164128ms ago: executing program 3 (id=582): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0x3, 0x7, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x4, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0x0, 0x70624ce7, 0x1, 0xfffffffffffffffd, 0x8, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x4, 0xfffffffffffffe00, 0x0, 0x0, 0x5, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x7, 0xc567]}, 0x1, 0x9) (async) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x50) (async) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd03, &(0x7f00000001c0)) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') getdents64$auto(r1, 0x0, 0x18) (async) geteuid() 865.032325ms ago: executing program 2 (id=583): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r0, 0x402, 0x8000007fffffe3) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002800)={'dummy0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000004640), r1) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a54928bd7000ffdb6e11d4", @ANYRES32=r2, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40404}, 0x8800) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dynamic_debug/control\x00', 0xd6e4966f4afe6431, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb3, r5, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/zswap/parameters/enabled\x00', 0xa001, 0x0) r7 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x91) read$auto(r7, 0x0, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r8) sendmsg$auto_WG_CMD_SET_DEVICE(r8, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, r9, 0x21, 0x70bd26, 0x25dfdbfa, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [@nested={0x4, 0x140}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x80) write$auto(r6, 0x0, 0x3) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x5, 0x400) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) (async) fcntl$auto(r0, 0x402, 0x8000007fffffe3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002800)={'dummy0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000004640), r1) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a54928bd7000ffdb6e11d4", @ANYRES32=r2, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40404}, 0x8800) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dynamic_debug/control\x00', 0xd6e4966f4afe6431, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb3, r5, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/zswap/parameters/enabled\x00', 0xa001, 0x0) (async) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x91) (async) read$auto(r7, 0x0, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r8) (async) sendmsg$auto_WG_CMD_SET_DEVICE(r8, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, r9, 0x21, 0x70bd26, 0x25dfdbfa, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [@nested={0x4, 0x140}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x80) (async) write$auto(r6, 0x0, 0x3) (async) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) socket(0x2, 0x5, 0x400) (async) 728.7534ms ago: executing program 0 (id=584): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfd, 0x8000) pidfd_open$auto(0x1, 0x0) move_mount$auto(0x0, 0x0, 0x4, 0x0, 0x77) mmap$auto(0x7, 0x9, 0xff8, 0x8000000008010, 0x3, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) open(0x0, 0x22240, 0x155) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xfffffffffffffff9, 0x7352, 0x3e, 0x694b, 0x1ffde, 0x7, 0x3, 0x1000, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x4, 0x0, 0x80, 0x7, 0x0, 0x8a6, 0x0, 0x200, 0x0, 0x84, [0x0, 0x0, 0x1, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffdfffffffc, 0x1, 0x0, 0x1, 0x2, 0x3b3b, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x200000000001, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, 0x5, 0x400000000005b8, 0x4, 0x5, 0x1000, 0x1, 0x7, 0xffffffffffffffff, 0x1, 0x800000000000b, 0xc8, 0xf42c, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x6, 0x5]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x800005411, 0x38) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000140)=0x2) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000200)=0xe) 651.217963ms ago: executing program 2 (id=585): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x10642, 0x0) connect$auto(r0, &(0x7f0000000200)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xa) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x0, 0x1}}, 0x0) swapoff$auto(&(0x7f0000000040)='\x00') mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r1 = socket(0x1e, 0x1, 0x0) connect$auto(r1, &(0x7f0000000000), 0x10) ioperm$auto(0xde, 0x9, 0x100402) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x8b35, 0x91) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0x80000002, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r2) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x18, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x40080) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioperm$auto(0x3, 0xe, 0x2000000000000149) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x7) cachestat$auto(r5, 0x0, 0x0, 0x0) writev$auto(r5, &(0x7f0000000280)={&(0x7f0000000240)="3f7edb9ce002c5ee5382f7e669c0150aa2d8fd862adcfd393e0f0ad86dab5c"}, 0xc) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000000c0), r1) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r6, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0xb348}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008800) 333.06506ms ago: executing program 2 (id=586): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x9, 0x1, 0x0) r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x40, 0x0) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r1, &(0x7f0000008d40)='($}-)#@\x00', 0x40) close_range$auto(r0, r0, 0x0) 332.262262ms ago: executing program 1 (id=594): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f0000001200)={0x200c0000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r0, 0xc0045103, 0x3) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdffb, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0xc0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = semctl$auto(0x4, 0x7fffffff, 0x9, 0x8000) syz_open_procfs$namespace(r1, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) pread64$auto(r2, 0x0, 0x80, 0x6) 244.206166ms ago: executing program 3 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0xa, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB='_'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, r1, 0x1, 0x74bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/vxcan0/shared_media\x00', 0xc0601, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x89e1, 0x91) dup2$auto(0x800000003, 0x3) ftruncate$auto(0x3, 0x800000000008) 102.490103ms ago: executing program 0 (id=588): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)=ANY=[@ANYRES8=r0, @ANYBLOB="6a0051b1"], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) ioprio_get$auto(0x5, 0x0) mmap$auto(0x4000000000000, 0x400000, 0xdf, 0x9b72, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000010c0)='\xc4--:\xdd:,..-\xff{\xd8', 0x0) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) ftruncate$auto(0x3, 0x400180200002) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r1, &(0x7f0000000040)=""/4099, 0xfd98) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r2 = socket(0xa, 0x3, 0x84) getsockopt$auto(r2, 0x84, 0x73, 0x0, 0x0) read$auto(r2, &(0x7f0000001080)='^@\'#--\x00', 0x100000001) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) getrandom$auto(0x0, 0x6000000, 0x3) r3 = socket(0x15, 0x5, 0x0) setsockopt$auto(r3, 0x114, 0x1d, 0x0, 0x4) getsockopt$auto(0x6, 0x107, 0x17, 0x0, 0x0) read$auto(r1, &(0x7f0000001200)='\xefI5\x1d\xc4~\xd0<\xd2;\xbcj\xce\x18+\x9blE\x18\xa1>V\n\xa4\x90cgy\x98O\xf4\x7f\xe0\xbf\xbb\x9f\xfc\xfb\x870l0\xcf\xb4\rx\xcb\bpg 1 [ 66.419521][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.429638][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.438560][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.446844][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.461362][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.467124][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.469861][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.484592][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.491931][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.500119][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.500384][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.509045][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.517302][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.522948][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.530310][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.537093][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.543362][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.549520][ T5829] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.558709][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.564911][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.581141][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.592504][ T5142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.601541][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.987238][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 67.040666][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 67.063734][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 67.101644][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 67.210904][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.218963][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.226851][ T5824] bridge_slave_0: entered allmulticast mode [ 67.233800][ T5824] bridge_slave_0: entered promiscuous mode [ 67.261335][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.269135][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.276540][ T5825] bridge_slave_0: entered allmulticast mode [ 67.283487][ T5825] bridge_slave_0: entered promiscuous mode [ 67.290786][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.298396][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.305663][ T5824] bridge_slave_1: entered allmulticast mode [ 67.313110][ T5824] bridge_slave_1: entered promiscuous mode [ 67.343067][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.351128][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.359711][ T5825] bridge_slave_1: entered allmulticast mode [ 67.367185][ T5825] bridge_slave_1: entered promiscuous mode [ 67.391542][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.399786][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.407515][ T5827] bridge_slave_0: entered allmulticast mode [ 67.414613][ T5827] bridge_slave_0: entered promiscuous mode [ 67.432870][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.451878][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.459926][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.467604][ T5827] bridge_slave_1: entered allmulticast mode [ 67.474267][ T5827] bridge_slave_1: entered promiscuous mode [ 67.492312][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.502491][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.510091][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.517779][ T5826] bridge_slave_0: entered allmulticast mode [ 67.524745][ T5826] bridge_slave_0: entered promiscuous mode [ 67.545673][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.557349][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.577354][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.585303][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.593212][ T5826] bridge_slave_1: entered allmulticast mode [ 67.600609][ T5826] bridge_slave_1: entered promiscuous mode [ 67.650968][ T5824] team0: Port device team_slave_0 added [ 67.667422][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.680231][ T5825] team0: Port device team_slave_0 added [ 67.690053][ T5824] team0: Port device team_slave_1 added [ 67.707212][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.720985][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.733146][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.744453][ T5825] team0: Port device team_slave_1 added [ 67.793442][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.802434][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.830426][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.845567][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.853140][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.879624][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.902798][ T5827] team0: Port device team_slave_0 added [ 67.921693][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.929421][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.955840][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.972570][ T5826] team0: Port device team_slave_0 added [ 67.981093][ T5827] team0: Port device team_slave_1 added [ 68.011091][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.018681][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.045150][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.063798][ T5826] team0: Port device team_slave_1 added [ 68.089101][ T5824] hsr_slave_0: entered promiscuous mode [ 68.096382][ T5824] hsr_slave_1: entered promiscuous mode [ 68.137315][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.145000][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.175165][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.201597][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.210826][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.237452][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.249219][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.256507][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.283108][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.309963][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.320011][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.346435][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.364485][ T5825] hsr_slave_0: entered promiscuous mode [ 68.371276][ T5825] hsr_slave_1: entered promiscuous mode [ 68.377733][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.385583][ T5825] Cannot create hsr debugfs directory [ 68.452003][ T5827] hsr_slave_0: entered promiscuous mode [ 68.458504][ T5827] hsr_slave_1: entered promiscuous mode [ 68.465009][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.473217][ T5827] Cannot create hsr debugfs directory [ 68.486290][ T5826] hsr_slave_0: entered promiscuous mode [ 68.492794][ T5826] hsr_slave_1: entered promiscuous mode [ 68.499419][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.507503][ T5826] Cannot create hsr debugfs directory [ 68.637414][ T5142] Bluetooth: hci3: command tx timeout [ 68.646165][ T5142] Bluetooth: hci2: command tx timeout [ 68.653161][ T5142] Bluetooth: hci0: command tx timeout [ 68.716147][ T5142] Bluetooth: hci1: command tx timeout [ 68.795904][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.813331][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.839089][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.855584][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.889578][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.900954][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.914820][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.943010][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.996739][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.013249][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.044383][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.070198][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.111795][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.123045][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.138684][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.154921][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.205920][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.254303][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.274506][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.293676][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.301489][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.331625][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.339140][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.361532][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.382473][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.390176][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.427827][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.435850][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.535106][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.561925][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.604956][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.632200][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.648818][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.656128][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.672815][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.680043][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.721255][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.728724][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.742897][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.750990][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.792018][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.826407][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.923802][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.949799][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.098602][ T5825] veth0_vlan: entered promiscuous mode [ 70.132202][ T5825] veth1_vlan: entered promiscuous mode [ 70.163636][ T5824] veth0_vlan: entered promiscuous mode [ 70.181170][ T5824] veth1_vlan: entered promiscuous mode [ 70.192750][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.205519][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.261805][ T5825] veth0_macvtap: entered promiscuous mode [ 70.287750][ T5825] veth1_macvtap: entered promiscuous mode [ 70.319079][ T5824] veth0_macvtap: entered promiscuous mode [ 70.341468][ T5824] veth1_macvtap: entered promiscuous mode [ 70.350537][ T5827] veth0_vlan: entered promiscuous mode [ 70.363812][ T5826] veth0_vlan: entered promiscuous mode [ 70.380664][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.393660][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.413793][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.424847][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.438798][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.448431][ T5827] veth1_vlan: entered promiscuous mode [ 70.457773][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.467600][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.477410][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.486935][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.501664][ T5826] veth1_vlan: entered promiscuous mode [ 70.531064][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.543774][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.555885][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.575744][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.584697][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.594924][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.604074][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.693716][ T5826] veth0_macvtap: entered promiscuous mode [ 70.712990][ T3056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.719461][ T5827] veth0_macvtap: entered promiscuous mode [ 70.727618][ T5142] Bluetooth: hci0: command tx timeout [ 70.728625][ T3056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.733052][ T5142] Bluetooth: hci2: command tx timeout [ 70.741175][ T5834] Bluetooth: hci3: command tx timeout [ 70.776843][ T5826] veth1_macvtap: entered promiscuous mode [ 70.796803][ T5142] Bluetooth: hci1: command tx timeout [ 70.803368][ T5827] veth1_macvtap: entered promiscuous mode [ 70.843816][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.855296][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.865796][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.878422][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.889673][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.900632][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.911242][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.915531][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.933020][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.933170][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.943146][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.959639][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.970419][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.980624][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.991522][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.008479][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.028390][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.043011][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.053634][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.065180][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.077583][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.107596][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.119811][ T3056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.121081][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.136027][ T3056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.149942][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.161747][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.171712][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.182312][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.194082][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.215484][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.224456][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.234118][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.243085][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.264040][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.277923][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.287120][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.294372][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.296237][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.520875][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.540386][ T5889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 71.541028][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.568183][ T3056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.568217][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.584741][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.588781][ T3056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.601838][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.615549][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.625806][ T5894] QAT: Device 0 not found [ 71.716303][ T3056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.736474][ T3056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.753636][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.778303][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.929361][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.946288][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.208647][ T5906] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[5906] [ 72.387167][ T5903] Invalid ELF header magic: != ELF [ 72.806241][ T5142] Bluetooth: hci3: command tx timeout [ 72.813065][ T5142] Bluetooth: hci0: command tx timeout [ 72.818826][ T5142] Bluetooth: hci2: command tx timeout [ 72.886968][ T5831] Bluetooth: hci1: command tx timeout [ 73.363252][ T5903] Zero length message leads to an empty skb [ 74.876283][ T5831] Bluetooth: hci2: command tx timeout [ 74.882169][ T5142] Bluetooth: hci0: command tx timeout [ 74.882185][ T5834] Bluetooth: hci3: command tx timeout [ 74.959716][ T5834] Bluetooth: hci1: command tx timeout [ 76.399374][ T5963] process 'syz.1.15' launched ':,' with NULL argv: empty string added [ 76.936168][ T5968] svc: failed to register nfsdv3 RPC service (errno 111). [ 76.970539][ T5968] svc: failed to register nfsaclv3 RPC service (errno 111). [ 77.346260][ T5968] syz.2.19 (5968) used greatest stack depth: 20368 bytes left [ 77.361628][ T5975] svc: failed to register nfsdv3 RPC service (errno 111). [ 77.401018][ T5975] svc: failed to register nfsaclv3 RPC service (errno 111). [ 79.400315][ T6016] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.021683][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.33'. [ 80.704700][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 80.734270][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 81.055373][ T6043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.38'. [ 81.100943][ T6042] lo: entered allmulticast mode [ 81.553112][ T6049] Invalid ELF header magic: != ELF [ 81.776869][ T6041] lo: left allmulticast mode [ 87.288142][ T8] cfg80211: failed to load regulatory.db [ 90.445448][ T29] audit: type=1800 audit(1735097289.389:2): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.66" name="discovery_nqn" dev="configfs" ino=8543 res=0 errno=0 [ 91.090872][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.69'. [ 91.171378][ T6171] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 91.346155][ T6171] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 91.933916][ T6192] mmap: syz.1.73 (6192) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.402760][ T6202] zero sized request [ 93.825098][ T6240] lo: entered allmulticast mode [ 93.940210][ T6239] lo: left allmulticast mode [ 94.444786][ T6243] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.667227][ T6281] batman_adv: Routing algorithm '' is not supported [ 97.710980][ T6287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.93'. [ 98.136672][ T6287] bond0: (slave bond_slave_0): Releasing backup interface [ 98.676551][ T6298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.95'. [ 99.202391][ T29] audit: type=1800 audit(1735097298.159:3): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.96" name="features" dev="configfs" ino=8824 res=0 errno=0 [ 99.263473][ T6302] ======================================================= [ 99.263473][ T6302] WARNING: The mand mount option has been deprecated and [ 99.263473][ T6302] and is ignored by this kernel. Remove the mand [ 99.263473][ T6302] option from the mount to silence this warning. [ 99.263473][ T6302] ======================================================= [ 101.199554][ T6334] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.235653][ T6334] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.340206][ T6334] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.401194][ T6342] QAT: Device 0 not found [ 101.509128][ T6334] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.526384][ T6334] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.652644][ T6334] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.863013][ T6334] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.886069][ T6334] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.981376][ T6347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.105'. [ 102.091050][ T6334] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.130732][ T6334] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.163401][ T6334] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.220282][ T6334] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.277822][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.519143][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.922306][ T6399] binder: 6389:6399 ioctl c0046209 ffffffffffffffff returned -22 [ 103.930629][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.156160][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.356343][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.596976][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.006070][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.236071][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.424533][ T6443] warning: `syz.1.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.436625][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.684260][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.076116][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.318597][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.223682][ T6471] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 109.328619][ T6479] ceph: Failed to parse sending metrics switch value 'J' [ 109.660574][ T6496] netlink: 342 bytes leftover after parsing attributes in process `syz.0.137'. [ 109.881042][ T6438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.124'. [ 110.669636][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.146'. [ 111.975906][ T6554] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.701576][ T6589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.159'. [ 112.862446][ T6591] CIFS: VFS: Invalid SecurityFlags: [ 113.887920][ T29] audit: type=1326 audit(1735097312.849:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.0.161" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4b3585d29 code=0x0 [ 114.891771][ T6634] syz.2.167 uses obsolete (PF_INET,SOCK_PACKET) [ 115.452009][ T6649] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 116.092741][ T6663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.174'. [ 116.101957][ T6666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.174'. [ 116.206895][ T6670] netlink: 334 bytes leftover after parsing attributes in process `syz.0.173'. [ 116.664200][ T6681] zero sized request [ 116.677346][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 116.694371][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 116.717724][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 116.742892][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 116.763290][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 116.782399][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 116.802863][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 116.822626][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 116.843020][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 116.883929][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 116.911690][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 116.937202][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 116.956372][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 116.972641][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 116.989778][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.023075][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.040343][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.053137][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.076408][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.096661][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.128673][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.196422][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.219313][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.246298][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.266359][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.281734][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.306296][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.326439][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.339968][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.356701][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.379732][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.396311][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.425110][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.443508][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.456202][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.476222][ T6681] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 117.913290][ T6692] block nbd9: NBD_DISCONNECT [ 118.096214][ T6692] svc: failed to register nfsdv3 RPC service (errno 111). [ 118.136203][ T6692] svc: failed to register nfsaclv3 RPC service (errno 111). [ 120.803613][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 121.723396][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 125.894099][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 125.916562][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 127.563544][ T6924] QAT: Device 0 not found [ 127.984658][ T6929] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 128.037998][ T6933] Process accounting resumed [ 128.393264][ T6945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.231'. [ 128.492169][ T6945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.529325][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 128.610067][ T6945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.282948][ T6972] netlink: 338 bytes leftover after parsing attributes in process `syz.2.239'. [ 129.365336][ T6972] netlink: 338 bytes leftover after parsing attributes in process `syz.2.239'. [ 129.506363][ T6975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.239'. [ 129.622951][ T6975] vcan0: entered promiscuous mode [ 132.452318][ T7035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.251'. [ 133.361577][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.368348][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.380584][ T7093] svc: failed to register nfsdv3 RPC service (errno 111). [ 135.410614][ T7093] svc: failed to register nfsaclv3 RPC service (errno 111). [ 138.310992][ T7124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.270'. [ 138.896504][ T7124] bond0: (slave bond_slave_0): Releasing backup interface [ 140.334447][ T7158] binder: 7155:7158 ioctl c018620c 9 returned -1 [ 142.593199][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.284'. [ 142.857083][ T7195] bond0: (slave bond_slave_0): Releasing backup interface [ 144.919083][ T7217] netlink: 'syz.3.288': attribute type 20 has an invalid length. [ 144.966030][ T7217] netlink: 330 bytes leftover after parsing attributes in process `syz.3.288'. [ 145.006150][ T7217] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.742044][ T7225] syz.3.289 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 147.742895][ T7258] Invalid ELF header magic: != ELF [ 150.783642][ T7316] netlink: 'syz.1.314': attribute type 20 has an invalid length. [ 150.796364][ T7316] netlink: 330 bytes leftover after parsing attributes in process `syz.1.314'. [ 150.816536][ T7316] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.310010][ T7332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.318'. [ 153.501027][ T7369] zero sized request [ 153.667881][ T7374] kernel read not supported for file /#)-\&[} (pid: 7374 comm: syz.0.327) [ 153.686162][ T29] audit: type=1804 audit(4294967323.570:5): pid=7374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.327" name="#)-\&[}" dev="mqueue" ino=13364 res=1 errno=0 [ 153.757305][ T29] audit: type=1800 audit(4294967323.620:6): pid=7374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.327" name="#)-\&[}" dev="mqueue" ino=13364 res=0 errno=0 [ 153.852795][ T29] audit: type=1804 audit(4294967323.620:7): pid=7374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.327" name="#)-\&[}" dev="mqueue" ino=13364 res=1 errno=0 [ 153.905822][ T29] audit: type=1804 audit(4294967323.620:8): pid=7374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.327" name="#)-\&[}" dev="mqueue" ino=13364 res=1 errno=0 [ 155.153503][ T7406] netlink: 342 bytes leftover after parsing attributes in process `syz.0.333'. [ 158.819637][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 159.346815][ T7496] Invalid ELF header magic: != ELF [ 159.860872][ T7496] Process accounting resumed [ 160.113501][ T7504] block nbd9: NBD_DISCONNECT [ 161.041823][ T7516] netlink: 326 bytes leftover after parsing attributes in process `syz.0.360'. [ 161.618758][ T7528] netlink: 146 bytes leftover after parsing attributes in process `syz.3.365'. [ 162.347210][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.369'. [ 163.864156][ T7580] random: crng reseeded on system resumption [ 164.633428][ T7573] Process accounting resumed [ 166.093246][ T7629] vivid-013: ================= START STATUS ================= [ 166.116094][ T7629] vivid-013: Generate PTS: true [ 166.121497][ T7629] vivid-013: Generate SCR: true [ 166.127010][ T7629] tpg source WxH: 640x360 (Y'CbCr) [ 166.132373][ T7629] tpg field: 1 [ 166.135797][ T7629] tpg crop: 640x360@0x0 [ 166.140506][ T7629] tpg compose: 640x360@0x0 [ 166.145981][ T7629] tpg colorspace: 8 [ 166.156408][ T7629] tpg transfer function: 0/0 [ 166.161049][ T7629] tpg Y'CbCr encoding: 0/0 [ 166.165495][ T7629] tpg quantization: 0/0 [ 166.196124][ T7629] tpg RGB range: 0/2 [ 166.200078][ T7629] vivid-013: ================== END STATUS ================== [ 167.523155][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 167.580769][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.393'. [ 167.603408][ T7650] bridge_slave_1: left allmulticast mode [ 167.614356][ T7650] bridge_slave_1: left promiscuous mode [ 167.631181][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.676952][ T7650] bridge_slave_0: left allmulticast mode [ 167.683537][ T7650] bridge_slave_0: left promiscuous mode [ 167.690700][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.539214][ T29] audit: type=1800 audit(4294967340.440:9): pid=7698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.407" name="SYSV00000009" dev="hugetlbfs" ino=0 res=0 errno=0 [ 170.789854][ T7711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.410'. [ 171.345792][ T7721] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 171.851229][ T7740] ima: policy update failed [ 171.869682][ T29] audit: type=1802 audit(4294967341.780:10): pid=7740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.418" res=0 errno=0 [ 172.279653][ T7755] vmstat_refresh: nr_hugetlb -7168 [ 173.554887][ T7765] [U]  [ 173.558089][ T7765] [U] [ 173.560878][ T7765] [U] [ 173.563618][ T7765] [U] [ 173.577739][ T7765] [U] [ 173.580509][ T7765] [U] [ 173.583293][ T7765] [U] [ 173.586026][ T7765] [U] [ 173.596451][ T7765] [U] [ 173.600016][ T7765] [U] [ 173.602767][ T7765] [U] [ 173.605500][ T7765] [U] [ 173.621855][ T7765] [U] [ 173.624640][ T7765] [U] [ 173.627485][ T7765] [U] [ 173.630225][ T7765] [U] [ 173.636321][ T7765] [U] [ 173.639135][ T7765] [U] [ 173.641896][ T7765] [U] [ 173.644647][ T7765] [U] [ 173.686306][ T7767] [U] [ 174.968334][ T7803] kernel read not supported for file /#)-\&[} (pid: 7803 comm: syz.0.434) [ 175.068421][ T29] audit: type=1800 audit(4294967344.980:11): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.434" name="#)-\&[}" dev="mqueue" ino=13364 res=0 errno=0 [ 177.697731][ T7860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.451'. [ 179.007506][ T7886] Invalid ELF header magic: != ELF [ 180.339235][ T7938] ptrace attach of "./syz-executor exec"[5825] was attempted by ""[7938] [ 182.053303][ T7947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.464'. [ 183.355836][ T7947] team0 (unregistering): Port device team_slave_0 removed [ 183.451943][ T7982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.471'. [ 183.494636][ T7947] team0 (unregistering): Port device team_slave_1 removed [ 183.704323][ T7976] cifs: Unknown parameter 'Pe7 F#vLЈ?dZ2q 3{'cmg& F[`Nw3)_ԴC' [ 184.067194][ T7982] team0: Port device team_slave_0 removed [ 184.113928][ T7990] lo: entered allmulticast mode [ 184.130551][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.474'. [ 184.216522][ T7990] hsr_slave_0: left promiscuous mode [ 184.238429][ T7990] hsr_slave_1: left promiscuous mode [ 184.642394][ T7988] lo: left allmulticast mode [ 186.728684][ T8019] cifs: Unknown parameter 'Pe7 F#vLЈ?dZ2q 3{'cmg& F[`Nw3)_ԴC' [ 187.198237][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 188.576256][ T8063] netlink: 334 bytes leftover after parsing attributes in process `syz.2.494'. [ 188.587227][ T8063] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(2.0.4), cmd(16) [ 190.364676][ T8102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'. [ 190.764299][ T8102] team0 (unregistering): Port device team_slave_0 removed [ 190.908880][ T8102] team0 (unregistering): Port device team_slave_1 removed [ 190.929078][ T8115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.507'. [ 192.063589][ T8148] capability: warning: `syz.0.517' uses 32-bit capabilities (legacy support in use) [ 192.112844][ T8148] sg_write: process 503 (syz.0.517) changed security contexts after opening file descriptor, this is not allowed. [ 192.764194][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.523'. [ 193.311123][ T5831] Bluetooth: hci1: Malformed HCI Event [ 193.696969][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.531'. [ 194.368303][ T8209] team0 (unregistering): Port device team_slave_1 removed [ 194.732797][ T8209] Process accounting paused [ 196.935391][ T8254] delete_channel: no stack [ 197.440459][ T8278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'. [ 197.716946][ T8279] netlink: 342 bytes leftover after parsing attributes in process `syz.3.544'. [ 198.928474][ T8294] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.938483][ T8294] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.958777][ T8294] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.969173][ T8294] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.183693][ T8318] netlink: 18 bytes leftover after parsing attributes in process `syz.0.560'. [ 199.359124][ T8319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.561'. [ 199.394797][ T8319] bridge_slave_1: left allmulticast mode [ 199.415495][ T8319] bridge_slave_1: left promiscuous mode [ 199.445197][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.473305][ T8319] bridge_slave_0: left allmulticast mode [ 199.479253][ T8319] bridge_slave_0: left promiscuous mode [ 199.494046][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.013143][ T8340] syz.2.565(8340): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 200.070932][ T8346] netlink: 'syz.1.567': attribute type 1 has an invalid length. [ 200.236313][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.355515][ T8356] netlink: 74 bytes leftover after parsing attributes in process `syz.1.568'. s `syz.1.572'. [ 200.956388][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.962461][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.011607][ T8368] ptm ptm20: ldisc open failed (-12), clearing slot 20 [ 201.036879][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.495752][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.577'. [ 202.680533][ T8424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.584'. [ 203.188555][ T8437] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI [ 203.201183][ T8437] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 203.209599][ T8437] CPU: 1 UID: 0 PID: 8437 Comm: syz.0.588 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 203.220200][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.230265][ T8437] RIP: 0010:tomoyo_print_entry+0x83/0x2720 [ 203.236096][ T8437] Code: f3 65 48 8b 04 25 28 00 00 00 48 89 84 24 38 01 00 00 31 c0 e8 6e f1 48 fd 48 8d 7d 19 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 18 38 d0 7f 08 84 c0 0f 85 2e 14 00 00 49 8d 8e f3 00 00 [ 203.256241][ T8437] RSP: 0018:ffffc9000ca5fa90 EFLAGS: 00010202 [ 203.262317][ T8437] RAX: 0000000000000003 RBX: dffffc0000000000 RCX: ffffc90004f92000 [ 203.270571][ T8437] RDX: 0000000000000001 RSI: ffffffff84505de2 RDI: 0000000000000019 [ 203.279889][ T8437] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 203.287961][ T8437] R10: 0000000000000001 R11: 0000000000000002 R12: ffffed100549971a [ 203.295962][ T8437] R13: ffff88802855eb10 R14: ffff88802a4cb800 R15: 0000000000000001 [ 203.304128][ T8437] FS: 00007fa4b448d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 203.313071][ T8437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.319683][ T8437] CR2: 0000000020007000 CR3: 000000003ec44000 CR4: 00000000003526f0 [ 203.327663][ T8437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 203.335633][ T8437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 203.343607][ T8437] Call Trace: [ 203.346885][ T8437] [ 203.349816][ T8437] ? die_addr+0x3b/0xa0 [ 203.353982][ T8437] ? exc_general_protection+0x155/0x230 [ 203.359547][ T8437] ? asm_exc_general_protection+0x26/0x30 [ 203.365280][ T8437] ? tomoyo_print_entry+0x72/0x2720 [ 203.370497][ T8437] ? tomoyo_print_entry+0x83/0x2720 [ 203.375709][ T8437] ? __might_fault+0x13b/0x190 [ 203.380490][ T8437] ? __pfx_lock_release+0x10/0x10 [ 203.385523][ T8437] ? __pfx_tomoyo_print_entry+0x10/0x10 [ 203.391081][ T8437] ? lock_acquire+0x2f/0xb0 [ 203.395589][ T8437] ? __might_fault+0xe3/0x190 [ 203.400285][ T8437] ? __might_fault+0xe3/0x190 [ 203.404981][ T8437] ? _copy_to_user+0x48/0xd0 [ 203.409587][ T8437] tomoyo_read_domain2+0xa3/0x380 [ 203.414625][ T8437] tomoyo_read_domain+0x3d2/0x9c0 [ 203.419665][ T8437] tomoyo_read_control+0x281/0x510 [ 203.424795][ T8437] ? rw_verify_area+0xd0/0x700 [ 203.429566][ T8437] ? __pfx_tomoyo_read+0x10/0x10 [ 203.434534][ T8437] vfs_read+0x1df/0xbe0 [ 203.438736][ T8437] ? __pfx_vfs_read+0x10/0x10 [ 203.443423][ T8437] ? do_futex+0x123/0x350 [ 203.447768][ T8437] ? __pfx_do_futex+0x10/0x10 [ 203.452458][ T8437] ? do_fcntl+0x1ec/0x15b0 [ 203.456887][ T8437] ? __x64_sys_futex+0x1e1/0x4c0 [ 203.461840][ T8437] ? __x64_sys_futex+0x1ea/0x4c0 [ 203.466809][ T8437] ksys_read+0x12b/0x250 [ 203.471085][ T8437] ? __pfx_ksys_read+0x10/0x10 [ 203.475868][ T8437] do_syscall_64+0xcd/0x250 [ 203.480384][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.486375][ T8437] RIP: 0033:0x7fa4b3585d29 [ 203.490794][ T8437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.510505][ T8437] RSP: 002b:00007fa4b448d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.518924][ T8437] RAX: ffffffffffffffda RBX: 00007fa4b3775fa0 RCX: 00007fa4b3585d29 [ 203.526903][ T8437] RDX: 000000000000fd98 RSI: 0000000020000040 RDI: 0000000000000005 [ 203.534878][ T8437] RBP: 00007fa4b3601aa8 R08: 0000000000000000 R09: 0000000000000000 [ 203.542850][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.550826][ T8437] R13: 0000000000000000 R14: 00007fa4b3775fa0 R15: 00007ffec41c3298 [ 203.558979][ T8437] [ 203.561999][ T8437] Modules linked in: [ 203.566558][ T8437] ---[ end trace 0000000000000000 ]--- [ 203.580776][ T8437] RIP: 0010:tomoyo_print_entry+0x83/0x2720 [ 203.591365][ T8437] Code: f3 65 48 8b 04 25 28 00 00 00 48 89 84 24 38 01 00 00 31 c0 e8 6e f1 48 fd 48 8d 7d 19 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 18 38 d0 7f 08 84 c0 0f 85 2e 14 00 00 49 8d 8e f3 00 00 [ 203.613556][ T8437] RSP: 0018:ffffc9000ca5fa90 EFLAGS: 00010202 [ 203.620290][ T8437] RAX: 0000000000000003 RBX: dffffc0000000000 RCX: ffffc90004f92000 [ 203.631077][ T8437] RDX: 0000000000000001 RSI: ffffffff84505de2 RDI: 0000000000000019 [ 203.660032][ T8437] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 203.709652][ T8437] R10: 0000000000000001 R11: 0000000000000002 R12: ffffed100549971a [ 203.726782][ T8437] R13: ffff88802855eb10 R14: ffff88802a4cb800 R15: 0000000000000001 [ 203.752292][ T8437] FS: 00007fa4b448d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 203.780737][ T8437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.795176][ T8437] CR2: 00007fa4b444bd58 CR3: 000000003ec44000 CR4: 00000000003526f0 [ 203.818782][ T8437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 203.839116][ T8437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 203.848320][ T8437] Kernel panic - not syncing: Fatal exception [ 203.854834][ T8437] Kernel Offset: disabled [ 203.859159][ T8437] Rebooting in 86400 seconds..