last executing test programs: 8.251347165s ago: executing program 3 (id=275): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan1\x00'}) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) 8.001586211s ago: executing program 3 (id=277): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r0, 0x0, 0x400) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r1, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck0/bank3\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = pidfd_open$auto(0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, 0x0, 0x40408c4) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000080)={0xd, 0x3, 0x4ef5, 0x0, 0x13, 0x40, 0x6, 0x1, 0x7, 0xfffffffffffffff3, 0x4, 0x3e}) 7.860690864s ago: executing program 3 (id=278): madvise$auto(0x9, 0x100, 0x1) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/set_event\x00', 0x101001, 0x0) write$auto(r0, &(0x7f0000000340)=':,\x00', 0x80) r1 = open(0x0, 0x261c2, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/1:2/max_ratio_fine\x00', 0xa001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x3, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x8}) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(r2, r3, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r4 = socket(0xa, 0x2, 0x0) r5 = socket(0x26, 0x4, 0xbbb7) connect$auto(r5, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r4) getpgid$auto(0x0) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) 6.865716536s ago: executing program 3 (id=281): r0 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000002c80)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x100) acct$auto(&(0x7f0000000ac0)='/dev/rfkill\x00') mremap$auto(0x200000000000, 0x40000000002, 0x4, 0xd443, 0xffffffff) mprotect$auto(0x4, 0x3, 0x4) 6.759973389s ago: executing program 3 (id=283): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x4) io_uring_setup$auto(0x7, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, 0x0, 0x800) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) adjtimex$auto(&(0x7f00000004c0)={0x23, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0x2, 0x0, 0x3, 0x1, 0x2, {0x2100000000, 0x10000}, 0xfffffffffffffffc, 0x73d, 0xffffffffffffffdd, 0x1008001, 0x0, 0x80000004, 0x21b, 0xffffffff, 0xa747, 0x7, 0x1000}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xa2100, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd1\x00', 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) write$auto(r3, 0x0, 0xfffffdef) r4 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r4, 0x11) ioperm$auto(0x90d5, 0xc, 0x30e) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 6.424518299s ago: executing program 1 (id=286): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video19\x00', 0x0, 0x0) ioctl$auto(r0, 0xc0945662, r0) ioperm$auto(0x80, 0x4, 0x800) getpriority$auto_PRIO_PGRP(0x1, 0x0) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r2 = openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x400, 0x0) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, &(0x7f0000000080)=0x8) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, 0x0) 6.295027464s ago: executing program 0 (id=287): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x804) (async, rerun: 32) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x5, 0x2, 0x2000063, 0x0, 0x0, 0x0, 0x1000, 0xb, 0x2005, 0xffff, 0x1, 0x9, 0xffffffff80000000, 0x9, 0x3, 0x200000100103}) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) (rerun: 64) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) pread64$auto(r1, 0x0, 0x8, 0x8) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x292301, 0x0) (rerun: 64) r3 = open(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x200) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000240)={0x7, 0xe, 0xfffffffffffffffb, 0x8ab7, 0x7, 0xe, 0xa, 0x100000000000009, 0x1, 0x200, 0xe21f, 0x80000000, 0x2, 0x7, 0xfffffffffffffff7}) sendmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x22, 0x0, 0x8, 0x0, 0x7, 0x1}, 0x3}, 0x40, 0x1) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/veth1\x00', 0x101000, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x8000000}, 0x3, 0xf8, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$auto(0x4, 0x200000000, 0x15, 0xfffffffffffffffc, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x1432a0091, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x412c81, 0x0) (async) r4 = epoll_create$auto(0x2) epoll_pwait2$auto(r4, 0x0, 0x8, &(0x7f0000002780)={0x0, 0x6}, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) (async) r5 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r5) 5.237599059s ago: executing program 1 (id=290): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='\xce\xe7[u\xbe\"\x04', 0x1, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount$auto(&(0x7f0000000000)='pimreg1\x00', &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x8000, 0x0) 4.650170704s ago: executing program 1 (id=293): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000340), 0xffffffffffffffff) mmap$auto(0x0, 0x9, 0x3, 0x800019b72, 0x9, 0x8000000000008000) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sysfs$auto(0x2, 0x46, 0x0) (async) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x1) (async) fadvise64$auto_POSIX_FADV_DONTNEED(r2, 0x5, 0x6, 0x4) (async) sendmsg$auto_SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r1, 0x323, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x20008804) 4.322866587s ago: executing program 1 (id=294): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lsm_list_modules$auto(&(0x7f0000000080)=0x1, &(0x7f0000000140)=0x7a28, 0x4b1d) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) msync$auto(0x2, 0x9, 0x40) select$auto(0x1, &(0x7f00000000c0)={[0xeeda, 0xd, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a89, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0x2}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) msgctl$auto(0x9, 0xf8, &(0x7f00000001c0)={{0x8, 0xee00, 0x0, 0x4, 0xa771, 0x7, 0x9}, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x1, 0xc28a, 0x5f52, 0x3, 0x9, 0x8, 0x2cce, 0xfffc, 0x6, @inferred, @inferred=0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x48010) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002780)={&(0x7f0000000240)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_IFINDEX={0x8}, @OVS_VPORT_ATTR_NAME={0xf, 0x3, '/dev/adsp1\x00'}, @OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_UPCALL_STATS={0x4, 0xa, 0x0, 0x1, [@generic]}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x5}, @OVS_VPORT_ATTR_NETNSID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xd5}, 0x4000040) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20002, 0x0) 4.052648429s ago: executing program 0 (id=295): r0 = set_tid_address$auto(&(0x7f0000000000)=0x10) r1 = fsopen$auto(&(0x7f0000000040)=')\x00', 0x3) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x80000001}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x439a}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x5}]}, 0x2c}}, 0x4) close_range$auto(r1, r1, 0x101) r3 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy0/ht40allow_map\x00', 0x82400, 0x0) read$auto_ht40allow_map_ops_debugfs(r3, &(0x7f0000000200)=""/105, 0x69) fadvise64$auto(r3, 0x5, 0x104, 0x8001) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000002c0), r1) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x89e2}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004084) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x228, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "f02417c1c1796d19e6d88dce"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_MESH_ID={0x23, 0x18, "4bdd02b0f2a685dd22fceb33ec2c87cf0c7db2547f6f586e38e494e93a42c6"}, @NL80211_ATTR_EMA_RNR_ELEMS={0x1cb, 0x145, 0x0, 0x1, [@typed={0x4, 0xa}, @nested={0x18, 0x87, 0x0, 0x1, [@typed={0xa, 0xec, 0x0, 0x0, @str='!{#\xbd+\x00'}, @typed={0x8, 0x51, 0x0, 0x0, @fd=r3}]}, @generic="3dc2613d5fdd6564d99c6e835c279b0b292b4e54bc54ec072d8d0f5a79495c79920e1135410f693d61493409e7b06587daf6c41dd2d4f056593ace219991736c5e0aa7f3c674acf7d10b8541c042be5001751426fd296e6cbce86656805409244925ecd9bbf5c0d45ef96b3e372f36bd589a5be2874705e2f6697e20431f6193e7d45ffe46f104ddabfaef19383bbfd1efed79ecae62d9acc6f8732193ce8b18f2446d89c8a5f29b9e251a5ddf8f93c13a46e447633b8e6e0c592cd10e920b26aad9c15b834511513ececddcdc6cc83d33d762e5ea668c30d632f490956263dce6f899e67b1e7cbaa26588ca532cbd", @nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x7b}]}, @nested={0x89, 0x3f, 0x0, 0x1, [@generic="aabd8515cf3b83ca10e8791c0662118397b28f76269ef4f693c9ec26f85c78cd8a7d39de6c7dc34a6e1eb266ecb0ba37176530861babc3cee254ba89ffd453ccf9ccb5efd606b0c3490e8f8b3e8e8297c3908f8e633118bc08b74f94ce6d6756cd3cca2d62bed5c9499cedc8c24f137cbdd856bf475c843be8bdece414bbce792df82f4d42"]}, @nested={0x8, 0x118, 0x0, 0x1, [@nested={0x4, 0x4b}]}, @typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@private2}, @typed={0xc, 0x62, 0x0, 0x0, @u64=0x10000}]}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}]}, 0x228}, 0x1, 0x0, 0x0, 0x24044081}, 0x4) r6 = bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000740)=@prog_bind_map={r3, r3, 0x4}, 0x7fffffff) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r5, 0x601, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) acct$auto(&(0x7f0000000900)='kJ},%$\\\x00') ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(r8, 0xc1004110, &(0x7f0000000940)={0x4, [0x3, 0x6d5b, 0x7ff], [{0x100, 0x1916e8de, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x59, 0x1, 0x1}, {0xfffffff2, 0x4, 0x1, 0x0, 0x1, 0x1}, {0xcfa, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x3, 0xc74, 0x1, 0x1, 0x0, 0x1}, {0x10001, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x10, 0xc, 0x0, 0x1, 0x1}, {0x7fff, 0xffffff19, 0x1, 0x0, 0x0, 0x1}, {0x38, 0x7, 0x1, 0x0, 0x1}, {0x3, 0x2, 0x0, 0x0, 0x1}, {0x1, 0x44, 0x1, 0x1}, {0x9, 0x1, 0x1, 0x1, 0x1, 0x1}], 0x12b3339e, 0x8, 0x6, 0x1, 0x8e, 0x7, 0x8, "e079bd4a6324caefef18889954adafc4d08cc34c9d6643e86a5e85bee0c0c6935d7e185fd60ec6aeb390f411ca32ca5ecc846b503c2175d83e864c5d2b98cbe5"}) sendmsg$auto_NFC_CMD_GET_TARGET(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}, @NFC_ATTR_DEVICE_NAME={0x33, 0x2, '/sys/kernel/debug/ieee80211/phy0/ht40allow_map\x00'}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r9 = prctl$auto_PR_SET_MM_ARG_END(0x1000, 0x9, r0, 0x80, 0x0) r10 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000bc0), r7) sendmsg$auto_NET_DM_CMD_STATS_GET(r9, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0xc0004}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xc0, r10, 0x4, 0x70bd2c, 0x2, {}, [@NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x8}, @NET_DM_ATTR_UNSPEC={0x99, 0x0, "706231907d9a2681a7fc31b2eabfa42a86e5f2a99abd5703b165b3084482107d95e9df7d8808196f99c3b434bdcfe4e0832e2f7036e54b62ca6d6ec886a06d393957132beeb28e51dbb50a734e5d6453f8293a5e25f9e2834430b5b45b8e02a58d16c00e6a988cb34068c29b591b9022c268bc29767121e0d2bee733654764e337f829a2c7cc6718ec96e0af6d8a5e14422a6d0916"}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x9}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44000}, 0x801) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r8, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1f, 0x13, "31f3b1acebac6b234667c3653717f5b441f8e122c70ba85a0055e0"}]}, 0x34}}, 0x8000) syslog$auto(0x1, &(0x7f0000000e40)='\x00', 0x0) r11 = socket(0x23, 0x80f, 0xe) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/vcsu\x00', 0x4000, 0x0) prctl$auto_PR_SET_MM_START_BRK(0x2dbe, 0x6, r0, 0x3bd, 0xfffffffffffffffd) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/snd/controlC2\x00', 0x80000, 0x0) msync$auto(0xdd90, 0x81, 0x8) r12 = ioctl$auto_NS_GET_PID_FROM_PIDNS(r8, 0x8004b706, &(0x7f0000000f00)=0x3) read$auto_fops_u64_ro_(r12, &(0x7f0000000f40)=""/152, 0x98) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r11, &(0x7f00000012c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x24008881) 3.837140697s ago: executing program 0 (id=296): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x2000000) 3.797530263s ago: executing program 3 (id=297): madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto(0x3, 0xae41, r0) listmount$auto(&(0x7f0000000100)={0xba, @raw, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x0, 0xf4240, 0x1) semctl$auto_IPC_INFO(0xffc9, 0xfffff801, 0x3, 0xfffffffffffffffa) mlockall$auto(0x5) getsockopt$auto(0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x9, 0xd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/devspec\x00', 0x101000, 0x0) read$auto(0x3, 0x0, 0x80) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(0xffffffffffffffff, 0x1, &(0x7f0000000380)='\x01\xe7\x95\x13\x89C\xa1\xb6\xa4\xd8\xec\x8aT\x9f\xc9\x82\x1bco\xb1\xd5P\x15\xa55G;\x80\x99g\xd7\xaa/L\xb2\xb3\tW\x91\xcb\rkC\xf5\xff\xc6[`\xc5\xcb=i\xd5\xfb\xe6m\x83!\x8e\xd6\xcf\x96\xfe\xa3\xaa@m\xe2]\x11\x9fX\x16\r', &(0x7f0000000080)="10f1341ffcab01a7ef3d969bd2771a4f8fad24999d7f0c0000000012efd37c5ab05d0d00000000000000bfcdafe7358876c2", 0x2) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = socket(0x2, 0x3, 0xa) getsockopt$auto(r1, 0x0, 0x30, 0x0, &(0x7f0000000040)=0x2) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/mountinfo\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x400, 0x0) capget$auto(0x0, 0xfffffffffffffffe) unshare$auto(0x40000080) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000140)) bpf$auto(0x4c2a, &(0x7f00000001c0)=@bpf_attr_11={0x0, 0x3ff, 0x8, 0x76, 0x18cf, 0x8, 0xfd, r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x7c4) 3.57655529s ago: executing program 0 (id=298): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pread64$auto(r0, &(0x7f00000001c0)='@\'&\x00', 0x5, 0x5) bind$auto(0x3, 0x0, 0x6a) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1ed", 0x24) r2 = io_uring_setup$auto(0x3, &(0x7f0000000000)={0x2, 0x967a, 0xfffffff9, 0x80000001, 0x9, 0x0, r1, [0x3, 0x9, 0x3], {0x0, 0xffff, 0x101, 0x8, 0x7fff, 0x9, 0x7fffffff, 0xcfe, 0x80000000}, {0xf, 0x2, 0x9, 0x67, 0x6, 0xf, 0x18, 0x4, 0x4}}) r3 = socket(0x22, 0xa, 0x4) getpeername$auto(0x3, 0x0, 0x0) write$auto(0x3, 0x0, 0x2000fffffdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000000c0), r2) sendmsg$auto_OVS_DP_CMD_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r4, @ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) keyctl$auto(0xc, 0x4, 0xfffffffffffffffd, 0x7c, 0x5) ioperm$auto(0x7, 0x6, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r5, r5, 0x0, 0x7fff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) 3.498966757s ago: executing program 2 (id=299): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/wchan\x00', 0xc8400, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000080)=""/112, 0x70) getsockopt$auto_SO_PREFER_BUSY_POLL(r0, 0x80, 0x45, &(0x7f0000000000)='\'\\^[-\x00', &(0x7f0000000080)=0x2) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, 0x0) 2.8381753s ago: executing program 1 (id=300): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0xbd56, 0xa, 0x0, &(0x7f00000000c0)=0x97) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x8, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x22, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r1 = socket(0xa, 0x801, 0x106) ioctl$auto(r1, 0x890b, 0x9) 2.76080719s ago: executing program 0 (id=301): r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x42080, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r0, &(0x7f0000000040)=""/66, 0x42) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = fanotify_init$auto(0x5, 0x2000000000002) mmap$auto(0x1, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xfffffffffffffff8, 0x9) r2 = socket(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) syz_clone(0x8124400, 0x0, 0x0, 0x0, 0x0, 0x0) clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffff7, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x1, 0x0) setresuid$auto(0x0, 0x8, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x4, 0x1, 0xc, 0x0, 0x6) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x4242, 0x11a) fanotify_mark$auto(r3, 0x1, 0x3a, r3, 0x0) r4 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) getsockopt$auto(0xffffffffffffffff, 0x807d, 0x15, 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)="ea3a701f0f245366454492ade05a003a9f71e5d7a489f3c8ae1cf46f265602eaef27be3aaaf92426da58c3fd1c188b5a8947eabc53a9d02da0853354204f54fb4b0dbddcad19da349494fd669f80c5a33bfabbd993157bcecafa1c6b60dd8f301c7db2f332bec52e5809cdda197c0aa6be88e3cc7f92ea912aef0516ff741c4894e443912f99dd7569bc2c78be636a2f3959845a3a54e59de69218249efa024853762d4f7c93e0c1656757dd8d2ba0421f217112", 0xb4) r5 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$auto_I2C_SMBUS(r5, 0x720, 0xfffffffffffffffe) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000000000)="e2af9bf1bd59844a6c21eec38eb41655f8136068ca4bfb688f547a98ffd12251e569e1045c8bea71702eeb8d38a1bd46158c394a03b3d0d652a314d9070e072dec303c883c73c540304b69e53a7e6856a4e54bc41dbdb468d66c2391e96c9048065da6a21cae23c07ef71ac40d85410abe0c696ab4b1cf7fecbc6ba25ea38833e8b80012fba7ddc2aca242759d917f14a27ba45bba1e09a9a8faad9bc72010a452e002fa75dd9fd104b441d1961eed40a83d280e5b1d2f1bf043d9baf70f74a9cfae3fda0f0dd434dfde0138134acbb559c0adcda800fed13d2938ccdd5e", 0x7) mmap$auto(0x0, 0xe982, 0x8, 0xeb2, 0x401, 0x8000) dup2$auto(r4, r4) 2.760182908s ago: executing program 2 (id=302): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x6, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x6, 0x4008) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) semctl$auto(0xf06a, 0x802, 0x3, 0x9) setsockopt$auto(0x3, 0x0, 0x40, 0x0, 0x7fff0060) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x1ad240, 0x1b1) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20009, 0x4000000040df, 0xeb2, r0, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video33\x00', 0x80382, 0x0) readv$auto(r3, &(0x7f0000000080)={&(0x7f0000000000), 0x197188}, 0x8) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r5, 0x0, 0x1f40) writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x400, 0x0) setsockopt$auto(0x3, 0x1, 0x800, 0x0, 0x19) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x40c00, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 1.585924628s ago: executing program 2 (id=303): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) close_range$auto(0x0, 0x5, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r0 = socket(0x9, 0x80003, 0xfffffffe) (async, rerun: 32) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(r0, 0x5, 0x7) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x64c2, 0x1e2) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000080)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) (async) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) ioctl$auto_EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x2, 0x80000000, 0x7f}) (async) pipe$auto(0x0) pipe$auto(0x0) (async) io_uring_setup$auto(0xcf5, &(0x7f0000000440)={0x93, 0xffe, 0x2, 0x38000, 0x3, 0x3, r1, [0x0, 0x7, 0x4], {0x10000, 0x8, 0x6, 0x0, 0xca1, 0x9, 0x8, 0x3000, 0x3}, {0x8, 0x2, 0xffff, 0x2, 0x0, 0x7, 0xc, 0x10001, 0xfff}}) (async) socket(0xf, 0x3, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) (async) statmount$auto(0x0, &(0x7f0000000600)={0x6, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x4, 0x3, 0x4, 0xb0, 0x7, 0x6, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], "e8b4760508ba56761162c928ec5a9916364bad6b473dbc5b0c37f80800000000000000aab86bd3e2a159d2d4617099e00c60aa50b7f6f548303a22ec0c160776c6e960cd6a26cffcaa50e8485caa2c0267762cd7e6c6edeb064ef66d5e8c61261fea38054f1c68d1a5c655b0ad21790598fb92a0bc7addfd42d88f41ed66287e95d36d4b4468565fd45558b18ec51f58712174f836d2a2a9a56f1b8704143c31cb1e30ec4bff034eecda88f9d78e40339e89c32bc7aa751c984313ed2244bed4c7c2c7055b3259c71788842151a0cead1271862e3a1efcea9338a3"}, 0x1fe, 0x81) (async) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010070b28a70c5dc0000080003003900000008000300050000000a000100ffffffffffff00005647657eb52464e00b7afff0ffbac93be401001bffcc4a9d23029e0f73502cdedcad543a1322137dafa0326cae895605479716813ce91215900bb0555193616d072cac8bc2a23df5d45cbc71012b6bbabbcdf46c94b7659a36d1b165e47d3271c07887b6264e9d821c30c6ca60eb373404a36533be9d1424ecddf46ed31f719f5a5370c23946b44f721afe332220c91657ce087b5388e9390c2d8c79ef32a3fb8a1edad9b62c3b300501023d33ce53271eb8709d2ae700000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x81) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6305100079e2cec2c28cb072273f5fb4d9d4d61c2030823c11d70e90b19f437e86eb21128b6eab7b54e317782af63d539735a838222a7a9f224b3b3906a4c89ad31c0a2405d2c49a45b1fa47ad3e4753945f96002f86349e250bb809bf0b11ccd84437d907f88b24690825f15ca9286f1c4a667a4f6c", @ANYBLOB="60a4fd4d175941ef48b43d356e3dd11700"], 0x1ac}}, 0x4004) 1.488738211s ago: executing program 0 (id=304): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x5) (async, rerun: 32) write$auto(r0, 0x0, 0x2) (async, rerun: 32) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, 0x0) (async) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf250300000004fb4b7e29a00008000400078008000a000800000005000900430000000400067472f2a20f73bba644b04b1c7ad467e68a789b8e2c1a2ff3"], 0x34}}, 0x1) (async, rerun: 32) socket(0xa, 0x3, 0x3a) (rerun: 32) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567) (async, rerun: 32) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) (rerun: 32) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) (async) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) madvise$auto(0x6, 0x1, 0xb) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x14, r2, 0x301, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x9, 0x0, 0x103, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0x0, 0x2, 0xec, 0x4, 0x2, 0x1, 0x4, 0xfffffffffffffff8}) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) (async) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 550.730074ms ago: executing program 2 (id=305): r0 = set_tid_address$auto(&(0x7f0000000000)=0x10) r1 = fsopen$auto(&(0x7f0000000040)=')\x00', 0x3) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x80000001}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x439a}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x5}]}, 0x2c}}, 0x4) close_range$auto(r1, r1, 0x101) r3 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy0/ht40allow_map\x00', 0x82400, 0x0) read$auto_ht40allow_map_ops_debugfs(r3, &(0x7f0000000200)=""/105, 0x69) fadvise64$auto(r3, 0x5, 0x104, 0x8001) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000002c0), r1) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x89e2}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004084) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x228, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "f02417c1c1796d19e6d88dce"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_MESH_ID={0x23, 0x18, "4bdd02b0f2a685dd22fceb33ec2c87cf0c7db2547f6f586e38e494e93a42c6"}, @NL80211_ATTR_EMA_RNR_ELEMS={0x1cb, 0x145, 0x0, 0x1, [@typed={0x4, 0xa}, @nested={0x18, 0x87, 0x0, 0x1, [@typed={0xa, 0xec, 0x0, 0x0, @str='!{#\xbd+\x00'}, @typed={0x8, 0x51, 0x0, 0x0, @fd=r3}]}, @generic="3dc2613d5fdd6564d99c6e835c279b0b292b4e54bc54ec072d8d0f5a79495c79920e1135410f693d61493409e7b06587daf6c41dd2d4f056593ace219991736c5e0aa7f3c674acf7d10b8541c042be5001751426fd296e6cbce86656805409244925ecd9bbf5c0d45ef96b3e372f36bd589a5be2874705e2f6697e20431f6193e7d45ffe46f104ddabfaef19383bbfd1efed79ecae62d9acc6f8732193ce8b18f2446d89c8a5f29b9e251a5ddf8f93c13a46e447633b8e6e0c592cd10e920b26aad9c15b834511513ececddcdc6cc83d33d762e5ea668c30d632f490956263dce6f899e67b1e7cbaa26588ca532cbd", @nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x7b}]}, @nested={0x89, 0x3f, 0x0, 0x1, [@generic="aabd8515cf3b83ca10e8791c0662118397b28f76269ef4f693c9ec26f85c78cd8a7d39de6c7dc34a6e1eb266ecb0ba37176530861babc3cee254ba89ffd453ccf9ccb5efd606b0c3490e8f8b3e8e8297c3908f8e633118bc08b74f94ce6d6756cd3cca2d62bed5c9499cedc8c24f137cbdd856bf475c843be8bdece414bbce792df82f4d42"]}, @nested={0x8, 0x118, 0x0, 0x1, [@nested={0x4, 0x4b}]}, @typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@private2}, @typed={0xc, 0x62, 0x0, 0x0, @u64=0x10000}]}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}]}, 0x228}, 0x1, 0x0, 0x0, 0x24044081}, 0x4) r6 = bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000740)=@prog_bind_map={r3, r3, 0x4}, 0x7fffffff) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r5, 0x601, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) acct$auto(&(0x7f0000000900)='kJ},%$\\\x00') ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(r8, 0xc1004110, &(0x7f0000000940)={0x4, [0x3, 0x6d5b, 0x7ff], [{0x100, 0x1916e8de, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x59, 0x1, 0x1}, {0xfffffff2, 0x4, 0x1, 0x0, 0x1, 0x1}, {0xcfa, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x3, 0xc74, 0x1, 0x1, 0x0, 0x1}, {0x10001, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x10, 0xc, 0x0, 0x1, 0x1}, {0x7fff, 0xffffff19, 0x1, 0x0, 0x0, 0x1}, {0x38, 0x7, 0x1, 0x0, 0x1}, {0x3, 0x2, 0x0, 0x0, 0x1}, {0x1, 0x44, 0x1, 0x1}, {0x9, 0x1, 0x1, 0x1, 0x1, 0x1}], 0x12b3339e, 0x8, 0x6, 0x1, 0x8e, 0x7, 0x8, "e079bd4a6324caefef18889954adafc4d08cc34c9d6643e86a5e85bee0c0c6935d7e185fd60ec6aeb390f411ca32ca5ecc846b503c2175d83e864c5d2b98cbe5"}) sendmsg$auto_NFC_CMD_GET_TARGET(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}, @NFC_ATTR_DEVICE_NAME={0x33, 0x2, '/sys/kernel/debug/ieee80211/phy0/ht40allow_map\x00'}, @NFC_ATTR_VENDOR_DATA={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r9 = prctl$auto_PR_SET_MM_ARG_END(0x1000, 0x9, r0, 0x80, 0x0) r10 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000bc0), r7) sendmsg$auto_NET_DM_CMD_STATS_GET(r9, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0xc0004}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xc0, r10, 0x4, 0x70bd2c, 0x2, {}, [@NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x8}, @NET_DM_ATTR_UNSPEC={0x99, 0x0, "706231907d9a2681a7fc31b2eabfa42a86e5f2a99abd5703b165b3084482107d95e9df7d8808196f99c3b434bdcfe4e0832e2f7036e54b62ca6d6ec886a06d393957132beeb28e51dbb50a734e5d6453f8293a5e25f9e2834430b5b45b8e02a58d16c00e6a988cb34068c29b591b9022c268bc29767121e0d2bee733654764e337f829a2c7cc6718ec96e0af6d8a5e14422a6d0916"}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x9}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44000}, 0x801) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r8, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1f, 0x13, "31f3b1acebac6b234667c3653717f5b441f8e122c70ba85a0055e0"}]}, 0x34}}, 0x8000) syslog$auto(0x1, &(0x7f0000000e40)='\x00', 0x0) r11 = socket(0x23, 0x80f, 0xe) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/vcsu\x00', 0x4000, 0x0) prctl$auto_PR_SET_MM_START_BRK(0x2dbe, 0x6, r0, 0x3bd, 0xfffffffffffffffd) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/snd/controlC2\x00', 0x80000, 0x0) msync$auto(0xdd90, 0x81, 0x8) r12 = ioctl$auto_NS_GET_PID_FROM_PIDNS(r8, 0x8004b706, &(0x7f0000000f00)=0x3) read$auto_fops_u64_ro_(r12, &(0x7f0000000f40)=""/152, 0x98) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r11, &(0x7f00000012c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x24008881) 358.066822ms ago: executing program 2 (id=306): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x10000000000000) 105.996063ms ago: executing program 1 (id=307): ioctl$auto(0xffffffffffffffff, 0x89a0, 0x8) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(r0, 0x11, 0x40, 0x0, 0x6) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x1c) prctl$auto_PR_SET_MM_START_CODE(0x6, 0x1, 0x0, 0x7, 0xfffffffffffffffd) madvise$auto(0x0, 0x9, 0xe) mlockall$auto(0x8000000000000001) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) read$auto_def_blk_fops_fs(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) ioctl$auto(0xffffffffffffffff, 0x89a0, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x2, 0x88) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) setsockopt$auto(r0, 0x11, 0x40, 0x0, 0x6) (async) connect$auto(0x3, 0x0, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x3, 0x1c) (async) prctl$auto_PR_SET_MM_START_CODE(0x6, 0x1, 0x0, 0x7, 0xfffffffffffffffd) (async) madvise$auto(0x0, 0x9, 0xe) (async) mlockall$auto(0x8000000000000001) (async) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async) read$auto_def_blk_fops_fs(0xffffffffffffffff, 0x0, 0x0) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) (async) 0s ago: executing program 2 (id=308): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0xc0c00, 0x0) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7f4a2e96", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf253e0000000c0007009eb0f6ab06d85b5c0600b3000c0000000600960000100000080014000000010008009a00880000000800c400ff03000004003c00060010000002000005002001030000000600510180000000"], 0x64}, 0x1, 0x0, 0x0, 0x24000881}, 0x8080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000019c0)={0x634, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0x1}}, @NL80211_ATTR_IE={0x48f, 0x2a, "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"}, @NL80211_ATTR_FILS_CACHE_ID={0xb4, 0xfd, "b4a3dc256d39be4d8f9d556fccb034f2751e26a7aaf8fdad2412843b685a6d619ca571004b6b2fcfc46660bb19fa8d39a203d32090efbec6d86fe2276dc5254bb0349053360c404003853b7c30dc58969777c20d7169cff9156e434c6d264c1020e191c676ed6d246e9bf5e5b03d5294b010f9d5267025d00504171853c3e28a5a65437c0514cb8a0914b86fc30bdf266f7abff560c4862ce026b7bdc04fc82d77f0f7eade7dbdd5f023d2e94317d244"}, @NL80211_ATTR_VHT_CAPABILITY={0xc4, 0x9d, "6a5132fff52be56e836256d4d3c1fba6cb433b2361383b6775cd612c18df4fc663c8ecb791a33c51ad4c5e02043192768c99a36326924866bc0429e0087a5009f23473be14e9bcf4f424edd45b0d619f31eb0147035b4716875adc85859425d3a83db18c237275e73f2b39464a08121973c5e5ed4292e7e6540a39d9c759b9a50faccd8047d1fc1f6ae81e0acf44b93ce787d7f6bf5c9b204a237de50669a02cc7ddac5a3fba3bc4b6e6ea04fdffb6ea1744bd32fb23edd39c7ae26694eda400"}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xf6}]}, 0x634}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x88c5) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) move_mount$auto(0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x77) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp_tables_matches\x00', 0x80, 0x0) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r2, 0x0, 0x9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/maps\x00', 0x2000, 0x0) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f0000000980)=""/4098, 0x1002) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. [ 92.628005][ T5820] cgroup: Unknown subsys name 'net' [ 92.781086][ T5820] cgroup: Unknown subsys name 'cpuset' [ 92.791584][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.653396][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.919063][ T975] cfg80211: failed to load regulatory.db [ 97.089818][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.095028][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.105481][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.111856][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.113821][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.121994][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.138772][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.138866][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.153522][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.161090][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.162654][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.177809][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.185273][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.192839][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.195369][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.208290][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.216674][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.231335][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.232704][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.249303][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.929387][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 97.941092][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 97.952720][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 98.119796][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 98.314777][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.323452][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.331136][ T5831] bridge_slave_0: entered allmulticast mode [ 98.338747][ T5831] bridge_slave_0: entered promiscuous mode [ 98.349806][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.357581][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.364780][ T5838] bridge_slave_0: entered allmulticast mode [ 98.373251][ T5838] bridge_slave_0: entered promiscuous mode [ 98.403374][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.410914][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.418646][ T5831] bridge_slave_1: entered allmulticast mode [ 98.426026][ T5831] bridge_slave_1: entered promiscuous mode [ 98.434139][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.441964][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.449571][ T5838] bridge_slave_1: entered allmulticast mode [ 98.457464][ T5838] bridge_slave_1: entered promiscuous mode [ 98.465086][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.474631][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.481995][ T5830] bridge_slave_0: entered allmulticast mode [ 98.490296][ T5830] bridge_slave_0: entered promiscuous mode [ 98.533142][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.540564][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.548134][ T5830] bridge_slave_1: entered allmulticast mode [ 98.555463][ T5830] bridge_slave_1: entered promiscuous mode [ 98.634588][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.641957][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.649672][ T5832] bridge_slave_0: entered allmulticast mode [ 98.657910][ T5832] bridge_slave_0: entered promiscuous mode [ 98.669158][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.681356][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.695187][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.719000][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.726595][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.733795][ T5832] bridge_slave_1: entered allmulticast mode [ 98.741370][ T5832] bridge_slave_1: entered promiscuous mode [ 98.751118][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.793324][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.850213][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.893208][ T5831] team0: Port device team_slave_0 added [ 98.902640][ T5838] team0: Port device team_slave_0 added [ 98.926633][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.939094][ T5831] team0: Port device team_slave_1 added [ 98.947082][ T5838] team0: Port device team_slave_1 added [ 98.957821][ T5830] team0: Port device team_slave_0 added [ 98.966500][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.019383][ T5830] team0: Port device team_slave_1 added [ 99.056280][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.063346][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.092890][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.148510][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.155529][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.181904][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.193968][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.201035][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.229265][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.240556][ T5837] Bluetooth: hci1: command tx timeout [ 99.242948][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.253287][ T5833] Bluetooth: hci0: command tx timeout [ 99.259049][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.285445][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.297510][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.304484][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.316287][ T5833] Bluetooth: hci2: command tx timeout [ 99.334446][ T5837] Bluetooth: hci3: command tx timeout [ 99.336518][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.356341][ T5832] team0: Port device team_slave_0 added [ 99.380266][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.387542][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.413663][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.428520][ T5832] team0: Port device team_slave_1 added [ 99.538754][ T5838] hsr_slave_0: entered promiscuous mode [ 99.545328][ T5838] hsr_slave_1: entered promiscuous mode [ 99.554512][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.561565][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.588212][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.601778][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.608989][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.636565][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.653047][ T5831] hsr_slave_0: entered promiscuous mode [ 99.659908][ T5831] hsr_slave_1: entered promiscuous mode [ 99.666281][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.674111][ T5831] Cannot create hsr debugfs directory [ 99.761885][ T5830] hsr_slave_0: entered promiscuous mode [ 99.768882][ T5830] hsr_slave_1: entered promiscuous mode [ 99.775071][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.783023][ T5830] Cannot create hsr debugfs directory [ 99.940395][ T5832] hsr_slave_0: entered promiscuous mode [ 99.947172][ T5832] hsr_slave_1: entered promiscuous mode [ 99.953395][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.961395][ T5832] Cannot create hsr debugfs directory [ 100.359958][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.374430][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.393643][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.405739][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.511050][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.522970][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.535086][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.549520][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.629342][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.641146][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.664498][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.675310][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.831283][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.843994][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.854967][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.869616][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.944429][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.972393][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.055094][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.070772][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.094934][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.102322][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.133563][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.140788][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.181367][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.188609][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.227628][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.234859][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.318342][ T5837] Bluetooth: hci1: command tx timeout [ 101.318406][ T5833] Bluetooth: hci0: command tx timeout [ 101.341569][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.363665][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.396637][ T5833] Bluetooth: hci3: command tx timeout [ 101.397811][ T5837] Bluetooth: hci2: command tx timeout [ 101.465243][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.510140][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.553766][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.561034][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.581523][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.588802][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.621497][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.628746][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.701490][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.708774][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.881073][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.942944][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.955007][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.141019][ T5831] veth0_vlan: entered promiscuous mode [ 102.153809][ T5838] veth0_vlan: entered promiscuous mode [ 102.189539][ T5831] veth1_vlan: entered promiscuous mode [ 102.210594][ T5838] veth1_vlan: entered promiscuous mode [ 102.350714][ T5838] veth0_macvtap: entered promiscuous mode [ 102.401820][ T5838] veth1_macvtap: entered promiscuous mode [ 102.423606][ T5831] veth0_macvtap: entered promiscuous mode [ 102.441859][ T5831] veth1_macvtap: entered promiscuous mode [ 102.463133][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.488746][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.503375][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.545152][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.559771][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.570957][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.582771][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.592204][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.602633][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.611768][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.620930][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.669781][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.681070][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.695852][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.708733][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.717543][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.726754][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.736023][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.853937][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.879486][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.891874][ T5830] veth0_vlan: entered promiscuous mode [ 102.954242][ T5830] veth1_vlan: entered promiscuous mode [ 103.018551][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.027107][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.040424][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.055123][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.059588][ T5832] veth0_vlan: entered promiscuous mode [ 103.113835][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.126475][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.144875][ T5832] veth1_vlan: entered promiscuous mode [ 103.158534][ T5830] veth0_macvtap: entered promiscuous mode [ 103.200210][ T5830] veth1_macvtap: entered promiscuous mode [ 103.229844][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.254647][ T5832] veth0_macvtap: entered promiscuous mode [ 103.285185][ T5832] veth1_macvtap: entered promiscuous mode [ 103.314184][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.342318][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.374999][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.395624][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.406375][ T5837] Bluetooth: hci0: command tx timeout [ 103.406506][ T5833] Bluetooth: hci1: command tx timeout [ 103.422476][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.465319][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.477007][ T5833] Bluetooth: hci3: command tx timeout [ 103.486381][ T5833] Bluetooth: hci2: command tx timeout [ 103.505984][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.521577][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.538893][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.577653][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.598663][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.638999][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.662706][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.688322][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.707661][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.724799][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.762769][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.814825][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.874964][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.938838][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.973144][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.994509][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.016956][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.034345][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.080089][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.106212][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.114990][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.145363][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.190364][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.205522][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.226360][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.239276][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.484271][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.499953][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.597914][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.629889][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.668902][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.701470][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.805172][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.848457][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.902642][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.258138][ T5939] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.477128][ T5833] Bluetooth: hci1: command tx timeout [ 105.477408][ T5837] Bluetooth: hci0: command tx timeout [ 105.556304][ T5837] Bluetooth: hci2: command tx timeout [ 105.556707][ T5833] Bluetooth: hci3: command tx timeout [ 106.109744][ T30] audit: type=1800 audit(1746976095.452:2): pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 106.425850][ T5951] mmap: syz.2.11 (5951) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.278319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.290431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.076725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.460272][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032a73c00: rx timeout, send abort [ 108.469966][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032a73c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.511304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.580638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.589987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.605221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 108.631206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.640362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 109.637182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.390947][ T6027] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET) [ 110.567438][ T6029] ubi0: attaching mtd0 [ 110.591368][ T6029] ubi0: scanning is finished [ 110.600794][ T6015] Zero length message leads to an empty skb [ 110.623438][ T6029] ubi0: empty MTD device detected [ 110.657901][ T6029] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 110.918645][ T6029] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 110.940951][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 111.403240][ T6045] process 'syz.2.31' launched ':,' with NULL argv: empty string added [ 111.421408][ T6047] FAULT_INJECTION: forcing a failure. [ 111.421408][ T6047] name failslab, interval 1, probability 0, space 0, times 1 [ 111.489650][ T6047] CPU: 1 UID: 0 PID: 6047 Comm: syz.0.32 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 111.489702][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.489726][ T6047] Call Trace: [ 111.489736][ T6047] [ 111.489753][ T6047] dump_stack_lvl+0x16c/0x1f0 [ 111.489808][ T6047] should_fail_ex+0x512/0x640 [ 111.489855][ T6047] ? __kmalloc_noprof+0xbf/0x510 [ 111.489893][ T6047] ? ops_init+0x77/0x5f0 [ 111.489928][ T6047] should_failslab+0xc2/0x120 [ 111.489968][ T6047] __kmalloc_noprof+0xd2/0x510 [ 111.490002][ T6047] ? nf_register_net_hook+0x117/0x160 [ 111.490051][ T6047] ops_init+0x77/0x5f0 [ 111.490095][ T6047] setup_net+0x21e/0x850 [ 111.490140][ T6047] ? __pfx_setup_net+0x10/0x10 [ 111.490176][ T6047] ? lockdep_init_map_type+0x5c/0x280 [ 111.490220][ T6047] ? __pfx_down_read_killable+0x10/0x10 [ 111.490256][ T6047] ? debug_mutex_init+0x37/0x70 [ 111.490289][ T6047] copy_net_ns+0x2a6/0x5f0 [ 111.490337][ T6047] create_new_namespaces+0x3ea/0xad0 [ 111.490382][ T6047] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 111.490423][ T6047] ksys_unshare+0x45b/0xa40 [ 111.490467][ T6047] ? __pfx_ksys_unshare+0x10/0x10 [ 111.490509][ T6047] ? xfd_validate_state+0x5d/0x180 [ 111.490563][ T6047] ? rcu_is_watching+0x12/0xc0 [ 111.490603][ T6047] __x64_sys_unshare+0x31/0x40 [ 111.490646][ T6047] do_syscall_64+0xcd/0x230 [ 111.490696][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.490729][ T6047] RIP: 0033:0x7f991578e969 [ 111.490754][ T6047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.490785][ T6047] RSP: 002b:00007f99135f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 111.490817][ T6047] RAX: ffffffffffffffda RBX: 00007f99159b5fa0 RCX: 00007f991578e969 [ 111.490838][ T6047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 111.490873][ T6047] RBP: 00007f9915810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 111.490892][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.490912][ T6047] R13: 0000000000000000 R14: 00007f99159b5fa0 R15: 00007fff018d23c8 [ 111.490955][ T6047] [ 111.871976][ T30] audit: type=1800 audit(6041943397.193:3): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.34" name="members" dev="configfs" ino=8287 res=0 errno=0 [ 112.398821][ T6062] netlink: 'syz.0.35': attribute type 8 has an invalid length. [ 114.104911][ T6071] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.112278][ T6071] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.278306][ T6071] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.302638][ T6071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.359139][ T6071] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.422225][ T6071] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.525878][ T6071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.557316][ T6071] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.588573][ T6071] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.603215][ T6071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.627385][ T6071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.671409][ T6071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.636168][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.356186][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.597091][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.676214][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.095455][ T6130] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 117.451420][ T6137] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 117.736117][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.778216][ T6128] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 117.887912][ T5833] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 117.887960][ T5833] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 117.904856][ T5833] Bluetooth: hci2: Dropping invalid advertising data [ 117.912715][ T5833] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 117.912766][ T5833] Bluetooth: hci2: Dropping invalid advertising data [ 117.926875][ T5833] Bluetooth: hci2: Malformed LE Event: 0x02 [ 118.168109][ T6141] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 118.436411][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.678535][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.757791][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.295480][ T6179] sd 0:0:1:0: PR command failed: 1026 [ 119.313565][ T6179] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 119.358481][ T6179] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 119.796486][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.454732][ T6206] ima: policy update failed [ 120.469159][ T30] audit: type=1802 audit(6041943405.813:4): pid=6206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.67" res=0 errno=0 [ 120.529964][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.757809][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.837804][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.838102][ T6235] netlink: 'syz.1.73': attribute type 10 has an invalid length. [ 121.863300][ T6235] netlink: 330 bytes leftover after parsing attributes in process `syz.1.73'. [ 121.905263][ T6243] netlink: 'syz.1.73': attribute type 3 has an invalid length. [ 121.966028][ T6243] netlink: 330 bytes leftover after parsing attributes in process `syz.1.73'. [ 122.858565][ T6262] cgroup: fork rejected by pids controller in /syz0 [ 123.129963][ T6304] input: jJǸ-9%vlQ J8fi as /devices/virtual/input/input8 [ 133.384032][ T6416] Invalid ELF header magic: != ELF [ 134.810930][ T6424] netlink: 330 bytes leftover after parsing attributes in process `syz.2.107'. [ 137.890545][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.901208][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.375329][ T6569] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 144.743801][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 145.156808][ T6603] netlink: 330 bytes leftover after parsing attributes in process `syz.1.148'. [ 145.875154][ T6606] netlink: 25 bytes leftover after parsing attributes in process `syz.0.139'. [ 148.096320][ T6631] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 148.528598][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 152.306743][ T6677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.313031][ T6677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.357688][ T6677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.363907][ T6677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.393022][ T6285] syz.0.79 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 152.502766][ T6285] CPU: 0 UID: 0 PID: 6285 Comm: syz.0.79 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 152.502806][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.502824][ T6285] Call Trace: [ 152.502834][ T6285] [ 152.502846][ T6285] dump_stack_lvl+0x16c/0x1f0 [ 152.502895][ T6285] dump_header+0x101/0x930 [ 152.502937][ T6285] oom_kill_process+0x270/0xa60 [ 152.502992][ T6285] out_of_memory+0x350/0x1700 [ 152.503041][ T6285] ? __pfx_out_of_memory+0x10/0x10 [ 152.503094][ T6285] mem_cgroup_out_of_memory+0x205/0x270 [ 152.503143][ T6285] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 152.503198][ T6285] ? do_raw_spin_unlock+0x172/0x230 [ 152.503254][ T6285] try_charge_memcg+0xa07/0x10c0 [ 152.503301][ T6285] ? __pfx_try_charge_memcg+0x10/0x10 [ 152.503340][ T6285] ? __print_lock_name+0xb1/0xe0 [ 152.503372][ T6285] ? rcu_read_unlock+0x17/0x60 [ 152.503422][ T6285] charge_memcg+0x8a/0x230 [ 152.503460][ T6285] __mem_cgroup_charge+0x2b/0x1e0 [ 152.503502][ T6285] shmem_alloc_and_add_folio+0x514/0xc20 [ 152.503549][ T6285] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 152.503592][ T6285] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 152.503636][ T6285] shmem_get_folio_gfp+0x687/0x1530 [ 152.503677][ T6285] ? __lock_acquire+0xaa4/0x1ba0 [ 152.503715][ T6285] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 152.503755][ T6285] ? __pte_offset_map_lock+0x155/0x2f0 [ 152.503806][ T6285] shmem_write_begin+0x160/0x300 [ 152.503847][ T6285] ? __pfx_shmem_write_begin+0x10/0x10 [ 152.503884][ T6285] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 152.503932][ T6285] ? __pfx_timestamp_truncate+0x10/0x10 [ 152.503969][ T6285] generic_perform_write+0x3cd/0x930 [ 152.504027][ T6285] ? __pfx_generic_perform_write+0x10/0x10 [ 152.504065][ T6285] ? inode_needs_update_time.part.0+0x191/0x270 [ 152.504110][ T6285] shmem_file_write_iter+0x10e/0x140 [ 152.504157][ T6285] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 152.504199][ T6285] __kernel_write_iter+0x317/0xa90 [ 152.504234][ T6285] ? __pfx___kernel_write_iter+0x10/0x10 [ 152.504262][ T6285] ? __up_read+0x1f8/0x750 [ 152.504313][ T6285] ? dump_user_range+0x73d/0xb30 [ 152.504364][ T6285] dump_user_range+0x418/0xb30 [ 152.504415][ T6285] ? __pfx_dump_user_range+0x10/0x10 [ 152.504456][ T6285] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 152.504494][ T6285] ? __pfx_writenote+0x10/0x10 [ 152.504550][ T6285] elf_core_dump+0x288a/0x3a90 [ 152.504617][ T6285] ? __pfx_elf_core_dump+0x10/0x10 [ 152.504656][ T6285] ? asm_exc_invalid_op+0x1a/0x20 [ 152.504700][ T6285] ? 0xffffffffff600000 [ 152.504728][ T6285] ? irqentry_exit+0x3b/0x90 [ 152.504768][ T6285] ? lockdep_hardirqs_on+0x7c/0x110 [ 152.504818][ T6285] ? asm_exc_invalid_op+0x1a/0x20 [ 152.504902][ T6285] ? do_coredump+0x3183/0x4480 [ 152.504940][ T6285] do_coredump+0x3183/0x4480 [ 152.505004][ T6285] ? __pfx_do_coredump+0x10/0x10 [ 152.505049][ T6285] ? stack_trace_save+0x8e/0xc0 [ 152.505080][ T6285] ? __pfx_stack_trace_save+0x10/0x10 [ 152.505111][ T6285] ? stack_depot_save_flags+0x28/0xa50 [ 152.505157][ T6285] ? __lock_acquire+0xaa4/0x1ba0 [ 152.505204][ T6285] ? __kasan_slab_free+0x51/0x70 [ 152.505237][ T6285] ? kmem_cache_free+0x2d4/0x4d0 [ 152.505266][ T6285] ? __sigqueue_free+0xba/0x2a0 [ 152.505307][ T6285] ? get_signal+0xcba/0x26d0 [ 152.505339][ T6285] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 152.505442][ T6285] ? proc_coredump_connector+0x2d1/0x4f0 [ 152.505491][ T6285] ? __pfx_proc_coredump_connector+0x10/0x10 [ 152.505550][ T6285] ? rcu_is_watching+0x12/0xc0 [ 152.505585][ T6285] get_signal+0x22e3/0x26d0 [ 152.505637][ T6285] ? __pfx_get_signal+0x10/0x10 [ 152.505686][ T6285] arch_do_signal_or_restart+0x8f/0x7a0 [ 152.505732][ T6285] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 152.505788][ T6285] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 152.505831][ T6285] ? do_error_trap+0x214/0x240 [ 152.505884][ T6285] irqentry_exit_to_user_mode+0x13f/0x280 [ 152.505931][ T6285] asm_exc_invalid_op+0x1a/0x20 [ 152.505961][ T6285] RIP: 0033:0x0 [ 152.505986][ T6285] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 152.506000][ T6285] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 152.506024][ T6285] RAX: 0000000000000000 RBX: 00007f99159b6080 RCX: 00007f991578e969 [ 152.506047][ T6285] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 152.506064][ T6285] RBP: 00007f9915810ab1 R08: 0000000000000002 R09: 0000000000000000 [ 152.506081][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.506098][ T6285] R13: 0000000000000000 R14: 00007f99159b6080 R15: 00007fff018d23c8 [ 152.506139][ T6285] [ 153.149509][ T6285] memory: usage 307200kB, limit 307200kB, failcnt 21236 [ 153.156914][ T6285] memory+swap: usage 431688kB, limit 9007199254740988kB, failcnt 0 [ 153.164864][ T6285] kmem: usage 2104kB, limit 9007199254740988kB, failcnt 0 [ 153.172436][ T6285] Memory cgroup stats for /syz0: [ 153.172758][ T6285] cache 311595008 [ 153.195517][ T6285] rss 151552 [ 153.201856][ T6285] rss_huge 0 [ 153.205273][ T6285] shmem 311595008 [ 153.219422][ T6285] mapped_file 32321536 [ 153.223757][ T6285] dirty 0 [ 153.227097][ T6285] writeback 0 [ 153.231327][ T6285] workingset_refault_anon 1325 [ 153.247630][ T6285] workingset_refault_file 49 [ 153.256087][ T6285] swap 127475712 [ 153.269491][ T6285] swapcached 491520 [ 153.276139][ T6285] pgpgin 140533 [ 153.293918][ T6285] pgpgout 64303 [ 153.305026][ T6285] pgfault 47178 [ 153.327250][ T6285] pgmajfault 209 [ 153.330907][ T6285] inactive_anon 145649664 [ 153.359710][ T6285] active_anon 166588416 [ 153.363950][ T6285] inactive_file 0 [ 153.393397][ T6285] active_file 0 [ 153.419335][ T6285] unevictable 0 [ 153.429794][ T6285] hierarchical_memory_limit 314572800 [ 153.496249][ T6285] hierarchical_memsw_limit 9223372036854771712 [ 153.502493][ T6285] total_cache 311595008 [ 153.523439][ T6285] total_rss 151552 [ 153.546247][ T6285] total_rss_huge 0 [ 153.550042][ T6285] total_shmem 311595008 [ 153.554232][ T6285] total_mapped_file 32321536 [ 153.562520][ T6285] total_dirty 0 [ 153.571802][ T6285] total_writeback 0 [ 153.575686][ T6285] total_workingset_refault_anon 1325 [ 153.637178][ T6285] total_workingset_refault_file 49 [ 153.642364][ T6285] total_swap 127475712 [ 153.651530][ T6285] total_swapcached 491520 [ 153.698383][ T6285] total_pgpgin 140533 [ 153.702447][ T6285] total_pgpgout 64303 [ 153.723901][ T6285] total_pgfault 47178 [ 153.736119][ T6285] total_pgmajfault 209 [ 153.740271][ T6285] total_inactive_anon 145649664 [ 153.745152][ T6285] total_active_anon 166588416 [ 153.775116][ T6285] total_inactive_file 0 [ 153.784268][ T6285] total_active_file 0 [ 153.799244][ T6285] total_unevictable 0 [ 153.803298][ T6285] anon_cost 0 [ 153.863849][ T6285] file_cost 0 [ 153.870228][ T6285] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.79,pid=6293,uid=0 [ 153.887091][ T6285] Memory cgroup out of memory: Killed process 6293 (syz.0.79) total-vm:164168kB, anon-rss:1072kB, file-rss:21668kB, shmem-rss:31488kB, UID:0 pgtables:252kB oom_score_adj:1000 [ 154.356263][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.362414][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.436225][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.442342][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.683311][ T6728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.179'. [ 156.065060][ T32] oom_reaper: reaped process 6293 (syz.0.79), now anon-rss:32kB, file-rss:20544kB, shmem-rss:28928kB [ 156.650017][ T6286] syz.0.79 (6286) used greatest stack depth: 19640 bytes left [ 157.638182][ T6293] syz.0.79 (6293) used greatest stack depth: 18056 bytes left [ 159.754437][ T6810] FAULT_INJECTION: forcing a failure. [ 159.754437][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 159.789487][ T6810] CPU: 1 UID: 0 PID: 6810 Comm: syz.1.191 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 159.789534][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.789553][ T6810] Call Trace: [ 159.789563][ T6810] [ 159.789576][ T6810] dump_stack_lvl+0x16c/0x1f0 [ 159.789629][ T6810] should_fail_ex+0x512/0x640 [ 159.789683][ T6810] should_failslab+0xc2/0x120 [ 159.789725][ T6810] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 159.789764][ T6810] ? dst_alloc+0x99/0x1a0 [ 159.789801][ T6810] dst_alloc+0x99/0x1a0 [ 159.789835][ T6810] rt_dst_alloc+0x35/0x3a0 [ 159.789880][ T6810] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 159.789946][ T6810] ip_route_output_key_hash+0x137/0x2e0 [ 159.789995][ T6810] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 159.790069][ T6810] ip_route_output_flow+0x27/0x150 [ 159.790123][ T6810] sctp_v4_get_dst+0xcb6/0x1340 [ 159.790189][ T6810] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 159.790261][ T6810] ? __pfx_sctp_generate_proto_unreach_event+0x10/0x10 [ 159.790306][ T6810] ? lockdep_init_map_type+0x5c/0x280 [ 159.790358][ T6810] ? sctp_transport_route+0x12f/0x350 [ 159.790393][ T6810] sctp_transport_route+0x12f/0x350 [ 159.790445][ T6810] sctp_assoc_add_peer+0x741/0x1550 [ 159.790491][ T6810] sctp_connect_new_asoc+0x208/0x790 [ 159.790538][ T6810] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 159.790576][ T6810] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 159.790645][ T6810] __sctp_connect+0x3f3/0xc60 [ 159.790686][ T6810] ? do_raw_spin_lock+0x12c/0x2b0 [ 159.790737][ T6810] ? __pfx___sctp_connect+0x10/0x10 [ 159.790776][ T6810] ? __pfx_sctp_inet_connect+0x10/0x10 [ 159.790814][ T6810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 159.790861][ T6810] ? __pfx_sctp_inet_connect+0x10/0x10 [ 159.790894][ T6810] sctp_inet_connect+0x15f/0x200 [ 159.790933][ T6810] __sys_connect_file+0x13e/0x1a0 [ 159.790969][ T6810] __sys_connect+0x14d/0x170 [ 159.790999][ T6810] ? __pfx___sys_connect+0x10/0x10 [ 159.791047][ T6810] ? rcu_is_watching+0x12/0xc0 [ 159.791086][ T6810] __x64_sys_connect+0x72/0xb0 [ 159.791136][ T6810] ? lockdep_hardirqs_on+0x7c/0x110 [ 159.791181][ T6810] do_syscall_64+0xcd/0x230 [ 159.791232][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.791266][ T6810] RIP: 0033:0x7fb35498e969 [ 159.791291][ T6810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.791322][ T6810] RSP: 002b:00007fb35585b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 159.791353][ T6810] RAX: ffffffffffffffda RBX: 00007fb354bb5fa0 RCX: 00007fb35498e969 [ 159.791374][ T6810] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 159.791394][ T6810] RBP: 00007fb354a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 159.791414][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.791433][ T6810] R13: 0000000000000000 R14: 00007fb354bb5fa0 R15: 00007ffd52fcca48 [ 159.791482][ T6810] [ 164.395028][ T6885] netlink: 4651 bytes leftover after parsing attributes in process `syz.2.211'. [ 165.243149][ T6900] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 166.626910][ T6931] ======================================================= [ 166.626910][ T6931] WARNING: The mand mount option has been deprecated and [ 166.626910][ T6931] and is ignored by this kernel. Remove the mand [ 166.626910][ T6931] option from the mount to silence this warning. [ 166.626910][ T6931] ======================================================= [ 166.661823][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.244655][ T6965] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 168.845389][ T6974] binder: 6973:6974 ioctl c018620c 0 returned -1 [ 169.296688][ T6979] syz.1.235 (6979): attempted to duplicate a private mapping with mremap. This is not supported. [ 171.252165][ T6994] netlink: zone id is out of range [ 171.327516][ T6994] netlink: zone id is out of range [ 171.332717][ T6994] netlink: zone id is out of range [ 171.346655][ T6994] netlink: zone id is out of range [ 171.351972][ T6994] netlink: zone id is out of range [ 171.357266][ T6994] netlink: zone id is out of range [ 171.362541][ T6994] netlink: zone id is out of range [ 171.367849][ T6994] netlink: zone id is out of range [ 171.373247][ T6994] netlink: zone id is out of range [ 171.378626][ T6994] netlink: zone id is out of range [ 171.705456][ T6998] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.714807][ T6998] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.721287][ T6998] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.727947][ T6998] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.425521][ T7026] netlink: 'syz.2.247': attribute type 10 has an invalid length. [ 172.709462][ T7034] FAULT_INJECTION: forcing a failure. [ 172.709462][ T7034] name failslab, interval 1, probability 0, space 0, times 0 [ 172.730230][ T7034] CPU: 0 UID: 0 PID: 7034 Comm: syz.3.250 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 172.730277][ T7034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.730293][ T7034] Call Trace: [ 172.730303][ T7034] [ 172.730315][ T7034] dump_stack_lvl+0x16c/0x1f0 [ 172.730365][ T7034] should_fail_ex+0x512/0x640 [ 172.730408][ T7034] ? fs_reclaim_acquire+0xae/0x150 [ 172.730456][ T7034] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 172.730498][ T7034] should_failslab+0xc2/0x120 [ 172.730534][ T7034] __kmalloc_noprof+0xd2/0x510 [ 172.730578][ T7034] tomoyo_realpath_from_path+0xc2/0x6e0 [ 172.730627][ T7034] ? tomoyo_profile+0x47/0x60 [ 172.730679][ T7034] tomoyo_path_number_perm+0x245/0x580 [ 172.730715][ T7034] ? tomoyo_path_number_perm+0x237/0x580 [ 172.730756][ T7034] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 172.730796][ T7034] ? find_held_lock+0x2b/0x80 [ 172.730863][ T7034] ? find_held_lock+0x2b/0x80 [ 172.730890][ T7034] ? hook_file_ioctl_common+0x145/0x410 [ 172.730934][ T7034] ? __fget_files+0x20e/0x3c0 [ 172.730989][ T7034] security_file_ioctl+0x9b/0x240 [ 172.731030][ T7034] __x64_sys_ioctl+0xb7/0x200 [ 172.731074][ T7034] do_syscall_64+0xcd/0x230 [ 172.731132][ T7034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.731162][ T7034] RIP: 0033:0x7faabd58e969 [ 172.731186][ T7034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.731215][ T7034] RSP: 002b:00007faabe333038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.731247][ T7034] RAX: ffffffffffffffda RBX: 00007faabd7b5fa0 RCX: 00007faabd58e969 [ 172.731267][ T7034] RDX: 0000000000000000 RSI: 00000000000007a6 RDI: 0000000000000003 [ 172.731286][ T7034] RBP: 00007faabe333090 R08: 0000000000000000 R09: 0000000000000000 [ 172.731304][ T7034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.731322][ T7034] R13: 0000000000000000 R14: 00007faabd7b5fa0 R15: 00007ffeb8a15258 [ 172.731362][ T7034] [ 172.731439][ T7034] ERROR: Out of memory at tomoyo_realpath_from_path. [ 172.846376][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.302044][ T7042] sctp: [Deprecated]: syz.3.252 (pid 7042) Use of int in max_burst socket option deprecated. [ 173.302044][ T7042] Use struct sctp_assoc_value instead [ 173.717128][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.796897][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.796908][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.730540][ T7072] can: request_module (can-proto-0) failed. [ 177.522542][ T7113] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 178.000295][ T7112] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 178.851590][ T5833] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 180.132802][ T7167] bridge0: port 3(erspan0) entered blocking state [ 180.172399][ T7167] bridge0: port 3(erspan0) entered disabled state [ 180.285861][ T7167] erspan0: entered allmulticast mode [ 180.469681][ T7167] erspan0: entered promiscuous mode [ 180.597465][ T7167] bridge0: port 3(erspan0) entered blocking state [ 180.604353][ T7167] bridge0: port 3(erspan0) entered forwarding state [ 180.990041][ T7163] kexec: Could not allocate control_code_buffer [ 181.313338][ T30] audit: type=1800 audit(6041943466.663:5): pid=7194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.292" name="trace_pipe" dev="tracefs" ino=191 res=0 errno=0 [ 184.416844][ T7220] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.148452][ T7244] CIFS: VFS: Invalid SecurityFlags: [ 185.262687][ T7244] CIFS: VFS: Invalid SecurityFlags: [ 185.396824][ T7244] CIFS: VFS: Invalid SecurityFlags: [ 185.402215][ T7244] CIFS: VFS: Invalid SecurityFlags: [ 185.457413][ T7243] netlink: 342 bytes leftover after parsing attributes in process `syz.0.304'. [ 185.513970][ T7244] CIFS: VFS: Invalid SecurityFlags: [ 185.529206][ T7244] CIFS: VFS: Invalid SecurityFlags: [ 185.603602][ T7244] CIFS: VFS: Invalid SecurityFlags: [ 185.621311][ T7244] CIFS: VFS: Invalid SecurityFlags: [ 185.866171][ T7244] CIFS: VFS: Invalid SecurityFlags: [ 185.871555][ T7244] CIFS: VFS: Invalid SecurityFlags: [ 186.372304][ T7260] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 186.765832][ T7259] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 186.777770][ T7259] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 186.786203][ T7259] CPU: 1 UID: 0 PID: 7259 Comm: syz.2.308 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 186.798107][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.808171][ T7259] RIP: 0010:do_move_mount+0x1fd/0x1930 [ 186.813650][ T7259] Code: 03 80 3c 02 00 0f 85 65 13 00 00 49 8d 44 24 48 4d 8b 76 18 48 89 c2 48 89 44 24 40 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 78 13 00 00 49 8b 44 24 48 48 89 44 24 20 4d 39 [ 186.833298][ T7259] RSP: 0018:ffffc9000460fdb8 EFLAGS: 00010206 [ 186.839441][ T7259] RAX: dffffc0000000000 RBX: ffff888027524b00 RCX: ffffc9000d11d000 [ 186.847469][ T7259] RDX: 0000000000000006 RSI: ffffffff823bed44 RDI: ffff88801de80490 [ 186.855486][ T7259] RBP: ffff88801ca91360 R08: 0000000000000007 R09: fffffffffffff000 [ 186.863490][ T7259] R10: ffff888027524b00 R11: 0000000000000000 R12: ffffffffffffffea [ 186.871479][ T7259] R13: ffff88803041b800 R14: ffff88803041b800 R15: ffffc9000460fe90 [ 186.879463][ T7259] FS: 00007f5e026ac6c0(0000) GS:ffff888124aec000(0000) knlGS:0000000000000000 [ 186.888423][ T7259] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.895016][ T7259] CR2: 0000001b30309ff8 CR3: 000000006188a000 CR4: 00000000003526f0 [ 186.903024][ T7259] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 186.911004][ T7259] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 186.918985][ T7259] Call Trace: [ 186.922271][ T7259] [ 186.925278][ T7259] __do_sys_move_mount+0x555/0x7c0 [ 186.930410][ T7259] ? __pfx___do_sys_move_mount+0x10/0x10 [ 186.936062][ T7259] ? rcu_is_watching+0x12/0xc0 [ 186.940839][ T7259] do_syscall_64+0xcd/0x230 [ 186.945364][ T7259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.951267][ T7259] RIP: 0033:0x7f5e0178e969 [ 186.955691][ T7259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.975320][ T7259] RSP: 002b:00007f5e026ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 186.983752][ T7259] RAX: ffffffffffffffda RBX: 00007f5e019b6080 RCX: 00007f5e0178e969 [ 186.991739][ T7259] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: 0000000000000000 [ 186.999723][ T7259] RBP: 00007f5e01810ab1 R08: 0000000000000077 R09: 0000000000000000 [ 187.007703][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.015691][ T7259] R13: 0000000000000000 R14: 00007f5e019b6080 R15: 00007ffc455c8418 [ 187.023700][ T7259] [ 187.026826][ T7259] Modules linked in: [ 187.030804][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.037263][ T7259] ---[ end trace 0000000000000000 ]--- [ 187.086238][ T7259] RIP: 0010:do_move_mount+0x1fd/0x1930 [ 187.093503][ T7259] Code: 03 80 3c 02 00 0f 85 65 13 00 00 49 8d 44 24 48 4d 8b 76 18 48 89 c2 48 89 44 24 40 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 78 13 00 00 49 8b 44 24 48 48 89 44 24 20 4d 39 [ 187.120778][ T7259] RSP: 0018:ffffc9000460fdb8 EFLAGS: 00010206 [ 187.205554][ T7259] RAX: dffffc0000000000 RBX: ffff888027524b00 RCX: ffffc9000d11d000 [ 187.227415][ T7259] RDX: 0000000000000006 RSI: ffffffff823bed44 RDI: ffff88801de80490 [ 187.242576][ T7259] RBP: ffff88801ca91360 R08: 0000000000000007 R09: fffffffffffff000 [ 187.308684][ T7259] R10: ffff888027524b00 R11: 0000000000000000 R12: ffffffffffffffea [ 187.326272][ T7259] R13: ffff88803041b800 R14: ffff88803041b800 R15: ffffc9000460fe90 [ 187.334365][ T7259] FS: 00007f5e026ac6c0(0000) GS:ffff8881249ec000(0000) knlGS:0000000000000000 [ 187.343624][ T7259] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.357607][ T7259] CR2: 0000200000016000 CR3: 000000006188a000 CR4: 00000000003526f0 [ 187.365790][ T7259] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 187.373965][ T7259] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 187.382622][ T7259] Kernel panic - not syncing: Fatal exception [ 187.389076][ T7259] Kernel Offset: disabled [ 187.393415][ T7259] Rebooting in 86400 seconds..