last executing test programs: 50.114669353s ago: executing program 1 (id=265): socket(0x25, 0x1, 0x0) r0 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000080)=0x6) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0xfffffffffffffffd, &(0x7f00000000c0)="415ea13f99870d842614bf37e5403594a65781516e68dd7e2e9fe1f00be61dc8abf52e969f35a5f1f0baf4a66136d8168a88e490138706e59b4743e34bbee8db58cad0e1284d38e2b0188efdbe4a4bdad7042be4c05ede38ca40681f39f73e89537ebe4dbdc176f65e6663069678") sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) arch_prctl$auto(0x1021, 0x3) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) ioctl$auto_SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000240)="19f7a2615b1f8a2cd0174546b7588da7c21319bc9aa1fe84b5e3beefa30721f159148faed78be31492c0c6a768b1e3f7d00fa8da2b7d18c662a82f68585e0d1c71b691360f5cca462eab57b62d22f73e8e2cdab17ff8d543b466bbb7555e60e6325a41a7ae557ddb7228721b796cc4a8362c81ce1c6056e01f2da07da00cb3c54efea288c3a2189465b17f44917be81e1fbdca515b635c4bcc752a311d7551d62c0b69c1046049184bd869d4a757b25fd7689ad00808de72362e9967b8e29e0c0fad146985b24c9bf55eed052cae33e64ea681e3f63c94222a546a7a00952936321a8a27f7194860cd59c0f1c9752ecbd33e05b2b1aa909a39dcc61a429f27356be890e89556391ecd4d5ef2bea297af158f0fc250e2616f093baac6970f90f7220f1f179475fe165a1a830598f64652b3bd0cdd9990b1d8082ab4c5a7c80913021ade54743e8801ff4d8b9c312d7ea2bd81e66383e8f375a71e8cec924365fdf3bb3d33172b9d2dc10fa4284266776ac55ecd0568e80dce277cb5e1cf2421508c447f42fc3a670e01d4e68fde3eca5e97944434fa8900df5d727765a307aae39500ae8e444c084d82a7d7bf43ab5ef0d60393a724e78ca9cded9bf0c1bc813f74f2a073ef4fe115520a2db539a2a28e7c61560b28bce7d57d39dac6c3d4a62acb85a65252389b3662c4dc78ff27a9e86d185bc0bc9e70cab13cc29d6ff7150fbcdf25237a5da0be31d9116c0c335a1bdccd1e69ff1fde1eafe1d464d85ae9db92604ef89da8ac31503288e3a948281ff5e15a6bf26c7929fa1b78613d6336af71edb44b67ec0e6f25c6eb2bbb062e6d199993442337552311c192fcb730cf979960e342820d14c38ded65434420ea28100d77d7d416af531080ff472f6357d17f550ca5914cfd9f8eee231e93b21bf160351faabf1400c9b6313c3feeeb5b3c1428cb5491c4cf2e8ab429a5879a4639106fb12d871990bdb33d5e2d1ea491914b17aa42fca1c2ffd23f09155c8664b86bf5c1bdd3462f0043f388cec1ec68f08d1eea1aae41514d86fd7d6b42acf3c5e895d702b6ae8467ab8df6f9ed51fed6f4d7d9602106b6bca31a106af42256ec7756af2e2b59cfd7edca41ca4faa3f6ac8f137a31c4bbad47d9de601120b4038821344443431cbd786bbac8979d27e5b3a7f0851843bcc4683bb0d42d76c2f0aee779f66f6f787484bebe12ecae23b9a55aa81289b5d5622706fb4509e4fdfe426a8223324e47d1eff37b4fc53d4180d372f240c4cd22c096d9485973d76b50b8f8b33a535422406c942b3cbe69dc51e0c3f8a94e84715ff1742cd6e6c6c8d18bdfb8c4e3d853a774d16a0bbe8ed973af44da3c858244651cd5766a093950e57ef191d132a0a70ea7b8821d9397ed7f1fcea37bdf73b5430d52a82660c8b4bff85d153e4a3ae20afbffe622073ed8f88c596231b4ebffb060f834d3aa44b41d4d9877efd47adb084aa3e0bd2267661cadf18ca9f7d0c6f22e21b7f7a6cf139bccb1ffc5f600421380d5763aad6b8360bbd2866967dd0672d9c6233abb123bbec739540c5eff5067e8345587c39ed7bebe9139a1ac397b6b9215d57ed6125fe186874148148797c050345d48caa872a724574a0bfdcd115cd50881b5d457bf40dee929b1778c5fc2725e6f6c3fa742527f844d79a9244b249ccb56e6fd1150adfb79f84adcb3d6a27c0a93e849e3c032779a13d0f5c5149c764b25ae5dbd315a8476c2577df077757d1cc9f9603ea678dacfbbeaf5f28aafed89fa6b58c556f37261b95f6d2f7040b611169705267c760285026e4a973ddab63e9a4e9bbb926a0f877c4aa34de7caf446db06bde36dc8cec84c97b9f0aac83c4b45467598b2eccc0a0d59ee5ac0db3156ae94167d5e2c6dbb539aaa1b251a8358ac3a656c97e1ea1942b1c45013813ba925b20fcaff9afc34cf661cba6b1a99994af4d9e90d9f3429842c674936fa3836227a698a18fc6099f1831cd034df9a2ea46e798ebc0ac8689b9d5f1a7a89c88fd129430c4d62e8df7e31f52450c7fe23228cd2f297e139e98aace911a8cfe35ade338520db0608a39c81f0b225fdb9775fadcd37e212ad09bd462f3d97049ff19afaeb9f3e04dd76c78714a0b11e4eb5764dc0cb9f6f619dfa1f4f2832e74418c6a8d5251737c77b1b07d3ee8f71b4d2e80d6dcdf80855bb49f6369e3ea2ac204a48cd753f41aee9b401dcf7b304907ab0e4301ec8dcba60a97f4860ff5280be68d8de5307c2ab7f75eccd939dde2dd97d0f6cdb2d468982e9add59c26111a697aa3693e65144b5c4af79dc4108479607cc006c3e84d23742493e0e7c2b5ce8a466d5c3ff5ab90b0c37c0d3e3b651be03dc9498d15e5be606ff7936ee3b5a5106941ca0cef67dd5ec2036a559d544febca8c3b7ebb04ac4cdbcd31558c48fc43baf61bbab14682739b26e6548d3ad5b8c9b455d502518d49eba1199872763206b01a564fef0669f705bb03309a7c0d11a76f529ae01cedf7383f137473237cae11b5e5032e0ef3af17a3338a4cdfb2aaffb3ba35d312b1cfb5f7cbaa90fb8c58bb21f13e006f92699c3fbb5b2ab4fdd1de98060ecfb3b8613131f2546d20216a641122e687a3ac764b9f61c310dcdc7b29b19e35567a3464dee30c4de453ef44708225e9513fdb8be134350366ec5fa4a8166f0b98649bb7a6fe35858f04cb54673aa3649cb705601bee949bbffef103c0cbf60f1cc1a5ae1ab1d6ce096cbbca844436a7b97391120b1a02b879670e415adeae51eec971101096537de6d90d75adda573b09b7496ba2e887ac7025d2474884ef1959f570169002602d4eb5610833333e7ed172fb7ecd08814e681ca4d6653999024ab76f058464d58dba530bde4afa6b900dc8ec5c392d63743c6156af2af4b88cf467f87e5bf0c4dc5a202a80ee84e4953bdbb64e51a6a9e1a84a72dbf68869d340ad695fbfbb7d525fbaa688ccba3734039d3a7fe855d2a372abe5a7a834ecb255f931a6858ab7a4ba54f5a3240ed6b56d2de54f6ca2d18bcfa926d741de402de1a6fb257227c273b6130c99fd758b9e5d475e5fc973e5f89a2f8f8c38a7497c314717beef644f83ee30ad59dcaf2f0dd1c8412b8ae85564ac374638d9e11f63ee33068abfe0a638d993d078f4c40d03762a25cc17ae5a63f250498a35a49e3f783d2b6e0f93d04a523ea028a4a4c4d4c4eab633829d30ab826aa59ec18cc044548fd36b66606764f41d2d0e183f36786a18063108feca62d20a4ec66a86792694aa05c8196a82ffbd38b5019546af69d376db83a5425542073fe8e4453469e6e6c925a1ff6b3f2c57ea4132e64cd848e9baa47f0ac2ec07de6cdc5df81f551750e19462bf0bca45d6ef5a075d9d380ab149a84949c91504747cffe566de34b9c81eedab37385d62874c01e209330c509d841087653d72fd28b3e4eb21f3744b4205a89f81bbc85318bb99f39d5b8dd11fedcd534e41375060caabd70b6ad47578063d101e972639c89b7bb6bb0fca6093c9cee7bef4f41d152948888f63cfa57811e1ccca4d33e978cda4a0b4e9192af68dad474c942f9039533260e4aaa3e1a67a88c0f5696b4a084e2529e3082489c7f5a1ee757928e0dc026e77dcb6912541eb3816d76c7ca14bef7feca0b1b182ddee15a8b0a106f3159f700d96746ff96f438d7b96057fa40778381c2773b33b69e237f2aa70a9a738fcb0b66c7f5f12f058b028e3d040a66ada4b275863bf62d04d4dcd90127006b72d8e84fc062a3c72b9c8044a0e956f249f0dde6a4b6370858e6d3f41d11a05bcfa28087a63165cfe06d3d032d28fd2b7df4cb195693787e88c8590e5646f4b0efe5332387a0dd3ca518452ee05f5e1b5566ddfd5e22031936d4599c2f012f5e2ff72cd850b2dbc178eef410f8168aa2021c3360e1af22cecc661ab30b035de190849dd57fe655a720e3c8cab9c281dc0d6ad1f0003a875a9f7a613a94ade17814e76ff1af27c12bcce7061cf1bb1f274bc8b633be9ca075f67b74fc521d07f018569b5913ef139b0094c154c90eb6921b5b824a25b5934e415871018c6a0f20ead170998f7c807cb4d4dae5311e5adc4660ac8e592f7c93b0689c927be4322a0a9a0a5adc18a540cd605673813022d4f7c2f23cbab7ffda34e4d6d569f409c9f0d834312c4325a39bb205caa80fd61effe2d1e5542bbf007a285ee932eda6e3f842d34d0ea7088797cef44acbfaa363a5905b0df7084cf2d72aace1bf30a6a5eb53bd4ae0a9be85081087cc210529a41e4e17bf0915bcb403816447e827e916e150ce529825644229565e36709035e89a30be738d5cf75384f617addd2ec88d87cadb889e489208bd717c4aadf8496a30d0521fee5631fdc8bb63f66b328d72bcd351ac70b9f32193134819d091b494ca6361eaeaa69e7b75d4098b96c2114bc6426acdf563d0faf7ce67c798410b93033d6fa11cd719ffd6d2bc3277bf2c1b022dde78f76c849a4732d5135945f9f02208641676f446832228ec6083f0627ccbf79b5983ba4df4120c9d372c6434814d729bab6c60f9c4c61addacd5438366e90b4899da465ac48b7db69cee3c545387abb75a8804d50c5b74a7f571cc66153b8de01b6f9acf778e576e4cca1623f095c93a620117b2166cdc05a4dec260f9469ed5bef16ee59c2240859170e552660aad6a25e610a4ec0b8365b47c644025cece5346146b999d6bc924f80c3c4a1ef464c83aaaa262c9dc170dab4cdc5678615ca9a3d2c917aaebbccc5b0df6d5908eef34325b9288c087aec7531d2d7245186838e1d03f4ebf5e3e9ec24d179e1fb597336a077dbe6f755809fc7479b9207b722e1fc8dd03e5e7ddeeaded97e777e4b9619c1598e17b16bb2f283061361147be627805898f4618e37db56e39837dd74e41c10e16098f4c830e2aa23c841f52bd0c2a28eddcad99a1000ecb2f1fc9c7969aa2c856d90b2c280f328121675eee920594732d45a36db1e7292694a05dd82eca9ad26f74045b642cd841d4df13c9cafa67a527bb4ec971a6aeb4b5e060db178329e9b06e5fc4802ab77f16c94ba9defa79ccee973cbbffcd30af1fc8e6b529db4a4e605d71c717aae428b3e13572b1afa8e468276ada63e42fb1768075c6791cb2b88e7e1a2b5003b583f60cb6e05d42cc58c0d5b117e6e438e453160d75d7dbc63ec893d2b576eb7cf116a526ea911fd1b39a857ce0f1a3b6f4bde4e9f0ce921d75f9dbcba14bd35ae07b09a34b3565d25608ba758e5ed5ffb9e4f50074a9a84c1fa404051a216f137880844abf411b3624df11005db44ba66badd0885cc15e280241edb38055d378cef74b22f6a50f920e4cf1203d023b69787a12896753a87c88b9b167cc5a116b1a89106c5474874e551f638711f99b593d76552c86647567c79feb8168a61e7bf1371cca6c24b05d6f4474fadc7b1d19f4d36a51f66138837ea2fbf2b063f53ffd1635037495454ae41ed8ecc8366475fa4ba377feac13b1c0977f9447e008c2f1126fc7149b370d219d2ba05bb0e2749ad55d17644b8228dcfcade0357c9a619d2578e4dbc81df031d865fe9bd96ef8b83c34998ab2ccc97315636193ed9cef934b364546997164e68da3c7876da6e050b50b98937f68c164dec9412455b1f22d2c290e69ad8a788c6d636344b9e4bd2b179f3ae2f2ac23b3e34e865966b0bf2024ce4bfa8be026060526d4906e03c10fb56e2fdb5842242af0c707dc6d2a6bcaae8b5a47c9ccae0518ffc94b491080a59d06e8ba953596645eafb00b1f") openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/soft_watchdog\x00', 0x101201, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xba8) memfd_secret$auto(0x0) ftruncate$auto(0x3, 0x700) write$auto(0x3, 0x0, 0xfdef) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) 49.805846514s ago: executing program 1 (id=268): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mount$auto(&(0x7f0000000040)='syzkaller1\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfs\x00\x00X\xca\xd8\xce\xc1\xfc\x9f\x9f?o;\xf7\xdf\x9f\x11\xc5\xea\xd9', 0x8, 0x0) r0 = socket(0x2, 0x2, 0x1) mkdir$auto(&(0x7f0000001a80)='#(//\x00', 0x353) r1 = fsmount$auto(r0, 0x15ba8077, 0x1) ioctl$auto_MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x0, 0x0, 0xc, 0x7, 0x1000, 0x7, 0x7c, 0x0, 0x4, 0x4, 0x80000001, 0x8, @iso={0x3616, 0xc35}, 0x9, 0x6, 0xd, 0x1783d93e}, &(0x7f00000001c0)="7584e686", 0x6}) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000, r0}, 0x10) mmap$auto(0x0, 0x9, 0xe994, 0x8000000008011, r2, 0x8000) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) getsockopt$auto_SO_REUSEPORT(r3, 0x9, 0xf, &(0x7f0000000040)='\x00', &(0x7f0000000080)=0x8) 49.542494537s ago: executing program 1 (id=269): socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x5) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) mmap$auto(0x0, 0xc, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0x22, &(0x7f0000000000), 0x20000001) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x4000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = io_uring_setup$auto(0x406, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x80000062, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d5) 47.628909649s ago: executing program 1 (id=277): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) setsockopt$auto(0x3, 0x8, 0x61, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x3]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(r3, 0x8, 0x1107) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84}, 0x9, 0xd) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffe, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x29f, 0x100, 0x1, 0x105, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x9, 0x100, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setns$auto(0x0, 0xb) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) 47.275314879s ago: executing program 1 (id=279): prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x202020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x8, &(0x7f0000002a40)={0x0, 0x7fffffff}, 0x6, 0x0) 47.091089974s ago: executing program 1 (id=280): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r1 = socket(0x10, 0x2, 0x0) (async) r2 = gettid() writev$auto(r1, &(0x7f0000000500)={&(0x7f00000004c0)="73a1d24c87bbdec733a58d22425981e5230f9e88e30337716f83d7a2fcd4c108", 0x1}, 0x7) (async, rerun: 32) waitid$auto_P_PGID(0x2, r2, 0x0, 0x4, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x400c880}, 0x800) (rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0xf, r0) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_clone(0x100000, &(0x7f0000000300)="1a72bacc3e1be6d94ec513b47c7722abf3b7508dee2d8e738695657036e1d761eb5bf4bd3f8e03a9ecd442891eda29e4376cba5ed1ee0d664decf5f8723b31e97b0af2d064a9c8c7d2ea64226e96273443028aa144284c5833b0a7a9a210275fc3c819594ed744ca24298b2f0f219ff2e93d77bb1a5d8fb1a0af482d89e9594d64e370ced7fb0e25fd27f4d774f577cd", 0x90, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000400)="c262439134e6415aaf3b0c8f4604a80edefe158488e977dedfd1ff0c56dc9c2dcd31c17922d53b76b186c09cd3257cfc607fc82ed2610165cf2ed2e56701ae1cd387f43b398bc8d24398f8f0f795d917aa4eacfe6297e139df6ba880718d982fdfd0c7ce312a36acaac0b6ebc3955b7145fb1259a3c63815dfd5b3133523557760734e2b794164a0f967b8500082430b9654fa4e8f2e17b871bcd474fb85b860e640ddf852cb06a9b0") prctl$auto_PR_SET_MM_ARG_END(0x3, 0x9, r3, 0xf75, 0x4a) (async) r4 = socket(0x2, 0x1, 0x0) getsockopt$auto(r4, 0x0, 0x60, 0x0, &(0x7f00000000c0)=0x44) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setuid$auto(0x800000000008) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) (async) open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f00000000c0)='cifs\x00s \xfe\xcd\x94=\xbf\xfd\x02;\xffP\xf26\xea\x97\x95\xad\xb6\x1d\\\xd3\x89\xe0\n\x0f\xf7]\xafa\xcc\xbbgv7\x04\"\xb4\xe1\xc8#\x1b\xf0&\xc3\x15\xea\x1f\xcf0#e\x14\xe6\xf9\xc9\xec\x1d\x1d\xa7\xcd\x94\xae\x01\x00\x00\x00\x00\x00\x00\x000\xc3\xeem\x8e\xfb`\x1a[\x01\xf6Re\xad x\xbc\x00\x0f\x0f\xc6f\x82\x16\x8e\xab\xf6)^\xbe{=\xa3\xeb\xc44\f\r\xf6\x17\x87\xe8\xb0\xd9V\xfb\xc6U\xe9\xb7\xe6\xa2\xdb\xbbP\xf14S\xe6\xce|?\xa0\xf3\x8f^?5\x1bb^R\x11\xf6\xe8\xfc\v\xfa\x96\x89%\x02\xc0\xa9\xc9\xd2\xb0b\x86\xd1\x1c\xa2\xca\xc9\x90\xd7\xe1\xbf%\xdbzh\xfc\xaa4KhoD\xe7\xda\x12^\x8b\x81\xb3B5\xfd-\x83\x9f\xe7ZHh^9\x18z*\x02\xa8Fu\x80\xee\xc6\x98v\xf6\xa7\xdf\xd8\x9ans\x16\xa7\x03\xd9\xc2\xee\"\xa7\xefx\xd5,Q\xfe\xe6\va\x06\x00\x00\x00\x00\x00\x00\x00\xaa\x89!,m\x16M\x19no\x1e+ 1\xa7\x1c\x95\xa0\xd6`\xd1\xf8r\xea\x13sFn)\x05\xc8\x1e\xf8a\xf5H\x86\x9a\xc4\x81\xbf\xa1h`\xe0\xd8\xdd\xeb9k\xa4\x1fA}\x80\x9e\x8a\x031\\D@\a\x8b\xc7.\xc1\xe4Z\xd4C\x19g^\x06\x06\x82', 0x8002, &(0x7f00000001c0)) (async) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2000, 0x0) 31.903066026s ago: executing program 32 (id=280): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r1 = socket(0x10, 0x2, 0x0) (async) r2 = gettid() writev$auto(r1, &(0x7f0000000500)={&(0x7f00000004c0)="73a1d24c87bbdec733a58d22425981e5230f9e88e30337716f83d7a2fcd4c108", 0x1}, 0x7) (async, rerun: 32) waitid$auto_P_PGID(0x2, r2, 0x0, 0x4, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x400c880}, 0x800) (rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0xf, r0) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_clone(0x100000, &(0x7f0000000300)="1a72bacc3e1be6d94ec513b47c7722abf3b7508dee2d8e738695657036e1d761eb5bf4bd3f8e03a9ecd442891eda29e4376cba5ed1ee0d664decf5f8723b31e97b0af2d064a9c8c7d2ea64226e96273443028aa144284c5833b0a7a9a210275fc3c819594ed744ca24298b2f0f219ff2e93d77bb1a5d8fb1a0af482d89e9594d64e370ced7fb0e25fd27f4d774f577cd", 0x90, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000400)="c262439134e6415aaf3b0c8f4604a80edefe158488e977dedfd1ff0c56dc9c2dcd31c17922d53b76b186c09cd3257cfc607fc82ed2610165cf2ed2e56701ae1cd387f43b398bc8d24398f8f0f795d917aa4eacfe6297e139df6ba880718d982fdfd0c7ce312a36acaac0b6ebc3955b7145fb1259a3c63815dfd5b3133523557760734e2b794164a0f967b8500082430b9654fa4e8f2e17b871bcd474fb85b860e640ddf852cb06a9b0") prctl$auto_PR_SET_MM_ARG_END(0x3, 0x9, r3, 0xf75, 0x4a) (async) r4 = socket(0x2, 0x1, 0x0) getsockopt$auto(r4, 0x0, 0x60, 0x0, &(0x7f00000000c0)=0x44) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setuid$auto(0x800000000008) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) (async) open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f00000000c0)='cifs\x00s \xfe\xcd\x94=\xbf\xfd\x02;\xffP\xf26\xea\x97\x95\xad\xb6\x1d\\\xd3\x89\xe0\n\x0f\xf7]\xafa\xcc\xbbgv7\x04\"\xb4\xe1\xc8#\x1b\xf0&\xc3\x15\xea\x1f\xcf0#e\x14\xe6\xf9\xc9\xec\x1d\x1d\xa7\xcd\x94\xae\x01\x00\x00\x00\x00\x00\x00\x000\xc3\xeem\x8e\xfb`\x1a[\x01\xf6Re\xad x\xbc\x00\x0f\x0f\xc6f\x82\x16\x8e\xab\xf6)^\xbe{=\xa3\xeb\xc44\f\r\xf6\x17\x87\xe8\xb0\xd9V\xfb\xc6U\xe9\xb7\xe6\xa2\xdb\xbbP\xf14S\xe6\xce|?\xa0\xf3\x8f^?5\x1bb^R\x11\xf6\xe8\xfc\v\xfa\x96\x89%\x02\xc0\xa9\xc9\xd2\xb0b\x86\xd1\x1c\xa2\xca\xc9\x90\xd7\xe1\xbf%\xdbzh\xfc\xaa4KhoD\xe7\xda\x12^\x8b\x81\xb3B5\xfd-\x83\x9f\xe7ZHh^9\x18z*\x02\xa8Fu\x80\xee\xc6\x98v\xf6\xa7\xdf\xd8\x9ans\x16\xa7\x03\xd9\xc2\xee\"\xa7\xefx\xd5,Q\xfe\xe6\va\x06\x00\x00\x00\x00\x00\x00\x00\xaa\x89!,m\x16M\x19no\x1e+ 1\xa7\x1c\x95\xa0\xd6`\xd1\xf8r\xea\x13sFn)\x05\xc8\x1e\xf8a\xf5H\x86\x9a\xc4\x81\xbf\xa1h`\xe0\xd8\xdd\xeb9k\xa4\x1fA}\x80\x9e\x8a\x031\\D@\a\x8b\xc7.\xc1\xe4Z\xd4C\x19g^\x06\x06\x82', 0x8002, &(0x7f00000001c0)) (async) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2000, 0x0) 17.286609648s ago: executing program 4 (id=364): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) mmap$auto(0x5, 0x4000b, 0x6, 0x9b72, 0x7, 0x2) sysfs$auto(0x2, 0x10000000000002d, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) io_cancel$auto(0x6, 0x0, 0x0) openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x40, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x60342, 0x15b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) umount2$auto(0x0, 0x4) madvise$auto(0x0, 0x200007, 0x19) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = open(0x0, 0x14927f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x40086602, 0x0) lstat$auto(0x0, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_clone3(&(0x7f0000000200)={0x387081180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 15.311838333s ago: executing program 4 (id=374): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x6) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x0, 0x1a, 0xfffffffffffffffa, 0x8002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x3, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80a86f3d, r2) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000480)={{r1, &(0x7f0000000100)="6f4e6ffd1b5da7f1c568751de0595818acb6ba7bf15eed94a3ca1d2532403eb0f1b33d4b7b24fbf3c2933a1a1b6130b8ca73f7e6f78e12bfa6ee7bbe9055640adb309416716b7eb39498babff6fe11f4b8099c5a5cb8d5af041d6662d28031dbcd05dbfff463817b6924ae135587009e1ae8c6997f0031f3b6355adb45b059ecd56fe28c43841b", 0x4, &(0x7f00000001c0)="b5bd57a6d7ec51a9e011b93949be6130b8dc01af1a088bcdbe87d1c2cd54b0fd85f74d27029d150a4e6ccb702c809c520583f091c9c96102a1b77667c9650c5cb4d655c793a3a38b8e01e094b95b052edb14760f61ab3c1fd3f86cc98926b478c2308c0c406bc20be8769cc127ec94e7834dc8abb2a48c47cc3daa6f8d64a877c4d0c72e8b300c6e5ad87b74050f2cc121ebc0cf015f2c8f8121bbcf83b9c1b7ab643bcb29fe6b6763358178ccb969b18aeeb36846a9", 0x0, &(0x7f0000000280)="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", &(0x7f0000000380)=0x4}, {[0x2, 0xa, 0x60, 0x2]}, 0x81, 0x100, &(0x7f00000003c0)="e902eb61c2102c29479f41a723015a2318e5180ac5c9bbf1360f5bfe91fe697b330f81c77213ba4dd05eb0fa8af6a61d5e431557b1b64d4f95d8b95b2b20e8f934b0d6504174ec94ec802594eb0c9ecf1d6cc4b3335d7a8609e9741ff0f2e11392cb34cc96d66eed78ee975544564577ec1a41c1a9439a818a2e4fba267ae71aaebef20c6f17442a629852e99d54d69c1b1e05137797cd0076a75c"}) r3 = socket(0x23, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) umount2$auto(&(0x7f0000000080)='.\x00', 0x8) sendmsg$auto_NFC_CMD_START_POLL(r3, 0x0, 0x80) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x1652c2, 0xe1d2b27bdc14aa98) lsm_set_self_attr$auto(0x6, &(0x7f0000000040)={0x8, 0x0, 0x80000000, 0x1, 'T'}, 0x9, 0x9) 15.05037967s ago: executing program 4 (id=376): socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x5) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) mmap$auto(0x0, 0xc, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0x22, &(0x7f0000000000), 0x20000001) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x4000) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x80000062, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d5) 14.480850373s ago: executing program 4 (id=379): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x3]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(r2, 0x8, 0x1107) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84}, 0x9, 0xd) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffe, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x29f, 0x100, 0x1, 0x105, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x9, 0x100, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setns$auto(0x0, 0xb) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) 6.153328476s ago: executing program 2 (id=413): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x288200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES16=r0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) socket(0x11, 0x80003, 0x300) socket(0x25, 0x1, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x4a040, 0x0) socket(0xa, 0x2, 0x0) socket(0x29, 0xa, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) connect$auto(0x3, &(0x7f0000000180)=@generic={0xa}, 0x55) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xfffff00000000000, 0x8, 0x948b, 0x2, 0x100000000, 0x6, 0x80000000080, 0x1fffe000000000, 0x80000001, 0x5, 0x6d3c, 0x200000000000005, 0xffffffffffffffff]}, 0x0) mbind$auto(0x7, 0x602, 0x3, &(0x7f0000000500)=0x10001, 0xaf4, 0x5) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socket(0x1e, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x7, 0x3e, 0x0, 0x9) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@hci={0x1f, 0x1, 0x2}, 0x55) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) prctl$auto(0x41555856, 0xd, 0x2008, 0x0, 0x0) ioctl$auto(0x3, 0x890b, 0x38) 6.083633009s ago: executing program 3 (id=414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}]}, 0x1c}}, 0x4000) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), r0) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r5, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "93ac306d3ec15ddc27503d5acb2832d8"}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 5.40942624s ago: executing program 2 (id=417): r0 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x0) 5.131008237s ago: executing program 2 (id=418): socket(0x10, 0x2, 0x0) unshare$auto(0x20000) unshare$auto(0x20000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$auto_RNDADDENTROPY2(r0, 0x40085203, &(0x7f0000000440)=[0xfff, 0xedc0]) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00@\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000600060009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a0005000180c200000e00000a0001000000000000000000080004001400000008000300050000000a000100bb"], 0x6c}, 0x1, 0x0, 0x0, 0x4040080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.009061964s ago: executing program 3 (id=419): io_uring_register$auto(0xffffffffffffffff, 0x4, &(0x7f0000000000)="1c01a7467c7c261b0f9e7547972332cf0a6ae763e7aa8fc0cd116a1e905f6b80b02f8755bc15a11b244a22637dcd660383330725a6070829e3e9c3d555e9a738fb9e635787aef1b7d92e7f1510aa6804cd2e2259d3b038f5876af49d35c48fe205ee857bd7c477ad86bac66cb507", 0x1) semctl$auto_IPC_STAT(0x5, 0x4, 0x2, 0x7) semctl$auto_IPC_STAT(0xfff7, 0x4, 0x2, 0x6) semctl$auto_IPC_STAT(0x5, 0x4, 0x2, 0xb) semctl$auto_IPC_STAT(0x7, 0xc6, 0x2, 0x380) r0 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy4/hwsim/ps\x00', 0x200, 0x0) mmap$auto(0x8, 0x8, 0x8, 0x91, r0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x8004) socket(0x38, 0x800, 0x9) io_uring_setup$auto(0x3, &(0x7f0000000200)={0x6, 0xf0, 0x8001, 0x4, 0x3, 0x5, r0, [0x4, 0x7, 0x1], {0x56193c36, 0xffffffff, 0x7fffffff, 0xfffffc01, 0x0, 0xed, 0x6e94, 0x9, 0x3ff}, {0xffffffff, 0x1, 0xdc, 0x7f, 0x0, 0x68a0, 0x200, 0x5}}) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000280), 0x20100, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=0x9, 0x80000000, 0x4}) r4 = socket(0xb, 0xa, 0x1) r5 = prctl$auto(0x4, 0x1, 0xffffffffffffffff, 0x7fffffff, 0x529) fcntl$auto_F_RDLCK(r5, 0x3, 0x0) mount$auto(&(0x7f0000000340)='nicvf0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='{\xa9/\x00', 0x80000001, &(0x7f0000000400)="28640696570844d4ea633ded370e68a75e05087fa1430f557840ead916c348c559793df9b9f4a3c51b6a3d7705f338d350fa21014af831b43cf42536876d70bf0e71a17f99cb6f68f09246e67b3a9324661cc6bbec4a11381f8d21e5aaee38e77e9ea296ceb4f501c66957b9f977b1035187946c6a386b65e2615871defae768989695") semctl$auto_IPC_STAT(0x1, 0x5, 0x2, 0x3) socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000004c0)=0x9) r6 = ioctl$auto_TUNGETVNETBE2(r5, 0x800454df, &(0x7f0000000500)=0x3) read$auto_hwsim_fops_ps_(r6, &(0x7f0000000540)=""/182, 0xb6) semctl$auto_IPC_STAT(0x3, 0x8, 0x2, 0xfff) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r6, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x12c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_GOV={0xf7, 0xc, 0x0, 0x1, [@typed={0xc, 0x6b, 0x0, 0x0, @u64=0x8}, @typed={0x13, 0x59, 0x0, 0x0, @str='/dev/vhost-net\x00'}, @generic="275a2af638e99e91906d96ec0f1f16cd05748b71c23393e90397b98971793b765e6f87c37ffe6f4a1e73303effdde8ac151f68bb18a07743663947f894e65f158f3cae300400351b5f7eb987963a9dab1bf1790144ad715c3bcf1f9b9a3078d8914db772c24db29b7aeacdbf6ffc1b8bdae0f43e77a96b2245884d5b4e3046a4bff6b23455319a950962c448d9556ef4a8be23054146a8d4394b92c348e6b1beae3072ac9280d080196d56b17d2cd91bb8f147fc8c2bd90a2552e9c241e6f09f56cb05e3291554248feb435e4d175491d85665"]}, @THERMAL_GENL_ATTR_CDEV_ID={0x8, 0xf, 0xd5}, @THERMAL_GENL_ATTR_THRESHOLD_TEMP={0x8, 0x19, 0x2}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x8, 0x3}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x8, 0xfffffffc}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4) semctl$auto_IPC_STAT(0x7, 0x6, 0x2, 0xffffffff) msgctl$auto_MSG_STAT(0xffff7fff, 0xb, &(0x7f0000000880)={{0x401, 0xee00, 0xee00, 0x23db, 0x0, 0xe3}, &(0x7f0000000800)=0x3, &(0x7f0000000840)=0x2, 0xc32, 0x3, 0x5, 0x9, 0xb9, 0x3ff, 0x7fff, 0xf9ab, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) r8 = setfsgid$auto(0xffffffffffffffff) fstat$auto(r4, &(0x7f0000000900)={0x7fff, 0x8000, 0x2, 0x7, r7, r8, 0x0, 0x3, 0x2, 0x6, 0x0, 0x8, 0x43e, 0x1, 0x6a34, 0xc, 0x9}) write$auto(r6, &(0x7f00000009c0), 0x8000000000000000) bpf$auto(0x3, &(0x7f0000000a40)=@bpf_attr_5={@target_fd=r5, 0xffffffffffffffff, 0x1, 0x7f, 0xffffffffffffffff, @relative_id=0x200, 0x1}, 0xffffffff) 4.725316185s ago: executing program 3 (id=420): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b84ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="205c2020027e0dc0023af10e9bfa1babfa203753ca9a20370a", 0x19) ioctl$auto_USBDEVFS_CONTROL32(r0, 0xc0105500, &(0x7f0000000080)={0x7a, 0x7d, 0x7, 0x4, 0x100, 0x7, 0xa}) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) setresuid$auto(0x0, 0x0, 0xffffffffffffffff) ioctl$auto_EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x3, 0xffffffffffffffff, 0x0, 0x407fff, 0x41, 0x2}) sendfile$auto(r0, r2, 0x0, 0x200002) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x2000040000080) mmap$auto(0x0, 0x2020003, 0x3, 0x200000000000eb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) madvise$auto(0x110c230000, 0x8031ca, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) iopl$auto(0x4000001) poll$auto(&(0x7f0000003640)={r6, 0x7, 0x6}, 0x4, 0x100000) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = gettid() kill$auto(r7, 0x11) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) 4.281495109s ago: executing program 2 (id=422): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000003640), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r3, 0x40187013, &(0x7f0000003680)={0x7, @uvalue=0x2c, 0x4}) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) r4 = open(0x0, 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc) 4.132199008s ago: executing program 2 (id=423): io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) (async) mincore$auto(0x1, 0x10000, &(0x7f0000000040)=',+\x00') (async) unshare$auto(0x40000080) setregid$auto(0xffffffffffffffff, 0xfffe) (async) setresgid$auto(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000200)=""/238, 0xee) (async) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) unshare$auto(0x40000080) socket(0x1d, 0x2, 0x6) (async) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) read$auto_lsm_ops_inode(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r2, 0x402, 0x2) (async) fcntl$auto(r2, 0x402, 0xffffffffffffffff) (async) close_range$auto(0x2, 0x8, 0x0) 3.833177491s ago: executing program 0 (id=424): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) listen$auto(0x3, 0x81) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_UI_SET_EVBIT(r1, 0x40045564, &(0x7f0000000180)=0x9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0603d06, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0xed) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3a, 0xfff, 0x948b, 0x8, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) splice$auto(0xffffffffffffffff, &(0x7f0000000040)=0xc52, 0xffffffffffffffff, &(0x7f00000000c0)=0x7, 0x800, 0x5) close_range$auto(0x2, 0x8, 0x0) r3 = eventfd$auto(0x3) fstatfs$auto(r3, &(0x7f0000000100)={0x400, 0xfffffffffffffffb, 0x4, 0x3, 0x7c, 0xd92000, 0x0, {[0xffffffff, 0x81]}, 0x3, 0x9, 0x4, [0x9, 0x0, 0xff, 0x7]}) io_uring_setup$auto(0x6, 0x0) 2.81378524s ago: executing program 0 (id=425): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) r1 = fsopen$auto(0x0, 0x1) write$auto_configfs_file_operations_configfs_internal(r1, &(0x7f0000000480)="189f63354a77469548daa82b94c541dd947c70a218987687e1a59ffe303e0485376df00aa8f8e2f45016a6af06a86f1a29e3a8e14e2c1dbbade242e6eb9bd90cd6c889aa82e31ed915f3c646c7ef6c3758182b87ecd483b5898f0a047926cca59153546411d5435bda", 0x69) r2 = waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000340)={@_si_pad}, 0xb, &(0x7f00000003c0)={{0x81}, {0x4, 0x8}, 0x4, 0x0, 0x3, 0x3, 0x5, 0x571, 0x8, 0xf69, 0x7f, 0x1, 0xc1, 0x8, 0x3ff, 0x2}) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000140)={{0x7, 0xffffffffffffffff, 0xee01, 0x101, 0x7fffffff, 0x4, 0xffff}, &(0x7f00000000c0)=0x8, &(0x7f0000000100), 0x7ff, 0x2, 0xfffffffffffffff9, 0xe, 0x80000000, 0x101, 0x1f, 0x8, @inferred=0xffffffffffffffff, @inferred=r2}) ioctl$auto_KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000001c0)={0xe0b, 0xffffffffffffffff, 0x4, 0x4}) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket(0x2, 0x5, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x2, 0x2, 0x1) socket(0x25, 0x5, 0x0) mlockall$auto(0x3) mlockall$auto(0x5) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) newfstatat$auto(r1, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)={0x8000000000000001, 0x7fffffffffffffff, 0xc, 0x6, r3, r4, 0x0, 0x4, 0x4, 0x8, 0x7, 0x5, 0x6c, 0x101, 0x5, 0x7, 0x4d20}, 0x1) ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f0000000000)="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") ioctl$auto_SNDRV_TIMER_IOCTL_START(r0, 0x54a0, 0x0) 2.370146312s ago: executing program 0 (id=426): r0 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x0) 2.177836357s ago: executing program 0 (id=427): write$auto(0xffffffffffffffff, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810006, 0xff3, 0x100000010, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x40000000000a5, 0x8000) unshare$auto(0x40000080) mmap$auto(0x84, 0x2020009, 0x9, 0x17, r0, 0x2000004) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) mmap$auto(0x0, 0x200000009, 0x3ff57694, 0x9b72, 0x2, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x1) r3 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0xffffffffffffffff}, 0x6f3) getsockopt$auto_SO_PASSCRED(r4, 0x1, 0x10, 0x0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) close_range$auto(r3, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x12, 0xfffffff8, &(0x7f0000000440)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x20) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x5) socket(0x2, 0x1, 0x0) listen$auto(0x3, 0x81) 1.626914888s ago: executing program 3 (id=428): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ptype\x00', 0x101000, 0x0) pread64$auto(r1, 0x0, 0x8, 0xffff) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000000)) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000580)="9d") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r2, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf2501000000050007000b000000e8146a9565473dee4ca2bb08c64799cb9cb7054b9608c6a0023af43a600aa2d705a135f849907fa05957dac0b3e9f99e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$auto_ILA_CMD_FLUSH(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x60, r4, 0x800, 0x2, 0x25dfdbfd, {}, [@ILA_ATTR_LOCATOR={0xc}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x1}, @ILA_ATTR_IFINDEX={0x8}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0xe}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x3}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x27}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x10}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x40844) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) unshare$auto(0x40000080) write$auto(r5, 0x0, 0xfdef) mbind$auto(0xbe, 0x5, 0x3f, 0x0, 0x1, 0x0) r7 = prctl$auto_PR_SET_MM_ARG_START(0x7f, 0x8, 0x0, 0x6, 0x3) ioctl$auto_SG_SET_TIMEOUT2(r7, 0x2201, &(0x7f0000000440)="c164bc39042a1717ef95f3bcc4902fab76bca5dbc522cf68bd4dea8a954dbed370025de34bde3da4afd2087f31c3bacf845f8edc635df01f949a47d9a01ad16637e8ea5170faa559c373c4fed777d35d") r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, 0x0, 0x0) r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r10 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$auto(r10, 0x0, 0x39b8) ioctl$auto_BLKRRPART(r9, 0x125f, 0x0) 1.481153255s ago: executing program 4 (id=379): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x3]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(r2, 0x8, 0x1107) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84}, 0x9, 0xd) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffe, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x29f, 0x100, 0x1, 0x105, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x9, 0x100, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setns$auto(0x0, 0xb) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) 1.13596276s ago: executing program 0 (id=429): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) (async) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./file0\x00', 0x550a71bb14ea0ccd, 0x154) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x8081, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c02, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/122, 0x7a) fcntl$auto(r2, 0x400, 0x1) lremovexattr$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='/sys/firmware/devicetree/base/name\x00') (async) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd702040392ef8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="11000100c2000000000000000a39acce0000000008000200", @ANYRES32=0x9, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x80) 1.135673646s ago: executing program 2 (id=430): mmap$auto(0x3, 0x2020009, 0x100000001, 0x15, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) mmap$auto(0x0, 0x4000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) (async) write$auto(0x1, 0x0, 0x80000000) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x10a40, 0x0) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7, 0x5) r0 = socket(0x2b, 0x1, 0x1) (async) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0004, 0x19) kill$auto(0x0, 0x21) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x80, 0x0) read$auto(r1, 0x0, 0x200000fff) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) socket(0xa, 0x801, 0x106) socket(0x2, 0x3, 0x100) socket(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bb0ac478820b00ccda942c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) 1.04162207s ago: executing program 3 (id=431): mmap$auto(0x0, 0x4020009, 0x2000000000006, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(&(0x7f0000000080)={0x7e, @raw, 0x80000028, 0xe864, 0x7}, 0x0, 0x40, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) keyctl$auto(0x8, 0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) connect$auto(0x3, &(0x7f00000000c0), 0x55) setsockopt$auto(0x3, 0x6, 0x4, 0x0, 0xfb3) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, r0, 0x8, 0x8, 0x1, @relative_id=0x5, 0x2}, 0x92) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x5, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x618d00, 0x0) (async) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, r2, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket(0x26, 0x5, 0x1) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x10000, 0x6, 0x0) 879.3678ms ago: executing program 0 (id=432): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) r2 = socket(0x1e, 0x80000, 0x5c) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x0, 0x1000, 0x0, &(0x7f0000000040)={0x9, 0x1000000000004}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010029bd7000fedbdf259800000005001c000000001a", @ANYRESHEX=r1, @ANYRES8=r2, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3a8044}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="58020000", @ANYRES16=r3, @ANYBLOB="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"], 0x258}, 0x1, 0x0, 0x0, 0xc814}, 0x10) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x2a801, 0x0) close_range$auto(r4, 0xffffffffffffffff, 0xffffffff) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0xf}, 0xc, 0x0, 0x0, 0x8) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x442501, 0x0) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r5, 0x40189206, 0x0) read$auto_mon_fops_binary_mon_bin(r5, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) 564.965902ms ago: executing program 3 (id=433): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC1\x00', 0x400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000001c0)=0x5) (async) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) pipe2$auto(&(0x7f0000000000)=r0, 0x5e9) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) (async) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000e40), 0x80001, 0x0) (async, rerun: 32) socket(0x2, 0x801, 0x100) (rerun: 32) connect$auto(0x3, &(0x7f00000000c0), 0x55) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async) connect$auto(0x3, &(0x7f0000000140), 0x55) ioctl$auto_NVRAM_SETCKS(r2, 0x7041, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mlockall$auto(0x7) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x6}}, 0x0, 0x8) (async) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 0x401) (async, rerun: 32) r3 = gettid() (rerun: 32) rt_sigqueueinfo$auto(r3, 0x1, 0x0) 0s ago: executing program 4 (id=434): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0x5, 0x13, 0xffffffffffffffff, 0x8000) r0 = socket(0x0, 0x5, 0xa) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r1 = syz_open_procfs$namespace(0x0, 0x0) fstat$auto(r1, 0x0) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xa, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="db6263c64300000528bd7000fcdbdf2500000000080001000a0000000600060006000000060006000a00000008000700", @ANYRES32=r1, @ANYBLOB="14000c00ff010000000000000000000000000001080001000500000014000c0020010000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) fsconfig$auto(r3, 0x2, &(0x7f00000003c0)='\x00*\xbc\xf5\'\xde\xf1\xd2`{\x87e\xf1\x9e\xba\x10X\xe3r\x82\x81e\xaal\x8f\xcf\xed~0c\xeb\xd5|\xffB\xf1\xc0?@\x16\xed\x8a\xfbm\xbf\x00\x99\xb1\xd4:s]\xccs\xc5\xe6\x8c\x9b\x85\xdc\xd2\tIP\x90L\x9bo\xe1}u\t\xe1.C\f\xe5\x1cb\xd0|\x8f\xb1LB\xfa\xcf>N\xac\xe9\xf6\x9e\x83p\xff\xe8\x8d\xbf\xe6>\xd5sG\x8c\xdb\xe6J@\x93?z\xb36\xb8H\xd2\xc7J\x8d\x9d5\xdc\x03xS\xe4\xfc,\x11<\xb3a\xbe\x8d1\x9cu\xcdt\xe9\x7f\r\tXb\x94\xb5\xb0\x17\nT\x15\xd8\x15\xe2\xda,B\xe5)\xd4\x99e\xac\x1d\xf9\x84m{\xea_Y\x1d\xedD\a\x9f\xae\xd3\x05\x9aA\x96\x12Q+', &(0x7f0000000140), 0x0) read$auto_ftrace_enable_fops_trace_events(r3, &(0x7f0000000200)=""/34, 0x22) ioctl$auto(0x3, 0x40081271, 0x38) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffff70001, 0x1) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3f, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a25, 0x1000, 0x0, 0x3, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x6, 0xf5, &(0x7f0000000000)=@in={0x2, 0x4e22, @multicast2}, 0x1f) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000807c) kernel console output (not intermixed with test programs): fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.926032][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.926078][ T5846] Bluetooth: hci0: command tx timeout [ 96.000059][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.008080][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.034879][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.051730][ T5839] hsr_slave_0: entered promiscuous mode [ 96.059532][ T5839] hsr_slave_1: entered promiscuous mode [ 96.084637][ T5846] Bluetooth: hci1: command tx timeout [ 96.091966][ T5845] team0: Port device team_slave_0 added [ 96.099489][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.106576][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.133064][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.164689][ T55] Bluetooth: hci2: command tx timeout [ 96.170628][ T5846] Bluetooth: hci3: command tx timeout [ 96.180858][ T5845] team0: Port device team_slave_1 added [ 96.192278][ T5843] hsr_slave_0: entered promiscuous mode [ 96.200238][ T5843] hsr_slave_1: entered promiscuous mode [ 96.206951][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.215548][ T5843] Cannot create hsr debugfs directory [ 96.266331][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.274899][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.301180][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.347504][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.354752][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.381499][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.484712][ T5850] hsr_slave_0: entered promiscuous mode [ 96.491152][ T5850] hsr_slave_1: entered promiscuous mode [ 96.497525][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.505177][ T5850] Cannot create hsr debugfs directory [ 96.622086][ T5845] hsr_slave_0: entered promiscuous mode [ 96.629846][ T5845] hsr_slave_1: entered promiscuous mode [ 96.636213][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.643783][ T5845] Cannot create hsr debugfs directory [ 96.963608][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.975146][ T24] cfg80211: failed to load regulatory.db [ 96.987014][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.011918][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.024053][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.107488][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.129165][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.161701][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.180098][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.257755][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.269985][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.281486][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.304935][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.426136][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.440606][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.471318][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.483140][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.500315][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.555941][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.579140][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.586622][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.628365][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.635552][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.759585][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.792654][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.816953][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.878679][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.885880][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.927864][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.935108][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.964392][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.004986][ T5846] Bluetooth: hci0: command tx timeout [ 98.033180][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.051429][ T798] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.058606][ T798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.097863][ T4742] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.105101][ T4742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.126066][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.150215][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.166229][ T5846] Bluetooth: hci1: command tx timeout [ 98.212507][ T4742] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.219712][ T4742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.234421][ T4742] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.241633][ T4742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.244803][ T5846] Bluetooth: hci3: command tx timeout [ 98.254272][ T5846] Bluetooth: hci2: command tx timeout [ 98.373777][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.509998][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.524246][ T5839] veth0_vlan: entered promiscuous mode [ 98.580038][ T5839] veth1_vlan: entered promiscuous mode [ 98.697527][ T5839] veth0_macvtap: entered promiscuous mode [ 98.737877][ T5843] veth0_vlan: entered promiscuous mode [ 98.752037][ T5839] veth1_macvtap: entered promiscuous mode [ 98.773921][ T5843] veth1_vlan: entered promiscuous mode [ 98.798925][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.848928][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.862903][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.879314][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.902103][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.911845][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.921089][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.929994][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.959794][ T5843] veth0_macvtap: entered promiscuous mode [ 99.009023][ T5843] veth1_macvtap: entered promiscuous mode [ 99.041353][ T5850] veth0_vlan: entered promiscuous mode [ 99.086927][ T5850] veth1_vlan: entered promiscuous mode [ 99.099244][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.111705][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.123329][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.139158][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.150315][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.161649][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.209826][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.219121][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.228060][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.236848][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.266419][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.276280][ T5845] veth0_vlan: entered promiscuous mode [ 99.280184][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.291179][ T5850] veth0_macvtap: entered promiscuous mode [ 99.324400][ T5845] veth1_vlan: entered promiscuous mode [ 99.351081][ T5850] veth1_macvtap: entered promiscuous mode [ 99.403916][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.420803][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.429496][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.440138][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.450794][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.461407][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.473371][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.517546][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.528865][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.539800][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.550279][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.562059][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.577918][ T798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.599472][ T798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.602041][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.626946][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.635912][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.645956][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.707393][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.713348][ T5845] veth0_macvtap: entered promiscuous mode [ 99.752466][ T5845] veth1_macvtap: entered promiscuous mode [ 99.764303][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.782170][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.922825][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.936976][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.956685][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.970426][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.979488][ T5906] Zero length message leads to an empty skb [ 99.986238][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.997082][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.009830][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.029387][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.049721][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.052169][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.069575][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.085966][ T5846] Bluetooth: hci0: command tx timeout [ 100.117595][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.128310][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.138667][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.149461][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.161476][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.239335][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.248801][ T5846] Bluetooth: hci1: command tx timeout [ 100.269648][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.283195][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.295780][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.324709][ T5846] Bluetooth: hci2: command tx timeout [ 100.330254][ T55] Bluetooth: hci3: command tx timeout [ 100.385916][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.400723][ T5911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 100.411614][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.431616][ T5912] process 'syz.0.5' launched './file0' with NULL argv: empty string added [ 100.438230][ T5911] vxcan1: entered promiscuous mode [ 100.477181][ T5911] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.654456][ T798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.675741][ T798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.020105][ T798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.059473][ T798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.125221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.145320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.153832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.204642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 101.213009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 101.234839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.243407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.165065][ T5846] Bluetooth: hci0: command tx timeout [ 102.235075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.243735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.326483][ T5846] Bluetooth: hci1: command tx timeout [ 102.404831][ T5846] Bluetooth: hci2: command tx timeout [ 102.410323][ T55] Bluetooth: hci3: command tx timeout syzkaller syzkaller login: [ 102.592708][ T5939] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x79000 [ 102.654710][ T5939] flags: 0xfff00000000014(referenced|dirty|node=0|zone=1|lastcpupid=0x7ff) [ 102.683790][ T5939] raw: 00fff00000000014 0000000000000000 dead000000000122 0000000000000000 [ 102.749519][ T5939] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 102.770989][ T5939] page dumped because: unmovable page [ 102.792453][ T5939] page_owner tracks the page as allocated [ 102.825724][ T5939] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5835, tgid 5835 (syz-executor), ts 93340389880, free_ts 34792312486 [ 102.974941][ T5939] post_alloc_hook+0x181/0x1b0 [ 103.018725][ T5939] get_page_from_freelist+0x1193/0x39b0 [ 103.042168][ T5939] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 103.045664][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 103.064586][ T5939] alloc_pages_mpol+0x1fb/0x550 [ 103.074869][ T5939] alloc_pages_noprof+0x131/0x390 [ 103.101174][ T5939] __vmalloc_node_range_noprof+0x732/0x1540 [ 103.110698][ T5944] could not allocate digest TFM handle [ 103.123350][ T5939] vmalloc_user_noprof+0x6b/0x90 [ 103.153695][ T5939] kcov_ioctl+0x4c/0x730 [ 103.176169][ T5939] __x64_sys_ioctl+0x190/0x200 [ 103.186716][ T5939] do_syscall_64+0xcd/0x260 [ 103.199774][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.214734][ T5939] page last free pid 1 tgid 1 stack trace: [ 103.288928][ T5939] __free_frozen_pages+0x69d/0xff0 [ 103.316954][ T5846] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 103.491529][ T5939] free_contig_range+0x135/0x3f0 [ 103.508271][ T5939] destroy_args+0x66f/0x830 [ 103.517400][ T5939] debug_vm_pgtable+0x130e/0x2d50 [ 103.529519][ T5939] do_one_initcall+0x120/0x6e0 [ 103.539686][ T5939] kernel_init_freeable+0x5c2/0x900 [ 103.550402][ T5939] kernel_init+0x1c/0x2b0 [ 103.563690][ T5939] ret_from_fork+0x45/0x80 [ 103.577513][ T5939] ret_from_fork_asm+0x1a/0x30 [ 104.474817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.109549][ T5977] netlink: 330 bytes leftover after parsing attributes in process `syz.1.16'. [ 105.355488][ T5978] zswap: compressor not available [ 109.836567][ T6026] netlink: 350 bytes leftover after parsing attributes in process `syz.1.26'. [ 112.156449][ T6058] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 115.279315][ T6083] netlink: 'syz.3.38': attribute type 11 has an invalid length. [ 115.287513][ T6083] netlink: 'syz.3.38': attribute type 11 has an invalid length. [ 115.306394][ T6083] netlink: 'syz.3.38': attribute type 11 has an invalid length. [ 116.045740][ T6096] netlink: 186 bytes leftover after parsing attributes in process `syz.2.40'. [ 116.349581][ T6081] syz.1.37 uses obsolete (PF_INET,SOCK_PACKET) [ 116.778170][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.137361][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.295927][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.404062][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.662932][ T6111] netlink: 'syz.0.46': attribute type 4 has an invalid length. [ 117.830303][ T53] bridge_slave_1: left allmulticast mode [ 117.867298][ T53] bridge_slave_1: left promiscuous mode [ 117.877249][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.971180][ T53] bridge_slave_0: left allmulticast mode [ 117.994232][ T53] bridge_slave_0: left promiscuous mode [ 118.021290][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.397501][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.410507][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.425222][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.443444][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.449962][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.257097][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.302113][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.334146][ T53] bond0 (unregistering): Released all slaves [ 120.190092][ T53] hsr_slave_0: left promiscuous mode [ 120.201266][ T53] hsr_slave_1: left promiscuous mode [ 120.225532][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.233004][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.284829][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.292281][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.339733][ T6151] netlink: 186 bytes leftover after parsing attributes in process `syz.3.53'. [ 120.348073][ T53] veth1_macvtap: left promiscuous mode [ 120.356439][ T53] veth0_macvtap: left promiscuous mode [ 120.362191][ T53] veth1_vlan: left promiscuous mode [ 120.369633][ T53] veth0_vlan: left promiscuous mode [ 120.569895][ T5846] Bluetooth: hci3: command tx timeout [ 121.261416][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.276747][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.286921][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.301546][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.311879][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.777785][ T53] team0 (unregistering): Port device team_slave_1 removed [ 121.807391][ T53] team0 (unregistering): Port device team_slave_0 removed [ 122.435737][ T6129] chnl_net:caif_netlink_parms(): no params data found [ 122.470554][ T6188] netlink: 'syz.1.58': attribute type 11 has an invalid length. [ 122.494046][ T6188] netlink: 'syz.1.58': attribute type 11 has an invalid length. [ 122.524183][ T6188] netlink: 'syz.1.58': attribute type 11 has an invalid length. [ 122.644793][ T55] Bluetooth: hci3: command tx timeout [ 123.053709][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.104787][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.116116][ T6129] bridge_slave_0: entered allmulticast mode [ 123.137296][ T6129] bridge_slave_0: entered promiscuous mode [ 123.262431][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.280397][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.305699][ T6129] bridge_slave_1: entered allmulticast mode [ 123.313726][ T6129] bridge_slave_1: entered promiscuous mode [ 123.364687][ T55] Bluetooth: hci0: command tx timeout [ 123.471003][ T6129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.509064][ T6129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.710357][ T6129] team0: Port device team_slave_0 added [ 123.815546][ T6180] chnl_net:caif_netlink_parms(): no params data found [ 123.859982][ T6129] team0: Port device team_slave_1 added [ 124.128227][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.161715][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.206204][ T6180] bridge_slave_0: entered allmulticast mode [ 124.263794][ T6180] bridge_slave_0: entered promiscuous mode [ 124.440449][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.471682][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.483849][ T6180] bridge_slave_1: entered allmulticast mode [ 124.526803][ T6180] bridge_slave_1: entered promiscuous mode [ 124.606221][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.613252][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.684546][ T6129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.724885][ T55] Bluetooth: hci3: command tx timeout [ 124.741856][ T6180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.752808][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.760311][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.816604][ T6129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.032730][ T6180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.163652][ T6129] hsr_slave_0: entered promiscuous mode [ 125.195290][ T6129] hsr_slave_1: entered promiscuous mode [ 125.210711][ T6129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.246836][ T6129] Cannot create hsr debugfs directory [ 125.444719][ T55] Bluetooth: hci0: command tx timeout [ 125.536660][ T6180] team0: Port device team_slave_0 added [ 125.556130][ T6180] team0: Port device team_slave_1 added [ 125.727031][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.754358][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.813992][ T6180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.912263][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.942162][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.990262][ T6180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.159718][ T6180] hsr_slave_0: entered promiscuous mode [ 126.181967][ T6180] hsr_slave_1: entered promiscuous mode [ 126.190695][ T6180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.198560][ T6180] Cannot create hsr debugfs directory [ 126.814573][ T55] Bluetooth: hci3: command tx timeout [ 127.526471][ T55] Bluetooth: hci0: command tx timeout [ 127.808950][ T6180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.081140][ T6180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.366490][ T6180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.488479][ T6180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.934600][ T6129] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 128.946190][ T6129] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 128.972970][ T6129] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 128.985696][ T6129] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 129.052666][ T6180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.072781][ T6180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.083968][ T6180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.101774][ T6180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.273713][ T6129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.351123][ T6129] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.393616][ T798] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.400840][ T798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.433846][ T6180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.454425][ T4742] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.461652][ T4742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.561479][ T6180] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.597423][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.604635][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.614665][ T55] Bluetooth: hci0: command tx timeout [ 129.620958][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.628167][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.975710][ T6129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.063702][ T6180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.117289][ T6129] veth0_vlan: entered promiscuous mode [ 130.158244][ T6129] veth1_vlan: entered promiscuous mode [ 130.230398][ T6180] veth0_vlan: entered promiscuous mode [ 130.270032][ T6180] veth1_vlan: entered promiscuous mode [ 130.280861][ T6129] veth0_macvtap: entered promiscuous mode [ 130.303251][ T6129] veth1_macvtap: entered promiscuous mode [ 130.343871][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.355296][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.367047][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.378489][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.391157][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.402017][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.420030][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.443980][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.460669][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.472750][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.492590][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.508999][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.520180][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.537073][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.557328][ T6180] veth0_macvtap: entered promiscuous mode [ 130.594263][ T6129] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.614195][ T6129] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.623497][ T6129] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.637708][ T6129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.668069][ T6180] veth1_macvtap: entered promiscuous mode [ 130.733403][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.745427][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.755916][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.767936][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.778961][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.789791][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.802396][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.814159][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.831275][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.843320][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.855372][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.865284][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.875902][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.887585][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.898227][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.908615][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.919203][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.930193][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.963167][ T6180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.973158][ T6180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.982508][ T6180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.992828][ T6180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.095465][ T798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.120836][ T798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.253705][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.272131][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.318490][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.338085][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.399177][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.427055][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.040255][ T6351] netlink: 'syz.2.68': attribute type 11 has an invalid length. [ 132.048152][ T6351] netlink: 'syz.2.68': attribute type 11 has an invalid length. [ 132.055939][ T6351] netlink: 'syz.2.68': attribute type 11 has an invalid length. [ 134.302498][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.310449][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.319075][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.332250][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.341415][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.824010][ T6393] chnl_net:caif_netlink_parms(): no params data found [ 135.042119][ T6393] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.054929][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.076760][ T6393] bridge_slave_0: entered allmulticast mode [ 135.086765][ T6393] bridge_slave_0: entered promiscuous mode [ 135.103401][ T6393] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.116960][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.124182][ T6393] bridge_slave_1: entered allmulticast mode [ 135.145412][ T6393] bridge_slave_1: entered promiscuous mode [ 135.193843][ T6393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.241709][ T6393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.321877][ T6393] team0: Port device team_slave_0 added [ 135.341387][ T6393] team0: Port device team_slave_1 added [ 135.623738][ T6393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.647917][ T6393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.725470][ T6393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.746073][ T6393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.765424][ T6393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.792049][ T6393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.152655][ T6393] hsr_slave_0: entered promiscuous mode [ 136.159550][ T6393] hsr_slave_1: entered promiscuous mode [ 136.173273][ T6393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.188464][ T6393] Cannot create hsr debugfs directory [ 136.408814][ T55] Bluetooth: hci0: command tx timeout [ 136.867664][ T6393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.003219][ T6393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.116841][ T6393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.214186][ T6393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.928979][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.935608][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.452541][ T6393] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.485815][ T55] Bluetooth: hci0: command tx timeout [ 138.510811][ T6393] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.594809][ T6393] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.660991][ T6393] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.197851][ T6393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.242111][ T6393] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.283527][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.290753][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.395910][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.403104][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.990010][ T6393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.124773][ T6393] veth0_vlan: entered promiscuous mode [ 140.147204][ T6393] veth1_vlan: entered promiscuous mode [ 140.221198][ T6393] veth0_macvtap: entered promiscuous mode [ 140.247426][ T6393] veth1_macvtap: entered promiscuous mode [ 140.290050][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.314797][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.344710][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.364509][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.374361][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.404511][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.414398][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.454640][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.474710][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.494677][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.511327][ T6393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.536758][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.551634][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.562075][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.575807][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.583918][ T5151] Bluetooth: hci0: command tx timeout [ 140.590435][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.601458][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.609609][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.617410][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.650813][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.663207][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.679151][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.690411][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.711357][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.729046][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.742895][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.755198][ T6393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.785729][ T6393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.809729][ T6393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.848771][ T6393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.858505][ T6393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.405962][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.431637][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.525324][ T4742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.533298][ T4742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.559509][ T6460] chnl_net:caif_netlink_parms(): no params data found [ 141.940826][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.963833][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.972156][ T6460] bridge_slave_0: entered allmulticast mode [ 141.980566][ T6460] bridge_slave_0: entered promiscuous mode [ 142.057013][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.076450][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.083876][ T6460] bridge_slave_1: entered allmulticast mode [ 142.112801][ T6460] bridge_slave_1: entered promiscuous mode [ 142.473444][ T6460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.502887][ T6460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.654966][ T55] Bluetooth: hci3: command tx timeout [ 142.661194][ T5846] Bluetooth: hci0: command tx timeout [ 143.039087][ T6460] team0: Port device team_slave_0 added [ 143.278076][ T6460] team0: Port device team_slave_1 added [ 143.552654][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.569934][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.671869][ T6460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.908313][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.934728][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.993655][ T6460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.138450][ T6460] hsr_slave_0: entered promiscuous mode [ 144.161770][ T6460] hsr_slave_1: entered promiscuous mode [ 144.175449][ T6460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.193392][ T6460] Cannot create hsr debugfs directory [ 144.496431][ T6502] netlink: 350 bytes leftover after parsing attributes in process `syz.0.93'. [ 144.623954][ T6460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.703536][ T6460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.729906][ T5846] Bluetooth: hci3: command tx timeout [ 144.788221][ T6460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.865488][ T6460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.118271][ T6460] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 145.152318][ T6460] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 145.178244][ T6460] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 145.200044][ T6460] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 145.788856][ T6460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.871347][ T6460] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.983730][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.991037][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.129140][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.136404][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.805136][ T5846] Bluetooth: hci3: command tx timeout [ 147.932313][ T6460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.043292][ T6460] veth0_vlan: entered promiscuous mode [ 148.080444][ T6460] veth1_vlan: entered promiscuous mode [ 148.140050][ T6460] veth0_macvtap: entered promiscuous mode [ 148.151486][ T6460] veth1_macvtap: entered promiscuous mode [ 148.181963][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.193054][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.207388][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.225799][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.241387][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.266861][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.295073][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.326521][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.342658][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.354226][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.371145][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.394549][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.427630][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.462214][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.487514][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.504037][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.526891][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.541741][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.561378][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.573455][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.604850][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.626659][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.655803][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.693757][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.731143][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.758245][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.801555][ T6460] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.861516][ T6460] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.884857][ T5846] Bluetooth: hci3: command tx timeout [ 148.890352][ T6460] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.981528][ T6460] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.299706][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.362737][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.553036][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.596820][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.036120][ T6581] FAULT_INJECTION: forcing a failure. [ 151.036120][ T6581] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 151.055026][ T6581] CPU: 0 UID: 0 PID: 6581 Comm: syz.3.105 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 151.055063][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.055081][ T6581] Call Trace: [ 151.055088][ T6581] [ 151.055100][ T6581] dump_stack_lvl+0x16c/0x1f0 [ 151.055139][ T6581] should_fail_ex+0x512/0x640 [ 151.055168][ T6581] _copy_from_user+0x2e/0xd0 [ 151.055195][ T6581] core_sys_select+0x35a/0xbe0 [ 151.055232][ T6581] ? __pfx_core_sys_select+0x10/0x10 [ 151.055267][ T6581] ? proc_fail_nth_write+0x9f/0x250 [ 151.055319][ T6581] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.055359][ T6581] kern_select+0x15d/0x1e0 [ 151.055388][ T6581] ? __pfx_kern_select+0x10/0x10 [ 151.055421][ T6581] ? __pfx_ksys_write+0x10/0x10 [ 151.055455][ T6581] __x64_sys_select+0xbd/0x160 [ 151.055484][ T6581] ? do_syscall_64+0x91/0x260 [ 151.055515][ T6581] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.055544][ T6581] do_syscall_64+0xcd/0x260 [ 151.055577][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.055599][ T6581] RIP: 0033:0x7fa057b8d169 [ 151.055616][ T6581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.055636][ T6581] RSP: 002b:00007fa05896e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 151.055657][ T6581] RAX: ffffffffffffffda RBX: 00007fa057da6160 RCX: 00007fa057b8d169 [ 151.055671][ T6581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 151.055683][ T6581] RBP: 00007fa05896e090 R08: 0000000000000000 R09: 0000000000000000 [ 151.055696][ T6581] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 151.055709][ T6581] R13: 0000000000000001 R14: 00007fa057da6160 R15: 00007ffd0a675228 [ 151.055736][ T6581] [ 154.704960][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.713842][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.721988][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.731658][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.743029][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.890915][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.900134][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.908964][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.926214][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.934095][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.127134][ T6615] chnl_net:caif_netlink_parms(): no params data found [ 155.404160][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.412459][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.420319][ T6615] bridge_slave_0: entered allmulticast mode [ 155.429618][ T6615] bridge_slave_0: entered promiscuous mode [ 155.493752][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.501349][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.509275][ T6615] bridge_slave_1: entered allmulticast mode [ 155.518708][ T6615] bridge_slave_1: entered promiscuous mode [ 155.657063][ T6617] chnl_net:caif_netlink_parms(): no params data found [ 155.697444][ T6615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.752352][ T6615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.989590][ T6615] team0: Port device team_slave_0 added [ 156.019782][ T6615] team0: Port device team_slave_1 added [ 156.199145][ T6617] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.217900][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.235577][ T6617] bridge_slave_0: entered allmulticast mode [ 156.243623][ T6617] bridge_slave_0: entered promiscuous mode [ 156.268428][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.275595][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.308250][ T6615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.329000][ T6615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.336603][ T6615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.366782][ T6615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.381418][ T6617] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.401259][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.409332][ T6617] bridge_slave_1: entered allmulticast mode [ 156.417842][ T6617] bridge_slave_1: entered promiscuous mode [ 156.494298][ T6617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.509509][ T6617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.555372][ T6615] hsr_slave_0: entered promiscuous mode [ 156.561842][ T6615] hsr_slave_1: entered promiscuous mode [ 156.569004][ T6615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.576767][ T6615] Cannot create hsr debugfs directory [ 156.606170][ T6617] team0: Port device team_slave_0 added [ 156.630832][ T6617] team0: Port device team_slave_1 added [ 156.711571][ T6617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.719086][ T6617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.745945][ T6617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.759858][ T6617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.767193][ T6617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.793465][ T6617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.804776][ T5846] Bluetooth: hci0: command tx timeout [ 156.946228][ T6615] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.965824][ T5846] Bluetooth: hci2: command tx timeout [ 156.973500][ T6617] hsr_slave_0: entered promiscuous mode [ 156.985652][ T6617] hsr_slave_1: entered promiscuous mode [ 156.991746][ T6617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.999666][ T6617] Cannot create hsr debugfs directory [ 157.043058][ T6615] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.137070][ T6615] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.208311][ T6615] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.306798][ T6617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.401553][ T6617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.489458][ T6617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.541919][ T6617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.686436][ T6615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.703308][ T6615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.716814][ T6615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.749669][ T6615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 157.823169][ T6617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.841379][ T6617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 157.856394][ T6617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 157.869039][ T6617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 157.967628][ T6615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.008603][ T6615] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.028841][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.036061][ T6576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.061499][ T6572] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.068706][ T6572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.149686][ T6617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.174025][ T6615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.200580][ T6617] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.220486][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.227732][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.255981][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.263137][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.501218][ T6615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.579752][ T6615] veth0_vlan: entered promiscuous mode [ 158.600775][ T6615] veth1_vlan: entered promiscuous mode [ 158.662227][ T6615] veth0_macvtap: entered promiscuous mode [ 158.673774][ T6615] veth1_macvtap: entered promiscuous mode [ 158.702552][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.713272][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.723754][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.735352][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.746744][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.759976][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.770250][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.781537][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.791482][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.802151][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.812736][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.823390][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.833370][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.845109][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.861519][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.880424][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.891151][ T5846] Bluetooth: hci0: command tx timeout [ 158.900008][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.910558][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.922625][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.932523][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.943076][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.952964][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.965477][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.975875][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.986461][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.996392][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.006980][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.016941][ T6615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.027598][ T6615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.039480][ T6615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.060409][ T5846] Bluetooth: hci2: command tx timeout [ 159.075873][ T6615] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.086348][ T6615] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.096020][ T6615] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.105220][ T6615] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.136819][ T6617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.276169][ T6575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.284070][ T6575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.284125][ T6617] veth0_vlan: entered promiscuous mode [ 159.346675][ T6575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.346705][ T6617] veth1_vlan: entered promiscuous mode [ 159.360091][ T6575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.442649][ T6617] veth0_macvtap: entered promiscuous mode [ 159.457550][ T6617] veth1_macvtap: entered promiscuous mode [ 159.483898][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.496475][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.506939][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.543140][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.563061][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.577711][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.587857][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.598860][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.609362][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.620402][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.630397][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.641321][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.651280][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.661951][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.671805][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.688703][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.704217][ T6617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.727237][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.741560][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.752084][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.763081][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.773411][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.786460][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.805240][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.815817][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.825995][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.845087][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.868557][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.883803][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.894235][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.905234][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.915632][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.954641][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.967764][ T6617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.979590][ T6617] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.995768][ T6617] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.014627][ T6617] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.023466][ T6617] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.315749][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.323602][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.463094][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.475096][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.972567][ T5846] Bluetooth: hci0: command tx timeout [ 162.459589][ T6674] netlink: 'syz.2.124': attribute type 9 has an invalid length. [ 162.474419][ T6674] netlink: 330 bytes leftover after parsing attributes in process `syz.2.124'. [ 163.044965][ T55] Bluetooth: hci0: command tx timeout [ 163.129948][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.138741][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.159532][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.168142][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.178216][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.555456][ T6694] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 163.564173][ T6694] nbd: error processing sock list [ 163.856721][ T6699] kAFS: Invalid Command on /proc/fs/afs/cells file [ 164.656940][ T6690] chnl_net:caif_netlink_parms(): no params data found [ 164.867557][ T6690] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.875440][ T6690] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.883588][ T6690] bridge_slave_0: entered allmulticast mode [ 164.925717][ T6690] bridge_slave_0: entered promiscuous mode [ 165.034898][ T6690] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.043076][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.075055][ T6690] bridge_slave_1: entered allmulticast mode [ 165.084804][ T6690] bridge_slave_1: entered promiscuous mode [ 165.216146][ T55] Bluetooth: hci2: command tx timeout [ 165.769193][ T6690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.850425][ T6690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.910534][ T6730] netlink: 330 bytes leftover after parsing attributes in process `syz.1.135'. [ 166.041191][ T6690] team0: Port device team_slave_0 added [ 166.138409][ T6690] team0: Port device team_slave_1 added [ 166.243404][ T6735] Invalid ELF header magic: != ELF [ 166.307866][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.334322][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.384606][ T6690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.417160][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.445381][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.501829][ T6690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.644124][ T6690] hsr_slave_0: entered promiscuous mode [ 166.665827][ T6690] hsr_slave_1: entered promiscuous mode [ 166.677775][ T6739] mmap: syz.2.138 (6739) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.680406][ T6690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.709831][ T6690] Cannot create hsr debugfs directory [ 167.221238][ T6690] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.286201][ T55] Bluetooth: hci2: command tx timeout [ 167.329760][ T6747] Invalid ELF header magic: != ELF [ 167.379591][ T6690] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.452476][ T55] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 167.637371][ T6690] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.807245][ T6690] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.202190][ T6690] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.268780][ T6690] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.529846][ T6690] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.709152][ T6690] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.049690][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.164718][ T6690] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.188123][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.195326][ T6575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.305158][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.312369][ T6575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.366619][ T55] Bluetooth: hci2: command tx timeout [ 170.312687][ T6781] i2c i2c-0: new_device: Missing parameters [ 170.493586][ T6690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.687528][ T6690] veth0_vlan: entered promiscuous mode [ 170.721057][ T6690] veth1_vlan: entered promiscuous mode [ 170.823927][ T6690] veth0_macvtap: entered promiscuous mode [ 170.872245][ T6690] veth1_macvtap: entered promiscuous mode [ 170.916571][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.933374][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.980524][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.991729][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.001963][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.013017][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.023311][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.034286][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.049185][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.063058][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.101630][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.122546][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.174875][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.204508][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.218772][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.233338][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.243474][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.263643][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.312896][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.365984][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.409109][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.419868][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.431132][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.441313][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.445721][ T55] Bluetooth: hci2: command tx timeout [ 171.455448][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.477823][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.494671][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.504963][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.533516][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.543854][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.557615][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.568264][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.579113][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.589369][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.600203][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.612466][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.623532][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.637211][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.678277][ T6690] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.692707][ T6690] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.706836][ T6690] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.716132][ T6690] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.178765][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.230336][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.355612][ T6576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.363818][ T6576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.785533][ T55] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 172.785577][ T55] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 172.802121][ T55] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 172.802190][ T55] Bluetooth: hci3: adv larger than maximum supported [ 172.813145][ T55] Bluetooth: hci3: adv larger than maximum supported [ 172.820699][ T55] Bluetooth: hci3: Unknown advertising packet type: 0x70 [ 172.828225][ T55] Bluetooth: hci3: adv larger than maximum supported [ 172.828259][ T55] Bluetooth: hci3: adv larger than maximum supported [ 172.828282][ T55] Bluetooth: hci3: Malformed LE Event: 0x0d [ 172.857277][ T6817] Console: switching to colour VGA+ 80x25 [ 173.758960][ T6831] netlink: 35 bytes leftover after parsing attributes in process `syz.3.161'. [ 174.054301][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 179.905621][ T6969] netlink: 'syz.0.188': attribute type 2 has an invalid length. [ 183.295064][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 186.219435][ T7083] netlink: 36 bytes leftover after parsing attributes in process `syz.0.209'. [ 187.604103][ T7124] mkiss: ax0: crc mode is auto. [ 187.649253][ T7127] FAULT_INJECTION: forcing a failure. [ 187.649253][ T7127] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 187.751335][ T7127] CPU: 0 UID: 0 PID: 7127 Comm: syz.3.219 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 187.751374][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.751391][ T7127] Call Trace: [ 187.751400][ T7127] [ 187.751411][ T7127] dump_stack_lvl+0x16c/0x1f0 [ 187.751459][ T7127] should_fail_ex+0x512/0x640 [ 187.751499][ T7127] should_fail_alloc_page+0xe7/0x130 [ 187.751529][ T7127] prepare_alloc_pages+0x3c2/0x610 [ 187.751563][ T7127] ? rcu_is_watching+0x12/0xc0 [ 187.751602][ T7127] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 187.751653][ T7127] ? do_raw_spin_lock+0x12c/0x2b0 [ 187.751715][ T7127] ? find_held_lock+0x2b/0x80 [ 187.751760][ T7127] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 187.751811][ T7127] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 187.751854][ T7127] ? stack_depot_save_flags+0x3e6/0xa50 [ 187.751899][ T7127] ? kasan_save_stack+0x42/0x60 [ 187.751947][ T7127] ? __lock_acquire+0xaa4/0x1ba0 [ 187.751993][ T7127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 187.752028][ T7127] ? policy_nodemask+0xea/0x4e0 [ 187.752082][ T7127] alloc_pages_mpol+0x1fb/0x550 [ 187.752113][ T7127] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 187.752139][ T7127] ? __page_table_check_ptes_set+0x1ae/0x420 [ 187.752190][ T7127] ? find_held_lock+0x2b/0x80 [ 187.752236][ T7127] alloc_pages_noprof+0x131/0x390 [ 187.752264][ T7127] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 187.752306][ T7127] get_free_pages_noprof+0xc/0x40 [ 187.752338][ T7127] kasan_populate_vmalloc_pte+0x2d/0x160 [ 187.752381][ T7127] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 187.752425][ T7127] __apply_to_page_range+0x5f9/0xd30 [ 187.752466][ T7127] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 187.752517][ T7127] ? __pfx___apply_to_page_range+0x10/0x10 [ 187.752557][ T7127] ? alloc_vmap_area+0x872/0x2970 [ 187.752599][ T7127] alloc_vmap_area+0x919/0x2970 [ 187.752651][ T7127] ? __pfx_alloc_vmap_area+0x10/0x10 [ 187.752700][ T7127] __get_vm_area_node+0x1a7/0x300 [ 187.752747][ T7127] __vmalloc_node_range_noprof+0x277/0x1540 [ 187.752787][ T7127] ? __do_sys_listmount+0x1c2/0xed0 [ 187.752841][ T7127] ? __do_sys_listmount+0x1c2/0xed0 [ 187.752891][ T7127] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 187.752960][ T7127] __kvmalloc_node_noprof+0x2ff/0x600 [ 187.753000][ T7127] ? __do_sys_listmount+0x1c2/0xed0 [ 187.753040][ T7127] ? __do_sys_listmount+0x1c2/0xed0 [ 187.753085][ T7127] ? __do_sys_listmount+0x1c2/0xed0 [ 187.753122][ T7127] __do_sys_listmount+0x1c2/0xed0 [ 187.753167][ T7127] ? __x64_sys_futex+0x1e0/0x4c0 [ 187.753207][ T7127] ? __x64_sys_futex+0x1e9/0x4c0 [ 187.753249][ T7127] ? __pfx___do_sys_listmount+0x10/0x10 [ 187.753288][ T7127] ? xfd_validate_state+0x5d/0x180 [ 187.753335][ T7127] do_syscall_64+0xcd/0x260 [ 187.753379][ T7127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.753405][ T7127] RIP: 0033:0x7fb75798d169 [ 187.753427][ T7127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.753454][ T7127] RSP: 002b:00007fb758701038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 187.753478][ T7127] RAX: ffffffffffffffda RBX: 00007fb757ba6080 RCX: 00007fb75798d169 [ 187.753495][ T7127] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000140 [ 187.753529][ T7127] RBP: 00007fb757a0e990 R08: 0000000000000000 R09: 0000000000000000 [ 187.753547][ T7127] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 187.753565][ T7127] R13: 0000000000000000 R14: 00007fb757ba6080 R15: 00007fff0d21cc48 [ 187.753602][ T7127] [ 187.753868][ T7127] syz.3.219: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 188.189562][ T7127] CPU: 0 UID: 0 PID: 7127 Comm: syz.3.219 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 188.189600][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.189615][ T7127] Call Trace: [ 188.189624][ T7127] [ 188.189635][ T7127] dump_stack_lvl+0x16c/0x1f0 [ 188.189687][ T7127] warn_alloc+0x248/0x3a0 [ 188.189732][ T7127] ? __pfx_warn_alloc+0x10/0x10 [ 188.189778][ T7127] ? kfree+0x2b6/0x4d0 [ 188.189823][ T7127] ? __get_vm_area_node+0x1e5/0x300 [ 188.189866][ T7127] __vmalloc_node_range_noprof+0xd31/0x1540 [ 188.189918][ T7127] ? __do_sys_listmount+0x1c2/0xed0 [ 188.189965][ T7127] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 188.190018][ T7127] __kvmalloc_node_noprof+0x2ff/0x600 [ 188.190059][ T7127] ? __do_sys_listmount+0x1c2/0xed0 [ 188.190098][ T7127] ? __do_sys_listmount+0x1c2/0xed0 [ 188.190143][ T7127] ? __do_sys_listmount+0x1c2/0xed0 [ 188.190179][ T7127] __do_sys_listmount+0x1c2/0xed0 [ 188.190224][ T7127] ? __x64_sys_futex+0x1e0/0x4c0 [ 188.190265][ T7127] ? __x64_sys_futex+0x1e9/0x4c0 [ 188.190306][ T7127] ? __pfx___do_sys_listmount+0x10/0x10 [ 188.190344][ T7127] ? xfd_validate_state+0x5d/0x180 [ 188.190390][ T7127] do_syscall_64+0xcd/0x260 [ 188.190455][ T7127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.190485][ T7127] RIP: 0033:0x7fb75798d169 [ 188.190508][ T7127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.190536][ T7127] RSP: 002b:00007fb758701038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 188.190562][ T7127] RAX: ffffffffffffffda RBX: 00007fb757ba6080 RCX: 00007fb75798d169 [ 188.190580][ T7127] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000140 [ 188.190597][ T7127] RBP: 00007fb757a0e990 R08: 0000000000000000 R09: 0000000000000000 [ 188.190614][ T7127] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 188.190630][ T7127] R13: 0000000000000000 R14: 00007fb757ba6080 R15: 00007fff0d21cc48 [ 188.190673][ T7127] [ 188.190684][ T7127] Mem-Info: [ 188.566354][ T7127] active_anon:5924 inactive_anon:10 isolated_anon:0 [ 188.566354][ T7127] active_file:8693 inactive_file:39837 isolated_file:0 [ 188.566354][ T7127] unevictable:768 dirty:700 writeback:0 [ 188.566354][ T7127] slab_reclaimable:10518 slab_unreclaimable:123985 [ 188.566354][ T7127] mapped:24619 shmem:1407 pagetables:923 [ 188.566354][ T7127] sec_pagetables:0 bounce:0 [ 188.566354][ T7127] kernel_misc_reclaimable:0 [ 188.566354][ T7127] free:1313054 free_pcp:3690 free_cma:0 [ 188.611601][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.670419][ T7127] Node 0 active_anon:23696kB inactive_anon:40kB active_file:34772kB inactive_file:159276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98476kB dirty:2800kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12936kB pagetables:3592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.740336][ T7127] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.779063][ T7127] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 188.806227][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.821594][ T7127] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 188.831726][ T7150] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.855995][ T7150] [ 188.919512][ T7127] Node 0 DMA32 free:1342148kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:23792kB inactive_anon:40kB active_file:34756kB inactive_file:157720kB unevictable:1536kB writepending:1448kB present:3129332kB managed:2541668kB mlocked:0kB bounce:0kB free_pcp:1496kB local_pcp:4944kB free_cma:0kB [ 189.059941][ T7127] lowmem_reserve[]: 0 0 1 1 1 [ 189.067287][ T7127] Node 0 Normal free:16kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:16kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 189.191241][ T7127] lowmem_reserve[]: 0 0 0 0 0 [ 189.243717][ T7127] Node 1 Normal free:3893336kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12608kB local_pcp:5376kB free_cma:0kB [ 189.418826][ T7127] lowmem_reserve[]: 0 0 0 0 0 [ 189.423722][ T7127] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 189.457018][ T7127] Node 0 DMA32: 5*4kB (UE) 29*8kB (UME) 346*16kB (UME) 321*32kB (UM) 229*64kB (UME) 30*128kB (UME) 16*256kB (UM) 8*512kB (UM) 2*1024kB (U) 2*2048kB (ME) 315*4096kB (M) = 1339132kB [ 189.504153][ T7154] netlink: 206 bytes leftover after parsing attributes in process `syz.2.223'. [ 189.526048][ T7127] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 189.539931][ T7127] Node 1 Normal: 77*4kB (UME) 51*8kB (UME) 20*16kB (UE) 144*32kB (UME) 74*64kB (UE) 20*128kB (UME) 8*256kB (UE) 3*512kB (UM) 2*1024kB (ME) 4*2048kB (UE) 944*4096kB (UM) = 3893388kB [ 189.584055][ T7127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.593943][ T7127] Node 0 hugepages_total=7 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 189.603572][ T7127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.620738][ T7127] Node 1 hugepages_total=0 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 189.630533][ T7127] 52044 total pagecache pages [ 189.644887][ T7127] 82 pages in swap cache [ 189.649404][ T7127] Free swap = 124664kB [ 189.653655][ T7127] Total swap = 124996kB [ 189.674715][ T7127] 2097051 pages RAM [ 189.684423][ T7127] 0 pages HighMem/MovableOnly [ 189.715119][ T7127] 429592 pages reserved [ 189.719313][ T7127] 0 pages cma reserved [ 190.344753][ T7174] netlink: 342 bytes leftover after parsing attributes in process `syz.1.227'. [ 190.354155][ T7172] netlink: 342 bytes leftover after parsing attributes in process `syz.1.227'. [ 190.579511][ T7178] syz.2.228 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 191.328140][ T7192] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x79000 [ 191.376510][ T7192] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 191.383815][ T7192] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 191.393590][ T7192] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 191.404530][ T7192] page dumped because: unmovable page [ 191.409952][ T7192] page_owner tracks the page as allocated [ 191.434527][ T7192] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 6666, tgid 6666 (syz-executor), ts 163076836195, free_ts 162219175442 [ 191.453979][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.486004][ T7192] post_alloc_hook+0x181/0x1b0 [ 191.491048][ T7192] get_page_from_freelist+0x1193/0x39b0 [ 191.505042][ T7192] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 191.511055][ T7192] alloc_pages_mpol+0x1fb/0x550 [ 191.516756][ T7192] alloc_pages_noprof+0x131/0x390 [ 191.525824][ T7192] __vmalloc_node_range_noprof+0x732/0x1540 [ 191.532004][ T7192] vmalloc_user_noprof+0x6b/0x90 [ 191.537744][ T7192] kcov_ioctl+0x4c/0x730 [ 191.542268][ T7192] __x64_sys_ioctl+0x190/0x200 [ 191.547790][ T7192] do_syscall_64+0xcd/0x260 [ 191.552563][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.559038][ T7192] page last free pid 6613 tgid 6613 stack trace: [ 191.588906][ T7192] __free_frozen_pages+0x69d/0xff0 [ 191.594114][ T7192] vfree+0x176/0x960 [ 191.618816][ T7192] kcov_close+0x34/0x60 [ 191.636955][ T7192] __fput+0x3ff/0xb70 [ 191.641150][ T7192] task_work_run+0x14d/0x240 [ 191.646560][ T7192] do_exit+0xafb/0x2c30 [ 191.674783][ T7192] do_group_exit+0xd3/0x2a0 [ 191.679443][ T7192] __x64_sys_exit_group+0x3e/0x50 [ 191.697968][ T7192] x64_sys_call+0x1530/0x1730 [ 191.703263][ T7192] do_syscall_64+0xcd/0x260 [ 191.724096][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.929135][ T7236] FAULT_INJECTION: forcing a failure. [ 193.929135][ T7236] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 193.977208][ T7236] CPU: 0 UID: 0 PID: 7236 Comm: syz.1.240 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 193.977262][ T7236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.977282][ T7236] Call Trace: [ 193.977310][ T7236] [ 193.977322][ T7236] dump_stack_lvl+0x16c/0x1f0 [ 193.977373][ T7236] should_fail_ex+0x512/0x640 [ 193.977417][ T7236] should_fail_alloc_page+0xe7/0x130 [ 193.977450][ T7236] prepare_alloc_pages+0x3c2/0x610 [ 193.977489][ T7236] ? rcu_is_watching+0x12/0xc0 [ 193.977534][ T7236] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 193.977586][ T7236] ? __kernel_text_address+0xd/0x40 [ 193.977623][ T7236] ? unwind_get_return_address+0x59/0xa0 [ 193.977667][ T7236] ? arch_stack_walk+0xa6/0x100 [ 193.977724][ T7236] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 193.977776][ T7236] ? stack_trace_save+0x8e/0xc0 [ 193.977818][ T7236] ? __pfx_stack_trace_save+0x10/0x10 [ 193.977861][ T7236] ? stack_depot_save_flags+0x28/0xa50 [ 193.977900][ T7236] ? find_held_lock+0x2b/0x80 [ 193.977945][ T7236] ? kasan_save_stack+0x42/0x60 [ 193.977996][ T7236] ? __lock_acquire+0xaa4/0x1ba0 [ 193.978045][ T7236] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 193.978082][ T7236] ? policy_nodemask+0xea/0x4e0 [ 193.978138][ T7236] alloc_pages_mpol+0x1fb/0x550 [ 193.978170][ T7236] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 193.978197][ T7236] ? __page_table_check_ptes_set+0x1ae/0x420 [ 193.978250][ T7236] ? find_held_lock+0x2b/0x80 [ 193.978307][ T7236] alloc_pages_noprof+0x131/0x390 [ 193.978338][ T7236] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 193.978384][ T7236] get_free_pages_noprof+0xc/0x40 [ 193.978416][ T7236] kasan_populate_vmalloc_pte+0x2d/0x160 [ 193.978464][ T7236] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 193.978523][ T7236] __apply_to_page_range+0x5f9/0xd30 [ 193.978566][ T7236] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 193.978617][ T7236] ? __pfx___apply_to_page_range+0x10/0x10 [ 193.978658][ T7236] ? alloc_vmap_area+0x872/0x2970 [ 193.978700][ T7236] alloc_vmap_area+0x919/0x2970 [ 193.978751][ T7236] ? __pfx_alloc_vmap_area+0x10/0x10 [ 193.978797][ T7236] __get_vm_area_node+0x1a7/0x300 [ 193.978844][ T7236] __vmalloc_node_range_noprof+0x277/0x1540 [ 193.978886][ T7236] ? __do_sys_listmount+0x1c2/0xed0 [ 193.978941][ T7236] ? __do_sys_listmount+0x1c2/0xed0 [ 193.978992][ T7236] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 193.979051][ T7236] __kvmalloc_node_noprof+0x2ff/0x600 [ 193.979098][ T7236] ? __do_sys_listmount+0x1c2/0xed0 [ 193.979141][ T7236] ? __do_sys_listmount+0x1c2/0xed0 [ 193.979189][ T7236] ? __do_sys_listmount+0x1c2/0xed0 [ 193.979228][ T7236] __do_sys_listmount+0x1c2/0xed0 [ 193.979283][ T7236] ? __x64_sys_futex+0x1e0/0x4c0 [ 193.979327][ T7236] ? __x64_sys_futex+0x1e9/0x4c0 [ 193.979372][ T7236] ? __pfx___do_sys_listmount+0x10/0x10 [ 193.979413][ T7236] ? xfd_validate_state+0x5d/0x180 [ 193.979465][ T7236] do_syscall_64+0xcd/0x260 [ 193.979516][ T7236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.979548][ T7236] RIP: 0033:0x7fad3b78d169 [ 193.979572][ T7236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.979602][ T7236] RSP: 002b:00007fad391f4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 193.979630][ T7236] RAX: ffffffffffffffda RBX: 00007fad3b9a6240 RCX: 00007fad3b78d169 [ 193.979652][ T7236] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000140 [ 193.979670][ T7236] RBP: 00007fad3b80e990 R08: 0000000000000000 R09: 0000000000000000 [ 193.979688][ T7236] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 193.979705][ T7236] R13: 0000000000000000 R14: 00007fad3b9a6240 R15: 00007ffc08d81978 [ 193.979743][ T7236] [ 194.835069][ T7253] random: crng reseeded on system resumption [ 197.100157][ T7281] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x79000 [ 197.110539][ T7281] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 197.134704][ T7281] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 197.195964][ T7281] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 197.264659][ T7281] page dumped because: unmovable page [ 197.270120][ T7281] page_owner tracks the page as allocated [ 197.314823][ T7281] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 6666, tgid 6666 (syz-executor), ts 163076836195, free_ts 162219175442 [ 197.363483][ T7281] post_alloc_hook+0x181/0x1b0 [ 197.370636][ T7281] get_page_from_freelist+0x1193/0x39b0 [ 197.370709][ T7281] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 197.370757][ T7281] alloc_pages_mpol+0x1fb/0x550 [ 197.370784][ T7281] alloc_pages_noprof+0x131/0x390 [ 197.370811][ T7281] __vmalloc_node_range_noprof+0x732/0x1540 [ 197.370851][ T7281] vmalloc_user_noprof+0x6b/0x90 [ 197.370889][ T7281] kcov_ioctl+0x4c/0x730 [ 197.370918][ T7281] __x64_sys_ioctl+0x190/0x200 [ 197.370953][ T7281] do_syscall_64+0xcd/0x260 [ 197.370998][ T7281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.371029][ T7281] page last free pid 6613 tgid 6613 stack trace: [ 197.371056][ T7281] __free_frozen_pages+0x69d/0xff0 [ 197.371095][ T7281] vfree+0x176/0x960 [ 197.371128][ T7281] kcov_close+0x34/0x60 [ 197.371156][ T7281] __fput+0x3ff/0xb70 [ 197.371184][ T7281] task_work_run+0x14d/0x240 [ 197.371218][ T7281] do_exit+0xafb/0x2c30 [ 197.371264][ T7281] do_group_exit+0xd3/0x2a0 [ 197.371290][ T7281] __x64_sys_exit_group+0x3e/0x50 [ 197.371318][ T7281] x64_sys_call+0x1530/0x1730 [ 197.371365][ T7281] do_syscall_64+0xcd/0x260 [ 197.371410][ T7281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.369225][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.377506][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.856442][ T7335] ubi0: attaching mtd0 [ 199.863448][ T7335] ubi0: scanning is finished [ 199.868441][ T7335] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 199.920940][ T7350] Invalid ELF header magic: != ELF [ 200.176016][ T7335] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 200.993319][ T7339] kexec: Could not allocate control_code_buffer [ 201.997945][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.276'. [ 202.255179][ T55] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 202.255218][ T55] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 202.277351][ T55] Bluetooth: hci0: adv larger than maximum supported [ 202.277401][ T55] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 202.284433][ T55] Bluetooth: hci0: Unknown advertising packet type: 0x30 [ 202.291720][ T55] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 202.314580][ T55] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 202.322935][ T55] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 202.330174][ T55] Bluetooth: hci0: Unknown advertising packet type: 0x30 [ 202.350195][ T7399] ptrace attach of "./syz-executor exec"[5843] was attempted by ""[7399] [ 202.773928][ T7405] netlink: 350 bytes leftover after parsing attributes in process `syz.1.280'. [ 204.088180][ T7437] HSR: entered promiscuous mode [ 206.598688][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 207.102317][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.294'. [ 207.241549][ T7476] bond0: (slave bond_slave_0): Releasing backup interface [ 210.835254][ T7534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.309'. [ 211.144629][ T55] Bluetooth: hci0: unexpected event 0x1d length: 7 > 5 [ 213.923252][ T7584] netlink: 334 bytes leftover after parsing attributes in process `syz.3.322'. [ 214.195919][ T7592] netlink: 330 bytes leftover after parsing attributes in process `syz.0.325'. [ 214.430308][ T7592] zswap: compressor not available [ 216.806646][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 218.690032][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.706427][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.714428][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.725942][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.735626][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.916542][ T7647] chnl_net:caif_netlink_parms(): no params data found [ 220.641093][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.657005][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.674786][ T7647] bridge_slave_0: entered allmulticast mode [ 220.688307][ T7647] bridge_slave_0: entered promiscuous mode [ 220.710289][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.725789][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.766548][ T7647] bridge_slave_1: entered allmulticast mode [ 220.784128][ T7647] bridge_slave_1: entered promiscuous mode [ 220.815352][ T55] Bluetooth: hci4: command tx timeout [ 221.135537][ T7647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.177906][ T7647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.386460][ T7647] team0: Port device team_slave_0 added [ 221.409937][ T7647] team0: Port device team_slave_1 added [ 221.617107][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.624107][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.682357][ T7680] ======================================================= [ 221.682357][ T7680] WARNING: The mand mount option has been deprecated and [ 221.682357][ T7680] and is ignored by this kernel. Remove the mand [ 221.682357][ T7680] option from the mount to silence this warning. [ 221.682357][ T7680] ======================================================= [ 221.704521][ T7647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.835719][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.851132][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.881939][ T7647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.051256][ T7688] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x79000 [ 222.106606][ T7688] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 222.172294][ T7688] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 222.205076][ T7688] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 222.294573][ T7688] page dumped because: unmovable page [ 222.320943][ T7688] page_owner tracks the page as allocated [ 222.356772][ T7688] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 6666, tgid 6666 (syz-executor), ts 163076836195, free_ts 162219175442 [ 222.359993][ T7690] could not allocate digest TFM handle [ 222.458469][ T7688] post_alloc_hook+0x181/0x1b0 [ 222.463358][ T7688] get_page_from_freelist+0x1193/0x39b0 [ 222.534820][ T7688] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 222.564478][ T7688] alloc_pages_mpol+0x1fb/0x550 [ 222.574671][ T7688] alloc_pages_noprof+0x131/0x390 [ 222.579764][ T7688] __vmalloc_node_range_noprof+0x732/0x1540 [ 222.629250][ T7688] vmalloc_user_noprof+0x6b/0x90 [ 222.652850][ T7688] kcov_ioctl+0x4c/0x730 [ 222.672366][ T7688] __x64_sys_ioctl+0x190/0x200 [ 222.692442][ T7688] do_syscall_64+0xcd/0x260 [ 222.706356][ T7688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.715672][ T7688] page last free pid 6613 tgid 6613 stack trace: [ 222.722107][ T7688] __free_frozen_pages+0x69d/0xff0 [ 222.728718][ T7688] vfree+0x176/0x960 [ 222.732759][ T7688] kcov_close+0x34/0x60 [ 222.737497][ T7688] __fput+0x3ff/0xb70 [ 222.741713][ T7688] task_work_run+0x14d/0x240 [ 222.755596][ T7688] do_exit+0xafb/0x2c30 [ 222.759987][ T7688] do_group_exit+0xd3/0x2a0 [ 222.766862][ T7688] __x64_sys_exit_group+0x3e/0x50 [ 222.772023][ T7688] x64_sys_call+0x1530/0x1730 [ 222.783057][ T7688] do_syscall_64+0xcd/0x260 [ 222.791490][ T7688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.860567][ T7647] hsr_slave_0: entered promiscuous mode [ 222.876046][ T7647] hsr_slave_1: entered promiscuous mode [ 222.884801][ T55] Bluetooth: hci4: command tx timeout [ 222.894623][ T7647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.936645][ T7647] Cannot create hsr debugfs directory [ 224.209166][ T7647] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.289820][ T7647] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.487861][ T7647] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.587764][ T7647] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.986755][ T55] Bluetooth: hci4: command tx timeout [ 225.227474][ T7647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.251469][ T7647] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.291374][ T798] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.298671][ T798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.642381][ T798] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.649570][ T798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.618956][ T7647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.045652][ T55] Bluetooth: hci4: command tx timeout [ 227.396955][ T7750] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x79000 [ 227.448652][ T7647] veth0_vlan: entered promiscuous mode [ 227.483969][ T7750] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 227.527120][ T7750] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 227.563843][ T7750] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 227.622186][ T7750] page dumped because: unmovable page [ 227.653074][ T7750] page_owner tracks the page as allocated [ 227.698252][ T7647] veth1_vlan: entered promiscuous mode [ 227.718112][ T7751] could not allocate digest TFM handle [ 227.728332][ T7750] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 6666, tgid 6666 (syz-executor), ts 163076836195, free_ts 162219175442 [ 227.814817][ T7750] post_alloc_hook+0x181/0x1b0 [ 227.837046][ T7750] get_page_from_freelist+0x1193/0x39b0 [ 227.878192][ T7750] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 227.897825][ T7750] alloc_pages_mpol+0x1fb/0x550 [ 227.905299][ T7750] alloc_pages_noprof+0x131/0x390 [ 227.951710][ T7750] __vmalloc_node_range_noprof+0x732/0x1540 [ 227.963718][ T7750] vmalloc_user_noprof+0x6b/0x90 [ 227.998221][ T7750] kcov_ioctl+0x4c/0x730 [ 228.015892][ T7647] veth0_macvtap: entered promiscuous mode [ 228.034941][ T7750] __x64_sys_ioctl+0x190/0x200 [ 228.039793][ T7750] do_syscall_64+0xcd/0x260 [ 228.047578][ T7647] veth1_macvtap: entered promiscuous mode [ 228.092996][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.127774][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.127807][ T7750] page last free pid 6613 tgid 6613 stack trace: [ 228.167359][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.208743][ T7750] __free_frozen_pages+0x69d/0xff0 [ 228.224545][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.264559][ T7750] vfree+0x176/0x960 [ 228.264954][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.278428][ T7750] kcov_close+0x34/0x60 [ 228.278467][ T7750] __fput+0x3ff/0xb70 [ 228.314496][ T7750] task_work_run+0x14d/0x240 [ 228.319180][ T7750] do_exit+0xafb/0x2c30 [ 228.349091][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.373583][ T7750] do_group_exit+0xd3/0x2a0 [ 228.387771][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.405885][ T7750] __x64_sys_exit_group+0x3e/0x50 [ 228.410989][ T7750] x64_sys_call+0x1530/0x1730 [ 228.416782][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.454479][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.459161][ T7750] do_syscall_64+0xcd/0x260 [ 228.490237][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.521001][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.530909][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.557414][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.604629][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.645331][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.674486][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.696189][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.714476][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.724321][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.797001][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.844642][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.883661][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.926488][ T7647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.030670][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.092568][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.154560][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.217864][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.256240][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.294489][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.334543][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.355170][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.391316][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.444992][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.474497][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.514556][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.545081][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.584484][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.617144][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.635802][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.656596][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.680986][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.701826][ T7647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.724526][ T7647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.748016][ T7647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.869408][ T7647] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.895654][ T7647] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.914575][ T7647] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.943224][ T7647] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.424574][ T6569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.442767][ T6569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.631482][ T6577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.764890][ T6577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 syzkaller syzkaller login: [ 232.604875][ T7800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.365'. [ 232.630587][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 232.635336][ T7800] vxcan1: entered promiscuous mode [ 233.845075][ T55] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 235.887740][ T55] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 236.377241][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.393138][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.402768][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.411849][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.421420][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.863065][ T7874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.385'. [ 236.939059][ T7874] veth0_macvtap: left promiscuous mode [ 237.400953][ T7867] chnl_net:caif_netlink_parms(): no params data found [ 237.764086][ T7893] Invalid ELF header magic: != ELF [ 238.119598][ T7867] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.141725][ T7867] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.172595][ T7867] bridge_slave_0: entered allmulticast mode [ 238.209683][ T7867] bridge_slave_0: entered promiscuous mode [ 238.366167][ T7867] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.373351][ T7867] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.421309][ T7867] bridge_slave_1: entered allmulticast mode [ 238.447159][ T7867] bridge_slave_1: entered promiscuous mode [ 238.495145][ T5846] Bluetooth: hci4: command tx timeout [ 238.787514][ T7867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.078691][ T7867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.251442][ T7867] team0: Port device team_slave_0 added [ 239.387830][ T7867] team0: Port device team_slave_1 added [ 239.645796][ T7867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.666883][ T7867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.722230][ T7867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.725383][ T7911] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 239.753880][ T7911] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 239.791840][ T7867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.800271][ T7867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.834357][ T7911] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 239.841980][ T7911] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 239.862109][ T7867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.947301][ T7911] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 239.980826][ T7911] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 240.039164][ T7911] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.054668][ T7911] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 240.117023][ T7867] hsr_slave_0: entered promiscuous mode [ 240.123961][ T7867] hsr_slave_1: entered promiscuous mode [ 240.155705][ T7867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.156006][ T7911] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 240.177688][ T7867] Cannot create hsr debugfs directory [ 240.266859][ T7911] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.272921][ T7911] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 240.449836][ T7911] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 240.527607][ T7911] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 240.564814][ T7911] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 240.613183][ T7911] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 240.722470][ T7935] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 240.973896][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 241.121830][ T7867] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.273129][ T7867] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.517380][ T7867] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.669044][ T7867] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.846311][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 242.061949][ T7867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.085264][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 242.099515][ T7867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.136468][ T7867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.162546][ T7867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.325997][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 242.363198][ T7867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.389191][ T7867] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.403776][ T6569] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.410993][ T6569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.456670][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.463930][ T6569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.564835][ T5846] Bluetooth: hci4: command 0x040f tx timeout [ 243.020904][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 243.045114][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 243.056831][ T7981] netlink: 25 bytes leftover after parsing attributes in process `syz.2.411'. [ 243.257193][ T7867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.881056][ T7994] svc: failed to register nfsdv3 RPC service (errno 111). [ 243.936174][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 243.953176][ T7994] svc: failed to register nfsaclv3 RPC service (errno 111). [ 244.164761][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 244.278864][ T7867] veth0_vlan: entered promiscuous mode [ 244.335306][ T7867] veth1_vlan: entered promiscuous mode [ 244.414228][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 244.521855][ T8015] netlink: 326 bytes leftover after parsing attributes in process `syz.2.418'. [ 244.524159][ T7867] veth0_macvtap: entered promiscuous mode [ 244.612040][ T7867] veth1_macvtap: entered promiscuous mode [ 244.648441][ T55] Bluetooth: hci4: command 0x040f tx timeout [ 244.689816][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.711980][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.732089][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.751269][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.762769][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.783090][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.802721][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.818034][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.829206][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.853046][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.873108][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.886933][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.896924][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.907504][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.917428][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.928434][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.979751][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.033498][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.058170][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.137297][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.162691][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.185712][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.218557][ T7867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.289947][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.332226][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.363162][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.398002][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.424530][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.482578][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.513501][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.544230][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.566237][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.586003][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.605427][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.644583][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.706811][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.725860][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.745945][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.764793][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.776183][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.796332][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.824519][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.861389][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.884647][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.915652][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.939718][ T7867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.021809][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.179113][ T7867] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.196541][ T7867] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.244857][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 246.287586][ T7867] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.297083][ T7867] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.486938][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.724735][ T55] Bluetooth: hci4: command 0x040f tx timeout [ 247.501735][ T6575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.534723][ T6575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.734200][ T6576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.771894][ T6576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.095500][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 248.806563][ T55] Bluetooth: hci4: command 0x040f tx timeout [ 249.857871][ T9] [ 249.860255][ T9] ====================================================== [ 249.867330][ T9] WARNING: possible circular locking dependency detected [ 249.874390][ T9] 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 Not tainted [ 249.881523][ T9] ------------------------------------------------------ [ 249.888561][ T9] kworker/0:0/9 is trying to acquire lock: [ 249.894386][ T9] ffffffff9012e528 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x251/0x620 [ 249.903419][ T9] [ 249.903419][ T9] but task is already holding lock: [ 249.910809][ T9] ffff88804d5e0258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53a/0xae0 [ 249.920211][ T9] [ 249.920211][ T9] which lock already depends on the new lock. [ 249.920211][ T9] [ 249.930621][ T9] [ 249.930621][ T9] the existing dependency chain (in reverse order) is: [ 249.939633][ T9] [ 249.939633][ T9] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 249.947302][ T9] lock_sock_nested+0x41/0xf0 [ 249.952522][ T9] sockopt_lock_sock+0x54/0x70 [ 249.957826][ T9] do_ip_setsockopt+0xfe/0x3240 [ 249.963210][ T9] ip_setsockopt+0x59/0xf0 [ 249.968163][ T9] udp_setsockopt+0x7d/0xd0 [ 249.973213][ T9] do_sock_setsockopt+0x221/0x470 [ 249.978783][ T9] __sys_setsockopt+0x1a0/0x230 [ 249.984177][ T9] __x64_sys_setsockopt+0xbd/0x160 [ 249.989827][ T9] do_syscall_64+0xcd/0x260 [ 249.994882][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.001319][ T9] [ 250.001319][ T9] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 250.008557][ T9] __lock_acquire+0x1173/0x1ba0 [ 250.013959][ T9] lock_acquire+0x179/0x350 [ 250.018997][ T9] __mutex_lock+0x199/0xb90 [ 250.024066][ T9] smc_vlan_by_tcpsk+0x251/0x620 [ 250.029544][ T9] __smc_connect+0x44b/0x4880 [ 250.034757][ T9] smc_connect_work+0x54c/0xae0 [ 250.040140][ T9] process_one_work+0x9cc/0x1b70 [ 250.045612][ T9] worker_thread+0x6c8/0xf10 [ 250.050734][ T9] kthread+0x3c2/0x780 [ 250.055330][ T9] ret_from_fork+0x45/0x80 [ 250.060298][ T9] ret_from_fork_asm+0x1a/0x30 [ 250.065612][ T9] [ 250.065612][ T9] other info that might help us debug this: [ 250.065612][ T9] [ 250.075844][ T9] Possible unsafe locking scenario: [ 250.075844][ T9] [ 250.083294][ T9] CPU0 CPU1 [ 250.088662][ T9] ---- ---- [ 250.094030][ T9] lock(sk_lock-AF_INET); [ 250.098461][ T9] lock(rtnl_mutex); [ 250.105000][ T9] lock(sk_lock-AF_INET); [ 250.111949][ T9] lock(rtnl_mutex); [ 250.115941][ T9] [ 250.115941][ T9] *** DEADLOCK *** [ 250.115941][ T9] [ 250.124087][ T9] 3 locks held by kworker/0:0/9: [ 250.129029][ T9] #0: ffff88814ced5148 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 250.139775][ T9] #1: ffffc900000e7d18 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 250.151555][ T9] #2: ffff88804d5e0258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53a/0xae0 [ 250.161339][ T9] [ 250.161339][ T9] stack backtrace: [ 250.167231][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 250.167267][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.167284][ T9] Workqueue: smc_hs_wq smc_connect_work [ 250.167333][ T9] Call Trace: [ 250.167341][ T9] [ 250.167362][ T9] dump_stack_lvl+0x116/0x1f0 [ 250.167402][ T9] print_circular_bug+0x275/0x350 [ 250.167445][ T9] check_noncircular+0x14c/0x170 [ 250.167490][ T9] __lock_acquire+0x1173/0x1ba0 [ 250.167536][ T9] lock_acquire+0x179/0x350 [ 250.167559][ T9] ? smc_vlan_by_tcpsk+0x251/0x620 [ 250.167593][ T9] ? __pfx___might_resched+0x10/0x10 [ 250.167628][ T9] ? kasan_save_stack+0x42/0x60 [ 250.167665][ T9] ? kasan_save_stack+0x33/0x60 [ 250.167701][ T9] ? kasan_save_track+0x14/0x30 [ 250.167739][ T9] __mutex_lock+0x199/0xb90 [ 250.167777][ T9] ? smc_vlan_by_tcpsk+0x251/0x620 [ 250.167811][ T9] ? smc_vlan_by_tcpsk+0x251/0x620 [ 250.167845][ T9] ? __pfx___mutex_lock+0x10/0x10 [ 250.167887][ T9] ? find_held_lock+0x2b/0x80 [ 250.167922][ T9] ? smc_vlan_by_tcpsk+0x251/0x620 [ 250.167953][ T9] ? rtnl_lock+0x9/0x20 [ 250.167975][ T9] smc_vlan_by_tcpsk+0x251/0x620 [ 250.168009][ T9] ? __pfx_smc_vlan_by_tcpsk+0x10/0x10 [ 250.168048][ T9] __smc_connect+0x44b/0x4880 [ 250.168082][ T9] ? __pfx___smc_connect+0x10/0x10 [ 250.168111][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 250.168143][ T9] ? __local_bh_enable_ip+0xa4/0x120 [ 250.168180][ T9] smc_connect_work+0x54c/0xae0 [ 250.168211][ T9] ? __pfx_smc_connect_work+0x10/0x10 [ 250.168243][ T9] ? rcu_is_watching+0x12/0xc0 [ 250.168281][ T9] process_one_work+0x9cc/0x1b70 [ 250.168316][ T9] ? __pfx_process_one_work+0x10/0x10 [ 250.168350][ T9] ? assign_work+0x1a0/0x250 [ 250.168376][ T9] worker_thread+0x6c8/0xf10 [ 250.168412][ T9] ? __pfx_worker_thread+0x10/0x10 [ 250.168440][ T9] kthread+0x3c2/0x780 [ 250.168464][ T9] ? __pfx_kthread+0x10/0x10 [ 250.168500][ T9] ? __pfx_kthread+0x10/0x10 [ 250.168523][ T9] ? __pfx_kthread+0x10/0x10 [ 250.168547][ T9] ? __pfx_kthread+0x10/0x10 [ 250.168570][ T9] ? rcu_is_watching+0x12/0xc0 [ 250.168600][ T9] ? __pfx_kthread+0x10/0x10 [ 250.168624][ T9] ret_from_fork+0x45/0x80 [ 250.168650][ T9] ? __pfx_kthread+0x10/0x10 [ 250.168674][ T9] ret_from_fork_asm+0x1a/0x30 [ 250.168719][ T9] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 250.891244][ T55] Bluetooth: hci4: command 0x040f tx timeout