last executing test programs: 13.5781905s ago: executing program 3 (id=124): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) read$auto_tap_fops_tap(r0, &(0x7f0000000000)=""/83, 0x53) r1 = socket(0x10, 0x2, 0x4) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep_stats\x00', 0x181100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) write$auto(0x4, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) recvmmsg$auto(r1, &(0x7f0000000580)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x80000001}, 0x1}, 0x3, 0x6, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) 11.959082755s ago: executing program 0 (id=129): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) socket(0x2, 0x2, 0x88) madvise$auto(0x405, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x815) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) writev$auto(r0, 0x0, 0x7) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRNcmyT\x04\xe9M\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\x85\x8a=\xbaKgn6\xa7\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\t\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9\x1d\xe1\xc6\x8b\xc0\xe8-\x94k\xef\x95\x1c\xcf_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/261, 0x5, 0x3d) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0xd60) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) io_setup$auto(0x1, 0x0) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/extfrag/extfrag_index\x00', 0x888c0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/queues/rx-9/rps_cpus\x00', 0x2002, 0x0) write$auto(r1, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) open(0x0, 0x161342, 0x100) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) 10.997540333s ago: executing program 1 (id=131): ppoll$auto(0x0, 0x7, 0x0, 0x0, 0x8) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000080)=""/27, 0x1b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) socket(0xe, 0x1, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) pread64$auto(r1, &(0x7f0000000100)='\xb9+.\x00', 0x6, 0x8000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = open(&(0x7f0000000000)='./file1\x00', 0x3650c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r2, 0x0) read$auto_stats_fops_(r2, &(0x7f00000001c0)=""/91, 0x5b) mmap$auto(0x0, 0x40008, 0xdb, 0x9b72, 0x7, 0x28000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xa02, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x567) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x1, r3, @relative_id=0x13, 0xe600}, 0xf) 10.121223766s ago: executing program 3 (id=132): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082dbd7000fbdbdf250500150006090000000e0000000000e2210b3ffea53ab7f911d580ce1060be1624ae161fad784c7c84aad0799f343490bbba201de44d02a5d4c057b9c50523ff36dd68002f44182df73e5ff24a9b76f9"], 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x4048810) socket(0x25, 0x1, 0x8cb) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r2 = clone3$auto(&(0x7f0000000300)={0x5, 0xa9, 0x1, 0x2, 0x8, 0x10000, 0x0, 0x3000000000000, 0x4, 0x7f, 0x2b}, 0x2) move_pages$auto(r2, 0xe, 0x0, 0x0, 0x0, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/loop5\x00', 0x8040, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) sendfile$auto(r3, r4, 0x0, 0x1f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) ioctl$auto(r5, 0x4b4e, r5) 9.832084062s ago: executing program 0 (id=134): r0 = open(&(0x7f0000000040)='./file0/file0\x00', 0xa2202, 0x20) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_setup$auto(0xffd, 0x0) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x486, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xc01, 0x71c, 0x2, 0x200000000008000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(r2, 0x4bfb, 0x9) execve$auto(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) r6 = gettid() kill$auto(r6, 0x11) prctl$auto_PR_SET_MM_ENV_START(0x7, 0xa, r6, 0x3, 0x2) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/platform/dummy_hcd.2/usb3/serial\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000040)=""/4111, 0x100f) pivot_root$auto(&(0x7f0000000000)='\\eam_slave_1\x00', &(0x7f0000000140)='\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000004300)=""/108, 0x6c) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) 9.343532845s ago: executing program 0 (id=135): getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b080, 0x0) getsockopt$auto(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x454, 0x9) statmount$auto(0x0, 0x0, 0x1fe, 0xd) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0xc0000000000000, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x27, 0xa, 0x6) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x9, 0x0, 0x5, 0x0, 0x200002, 0x12}, 0x7ff}, 0xfffffff9, 0x10, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="015fc324ff1163645be6d79d7ac2aaaaf9537512a56c38d14b4f2e38b56dac32fbd15716065b1ea0450a01", @ANYRES16=0x0, @ANYBLOB="010029bd7000fcdbdf25020000000a001800000000000000000006002800060000000a000900aaaaaaaaaabb0000060025000a00000008003b000300000008003a00810000000a000500bbbbbbbbbbbb0000"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x800, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) close_range$auto(0x2, 0x8, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x15, 0x1000, 0x47, 0x4, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x40000000000, 0xff, 0x5, 0x3]}, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0xfffffffe) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60000004}, 0x80) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 8.843417947s ago: executing program 3 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f0000000080)="f5c94556d7b994ee4c7d6b000087cfce41d8b86d8574badcc9a0191d856056") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, r3) unshare$auto(0x40000080) close_range$auto(0x2, r2, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) getresgid$auto(0x0, &(0x7f0000000a40)=0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x40, 0x0) setsockopt$auto(r6, 0x1, 0x10, &(0x7f0000000280)='\x00\x15\x8d\xca`\xbcgY\xd2w\xf6\xaedN\x00\x00\x00\x00\x04\x00\x00\x00*\xaaL\'\xab>q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xc3\xa2\x1a\xf1\xdf\x12\b?Q\xec*\b`\'\xfe\xcb\xe9\xc0\xf4\x119\xf6f\v\xf7\x13\xe6\xd8\xa2\xd3\xfd\xa7', 0xba) shmctl$auto_SHM_LOCK(0x1, 0xb, &(0x7f0000000140)={{0x4, 0xee01, 0xee01, 0x870, 0x8, 0x21, 0x6}, 0xe, 0xc4, 0x1, 0x4, @inferred, @raw=0xc000, 0x3, 0x0, &(0x7f0000001a80)="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", &(0x7f0000000100)="1cfea226afee7230e297059be3436ae7a67d7f53366340ceb4c1af4ccc7e78a6898951568fc2c0a1d35788ecdc183c0d14"}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) mmap$auto(0x0, 0x5, 0x4000000000df, 0x40eb1, 0x401, 0x9) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto(r7, 0x0, 0xb4d3) write$auto(r0, 0x0, 0x7ff) write$auto(0x3, 0x0, 0xffd8) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001a40), r0) 8.723473278s ago: executing program 1 (id=138): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) lseek$auto(0xffffffffffffffff, 0x8001, 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) prctl$auto(0x6, 0xe, 0x0, 0x68, 0xee43) settimeofday$auto(0x0, &(0x7f0000000000)={0x0, 0x6000}) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) mmap$auto(0x0, 0x2020009, 0x7, 0x13, 0xfffffffffffffffb, 0x9bf) r0 = io_uring_setup$auto(0x3, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, r0, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x8, 0x329, 0x10011, 0x2, 0x8000) mprotect$auto(0x0, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x600000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyy2\x00', 0x20000, 0x0) ioctl$auto(0x3, 0x80045438, 0x10000000000402) mlock$auto(0x4, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x23, 0x1, 0x2008, 0x0, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r2, 0x5522, 0xf15) 8.1421699s ago: executing program 0 (id=139): sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x3ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) execveat$auto(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) ioctl$auto_USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0xe535) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rename$auto(0x0, 0x0) stat$auto(0x0, 0x0) madvise$auto(0x0, 0x2003f0, 0x11) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) unshare$auto(0x40000080) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x800) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x80000, 0x80000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 7.752698072s ago: executing program 2 (id=140): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0x7fa, 0x1, 0x0) r0 = gettid() r1 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x4}, 0x80000b}, 0x5, 0x20000000) r2 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x24c0, 0x0) ioctl$auto(r1, 0xffff, r2) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) process_vm_readv$auto(r0, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x3, 0x0) r4 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) write$auto_ftrace_event_filter_fops_trace_events(r4, 0x0, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0xffeb) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/queues/tx-6/traffic_class\x00', 0xe0a00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000480)=""/142, 0x8e) r6 = socket(0x2b, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@l2={0x1f, 0x9, @none, 0xb8}, 0x6b) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(r6, 0x0, 0xfffffde9) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x801, 0x84) 7.389682247s ago: executing program 1 (id=141): write$auto(0x800000000000c8, 0x0, 0x1a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x200000007b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) ioctl$auto_TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0xbc) r2 = epoll_create$auto(0x3e) r3 = socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon35\x00', 0x18b902, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x9, 0x800001, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) adjtimex$auto(&(0x7f00000000c0)={0x9, 0x0, 0x867b, 0x4, 0x4, 0x776, 0xffff8000, 0x0, 0x6, 0xeff0, 0xb, {0x7, 0x1}, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x0, 0x5, 0x0, 0x755, 0x10, 0x4, 0x1}) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) fanotify_init$auto(0x5, 0x1) epoll_ctl$auto(r2, 0x1, r0, 0x0) renameat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x4000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000200)=0xfff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x800eb1, r3, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) add_key$auto(&(0x7f0000000140)='/dev/ram2\x00\"!>\x15]\xebj\xf6\x96\rD\x13\x8an^\x92\xd6f\xd8\xab\x8d\xca;\xbd[-8', &(0x7f0000000080)='/dev/ram2\x00', &(0x7f00000000c0)="f0b3cda690da41af7c8005ff512686a9429962dce35124ed3856671de680a0781a3d288ee0f113183cf6ed65d82adb5f250a7cba1fdd64ebf9eebf0090bba20665b4fbf6e8b7cf", 0x9f, 0xfffff801) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 4.771006373s ago: executing program 3 (id=142): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x6f, 0xffffffffffff0001, 0x2) mmap$auto(0x0, 0x800, 0x400000000003, 0xeb1, 0xfffffffffffffffa, 0x7ffc) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) uname$auto(0x0) socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x7, 0x3ff, 0x7, 0x9b72, 0xffffffffffffffff, 0x8002) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r0 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x302, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xb403) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYBLOB='.\x00'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYBLOB="86ed9ae7f3fea17fdbf9947c135f0bb87232b83ee39de60ee11e490dff508ee27908b8a1b1"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xe}, 0x1, 0x0, 0x6, 0x9}, 0x7}, 0x803, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4.769589408s ago: executing program 1 (id=150): mmap$auto(0x0, 0x100004005, 0x800002, 0x40eb2, 0x401, 0x300000000000) prctl$auto(0x1, 0x4, 0x4, 0x3, 0x4) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008081}, 0x10004000) socket(0x2, 0x80802, 0x0) r0 = socket(0x2, 0x1, 0x0) fcntl$auto(0x3, 0x4, 0xa553) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10}, 0x3, 0x1) select$auto(0xa, &(0x7f0000000180)={[0x80000000, 0xbfd3, 0x44, 0x1, 0x3, 0x7fffffffffffffff, 0x8, 0x4, 0x1, 0x8, 0x5, 0x9, 0xfffffffffffffffc, 0x9000000000, 0x9, 0x33ca]}, &(0x7f0000000240)={[0x8, 0xf, 0x7, 0x3ff, 0x9fed, 0x100000001, 0x800000000, 0x5, 0x5, 0x1, 0x7, 0xb, 0x63, 0x1, 0x1, 0x6]}, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x10500, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000000)=""/156, 0x9c) msync$auto(0x1ffff000, 0x180000000000000, 0x6) mmap$auto(0x0, 0x2020009, 0xfff, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_MEMINFO(r2, 0x1, 0x37, 0x0, &(0x7f0000000180)=0x7) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000001200), 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x8a) getdents64$auto(r3, 0x0, 0x400) 4.496059172s ago: executing program 2 (id=143): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) fcntl$auto(0x3, 0x4, 0xa553) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x101, 0x0, 0x5, 0x9ad}, 0x5}, 0x5, 0x20000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x7ffffffd, 0x400004, 0x7, 0x9b72, r0, 0x5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_seed\x00', 0x2202, 0x0) readv$auto(0x3, 0x0, 0x1) dup2$auto(0xffffffffffffffff, 0xffffffffffffffff) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x40) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x42a81, 0x0) pwrite64$auto(r2, 0x0, 0x1, 0x2) ioctl$auto_VFIO_GET_API_VERSION(r1, 0x3b64, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe3102, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) 3.238556857s ago: executing program 2 (id=144): openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r1 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x12000, 0x0) mq_timedreceive$auto(r1, &(0x7f0000000200)='/dev/sequencer2\x00', 0x3, &(0x7f0000000240)=0xffffffff, &(0x7f0000000280)={0x6, 0x5f99}) socket(0x3, 0x5, 0x5) socket(0xa, 0x2, 0x73) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd26, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd700001dcdf2503000000040006000c00018008001000040006"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(r2, 0x4d13, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)="3098412d1d2a21f9821bbb6575682f4fa969d6d8f51ad133eb2fb3cd698bac435177fc1942f009b507130df5d599f4ff6031c5518c8e660d59059846f0326039e724f62ba81e019302f5") sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r7 = eventfd$auto(0x34b) readv$auto(r7, &(0x7f0000000380)={0x0, 0x8}, 0x4) read$auto(r7, 0x0, 0xcc9c) write$auto(r7, &(0x7f0000000400)='\'\x00', 0x8) r8 = socket(0xa, 0x5, 0x84) sendto$auto(r8, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe00"}, 0x1c) 3.23082242s ago: executing program 0 (id=145): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) r1 = prctl$auto_PR_PPC_GET_DEXCR(0x48, 0x80000001, 0x0, 0x2000008, 0x1) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r1, 0x0, 0x40884) sendmsg$auto_NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x815) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) writev$auto(r0, 0x0, 0x7) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, 0x0, 0x454002, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) pwrite64$auto(0xc8, &(0x7f0000000100)='\vX\xb5n\x91p\xe6\x1eRNcmyT\x04\xe9M\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\x85\x8a=\xbaKgn6\xa7\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\t\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9\x1d\xe1\xc6\x8b\xc0\xe8-\x94k\xef\x95\x1c\xcf_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D\xdb\x1e\xf1o=8\xcam3\x90,\x13\xa4\xa1\x89\xc2\x1d\xd2\v\xafn\xbd\x84\xf9\x86\x7f\x1dz\xcfW\xde%\xbft\x02\xa2\x989\xd9&E\xbd\x850\xf4\xabDkHr\xb8\x9f\xec\xe2\x90\xdb5\t\"\xf9Y\xdb\xf3\xb6\xd9\xc2\a)\x1e\x8c\xd6\x90$h\xa8\xf0o\x92\xa1-\x9d-C\xae`\x11=4\x1dS\xaeaE\xc8lNw\xba\x15o\xf3Y\xff\xa0\xca\x7fD\xd2_\x86:O\x0e\xf6R\x8c\xcd[L}\xc5\xb9B', 0x5, 0x5) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) socketpair$auto(0x10000008, 0xc, 0x4000de8, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x10, 0x0, 0x9) syz_clone(0x82001400, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @remote}, 0x6a) mmap$auto(0x8b, 0xfffffffc, 0x10000000000df, 0xeb6, r2, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x88480, 0x0) 2.157513152s ago: executing program 2 (id=146): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082dbd7000fbdbdf250500150006090000000e0000000000e2210b3ffea53ab7f911d580ce1060be1624ae161fad784c7c84aad0799f343490bbba201de44d02a5d4c057b9c50523ff36dd68002f44182df73e5ff24a9b76f9"], 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x4048810) socket(0x25, 0x1, 0x8cb) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r2 = clone3$auto(&(0x7f0000000300)={0x5, 0xa9, 0x1, 0x2, 0x8, 0x10000, 0x0, 0x3000000000000, 0x4, 0x7f, 0x2b}, 0x2) move_pages$auto(r2, 0xe, 0x0, 0x0, 0x0, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/loop5\x00', 0x8040, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) sendfile$auto(r3, r4, 0x0, 0x1f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) ioctl$auto(r5, 0x4b4e, r5) 2.151790751s ago: executing program 1 (id=155): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) getsockopt$auto_SO_BUF_LOCK(r0, 0x320, 0x48, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$auto(r3, 0x0, 0x45c) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x566) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) acct$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.6/usb7/tx_lanes\x00', 0x141000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/pvrusb2/remove_id\x00', 0x100, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, [0xfffffffffffffffe, 0x604add15, 0xd59, 0x500fffffffffff, 0x0, 0x6, 0x0, 0x7, 0x80000070624ce7, 0x5, 0x6, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x200000000001, 0x80000000, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x100000000000000, 0x0, 0x400000, 0x400000000005ba, 0xc, 0x0, 0x9, 0x7, 0x6, 0xfffffffffffffffd, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x4, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x4000000000, 0x10006, 0x0, 0x11]}, 0x1fe, 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0xc008010}, 0x4000001) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) mmap$auto(0x4, 0x10000, 0x4000000000e3, 0x11, 0xffffffffffffffff, 0x10008001) 2.094790859s ago: executing program 3 (id=147): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x182, 0x0) r2 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101800, 0x7) read$auto(r2, 0x0, 0x1) r3 = socket(0x28, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r4, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f00000006c0)={0x14, r5, 0xd3ac6c422733a379, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48800) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000eb43edbc64d27f6541048151e04762717f9d", @ANYRES16=r5, @ANYBLOB="080026bd7000fcdbdf25020000000400b9800400ff000400430005002001040000000400170004005f0004002101"], 0x34}}, 0x4000840) r6 = semctl$auto_GETVAL(0xfffffff8, 0x6, 0xc, 0x522) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x3b0, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x3}, @NL80211_ATTR_KEY_DATA={0x9, 0x7, "a7617096d7"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "441fc11fa1cdf231094f1d9ba7a2054af50382d961d62abcdc90"}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x4}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_MAC_ADDRS={0x35b, 0xa6, 0x0, 0x1, [@nested={0x114, 0x60, 0x0, 0x1, [@typed={0x14, 0xc5, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @generic="5133cdc1446c4d3e9a2f7b66cd90aa9402cb025ffde49f20", @generic="6b27493113376fa3ff35fe379b22340aa4754ab5838670d7cd7732a9f60abd8d400ec5976f93e145412cecbbe94bb8c7c7f875f6cbaa9092e91f5dab95154613d7891cac759970d844691a66aa4160b5b65402a2a79c9706b020f2debca5b806233a6c473ab075fc5de3beabbd12b27738e3c28e294d42f14547b5dbd138a106fa8c2f9dabd4f3738b74648e25c0ca4e282015327a5cbdb02f77377aa4f58ff0020eb1d0b415dade66da5d011c51a52787a95fcce82d1c31e29a6f721d87dcdeeaf48d94a5ff0f2810dea860337ca266f6ae94aef30578d4cfabc0757321438d", @nested={0x4, 0xcc}]}, @nested={0x4, 0xd7}, @generic="be51e5dd50c6115892a3dea08099cc6816517f175af571bebd39", @generic="7df09808f5c80eeb68b7a56c4f9d656d16a2cf90051fee11792df2bb97a68938a248989834bfc7f30c2c9dce073a95381710ad6072e9c449c98f5c5e5a56a839c4c5600c7e856f4cc08180e6706f81c9f230fe43949d426dfba009cc12e1ef71d603968f5a7b985d161cf71875fafb09dd312ab61235aa89e17afa2c6b0bd4c682027e5fdaea7c8a146ada164002d574234c0538c13aff5e32438ad59edffab2cb7523d9c1eb522e74ee85ffab5767944ad55782677a081dff550319e372ab68d60dcc7aef37b5e23cd0a6ca9769d00fa9abe4a5", @nested={0x11e, 0xde, 0x0, 0x1, [@typed={0xc, 0xd1, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0xad}, @typed={0x8, 0x12d, 0x0, 0x0, @u32=0x256}, @generic, @generic="0eaec716fd80fbda1ae6650096e1fd09cb8514dedbad9fcb34cbb518ff896ee25df794d32d81e5c9a2bf5b743582214642eb0a4725bc39d508d6b324119d80e73b9a4ef5a9271541fc49bfed34edd5144ec2ca6313404894aab41f7240862649d23407f7640288914624112d633359e02219ab888cf858913eda2f2143838be999798c855d1941ad27b5ccd0f9a99699b1d1664efbe8edddf949034117db939e2b1f5f3f36f9330185daa7d9c18018f379ca65db4f7637a83170a0282f23defa6ad40f6f22a212db0d716520abbcd628eea001e3c1091e858a7d2f44fad2d15e4dbb98f92bb6a3b9a8a8", @typed={0x8, 0xef, 0x0, 0x0, @pid=r6}, @typed={0xc, 0x124, 0x0, 0x0, @u64}, @nested={0x4, 0x12e}]}, @generic="60c4709e409f562700f8441f04d65d7599abbed4b32e1bb95b73d769a3155612a87d185bdfbc6b550afaa18f3ef97f464f"]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) read$auto(0xffffffffffffffff, 0x0, 0x9) write$auto(0x3, 0x0, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r8 = socket(0x10, 0x2, 0x0) prctl$auto(0x10000000018, 0x800005, 0x4, 0x2, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0)="a54087", 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.168364274s ago: executing program 2 (id=148): setreuid$auto(0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x4, 0x2, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x66) madvise$auto(0x0, 0x3, 0x66) r0 = setfsuid$auto(0x0) r1 = setfsuid$auto(0xee00) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) write$auto(0x3, 0x0, 0x81) setreuid$auto(r1, 0x0) r2 = setfsgid$auto(0xee01) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) getresgid$auto(&(0x7f00000001c0)=0x10001, &(0x7f0000000200)=0x5, 0x0) setresgid$auto(r2, 0x0, 0x0) keyctl$auto_KEY_SPEC_GROUP_KEYRING(0x0, r0, r1, r2, 0xfffffffffffffffa) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2b, 0x806, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x22, 0x6, 0x8000000000000000, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) getsockopt$auto(0x3, 0x200000000001, 0x11, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x0, 0x483, 0x0, 0x0) mmap$auto(0x0, 0x9, 0x5, 0x9b72, 0x2, 0x8000000000008000) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000240)="384b0985a4bc87428e21939b1af47d760014f9c129f84f696c480091dd78c211379e8d7427854edb6907efc8d1b6181636fc1e6d4e0a9e137507a5d675099dc1dcc3764631ce78fc0e373bf23da574b15fb89bd279ac7f90e11f32320a99880eee3eddc8bc6dd5b247e72c71d064ee223d32c022269d2a70cedd3b47f4f21601e4cf4c895e26916d2f0cc305dcf0fb3c9c9d5e1a3775f1997ff98a6ae5a236f96b86", 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x6) bpf$auto(0x800000000000001f, 0xfffffffffffffffe, 0x0) 768.241222ms ago: executing program 3 (id=149): mmap$auto(0x7fb, 0x6, 0x10000002, 0x20eb3, 0xfffffffffffffffa, 0x8004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) futex$auto(&(0x7f0000000040)=0xce, 0x1, 0x101, &(0x7f00000000c0)={0xfff, 0x8}, &(0x7f0000000100)=0x8001, 0x5d33) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000001340)={0x0, 0xfffffffffffffe46, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01f325bd7000fedbdf25020000060004000900000000"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40010) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, 0x0, 0x0, 0x0, 0x0, 0x91e}, 0xe3c, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 600.275064ms ago: executing program 0 (id=151): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/4087, 0xff7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/12, 0xc) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r5 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) writev$auto(r5, &(0x7f00000035c0)={0x0, 0x4}, 0x9) fcntl$auto(r4, 0xfffffffd, 0x0) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x100110d, 0xfffd, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x6, 0x0, 0x4, @raw=0x404, @integer64={0x6, 0x8, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) brk$auto(0x8) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)='-7', 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) 503.341666ms ago: executing program 1 (id=152): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(r0, 0x0, 0x5) r1 = socket(0x2, 0x3, 0xc) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x156) execveat$auto(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1000) ioperm$auto(0x7, 0x6, 0x2) r2 = socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(r2, 0x10000000084, 0x80, 0x0, 0x8000008) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) socket(0x2b, 0xa, 0xfb) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x51f8, 0x5) r6 = socket(0x2b, 0x1, 0x1) socket(0x10, 0x2, 0x4) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) socket(0x2b, 0x1, 0x1002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x6, 0x6, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) 0s ago: executing program 2 (id=153): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0xb9}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x2, 0x5) getrandom$auto(0x0, 0x50436cfd, 0xffffffff) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x121c0, 0x0) mmap$auto(0x0, 0x810000, 0xffd, 0x8000000008011, 0x3, 0x8000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000080)=0x1) getrandom$auto(&(0x7f0000000140)='/dev/dvb/adapter0/frontend0\x00', 0x3, 0xae0f) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000180)={"236cf65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3c, 0x8000, 0x6, 0xff, 0x0}) prctl$auto(0x1000000003b, 0x3, r3, 0x8, 0x800007) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) stat$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x20499d, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x108000, 0x800034, 0x200000b) r4 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x103700, 0x0) read$auto(r4, 0x0, 0x4000000081) r5 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x4, 0x9, 0x7, 0x3c, 0x101, 0x1ffc0, 0x7, 0x6, 0x7fffffffffffffff, 0x0, 0x3, 0x6, 0x4, 0xb4, 0x8, 0x2, 0x10000, 0x800, 0x7, 0x0, 0x7, 0x7, 0x200, 0x4, 0x84, [0x0, 0x7, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x401, 0x6, 0x70624ce7, 0x0, 0x4, 0xb, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x400000000005b8, 0x100000000c, 0x0, 0x800, 0x0, 0x7, 0x2, 0xfc78, 0x8000000000008, 0x4, 0x200000000009, 0xa38, 0x4, 0xffffffffffffffff, 0x3, 0x2, 0x4000000001, 0x0, 0x4, 0xffff]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): DUID 00:04:e5:b9:bd:83:1b:63:dd:80:34:04:a5:02:ca:2e:cd:49 forked to background, child pid 5500 [ 57.668841][ T5501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.679468][ T5501] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 73.148524][ T5697] sshd (5697) used greatest stack depth: 20480 bytes left Warning: Permanently added '10.128.10.8' (ED25519) to the list of known hosts. [ 83.008382][ T5827] cgroup: Unknown subsys name 'net' [ 83.138894][ T5827] cgroup: Unknown subsys name 'cpuset' [ 83.147488][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.796569][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.955172][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.964926][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.977477][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.985247][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.002574][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.010718][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.019333][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.025623][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.031152][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.041432][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.042289][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.050964][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.055658][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.063444][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.077443][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.086195][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.101072][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.108572][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.116124][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.127510][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.135317][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.143453][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.155036][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.163396][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.563243][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 87.598688][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 87.623818][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 87.719645][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 87.790491][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.798982][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.806882][ T5836] bridge_slave_0: entered allmulticast mode [ 87.813744][ T5836] bridge_slave_0: entered promiscuous mode [ 87.851323][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.858703][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.866413][ T5836] bridge_slave_1: entered allmulticast mode [ 87.873204][ T5836] bridge_slave_1: entered promiscuous mode [ 87.907443][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.914654][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.922919][ T5838] bridge_slave_0: entered allmulticast mode [ 87.929870][ T5838] bridge_slave_0: entered promiscuous mode [ 87.970860][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.978237][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.985717][ T5838] bridge_slave_1: entered allmulticast mode [ 87.992546][ T5838] bridge_slave_1: entered promiscuous mode [ 88.011550][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.023634][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.030953][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.038733][ T5837] bridge_slave_0: entered allmulticast mode [ 88.046434][ T5837] bridge_slave_0: entered promiscuous mode [ 88.072036][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.081498][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.089121][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.096571][ T5837] bridge_slave_1: entered allmulticast mode [ 88.103262][ T5837] bridge_slave_1: entered promiscuous mode [ 88.121193][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.158424][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.165939][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.173595][ T5839] bridge_slave_0: entered allmulticast mode [ 88.180633][ T5839] bridge_slave_0: entered promiscuous mode [ 88.191798][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.221744][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.231186][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.238909][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.246702][ T5839] bridge_slave_1: entered allmulticast mode [ 88.253487][ T5839] bridge_slave_1: entered promiscuous mode [ 88.280800][ T5836] team0: Port device team_slave_0 added [ 88.289480][ T5836] team0: Port device team_slave_1 added [ 88.297279][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.319061][ T5838] team0: Port device team_slave_0 added [ 88.327964][ T5838] team0: Port device team_slave_1 added [ 88.362137][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.393294][ T5837] team0: Port device team_slave_0 added [ 88.403737][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.430489][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.437838][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.463905][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.477232][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.484228][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.510216][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.523544][ T5837] team0: Port device team_slave_1 added [ 88.549719][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.556814][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.583042][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.595388][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.602409][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.629250][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.659060][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.666150][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.692272][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.710187][ T5839] team0: Port device team_slave_0 added [ 88.728491][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.735673][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.761840][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.786491][ T5839] team0: Port device team_slave_1 added [ 88.868276][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.875369][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.901488][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.916573][ T5836] hsr_slave_0: entered promiscuous mode [ 88.922965][ T5836] hsr_slave_1: entered promiscuous mode [ 88.944237][ T5838] hsr_slave_0: entered promiscuous mode [ 88.950736][ T5838] hsr_slave_1: entered promiscuous mode [ 88.957281][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.965368][ T5838] Cannot create hsr debugfs directory [ 88.974492][ T5837] hsr_slave_0: entered promiscuous mode [ 88.981447][ T5837] hsr_slave_1: entered promiscuous mode [ 88.987692][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.995559][ T5837] Cannot create hsr debugfs directory [ 89.001604][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.009013][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.035541][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.150250][ T5839] hsr_slave_0: entered promiscuous mode [ 89.157364][ T5839] hsr_slave_1: entered promiscuous mode [ 89.163498][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.172172][ T5841] Bluetooth: hci2: command tx timeout [ 89.173144][ T5839] Cannot create hsr debugfs directory [ 89.183457][ T55] Bluetooth: hci1: command tx timeout [ 89.245151][ T55] Bluetooth: hci0: command tx timeout [ 89.254830][ T55] Bluetooth: hci3: command tx timeout [ 89.452973][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.476884][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.494130][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.511714][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.539407][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.560943][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.574502][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.586982][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.671648][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.699184][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.731372][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.741137][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.774566][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.803084][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.813550][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.825632][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.909360][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.950384][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.986778][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.011525][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.022341][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.029683][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.046421][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.053562][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.088312][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.098797][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.106640][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.123197][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.130416][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.155559][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.185551][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.230215][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.237385][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.251754][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.266801][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.273931][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.286878][ T759] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.294031][ T759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.323588][ T759] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.330753][ T759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.398144][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.749585][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.798257][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.897552][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.909115][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.918603][ T5837] veth0_vlan: entered promiscuous mode [ 90.953727][ T5837] veth1_vlan: entered promiscuous mode [ 90.979386][ T5836] veth0_vlan: entered promiscuous mode [ 91.027088][ T5838] veth0_vlan: entered promiscuous mode [ 91.034448][ T5836] veth1_vlan: entered promiscuous mode [ 91.063348][ T5837] veth0_macvtap: entered promiscuous mode [ 91.071870][ T5839] veth0_vlan: entered promiscuous mode [ 91.088897][ T5837] veth1_macvtap: entered promiscuous mode [ 91.097931][ T5839] veth1_vlan: entered promiscuous mode [ 91.106341][ T5838] veth1_vlan: entered promiscuous mode [ 91.159707][ T5836] veth0_macvtap: entered promiscuous mode [ 91.180872][ T5838] veth0_macvtap: entered promiscuous mode [ 91.191318][ T5838] veth1_macvtap: entered promiscuous mode [ 91.204547][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.213669][ T5836] veth1_macvtap: entered promiscuous mode [ 91.233510][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.245333][ T55] Bluetooth: hci1: command tx timeout [ 91.245375][ T5841] Bluetooth: hci2: command tx timeout [ 91.273103][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.282361][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.292584][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.301841][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.319335][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.330964][ T5841] Bluetooth: hci3: command tx timeout [ 91.333913][ T55] Bluetooth: hci0: command tx timeout [ 91.339800][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.353199][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.378714][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.390561][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.401069][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.414602][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.427097][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.435359][ T5839] veth0_macvtap: entered promiscuous mode [ 91.450171][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.464549][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.478954][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.491093][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.501611][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.511610][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.522204][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.534065][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.550228][ T5839] veth1_macvtap: entered promiscuous mode [ 91.559095][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.568881][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.578198][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.587083][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.616440][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.626408][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.635718][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.644465][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.690589][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.701264][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.713662][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.724333][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.735607][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.746344][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.757638][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.798522][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.809484][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.821534][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.832159][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.842156][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.852638][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.863691][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.878418][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.902568][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.912603][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.926300][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.935305][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.944072][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.008883][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.018792][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.080364][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.088444][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.168031][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.205482][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.205749][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.301062][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.328065][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.406872][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.427882][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.444257][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.474807][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.557767][ T5903] Zero length message leads to an empty skb [ 92.591637][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.644747][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.848716][ T5909] [U] erofs [ 92.852250][ T5909] [U] [ 92.855012][ T5909] [U] [ 92.857747][ T5909] [U] [ 92.895625][ T5909] [U] [ 92.898416][ T5909] [U] [ 92.901164][ T5909] [U] [ 92.903920][ T5909] [U] [ 92.956362][ T5909] [U] [ 92.959160][ T5909] [U] [ 92.961916][ T5909] [U] [ 92.964673][ T5909] [U] [ 93.012585][ T5909] [U] [ 93.015403][ T5909] [U] [ 93.018169][ T5909] [U] [ 93.020938][ T5909] [U] [ 93.070731][ T5910] block nbd0: not configured, cannot reconfigure [ 93.093796][ T5912] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.115646][ T5909] [U] [ 93.118436][ T5909] [U] [ 93.121164][ T5909] [U] [ 93.123891][ T5909] [U] [ 93.145238][ T5909] [U] [ 93.148018][ T5909] [U] [ 93.150749][ T5909] [U] [ 93.153473][ T5909] [U] [ 93.185394][ T5909] [U] [ 93.188189][ T5909] [U] [ 93.190946][ T5909] [U] [ 93.193698][ T5909] [U] [ 93.217633][ T5909] [U] [ 93.220419][ T5909] [U] [ 93.223178][ T5909] [U] [ 93.225932][ T5909] [U] [ 93.255179][ T5909] [U] [ 93.257970][ T5909] [U] [ 93.260722][ T5909] [U] [ 93.263475][ T5909] [U] [ 93.288516][ T5909] [U] [ 93.291313][ T5909] [U] [ 93.294060][ T5909] [U] [ 93.296810][ T5909] [U] [ 93.325621][ T55] Bluetooth: hci2: command tx timeout [ 93.326379][ T5841] Bluetooth: hci1: command tx timeout [ 93.335743][ T5909] [U] [ 93.339196][ T5909] [U] [ 93.341940][ T5909] [U] [ 93.344689][ T5909] [U] [ 93.385197][ T5909] [U] [ 93.387988][ T5909] [U] [ 93.390740][ T5909] [U] [ 93.393494][ T5909] [U] [ 93.405567][ T5841] Bluetooth: hci0: command tx timeout [ 93.405579][ T55] Bluetooth: hci3: command tx timeout [ 93.428909][ T5909] [U] [ 93.431706][ T5909] [U] [ 93.434451][ T5909] [U] [ 93.437180][ T5909] [U] [ 93.485158][ T5909] [U] [ 93.487966][ T5909] [U] [ 93.490726][ T5909] [U] [ 93.493480][ T5909] [U] [ 93.515811][ T5914] FAULT_INJECTION: forcing a failure. [ 93.515811][ T5914] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 93.540271][ T5909] [U] [ 93.543051][ T5909] [U] [ 93.545780][ T5909] [U] [ 93.548503][ T5909] [U] [ 93.577493][ T5909] [U] [ 93.580294][ T5909] [U] [ 93.583053][ T5909] [U] [ 93.583358][ T5914] CPU: 0 UID: 0 PID: 5914 Comm: syz.0.1 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 93.583402][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.583431][ T5914] Call Trace: [ 93.583441][ T5914] [ 93.583454][ T5914] dump_stack_lvl+0x16c/0x1f0 [ 93.583518][ T5914] should_fail_ex+0x50a/0x650 [ 93.583557][ T5914] ? __pfx___might_resched+0x10/0x10 [ 93.583621][ T5914] should_fail_alloc_page+0xe7/0x130 [ 93.583658][ T5914] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 93.583715][ T5914] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 93.583793][ T5914] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 93.583854][ T5914] ? hlock_class+0x4e/0x130 [ 93.583890][ T5914] ? __lock_acquire+0x15a9/0x3c40 [ 93.583951][ T5914] ? hlock_class+0x4e/0x130 [ 93.583987][ T5914] ? mark_lock+0xb5/0xc60 [ 93.584032][ T5914] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 93.584090][ T5914] ? policy_nodemask+0xea/0x4e0 [ 93.584127][ T5914] alloc_pages_mpol+0x1fc/0x540 [ 93.584162][ T5914] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 93.584200][ T5914] ? find_held_lock+0x2d/0x110 [ 93.584241][ T5914] alloc_pages_noprof+0x131/0x390 [ 93.584276][ T5914] pte_alloc_one+0x20/0x390 [ 93.584330][ T5914] __pte_alloc+0x6e/0x3d0 [ 93.584371][ T5914] ? __pfx___pte_alloc+0x10/0x10 [ 93.584412][ T5914] ? __pfx___might_resched+0x10/0x10 [ 93.584475][ T5914] copy_page_range+0x3661/0x55e0 [ 93.584577][ T5914] ? __pfx_copy_page_range+0x10/0x10 [ 93.584626][ T5914] ? find_held_lock+0x2d/0x110 [ 93.584677][ T5914] ? __pfx_lock_release+0x10/0x10 [ 93.584725][ T5914] ? lock_acquire+0x2f/0xb0 [ 93.584772][ T5914] ? copy_process+0x7c12/0x8c50 [ 93.584812][ T5914] ? down_write+0x14e/0x200 [ 93.584872][ T5914] ? up_write+0x1b2/0x520 [ 93.584936][ T5914] copy_process+0x7ccb/0x8c50 [ 93.585001][ T5914] ? __pfx_copy_process+0x10/0x10 [ 93.585031][ T5914] ? __pfx___futex_wait+0x10/0x10 [ 93.585084][ T5914] ? try_to_wake_up+0x158/0x1490 [ 93.585165][ T5914] kernel_clone+0xfd/0x960 [ 93.585202][ T5914] ? __pfx_kernel_clone+0x10/0x10 [ 93.585258][ T5914] ? 0xffffffffff600000 [ 93.585282][ T5914] __do_sys_clone+0xcf/0x120 [ 93.585316][ T5914] ? __pfx___do_sys_clone+0x10/0x10 [ 93.585353][ T5914] ? 0xffffffffff600000 [ 93.585393][ T5914] ? rcu_is_watching+0x12/0xc0 [ 93.585444][ T5914] do_syscall_64+0xcd/0x250 [ 93.585499][ T5914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.585554][ T5914] RIP: 0033:0x7f05f878d169 [ 93.585580][ T5914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.585619][ T5914] RSP: 002b:00007f05f956d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 93.585650][ T5914] RAX: ffffffffffffffda RBX: 00007f05f89a5fa0 RCX: 00007f05f878d169 [ 93.585674][ T5914] RDX: ffffffffffffffff RSI: 0000000000000005 RDI: 0000000000000009 [ 93.585695][ T5914] RBP: 00007f05f880e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 93.585716][ T5914] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 93.585737][ T5914] R13: 0000000000000000 R14: 00007f05f89a5fa0 R15: 00007ffce58917e8 [ 93.585765][ T5914] ? 0xffffffffff600000 [ 93.585803][ T5914] [ 93.898831][ T5909] [U] [ 93.999142][ T5909] [U] [ 94.002036][ T5909] [U] [ 94.004794][ T5909] [U] [ 94.007545][ T5909] [U] [ 94.098018][ T5909] [U] [ 94.100813][ T5909] [U] [ 94.103569][ T5909] [U] [ 94.106333][ T5909] [U] [ 94.178489][ T5909] [U] [ 94.181305][ T5909] [U] [ 94.184065][ T5909] [U] [ 94.186832][ T5909] [U] [ 94.190803][ T5909] [U] [ 95.026674][ T5927] process 'syz.3.7' launched ':,' with NULL argv: empty string added [ 95.404935][ T55] Bluetooth: hci1: command tx timeout [ 95.404958][ T5841] Bluetooth: hci2: command tx timeout [ 95.485528][ T5841] Bluetooth: hci0: command tx timeout [ 95.487716][ T55] Bluetooth: hci3: command tx timeout [ 96.197062][ T5946] : renamed from gre0 (while UP) [ 97.263399][ T979] cfg80211: failed to load regulatory.db [ 97.473515][ T5964] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.554915][ T5964] ima: policy update failed [ 97.571912][ T31] audit: type=1802 audit(6037418527.472:2): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 98.255332][ T5975] Invalid ELF header magic: != ELF [ 99.754998][ T5994] capability: warning: `syz.0.20' uses 32-bit capabilities (legacy support in use) [ 99.903934][ T5991] db_root: cannot open: 00000000000000 A fixed_percpu_data [ 99.903934][ T5991] 0000000000000000 A __per_cpu_start [ 99.903934][ T5991] 0000000000001000 A cpu_debug_store [ 99.903934][ T5991] 0000000000002000 A irq_stack_backing_store [ 99.903934][ T5991] 000000000000a000 A cpu_tss_rw [ 99.903934][ T5991] 000000000000f000 A gdt_page [ 99.903934][ T5991] 0000000000010000 A exception_stacks [ 99.903934][ T5991] 0000000000020000 A entry_stack_storage [ 99.903934][ T5991] 0000000000021000 A espfix_waddr [ 99.903934][ T5991] 0000000000021008 A espfix_stack [ 99.903934][ T5991] 0000000000021010 A cpu_l2c_shared_map [ 99.903934][ T5991] 0000000000021018 A cpu_llc_shared_map [ 99.903934][ T5991] 0000000000021020 A cpu_info [ 99.903934][ T5991] 0000000000021170 A x86_cpu_to_acpiid [ 99.903934][ T5991] 0000000000021174 A x86_cpu_to_apicid [ 99.903934][ T5991] 0000000000021180 A amd_dr_addr_mask [ 99.903934][ T5991] 00000000000211a0 A mce_banks_array [ 99.903934][ T5991] 00000000000215a0 A mce_num_banks [ 99.903934][ T5991] 00000000000215c0 A smca_bank_counts [ 99.903934][ T5991] 0000000000021600 A smca_banks [ 99.903934][ T5991] 0000000000021a00 A cpu_die_map [ 99.903934][ T5991] 0000000000021a08 A cpu_core_map [ 99.903934][ T5991] 0000000000021a10 A cpu_sibling_map [ 99.903934][ T5991] 0000000000021a18 A this_cpu_off [ 99.903934][ T5991] 0000000000021a20 A cluster_masks [ 99.903934][ T5991] 0000000000021a28 A async_pf_enabled [ 99.903934][ T5991] 0000000000021a2c A sched_core_priority [ 99.903934][ T5991] 0000000000021a30 A _cea_offset [ 99.903934][ T5991] 0000000000022000 A kstack_offset [ 99.903934][ T5991] 0000 [ 100.317590][ T5989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.205502][ T6019] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.211899][ T6019] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.337492][ T6019] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.409318][ T6019] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.417156][ T6019] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.524946][ T6019] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.613525][ T6019] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.637425][ T6019] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.689510][ T6019] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.788274][ T6019] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.794338][ T6019] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.018364][ T6019] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.402476][ T6030] netlink: 186 bytes leftover after parsing attributes in process `syz.3.27'. [ 104.130161][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.188495][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 104.445038][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.684896][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.853491][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.207726][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.526470][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.764933][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.925212][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.285082][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.605883][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.845043][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.005897][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.388876][ T6077] FAULT_INJECTION: forcing a failure. [ 109.388876][ T6077] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 109.402628][ T6077] CPU: 0 UID: 0 PID: 6077 Comm: syz.1.36 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 109.402667][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.402686][ T6077] Call Trace: [ 109.402695][ T6077] [ 109.402707][ T6077] dump_stack_lvl+0x16c/0x1f0 [ 109.402760][ T6077] should_fail_ex+0x50a/0x650 [ 109.402787][ T6077] ? __pfx___might_resched+0x10/0x10 [ 109.402840][ T6077] should_fail_alloc_page+0xe7/0x130 [ 109.402875][ T6077] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 109.402925][ T6077] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 109.402985][ T6077] ? hlock_class+0x4e/0x130 [ 109.403024][ T6077] ? hlock_class+0x4e/0x130 [ 109.403056][ T6077] ? __lock_acquire+0xcc5/0x3c40 [ 109.403103][ T6077] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 109.403169][ T6077] ? __pfx___lock_acquire+0x10/0x10 [ 109.403234][ T6077] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.403286][ T6077] ? policy_nodemask+0xea/0x4e0 [ 109.403319][ T6077] alloc_pages_mpol+0x1fc/0x540 [ 109.403351][ T6077] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 109.403383][ T6077] ? xas_load+0x49/0x5b0 [ 109.403427][ T6077] ? filemap_get_entry+0xd0/0x3c0 [ 109.403474][ T6077] folio_alloc_noprof+0x20/0x2d0 [ 109.403511][ T6077] filemap_alloc_folio_noprof+0x39b/0x470 [ 109.403547][ T6077] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 109.403583][ T6077] ? find_held_lock+0x2d/0x110 [ 109.403622][ T6077] __filemap_get_folio+0x5e9/0xc10 [ 109.403673][ T6077] iomap_write_begin+0x693/0x1660 [ 109.403707][ T6077] ? __mark_inode_dirty+0x2a5/0xe50 [ 109.403746][ T6077] ? mark_buffer_dirty+0x397/0x420 [ 109.403794][ T6077] ? __pfx_iomap_write_begin+0x10/0x10 [ 109.403827][ T6077] ? fault_in_readable+0x1a7/0x200 [ 109.403869][ T6077] ? __pfx_fault_in_readable+0x10/0x10 [ 109.403913][ T6077] ? I_BDEV+0xd/0x20 [ 109.403942][ T6077] ? inode_to_bdi+0x9e/0x160 [ 109.403995][ T6077] iomap_file_buffered_write+0x419/0xc70 [ 109.404049][ T6077] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 109.404087][ T6077] ? find_held_lock+0x2d/0x110 [ 109.404123][ T6077] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 109.404194][ T6077] ? preempt_count_add+0x76/0x150 [ 109.404238][ T6077] ? mnt_put_write_access_file+0xc1/0xf0 [ 109.404293][ T6077] blkdev_write_iter+0x574/0xdd0 [ 109.404345][ T6077] vfs_write+0x5ae/0x1150 [ 109.404392][ T6077] ? __pfx_blkdev_write_iter+0x10/0x10 [ 109.404443][ T6077] ? __pfx_vfs_write+0x10/0x10 [ 109.404487][ T6077] ? do_futex+0x123/0x350 [ 109.404530][ T6077] ? __fget_files+0x40/0x3a0 [ 109.404597][ T6077] ksys_write+0x12b/0x250 [ 109.404643][ T6077] ? __pfx_ksys_write+0x10/0x10 [ 109.404703][ T6077] do_syscall_64+0xcd/0x250 [ 109.404754][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.404798][ T6077] RIP: 0033:0x7fdccab8d169 [ 109.404822][ T6077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.404853][ T6077] RSP: 002b:00007fdccbaca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.404882][ T6077] RAX: ffffffffffffffda RBX: 00007fdccada5fa0 RCX: 00007fdccab8d169 [ 109.404904][ T6077] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 109.404922][ T6077] RBP: 00007fdccac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.404939][ T6077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.404957][ T6077] R13: 0000000000000000 R14: 00007fdccada5fa0 R15: 00007ffe6acdc558 [ 109.404995][ T6077] [ 110.139423][ T6099] tty tty46: ldisc open failed (-12), clearing slot 45 [ 110.170680][ T6100] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 110.668687][ T31] audit: type=1800 audit(6037418540.582:3): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.42" name="members" dev="configfs" ino=9578 res=0 errno=0 [ 111.085582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.390949][ T6122] usb usb24: check_ctrlrecip: process 6122 (syz.0.45) requesting ep 01 but needs 81 [ 111.420205][ T6122] usb usb24: usbfs: process 6122 (syz.0.45) did not claim interface 0 before use [ 111.480446][ T6126] ======================================================= [ 111.480446][ T6126] WARNING: The mand mount option has been deprecated and [ 111.480446][ T6126] and is ignored by this kernel. Remove the mand [ 111.480446][ T6126] option from the mount to silence this warning. [ 111.480446][ T6126] ======================================================= [ 111.515406][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.787665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.062789][ T6143] FAULT_INJECTION: forcing a failure. [ 113.062789][ T6143] name failslab, interval 1, probability 0, space 0, times 0 [ 113.114818][ T6143] CPU: 0 UID: 0 PID: 6143 Comm: syz.0.50 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 113.114863][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.114882][ T6143] Call Trace: [ 113.114891][ T6143] [ 113.114903][ T6143] dump_stack_lvl+0x16c/0x1f0 [ 113.114956][ T6143] should_fail_ex+0x50a/0x650 [ 113.114987][ T6143] ? fs_reclaim_acquire+0xae/0x150 [ 113.115031][ T6143] ? snd_pcm_plugin_build+0x434/0x650 [ 113.115075][ T6143] should_failslab+0xc2/0x120 [ 113.115106][ T6143] __kmalloc_noprof+0xcb/0x510 [ 113.115157][ T6143] ? snd_pcm_hw_params+0x81/0x1b20 [ 113.115217][ T6143] snd_pcm_plugin_build+0x434/0x650 [ 113.115267][ T6143] snd_pcm_plugin_build_io+0x208/0x5f0 [ 113.115314][ T6143] ? __pfx_snd_pcm_plugin_build_io+0x10/0x10 [ 113.115362][ T6143] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 113.115415][ T6143] snd_pcm_oss_change_params_locked+0x2f08/0x3a60 [ 113.115474][ T6143] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 113.115544][ T6143] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 113.115591][ T6143] snd_pcm_oss_ioctl+0x21d5/0x3780 [ 113.115634][ T6143] ? __pfx___might_resched+0x10/0x10 [ 113.115686][ T6143] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 113.115733][ T6143] ? __fget_files+0x206/0x3a0 [ 113.115786][ T6143] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 113.115831][ T6143] __x64_sys_ioctl+0x190/0x200 [ 113.115875][ T6143] do_syscall_64+0xcd/0x250 [ 113.115928][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.115977][ T6143] RIP: 0033:0x7f05f878d169 [ 113.116003][ T6143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.116032][ T6143] RSP: 002b:00007f05f956d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.116064][ T6143] RAX: ffffffffffffffda RBX: 00007f05f89a5fa0 RCX: 00007f05f878d169 [ 113.116085][ T6143] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 000000000000000c [ 113.116102][ T6143] RBP: 00007f05f880e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 113.116121][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.116139][ T6143] R13: 0000000000000000 R14: 00007f05f89a5fa0 R15: 00007ffce58917e8 [ 113.116191][ T6143] [ 114.643730][ T6172] openvswitch: netlink: IP tunnel dst address not specified [ 115.782248][ T6183] FAULT_INJECTION: forcing a failure. [ 115.782248][ T6183] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 115.796148][ T6183] CPU: 0 UID: 0 PID: 6183 Comm: syz.0.57 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 115.796186][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.796202][ T6183] Call Trace: [ 115.796212][ T6183] [ 115.796223][ T6183] dump_stack_lvl+0x16c/0x1f0 [ 115.796274][ T6183] should_fail_ex+0x50a/0x650 [ 115.796303][ T6183] ? __pfx___might_resched+0x10/0x10 [ 115.796360][ T6183] should_fail_alloc_page+0xe7/0x130 [ 115.796394][ T6183] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 115.796445][ T6183] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 115.796499][ T6183] ? save_trace+0x53/0xb60 [ 115.796539][ T6183] ? add_lock_to_list+0x17d/0x390 [ 115.796582][ T6183] ? hlock_class+0x4e/0x130 [ 115.796615][ T6183] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 115.796674][ T6183] ? __pfx___lock_acquire+0x10/0x10 [ 115.796714][ T6183] ? add_lock_to_list+0x17d/0x390 [ 115.796757][ T6183] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.796802][ T6183] ? policy_nodemask+0xea/0x4e0 [ 115.796829][ T6183] alloc_pages_mpol+0x1fc/0x540 [ 115.796856][ T6183] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 115.796880][ T6183] ? __page_table_check_ptes_set+0x16b/0x3e0 [ 115.796925][ T6183] ? do_raw_spin_lock+0x12d/0x2c0 [ 115.796950][ T6183] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 115.796979][ T6183] alloc_pages_noprof+0x131/0x390 [ 115.797005][ T6183] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 115.797042][ T6183] get_free_pages_noprof+0xc/0x40 [ 115.797069][ T6183] kasan_populate_vmalloc_pte+0x2d/0x160 [ 115.797106][ T6183] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 115.797144][ T6183] __apply_to_page_range+0x5fd/0xd30 [ 115.797184][ T6183] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 115.797246][ T6183] ? __pfx___apply_to_page_range+0x10/0x10 [ 115.797285][ T6183] ? insert_vmap_area+0x2ef/0x4d0 [ 115.797319][ T6183] alloc_vmap_area+0x93e/0x2a60 [ 115.797364][ T6183] ? __pfx_alloc_vmap_area+0x10/0x10 [ 115.797406][ T6183] __get_vm_area_node+0x19e/0x2f0 [ 115.797447][ T6183] vmap+0x15a/0x350 [ 115.797479][ T6183] ? relay_open_buf.part.0+0x446/0xb90 [ 115.797517][ T6183] ? __pfx_vmap+0x10/0x10 [ 115.797559][ T6183] relay_open_buf.part.0+0x446/0xb90 [ 115.797608][ T6183] relay_open+0x653/0xad0 [ 115.797645][ T6183] ? debugfs_create_file_full+0x41/0x60 [ 115.797676][ T6183] do_blk_trace_setup+0x503/0xb50 [ 115.797709][ T6183] blk_trace_setup+0xee/0x1b0 [ 115.797750][ T6183] ? __pfx_blk_trace_setup+0x10/0x10 [ 115.797780][ T6183] ? __pfx_snprintf+0x10/0x10 [ 115.797835][ T6183] blk_trace_ioctl+0x147/0x280 [ 115.797866][ T6183] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 115.797901][ T6183] ? trace_lock_acquire+0x14e/0x1f0 [ 115.797930][ T6183] ? __fget_files+0x40/0x3a0 [ 115.797975][ T6183] blkdev_ioctl+0x109/0x6d0 [ 115.798005][ T6183] ? __pfx_blkdev_ioctl+0x10/0x10 [ 115.798031][ T6183] ? __fget_files+0x206/0x3a0 [ 115.798081][ T6183] ? __pfx_blkdev_ioctl+0x10/0x10 [ 115.798111][ T6183] __x64_sys_ioctl+0x190/0x200 [ 115.798147][ T6183] do_syscall_64+0xcd/0x250 [ 115.798191][ T6183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.798234][ T6183] RIP: 0033:0x7f05f878d169 [ 115.798255][ T6183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.798282][ T6183] RSP: 002b:00007f05f956d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.798307][ T6183] RAX: ffffffffffffffda RBX: 00007f05f89a5fa0 RCX: 00007f05f878d169 [ 115.798325][ T6183] RDX: 0000200000000180 RSI: 00000000c0481273 RDI: 0000000000000006 [ 115.798341][ T6183] RBP: 00007f05f880e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 115.798357][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.798372][ T6183] R13: 0000000000000000 R14: 00007f05f89a5fa0 R15: 00007ffce58917e8 [ 115.798404][ T6183] [ 116.420147][ T6184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.57'. [ 116.747286][ T6184] ipvlan1: entered promiscuous mode [ 117.505407][ T6191] FAULT_INJECTION: forcing a failure. [ 117.505407][ T6191] name failslab, interval 1, probability 0, space 0, times 0 [ 117.535458][ T6191] CPU: 1 UID: 0 PID: 6191 Comm: syz.0.60 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 117.535502][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.535520][ T6191] Call Trace: [ 117.535530][ T6191] [ 117.535542][ T6191] dump_stack_lvl+0x16c/0x1f0 [ 117.535596][ T6191] should_fail_ex+0x50a/0x650 [ 117.535639][ T6191] ? fs_reclaim_acquire+0xae/0x150 [ 117.535685][ T6191] ? apply_wqattrs_prepare+0x130/0xbd0 [ 117.535736][ T6191] should_failslab+0xc2/0x120 [ 117.535768][ T6191] __kmalloc_cache_noprof+0x68/0x410 [ 117.535824][ T6191] apply_wqattrs_prepare+0x130/0xbd0 [ 117.535876][ T6191] ? __alloc_workqueue+0x87c/0x1810 [ 117.535925][ T6191] apply_workqueue_attrs_locked+0x64/0xe0 [ 117.535979][ T6191] __alloc_workqueue+0xf34/0x1810 [ 117.536030][ T6191] alloc_workqueue+0xd3/0x200 [ 117.536075][ T6191] ? __pfx_alloc_workqueue+0x10/0x10 [ 117.536118][ T6191] ? rcu_is_watching+0x12/0xc0 [ 117.536153][ T6191] ? trace_kmalloc+0x2d/0xd0 [ 117.536189][ T6191] ? __kmalloc_noprof+0x23b/0x510 [ 117.536237][ T6191] ? __pfx_lock_release+0x10/0x10 [ 117.536282][ T6191] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.536339][ T6191] ieee80211_register_hw+0x1e3b/0x4060 [ 117.536400][ T6191] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 117.536446][ T6191] ? net_generic+0xea/0x2a0 [ 117.536489][ T6191] ? lockdep_init_map_type+0x16d/0x7d0 [ 117.536540][ T6191] ? __asan_memset+0x23/0x50 [ 117.536582][ T6191] ? __hrtimer_init+0x106/0x2c0 [ 117.536645][ T6191] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 117.536720][ T6191] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 117.536794][ T6191] hwsim_new_radio_nl+0xb42/0x12b0 [ 117.536846][ T6191] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 117.536909][ T6191] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 117.536945][ T6191] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 117.536989][ T6191] genl_family_rcv_msg_doit+0x202/0x2f0 [ 117.537025][ T6191] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 117.537058][ T6191] ? trace_cap_capable+0x1a2/0x210 [ 117.537111][ T6191] ? bpf_lsm_capable+0x9/0x10 [ 117.537144][ T6191] ? security_capable+0x7e/0x260 [ 117.537177][ T6191] ? ns_capable+0xd7/0x110 [ 117.537227][ T6191] genl_rcv_msg+0x565/0x800 [ 117.537263][ T6191] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.537295][ T6191] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 117.537358][ T6191] netlink_rcv_skb+0x16b/0x440 [ 117.537406][ T6191] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.537442][ T6191] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.537507][ T6191] ? down_read+0xc9/0x330 [ 117.537557][ T6191] ? __pfx_down_read+0x10/0x10 [ 117.537607][ T6191] ? netlink_deliver_tap+0x1ae/0xd30 [ 117.537667][ T6191] genl_rcv+0x28/0x40 [ 117.537693][ T6191] netlink_unicast+0x53c/0x7f0 [ 117.537745][ T6191] ? __pfx_netlink_unicast+0x10/0x10 [ 117.537793][ T6191] ? __phys_addr_symbol+0x30/0x80 [ 117.537824][ T6191] ? __check_object_size+0x488/0x710 [ 117.537862][ T6191] netlink_sendmsg+0x8b8/0xd70 [ 117.537919][ T6191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.537984][ T6191] ____sys_sendmsg+0xaaf/0xc90 [ 117.538024][ T6191] ? copy_msghdr_from_user+0x10b/0x160 [ 117.538075][ T6191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.538134][ T6191] ___sys_sendmsg+0x135/0x1e0 [ 117.538188][ T6191] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.538257][ T6191] ? __pfx_lock_release+0x10/0x10 [ 117.538298][ T6191] ? trace_lock_acquire+0x14e/0x1f0 [ 117.538367][ T6191] ? __fget_files+0x206/0x3a0 [ 117.538425][ T6191] __sys_sendmsg+0x16e/0x220 [ 117.538457][ T6191] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.538509][ T6191] ? __x64_sys_futex+0x1e1/0x4c0 [ 117.538584][ T6191] do_syscall_64+0xcd/0x250 [ 117.538646][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.538689][ T6191] RIP: 0033:0x7f05f878d169 [ 117.538714][ T6191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.538743][ T6191] RSP: 002b:00007f05f956d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.538774][ T6191] RAX: ffffffffffffffda RBX: 00007f05f89a5fa0 RCX: 00007f05f878d169 [ 117.538793][ T6191] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000006 [ 117.538811][ T6191] RBP: 00007f05f880e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 117.538828][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.538845][ T6191] R13: 0000000000000000 R14: 00007f05f89a5fa0 R15: 00007ffce58917e8 [ 117.538883][ T6191] [ 117.976371][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.455992][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.63'. [ 118.554888][ T31] audit: type=1800 audit(6037418556.466:4): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.63" name="dbroot" dev="configfs" ino=9956 res=0 errno=0 [ 118.586157][ T6206] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 119.637512][ T6219] netlink: 354 bytes leftover after parsing attributes in process `syz.1.67'. [ 121.580605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #148!!! [ 121.591044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.913105][ T6216] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.931793][ T6216] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.939913][ T6216] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.947061][ T6216] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.355609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.497535][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 122.536580][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.245816][ T6276] vivid-003: ================= START STATUS ================= [ 123.254102][ T6276] vivid-003: Radio HW Seek Mode: Bounded [ 123.275683][ T6276] vivid-003: Radio Programmable HW Seek: false [ 123.281945][ T6276] vivid-003: RDS Rx I/O Mode: Block I/O [ 123.325750][ T6276] vivid-003: Generate RBDS Instead of RDS: false [ 123.392312][ T6276] vivid-003: RDS Reception: true [ 123.397444][ T6276] vivid-003: RDS Program Type: 0 inactive [ 123.403361][ T6276] vivid-003: RDS PS Name: inactive [ 123.413473][ T6276] vivid-003: RDS Radio Text: inactive [ 123.434705][ T6276] vivid-003: RDS Traffic Announcement: false inactive [ 123.441586][ T6276] vivid-003: RDS Traffic Program: false inactive [ 123.454864][ T6276] vivid-003: RDS Music: false inactive [ 123.460453][ T6276] vivid-003: ================== END STATUS ================== [ 123.972009][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.972159][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.979787][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.093102][ T6284] mmap: syz.1.76 (6284) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.345925][ T6312] Invalid ELF header magic: != ELF [ 126.607987][ T26] smpboot: CPU 0 is now offline [ 129.220617][ T6358] zero sized request [ 130.627170][ T6369] FAULT_INJECTION: forcing a failure. [ 130.627170][ T6369] name failslab, interval 1, probability 0, space 0, times 0 [ 130.801579][ T6369] CPU: 1 UID: 0 PID: 6369 Comm: syz.3.91 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 130.801611][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.801624][ T6369] Call Trace: [ 130.801631][ T6369] [ 130.801639][ T6369] dump_stack_lvl+0x16c/0x1f0 [ 130.801677][ T6369] should_fail_ex+0x50a/0x650 [ 130.801699][ T6369] ? fs_reclaim_acquire+0xae/0x150 [ 130.801731][ T6369] should_failslab+0xc2/0x120 [ 130.801754][ T6369] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 130.801799][ T6369] ? devinet_init_net+0xc3/0x900 [ 130.801836][ T6369] ? __pfx_devinet_init_net+0x10/0x10 [ 130.801872][ T6369] kmemdup_noprof+0x29/0x60 [ 130.801901][ T6369] devinet_init_net+0xc3/0x900 [ 130.801938][ T6369] ? __pfx_devinet_init_net+0x10/0x10 [ 130.801974][ T6369] ops_init+0x1df/0x5f0 [ 130.802000][ T6369] setup_net+0x21f/0x860 [ 130.802024][ T6369] ? __pfx_setup_net+0x10/0x10 [ 130.802045][ T6369] ? down_read_killable+0xcc/0x380 [ 130.802083][ T6369] ? __pfx_down_read_killable+0x10/0x10 [ 130.802120][ T6369] ? __raw_spin_lock_init+0x3a/0x110 [ 130.802143][ T6369] ? debug_mutex_init+0x37/0x70 [ 130.802170][ T6369] copy_net_ns+0x2a6/0x5f0 [ 130.802198][ T6369] create_new_namespaces+0x3ea/0xad0 [ 130.802242][ T6369] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 130.802283][ T6369] ksys_unshare+0x45d/0xa40 [ 130.802307][ T6369] ? __pfx_ksys_unshare+0x10/0x10 [ 130.802333][ T6369] ? xfd_validate_state+0x5d/0x180 [ 130.802374][ T6369] __x64_sys_unshare+0x31/0x40 [ 130.802397][ T6369] do_syscall_64+0xcd/0x250 [ 130.802434][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.802467][ T6369] RIP: 0033:0x7ff724f8d169 [ 130.802484][ T6369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.802506][ T6369] RSP: 002b:00007ff725e94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 130.802526][ T6369] RAX: ffffffffffffffda RBX: 00007ff7251a6160 RCX: 00007ff724f8d169 [ 130.802541][ T6369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 130.802555][ T6369] RBP: 00007ff72500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 130.802568][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.802582][ T6369] R13: 0000000000000000 R14: 00007ff7251a6160 R15: 00007fff8b0ac2b8 [ 130.802608][ T6369] [ 131.036007][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.099731][ T6389] netlink: 342 bytes leftover after parsing attributes in process `syz.2.93'. [ 133.288762][ T6390] netlink: 342 bytes leftover after parsing attributes in process `syz.2.93'. [ 133.467620][ T6390] netlink: 342 bytes leftover after parsing attributes in process `syz.2.93'. [ 135.575133][ T6407] snd_virmidi snd_virmidi.0: control 3:51768:4:IAJ:0 is already present [ 137.373644][ T6434] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.408657][ T6434] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.462164][ T6434] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.514996][ T6434] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.520980][ T6434] CPU0 is offline. [ 138.235253][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.241782][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.768676][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.485004][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.491052][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.564871][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.399283][ T6514] FAULT_INJECTION: forcing a failure. [ 141.399283][ T6514] name failslab, interval 1, probability 0, space 0, times 0 [ 141.573465][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: syz.1.113 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 141.573496][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.573510][ T6514] Call Trace: [ 141.573517][ T6514] [ 141.573525][ T6514] dump_stack_lvl+0x16c/0x1f0 [ 141.573566][ T6514] should_fail_ex+0x50a/0x650 [ 141.573589][ T6514] ? fs_reclaim_acquire+0xae/0x150 [ 141.573621][ T6514] ? snd_seq_oss_timer_new+0x43/0x230 [ 141.573650][ T6514] should_failslab+0xc2/0x120 [ 141.573672][ T6514] __kmalloc_cache_noprof+0x68/0x410 [ 141.573713][ T6514] snd_seq_oss_timer_new+0x43/0x230 [ 141.573742][ T6514] snd_seq_oss_open+0x5ce/0xa20 [ 141.573775][ T6514] odev_open+0x6f/0x90 [ 141.573797][ T6514] ? __pfx_odev_open+0x10/0x10 [ 141.573821][ T6514] soundcore_open+0x409/0x580 [ 141.573847][ T6514] ? __pfx_soundcore_open+0x10/0x10 [ 141.573871][ T6514] chrdev_open+0x237/0x6a0 [ 141.573908][ T6514] ? __pfx_apparmor_file_open+0x10/0x10 [ 141.573941][ T6514] ? __pfx_chrdev_open+0x10/0x10 [ 141.573980][ T6514] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 141.574018][ T6514] do_dentry_open+0x735/0x1c40 [ 141.574060][ T6514] ? __pfx_chrdev_open+0x10/0x10 [ 141.574100][ T6514] ? inode_permission+0xdd/0x5f0 [ 141.574128][ T6514] vfs_open+0x82/0x3f0 [ 141.574150][ T6514] ? may_open+0x1f2/0x400 [ 141.574180][ T6514] path_openat+0x1e88/0x2d80 [ 141.574225][ T6514] ? __pfx_path_openat+0x10/0x10 [ 141.574261][ T6514] ? __pfx___lock_acquire+0x10/0x10 [ 141.574293][ T6514] ? lock_acquire.part.0+0x11b/0x380 [ 141.574327][ T6514] ? find_held_lock+0x2d/0x110 [ 141.574355][ T6514] do_filp_open+0x20c/0x470 [ 141.574391][ T6514] ? __pfx_do_filp_open+0x10/0x10 [ 141.574425][ T6514] ? find_held_lock+0x2d/0x110 [ 141.574468][ T6514] ? alloc_fd+0x41f/0x760 [ 141.574514][ T6514] do_sys_openat2+0x17a/0x1e0 [ 141.574539][ T6514] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.574574][ T6514] __x64_sys_openat+0x175/0x210 [ 141.574600][ T6514] ? __pfx___x64_sys_openat+0x10/0x10 [ 141.574637][ T6514] do_syscall_64+0xcd/0x250 [ 141.574675][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.574709][ T6514] RIP: 0033:0x7fdccab8d169 [ 141.574726][ T6514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.574749][ T6514] RSP: 002b:00007fdccbaca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 141.574770][ T6514] RAX: ffffffffffffffda RBX: 00007fdccada5fa0 RCX: 00007fdccab8d169 [ 141.574786][ T6514] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 141.574801][ T6514] RBP: 00007fdccac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.574815][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.574829][ T6514] R13: 0000000000000000 R14: 00007fdccada5fa0 R15: 00007ffe6acdc558 [ 141.574857][ T6514] [ 142.304998][ T6537] openvswitch: netlink: IP tunnel dst address not specified [ 142.494381][ T6525] could not allocate digest TFM handle binfmt_misc [ 143.340001][ T6514] ALSA: seq_oss: can't alloc timer [ 145.838291][ T6545] netlink: 342 bytes leftover after parsing attributes in process `syz.3.118'. [ 145.899425][ T6545] netlink: 342 bytes leftover after parsing attributes in process `syz.3.118'. [ 146.015272][ T6545] netlink: 342 bytes leftover after parsing attributes in process `syz.3.118'. [ 148.941647][ T6605] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.252064][ T6625] Invalid ELF header magic: != ELF [ 152.849824][ T6654] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.905180][ T6654] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.985708][ T6654] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.991757][ T6654] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.053967][ T6654] CPU0 is offline. [ 154.924791][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.930843][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.004845][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.010907][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.145620][ T6695] openvswitch: netlink: IP tunnel dst address not specified [ 158.970422][ T6705] Invalid ELF header magic: != ELF [ 160.889310][ T6737] FAULT_INJECTION: forcing a failure. [ 160.889310][ T6737] name failslab, interval 1, probability 0, space 0, times 0 [ 160.943700][ T6727] FAULT_INJECTION: forcing a failure. [ 160.943700][ T6727] name failslab, interval 1, probability 0, space 0, times 0 [ 161.023476][ T6727] CPU: 1 UID: 0 PID: 6727 Comm: syz.1.152 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 161.023508][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.023521][ T6727] Call Trace: [ 161.023527][ T6727] [ 161.023536][ T6727] dump_stack_lvl+0x16c/0x1f0 [ 161.023575][ T6727] should_fail_ex+0x50a/0x650 [ 161.023596][ T6727] ? fs_reclaim_acquire+0xae/0x150 [ 161.023628][ T6727] ? constrain_params_by_rules+0x176/0xca0 [ 161.023658][ T6727] should_failslab+0xc2/0x120 [ 161.023680][ T6727] __kmalloc_noprof+0xcb/0x510 [ 161.023718][ T6727] ? kasan_quarantine_put+0x10a/0x240 [ 161.023751][ T6727] ? lockdep_hardirqs_on+0x7c/0x110 [ 161.023788][ T6727] constrain_params_by_rules+0x176/0xca0 [ 161.023819][ T6727] ? constrain_params_by_rules+0xa0e/0xca0 [ 161.023853][ T6727] ? constrain_params_by_rules+0xa13/0xca0 [ 161.023887][ T6727] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 161.023924][ T6727] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 161.023961][ T6727] ? snd_pcm_oss_change_params_locked+0x136c/0x3a60 [ 161.023991][ T6727] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 161.024022][ T6727] ? snd_interval_refine+0x2fa/0x580 [ 161.024063][ T6727] snd_pcm_hw_refine+0x7e8/0xad0 [ 161.024116][ T6727] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 161.024153][ T6727] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 161.024194][ T6727] snd_pcm_hw_param_first+0x328/0x6e0 [ 161.024229][ T6727] snd_pcm_hw_param_near.constprop.0+0x711/0x8f0 [ 161.024264][ T6727] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 161.024296][ T6727] ? calc_src_frames.isra.0+0x187/0x1d0 [ 161.024333][ T6727] snd_pcm_oss_change_params_locked+0x136c/0x3a60 [ 161.024376][ T6727] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 161.024428][ T6727] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 161.024463][ T6727] snd_pcm_oss_ioctl+0x21d5/0x3780 [ 161.024494][ T6727] ? __pfx___might_resched+0x10/0x10 [ 161.024534][ T6727] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 161.024568][ T6727] ? __fget_files+0x206/0x3a0 [ 161.024607][ T6727] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 161.024639][ T6727] __x64_sys_ioctl+0x190/0x200 [ 161.024674][ T6727] do_syscall_64+0xcd/0x250 [ 161.024717][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.024751][ T6727] RIP: 0033:0x7fdccab8d169 [ 161.024769][ T6727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.024791][ T6727] RSP: 002b:00007fdccbaca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.024813][ T6727] RAX: ffffffffffffffda RBX: 00007fdccada5fa0 RCX: 00007fdccab8d169 [ 161.024829][ T6727] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 000000000000000c [ 161.024843][ T6727] RBP: 00007fdccac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.024857][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.024871][ T6727] R13: 0000000000000000 R14: 00007fdccada5fa0 R15: 00007ffe6acdc558 [ 161.024899][ T6727] [ 161.323982][ T6741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.153'. [ 161.333181][ T6741] ipvlan1: entered promiscuous mode [ 161.383336][ T6737] CPU: 1 UID: 0 PID: 6737 Comm: syz.2.153 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 161.383370][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.383384][ T6737] Call Trace: [ 161.383391][ T6737] [ 161.383399][ T6737] dump_stack_lvl+0x16c/0x1f0 [ 161.383439][ T6737] should_fail_ex+0x50a/0x650 [ 161.383462][ T6737] ? fs_reclaim_acquire+0xae/0x150 [ 161.383494][ T6737] ? tracepoint_add_func+0x2a9/0xeb0 [ 161.383532][ T6737] should_failslab+0xc2/0x120 [ 161.383554][ T6737] __kmalloc_noprof+0xcb/0x510 [ 161.383590][ T6737] ? rcu_is_watching+0x12/0xc0 [ 161.383618][ T6737] ? __pfx_blk_add_trace_rq_insert+0x10/0x10 [ 161.383648][ T6737] tracepoint_add_func+0x2a9/0xeb0 [ 161.383694][ T6737] ? __pfx_blk_add_trace_rq_insert+0x10/0x10 [ 161.383730][ T6737] ? __pfx_blk_add_trace_rq_insert+0x10/0x10 [ 161.383771][ T6737] tracepoint_probe_register+0xc0/0x110 [ 161.383810][ T6737] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 161.383849][ T6737] ? __pfx_blk_add_trace_rq_insert+0x10/0x10 [ 161.383879][ T6737] ? relay_open+0x62e/0xad0 [ 161.383914][ T6737] blk_register_tracepoints+0x1b/0x3c0 [ 161.383953][ T6737] do_blk_trace_setup+0x933/0xb50 [ 161.383981][ T6737] blk_trace_setup+0xee/0x1b0 [ 161.384006][ T6737] ? __pfx_blk_trace_setup+0x10/0x10 [ 161.384031][ T6737] ? __pfx_snprintf+0x10/0x10 [ 161.384094][ T6737] blk_trace_ioctl+0x147/0x280 [ 161.384122][ T6737] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 161.384153][ T6737] ? trace_lock_acquire+0x14e/0x1f0 [ 161.384179][ T6737] ? __fget_files+0x40/0x3a0 [ 161.384219][ T6737] blkdev_ioctl+0x109/0x6d0 [ 161.384244][ T6737] ? __pfx_blkdev_ioctl+0x10/0x10 [ 161.384267][ T6737] ? __fget_files+0x206/0x3a0 [ 161.384305][ T6737] ? __pfx_blkdev_ioctl+0x10/0x10 [ 161.384331][ T6737] __x64_sys_ioctl+0x190/0x200 [ 161.384367][ T6737] do_syscall_64+0xcd/0x250 [ 161.384405][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.384440][ T6737] RIP: 0033:0x7ff95758d169 [ 161.384458][ T6737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.384480][ T6737] RSP: 002b:00007ff958448038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.384502][ T6737] RAX: ffffffffffffffda RBX: 00007ff9577a5fa0 RCX: 00007ff95758d169 [ 161.384517][ T6737] RDX: 0000200000000180 RSI: 00000000c0481273 RDI: 0000000000000006 [ 161.384532][ T6737] RBP: 00007ff95760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.384546][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.384559][ T6737] R13: 0000000000000000 R14: 00007ff9577a5fa0 R15: 00007fff259632d8 [ 161.384588][ T6737] [ 161.664287][ T6725] snd_aloop snd_aloop.0: control 16781581:65533:6:'x?F/zF˷fC:0 is already present [ 161.940634][ T6737] ------------[ cut here ]------------ [ 161.946443][ T6737] WARNING: CPU: 1 PID: 6737 at kernel/trace/blktrace.c:1083 blk_register_tracepoints+0x2dd/0x3c0 [ 161.957040][ T6737] Modules linked in: [ 161.961041][ T6737] CPU: 1 UID: 0 PID: 6737 Comm: syz.2.153 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 161.971829][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.982024][ T6737] RIP: 0010:blk_register_tracepoints+0x2dd/0x3c0 [ 161.988513][ T6737] Code: c7 c7 20 e9 4e 90 e8 92 2c fa ff 31 ff 89 c3 89 c6 e8 b7 2b f8 ff 85 db 0f 85 d8 00 00 00 5b e9 a9 30 f8 ff e8 a4 30 f8 ff 90 <0f> 0b 90 e9 49 fd ff ff e8 96 30 f8 ff 90 0f 0b 90 e9 68 fd ff ff [ 162.008325][ T6737] RSP: 0018:ffffc90004e7fc28 EFLAGS: 00010283 [ 162.014442][ T6737] RAX: 0000000000035f26 RBX: 00000000fffffff4 RCX: ffffc9000bf59000 [ 162.022688][ T6737] RDX: 0000000000080000 RSI: ffffffff81c1c1ac RDI: 0000000000000005 [ 162.031349][ T6737] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 162.039939][ T6737] R10: 00000000fffffff4 R11: 0000000000000000 R12: 00000000000000ff [ 162.048022][ T6737] R13: 0000000000002000 R14: ffff888143b5c050 R15: ffffc90004e7fcf4 [ 162.056086][ T6737] FS: 00007ff9584486c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 162.065274][ T6737] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.071888][ T6737] CR2: 0000001b30cb3ff8 CR3: 000000007bc72000 CR4: 00000000003526f0 [ 162.079943][ T6737] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 162.087986][ T6737] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 162.096036][ T6737] Call Trace: [ 162.099322][ T6737] [ 162.102274][ T6737] ? __warn+0xea/0x3c0 [ 162.106418][ T6737] ? blk_register_tracepoints+0x2dd/0x3c0 [ 162.112273][ T6737] ? report_bug+0x3c0/0x580 [ 162.116846][ T6737] ? handle_bug+0x54/0xa0 [ 162.121301][ T6737] ? exc_invalid_op+0x17/0x50 [ 162.126697][ T6737] ? asm_exc_invalid_op+0x1a/0x20 [ 162.131776][ T6737] ? blk_register_tracepoints+0x2dc/0x3c0 [ 162.138256][ T6737] ? blk_register_tracepoints+0x2dd/0x3c0 [ 162.144042][ T6737] ? blk_register_tracepoints+0x2dc/0x3c0 [ 162.149935][ T6737] do_blk_trace_setup+0x933/0xb50 [ 162.155035][ T6737] blk_trace_setup+0xee/0x1b0 [ 162.159733][ T6737] ? __pfx_blk_trace_setup+0x10/0x10 [ 162.165097][ T6737] ? __pfx_snprintf+0x10/0x10 [ 162.169824][ T6737] blk_trace_ioctl+0x147/0x280 [ 162.174603][ T6737] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 162.179993][ T6737] ? trace_lock_acquire+0x14e/0x1f0 [ 162.185266][ T6737] ? __fget_files+0x40/0x3a0 [ 162.189907][ T6737] blkdev_ioctl+0x109/0x6d0 [ 162.194426][ T6737] ? __pfx_blkdev_ioctl+0x10/0x10 [ 162.199534][ T6737] ? __fget_files+0x206/0x3a0 [ 162.204242][ T6737] ? __pfx_blkdev_ioctl+0x10/0x10 [ 162.209391][ T6737] __x64_sys_ioctl+0x190/0x200 [ 162.214195][ T6737] do_syscall_64+0xcd/0x250 [ 162.218792][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.224760][ T6737] RIP: 0033:0x7ff95758d169 [ 162.229802][ T6737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.250048][ T6737] RSP: 002b:00007ff958448038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.258553][ T6737] RAX: ffffffffffffffda RBX: 00007ff9577a5fa0 RCX: 00007ff95758d169 [ 162.266591][ T6737] RDX: 0000200000000180 RSI: 00000000c0481273 RDI: 0000000000000006 [ 162.274583][ T6737] RBP: 00007ff95760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.282635][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.290705][ T6737] R13: 0000000000000000 R14: 00007ff9577a5fa0 R15: 00007fff259632d8 [ 162.298738][ T6737] [ 162.301770][ T6737] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 162.309921][ T6737] CPU: 1 UID: 0 PID: 6737 Comm: syz.2.153 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 162.320529][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.330590][ T6737] Call Trace: [ 162.333872][ T6737] [ 162.336811][ T6737] dump_stack_lvl+0x3d/0x1f0 [ 162.341426][ T6737] panic+0x71d/0x800 [ 162.345334][ T6737] ? __pfx_panic+0x10/0x10 [ 162.349766][ T6737] ? show_trace_log_lvl+0x29d/0x3d0 [ 162.355016][ T6737] ? blk_register_tracepoints+0x2dd/0x3c0 [ 162.360768][ T6737] check_panic_on_warn+0xab/0xb0 [ 162.365722][ T6737] __warn+0xf6/0x3c0 [ 162.369641][ T6737] ? blk_register_tracepoints+0x2dd/0x3c0 [ 162.375390][ T6737] report_bug+0x3c0/0x580 [ 162.379761][ T6737] handle_bug+0x54/0xa0 [ 162.383969][ T6737] exc_invalid_op+0x17/0x50 [ 162.388484][ T6737] asm_exc_invalid_op+0x1a/0x20 [ 162.393356][ T6737] RIP: 0010:blk_register_tracepoints+0x2dd/0x3c0 [ 162.399713][ T6737] Code: c7 c7 20 e9 4e 90 e8 92 2c fa ff 31 ff 89 c3 89 c6 e8 b7 2b f8 ff 85 db 0f 85 d8 00 00 00 5b e9 a9 30 f8 ff e8 a4 30 f8 ff 90 <0f> 0b 90 e9 49 fd ff ff e8 96 30 f8 ff 90 0f 0b 90 e9 68 fd ff ff [ 162.419424][ T6737] RSP: 0018:ffffc90004e7fc28 EFLAGS: 00010283 [ 162.425504][ T6737] RAX: 0000000000035f26 RBX: 00000000fffffff4 RCX: ffffc9000bf59000 [ 162.433496][ T6737] RDX: 0000000000080000 RSI: ffffffff81c1c1ac RDI: 0000000000000005 [ 162.441488][ T6737] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 162.449826][ T6737] R10: 00000000fffffff4 R11: 0000000000000000 R12: 00000000000000ff [ 162.457813][ T6737] R13: 0000000000002000 R14: ffff888143b5c050 R15: ffffc90004e7fcf4 [ 162.465814][ T6737] ? blk_register_tracepoints+0x2dc/0x3c0 [ 162.471571][ T6737] ? blk_register_tracepoints+0x2dc/0x3c0 [ 162.477323][ T6737] do_blk_trace_setup+0x933/0xb50 [ 162.482374][ T6737] blk_trace_setup+0xee/0x1b0 [ 162.487071][ T6737] ? __pfx_blk_trace_setup+0x10/0x10 [ 162.492389][ T6737] ? __pfx_snprintf+0x10/0x10 [ 162.497103][ T6737] blk_trace_ioctl+0x147/0x280 [ 162.501884][ T6737] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 162.507198][ T6737] ? trace_lock_acquire+0x14e/0x1f0 [ 162.512412][ T6737] ? __fget_files+0x40/0x3a0 [ 162.517038][ T6737] blkdev_ioctl+0x109/0x6d0 [ 162.521553][ T6737] ? __pfx_blkdev_ioctl+0x10/0x10 [ 162.526613][ T6737] ? __fget_files+0x206/0x3a0 [ 162.531316][ T6737] ? __pfx_blkdev_ioctl+0x10/0x10 [ 162.536355][ T6737] __x64_sys_ioctl+0x190/0x200 [ 162.541137][ T6737] do_syscall_64+0xcd/0x250 [ 162.545666][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.551579][ T6737] RIP: 0033:0x7ff95758d169 [ 162.556020][ T6737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.575639][ T6737] RSP: 002b:00007ff958448038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.584066][ T6737] RAX: ffffffffffffffda RBX: 00007ff9577a5fa0 RCX: 00007ff95758d169 [ 162.592060][ T6737] RDX: 0000200000000180 RSI: 00000000c0481273 RDI: 0000000000000006 [ 162.600041][ T6737] RBP: 00007ff95760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.608021][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.616002][ T6737] R13: 0000000000000000 R14: 00007ff9577a5fa0 R15: 00007fff259632d8 [ 162.624008][ T6737] [ 162.627095][ T6737] Kernel Offset: disabled [ 162.631496][ T6737] Rebooting in 86400 seconds..