last executing test programs: 5m52.700157085s ago: executing program 0 (id=2077): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x101440, 0x0) socket(0x3, 0x1, 0x17e) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3ff, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon5\x00', 0x2c0000, 0x0) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8719) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv6/conf/bond_slave_0/ra_honor_pio_life\x00', 0x18302, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x840, 0xc) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x4, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x709500, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0xf, 0x4, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x1000009, 0x3, 0x26, 0x940, 0x1ffde, 0x5, 0x6, 0x3ff, 0x9, 0x400005, 0xfff, 0x4, 0xb0, 0x6, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, [0x3, 0x3, 0x200000000, 0x400000000, 0x0, 0x3903, 0x0, 0xfff, 0x3, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x570c, 0x4, 0x8, 0xceb, 0x0, 0xfffffffffffffffc, 0x45, 0x4, 0x0, 0xffffffffffffffff, 0x2, 0x104001, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3]}, 0xfffff7fffffffffa, 0x7d) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x40090) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x3, 0xa505}, 0x800}, 0x7, 0x4008) 5m52.267954183s ago: executing program 0 (id=2081): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/netdev:wlan0/stations/08:02:11:00:00:01/ht_capa\x00', 0x2, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, &(0x7f00000000c0)=""/43, 0x2b) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000016c0)={'team_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001740)={'nicvf0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001780)={0x188, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PHY_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_PHY_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PHY_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PHY_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x101}]}, @ETHTOOL_A_PHY_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xadf}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_PHY_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_PHY_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PHY_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PHY_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x11}, 0x4031) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(0x3, 0x4b66, 0x38) 5m51.642224411s ago: executing program 0 (id=2087): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) 5m51.518790248s ago: executing program 0 (id=2088): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/43:288/max_bytes\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x35, 0x1, 0x0, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, [0xffffffffffffffff, 0x0, 0x0, 0xff, 0x4, 0x6, 0xfffffffffffffffd, 0xa, 0x70624ce7, 0x0, 0xffffffffffffffff, 0x947, 0x3, 0x1, 0x4, 0x7, 0x16128f2c, 0x5, 0xff, 0x0, 0xffffffffefffffff, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x400000000005b8, 0xe, 0x4000000000, 0x8, 0x4, 0x6, 0x6, 0x892, 0x800000000000a, 0x3, 0xffc, 0xa38, 0x0, 0x4, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x8, 0x0, 0x100000], "663d92aea81dd28db5bfeb266e2a954fdb4649c3d98d6a38bd0d50a26249e60b4a1349f3e5f90afcb08346374f111d7b46e1ae3219100e190df3b4fdf116615bb5040a54cf9d74303d58ac01c8e44f44a46dbe9d83b07d631dff1a12007db3097df8ba845b18"}, 0x1fe, 0xd) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) fanotify_init$auto(0x5, 0x2000000000002) r1 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, 0x0, 0x400, 0x0) readv$auto(r1, 0x0, 0x1) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cb, 0x1ff}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) ioctl$auto_UI_SET_EVBIT(r2, 0x40045564, 0x0) openat2$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x2, 0x100000000}, 0x101) r3 = fcntl$auto_F_DUPFD_QUERY(0xffffffffffffffff, 0x403, 0x0) ioctl$auto_SG_SET_RESERVED_SIZE2(r3, 0x2275, &(0x7f0000000000)="9efe917680f86e9192033c67a84c3b848c5cec282ffa09c484e4747d520f2dab6030af657c00c5521d2704205bafca7153960f36940ad496d8727f1f936e87a001c97b68c81e5d259343ccd2bc4aaf36634cbc0294a01bf7e352945c687cb02649651ce89f66d508f4fb895903ec726fa8bf38504ff9b2b7585de3af2374363c7d20aee7b950198e0db327185fcf7e9483dd6b4e4577e8c9c3713129f57a5fbfcd7bde1c3ea93e50b486f326465112f8d7b9470af5bce6551dbcaec954") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 5m51.354898774s ago: executing program 0 (id=2089): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}, 0x1, 0x0, 0x0, 0x10091}, 0x4000000) mmap$auto(0x0, 0x2020009, 0x1003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) connect$auto(0x3, &(0x7f0000000140)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x55) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x64401, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/hsr0/disable_policy\x00', 0x1, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, &(0x7f0000000280)='~', 0x1) close_range$auto(r3, r3, 0x0) socket(0x2, 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r5) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002dbd9100f9dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x165e01, 0x0) write$auto(0x3, 0x0, 0xfdef) 5m51.277997799s ago: executing program 0 (id=2091): poll$auto(&(0x7f00000002c0)={0xffffffffffffffff, 0x8000, 0x3}, 0x4, 0xfff) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/kmsg\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x3, &(0x7f00000001c0)=@bpf_attr_7={@prog_id=0x8001, 0x2, 0xf}, 0xc) poll$auto(&(0x7f0000000040)={r0, 0x1000, 0x1c9}, 0x4, 0x7) unshare$auto(0x40000080) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) r4 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r4, 0x2) flock$auto(r4, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/ums-freecom/uevent\x00', 0x11d716494b4511cb, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000080)=""/64, 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0xa, 0x3, 0x4) getsockopt$auto(r6, 0xff, 0xb, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) readahead$auto(r7, 0x9, 0x7fffffffffffffff) 5m36.121736727s ago: executing program 32 (id=2091): poll$auto(&(0x7f00000002c0)={0xffffffffffffffff, 0x8000, 0x3}, 0x4, 0xfff) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/kmsg\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x3, &(0x7f00000001c0)=@bpf_attr_7={@prog_id=0x8001, 0x2, 0xf}, 0xc) poll$auto(&(0x7f0000000040)={r0, 0x1000, 0x1c9}, 0x4, 0x7) unshare$auto(0x40000080) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) r4 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r4, 0x2) flock$auto(r4, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/ums-freecom/uevent\x00', 0x11d716494b4511cb, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000080)=""/64, 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0xa, 0x3, 0x4) getsockopt$auto(r6, 0xff, 0xb, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) readahead$auto(r7, 0x9, 0x7fffffffffffffff) 4m12.4873476s ago: executing program 1 (id=2687): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) semctl$auto(0x80001ff, 0x804, 0x3, 0x4) setsockopt$auto(0x3, 0x29, 0x40, 0x0, 0x10001) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/max_integrity_segments\x00', 0x103800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/56, 0x38) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/65, 0x41) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0) 4m12.29429785s ago: executing program 1 (id=2689): r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(r0, 0x8, 0x7ff) socketpair$auto(0x402, 0x0, 0x1, 0x0) open(0x0, 0x163340, 0x2a) socket(0x2a, 0x2, 0x1) waitid$auto_P_PIDFD(0x3, r0, &(0x7f0000000140)={@siginfo_0_0={0x0, 0x3, 0x0, @_sigsys={0x0, 0xfffffbff, 0x8}}}, 0x7fffffff, &(0x7f00000001c0)={{0x3, 0x2}, {0x1, 0x10000}, 0x2, 0x100, 0xc7, 0xffffffffffffffff, 0x7f, 0x8f7, 0x9, 0x1000000000000006, 0x33, 0x200, 0x2, 0xf04, 0xffffffffffffffff, 0x5}) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r1, 0x2, 0x4) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0xb}, 0x3) sched_rr_get_interval$auto(0x0, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x28140, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m12.033619329s ago: executing program 1 (id=2693): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = getegid() ioctl$auto_KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000000c0)={0x3ff, r2, 0x0, 0x80000001}) read$auto(r0, &(0x7f0000000240)='/\x00', 0x100000001) 4m11.854528705s ago: executing program 1 (id=2694): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r0 = socket(0x10, 0x2, 0x4) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2505000000da02038008", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r0, @ANYBLOB="0800fb00", @ANYRES32], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4m11.693706037s ago: executing program 1 (id=2695): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) stat$auto(0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x124001, 0x0) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0x400000000b0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, [0x3, 0x3, 0x200000000, 0x400000000, 0x0, 0x3903, 0x0, 0x4, 0x3, 0x2000, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x14, 0x0, 0xccb, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2, 0x7fe, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18c]}, 0xfffff7fffffffffa, 0x81) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0xe0fdffff7f0000, 0x2000d, 0x7, 0xeb1, 0x404, 0x8000) listmount$auto(0x0, 0x0, 0xf4240, 0x1) 4m11.547589081s ago: executing program 1 (id=2697): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0xff, &(0x7f0000000080)={[0x9, 0xfffffffffffffffc, 0x10001, 0xe, 0xc, 0x3, 0x3, 0x1ffe000, 0xcae, 0x2, 0x5, 0x1, 0xa654, 0x202, 0x9, 0x80000001]}, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) userfaultfd$auto(0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x806, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop5\x00', 0x8003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0x4, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nbd10\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x1d, 0x80000, 0x6) socketpair$auto(0x8, 0x7fff, 0x9, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0p\x00', 0x101001, 0x0) socketpair$auto(0x9, 0x3, 0x80000fff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0xffffffffffffffff, r0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f00000000c0)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000280)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1004}, 0x1}, 0x2, 0x103) open(&(0x7f0000000140)='./file0\x00', 0x22240, 0x12) fcntl$auto(0x3, 0x400, 0xffffffffffffffff) fremovexattr$auto(0x3, &(0x7f0000000080)='\\-\x00') mknod$auto(&(0x7f0000000100)=':,\x00', 0xc9, 0xfffefffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000340)='$+[-+\x98%(,\x00\xdc\xec^&\x9e\x1c3\xeaf[|\xdeZ\xed2\xbc\xbd^\xc3\x0f\xc4\xd9\x94\x94B3\x97p\'\xf7\xea\xd5\xf9=\xe5\x1e\f\x8d\xe3\xb7\xadS\xbd\xb2uu\xc1I\xdew\x13.[\xee\xb6L\x983Z\xecS_\xff\xec\t\xd7\t\xa1&\x832Q&\x99\xbbI\xb5\xd2\xc7\xc8\x02S\x18ubI*\x8e\xd9\xd4\xaf\x8b\xfa\x8a\x90\xcd\x90\xaf\x95\x90\x1bU{O\x9cw\x8ez\xa1\xb23^\"\xbc\xd8\x0fT\xb7\x80\x00\bW\xd3\x9d=\x18\x91\x00\xedn\x9c\x93\x82@\x1a\xaex\xad*I\x1b\xa4Mx\x91f\xa6h\xb2c\x01Pf\x06\x18\xbd\x85\x1a\xea\xdc\x9bH\xcc\x1enhul8\xbdW^r\xe4\x04n\x8fK\x8f\xa1\xdc\xfc\xee\x97wO6\xe1+\xe7\xb0\v\xdfu\xb3\xa9L\x85\x1cW\x89~\x98\xfb&(\x9e\xa8\x8a\xed\xcaw,\x13\x13\x99a\x8d\xc6\xea\xff,\x11\x80\xe6H\xea\xe0\xcf\xab\xc2}I\xf5A\xd2\xf4\xc9_\x16\x97r\x94;\xb7\xd8\xf5)\xca)\xcf\x02\x0f\xa5V\xd17U*5C\x19\x8cL\xb5Ds.\x1b\xf9\x7f?b\xaf\x9d\xd4ww4\xa1\xc4\xfe\xf2\xda\x10\xdcV\x0e\x00'/311, 0x0) 3m56.292790355s ago: executing program 33 (id=2697): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0xff, &(0x7f0000000080)={[0x9, 0xfffffffffffffffc, 0x10001, 0xe, 0xc, 0x3, 0x3, 0x1ffe000, 0xcae, 0x2, 0x5, 0x1, 0xa654, 0x202, 0x9, 0x80000001]}, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) userfaultfd$auto(0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x806, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop5\x00', 0x8003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0x4, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nbd10\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x1d, 0x80000, 0x6) socketpair$auto(0x8, 0x7fff, 0x9, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0p\x00', 0x101001, 0x0) socketpair$auto(0x9, 0x3, 0x80000fff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0xffffffffffffffff, r0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f00000000c0)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000280)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1004}, 0x1}, 0x2, 0x103) open(&(0x7f0000000140)='./file0\x00', 0x22240, 0x12) fcntl$auto(0x3, 0x400, 0xffffffffffffffff) fremovexattr$auto(0x3, &(0x7f0000000080)='\\-\x00') mknod$auto(&(0x7f0000000100)=':,\x00', 0xc9, 0xfffefffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000340)='$+[-+\x98%(,\x00\xdc\xec^&\x9e\x1c3\xeaf[|\xdeZ\xed2\xbc\xbd^\xc3\x0f\xc4\xd9\x94\x94B3\x97p\'\xf7\xea\xd5\xf9=\xe5\x1e\f\x8d\xe3\xb7\xadS\xbd\xb2uu\xc1I\xdew\x13.[\xee\xb6L\x983Z\xecS_\xff\xec\t\xd7\t\xa1&\x832Q&\x99\xbbI\xb5\xd2\xc7\xc8\x02S\x18ubI*\x8e\xd9\xd4\xaf\x8b\xfa\x8a\x90\xcd\x90\xaf\x95\x90\x1bU{O\x9cw\x8ez\xa1\xb23^\"\xbc\xd8\x0fT\xb7\x80\x00\bW\xd3\x9d=\x18\x91\x00\xedn\x9c\x93\x82@\x1a\xaex\xad*I\x1b\xa4Mx\x91f\xa6h\xb2c\x01Pf\x06\x18\xbd\x85\x1a\xea\xdc\x9bH\xcc\x1enhul8\xbdW^r\xe4\x04n\x8fK\x8f\xa1\xdc\xfc\xee\x97wO6\xe1+\xe7\xb0\v\xdfu\xb3\xa9L\x85\x1cW\x89~\x98\xfb&(\x9e\xa8\x8a\xed\xcaw,\x13\x13\x99a\x8d\xc6\xea\xff,\x11\x80\xe6H\xea\xe0\xcf\xab\xc2}I\xf5A\xd2\xf4\xc9_\x16\x97r\x94;\xb7\xd8\xf5)\xca)\xcf\x02\x0f\xa5V\xd17U*5C\x19\x8cL\xb5Ds.\x1b\xf9\x7f?b\xaf\x9d\xd4ww4\xa1\xc4\xfe\xf2\xda\x10\xdcV\x0e\x00'/311, 0x0) 3m22.844759021s ago: executing program 5 (id=3009): mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8d00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) socketpair$auto(0x1e, 0x0, 0x80, 0x0) ioctl$auto(r2, 0x4008af03, r2) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) r5 = socket(0xa, 0x1, 0x0) recvmmsg$auto(r5, &(0x7f0000000280)={{0x0, 0x1ff, &(0x7f0000000040)={0x0, 0xd}, 0x9, 0x0, 0x80000001, 0x2}, 0x1}, 0x80000000, 0x7956, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010025bd00ffdbdf250400000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x4004040) read$auto(r3, 0x0, 0x1) openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0x40, 0x0) r8 = socket(0xa, 0x2, 0x0) setsockopt$auto(r8, 0x0, 0x30, 0x0, 0x568) 3m21.183471017s ago: executing program 5 (id=3013): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x200000c0) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x8, 0x4008) r3 = open(&(0x7f0000000800)='./file0\x00', 0x20042, 0x154) mmap$auto(0x2, 0x128009, 0xdf, 0xeb1, 0x401, 0x8001) ioctl$auto(r3, 0x7fffffff, r3) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x40, 0x1ff, 0x9}) ioctl$auto_SNDCTL_TMR_METRONOME(r3, 0x40045407, &(0x7f0000000100)="5f8dbe6d27d6a277aba58cb05a0064d36439cf91e393ce70c8ddbd57d7360b1db48b57bb824b156c4120ca05f06abe0aa4441aeb924ed014db2366c57225cacd02975c3f5eb4a8a02d811f5459cdb85adbf8d1c57ddb4d370f950395064ad3715b7516f91568c8b3cea141044ce4e60638931b604729f0e60ddccfb38c56dd") listxattr$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x4000000000200011) signalfd4$auto(0xffffffffffffffff, &(0x7f0000000080)={0x8}, 0x4, 0x5) r4 = gettid() tkill$auto(r4, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0001, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000240), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) shmctl$auto_SHM_INFO(0x7, 0xe, &(0x7f0000001080)={{0x5, 0x0, 0x0, 0xfffffff6, 0x2, 0x5, 0x8}, 0x400, 0x4, 0x1000, 0x1800000000000000, @raw=0x80, @raw=0x28e, 0x80, 0x0, &(0x7f0000000000)="fbfc5ab80473a07faab0aa0f45053e1aa1d2cb0584d814e78ce7bf8c87e1a81785f0da9e2ff2f6e8a127427230edf384f85984942bc3da3bcbbcc2dba59e94bffbe6d6b4a47e77e95e", 0x0}) ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000000c0)={{0xfffffe01, 0x4, 0x7ff, 0x8, 0x8}, 0x800, 0x7441, "a02bfe35ba6087bc480b90d57b7be01547e2f1feac58f5ff1bdca283c2c826c291dc1d3e2eab1a14871a412539f0b16207c63190ce7a584b2a30945f6855d5dc", "9b456206640515c0b1f05632d19bb46c8190424bc99edb2bf4edd623f82a5f2c18d69fc5217e986b74e5a67c4ca684e3cf59d66ff242ee026c1331d9e43ee7e73ebff3274823d2786ac9f41fe59bf180", 0x100000001, 0x10001, 0xffffffffffffff59, 0x1, 0x11ec84d8, "ab00bf495f1c90ffb61dad41c6d298d100"}) epoll_create$auto(0x2) socket(0xa, 0x6, 0x0) socket(0x2b, 0x1, 0x21) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) syz_open_procfs$namespace(0x0, 0x0) ioperm$auto(0x7, 0x6, 0x2) 3m20.452332299s ago: executing program 5 (id=3016): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0x7, 0x6, 0x1) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x500, 0x0) mmap$auto(0x0, 0xb, 0x72, 0x8b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x3567, 0x2, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) acct$auto(&(0x7f0000000080)='/proc/sys/kernel/sched_deadline\xdcBH\xc7H\xe2\x1d\b\x00ax_us\x00\xae\xb5\x86\xe9\xf6\xfe\x9b6\x91\x8f\x158\xe7qwI\t0\xc3\xd1\xcd\xf5\x04\xe0B\xe0U<\xb1\x1d\xda\xd2') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x111142, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) read$auto_tracing_pipe_fops_trace(0xffffffffffffffff, &(0x7f0000000100)=""/70, 0x46) setresuid$auto(0x2, 0x7, 0x8080) ioctl$auto(r2, 0x4b3a, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) write$auto(r0, 0x0, 0x8) set_mempolicy$auto(0x4005, &(0x7f0000000000)=0x1, 0x4) io_uring_register$auto(r1, 0x80, &(0x7f0000000240)="89cb92b4015e75fcfb76862efb1f38685d5d0906c31f6a23a61374f4071c09b4bfb0bee1c83bb920dc13b470b60b60d664b688eff561ae914e32da4779e0d6c6f1300e158bfcc179fa82dbdfdefebef014217443721b51426045f8405f25f581fdaa2bb52dc0ca73860d6393a74d1a0bb2ff3f6d6f404150f190b22c6000fffbfce06d7bcaf068af5bfba809446e81bd88de11eca4807a7689e9a9", 0x3) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r3, &(0x7f0000000000)=""/156, 0x9c) wait4$auto(0x0, &(0x7f0000000200)=0x400, 0x1c000000, &(0x7f0000000300)={{0xd, 0x80000000000005}, {0x1, 0x400000000000002}, 0x2, 0x3, 0x9, 0x0, 0x8, 0xcfe, 0x0, 0x1, 0x800, 0x1, 0x80000001, 0x3, 0x8, 0x5}) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff7, 0xeb1, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 3m19.139393483s ago: executing program 5 (id=3022): mmap$auto(0x400000000000, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) fcntl$auto(r0, 0x400, 0x1) socket(0xa, 0x2, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2200, 0x0) unshare$auto(0x40000080) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) mmap$auto(0x4, 0x102000a, 0x4000000000e0, 0x19, r0, 0x8004) mmap$auto(0x9, 0xb64, 0x3, 0x1a, r1, 0x3ff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0) mmap$auto(0x0, 0x20009, 0x101, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) sendmsg$auto_NFSD_CMD_POOL_MODE_GET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x200000a0) r4 = socket(0x28, 0x6, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x210f, 0x85, 0x0, 0x7ff) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x9}, 0x7}, 0x3, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/12, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x144) r5 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) writev$auto(r5, &(0x7f00000035c0)={0x0, 0x4}, 0x9) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000001c0)={{@raw=0x401, 0x100110d, 0xffff, 0x7, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100"}, 0x6, 0x0, 0x4, @raw=0x404, @integer64={0x6, 0x8, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4923f970bedd3460c667373fcc59b584d815000000006c276852295e00af49e6de6e768034"}) brk$auto(0x8006) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 3m18.346887046s ago: executing program 5 (id=3027): fanotify_init$auto(0x4001, 0x3ff) 3m18.030573495s ago: executing program 5 (id=3029): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/uapsd_max_sp_len\x00', 0x802, 0x0) write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0xff92, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x40, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x16d}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x5}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffff7}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xfff}, @NFSD_A_SERVER_SCOPE={0xc, 0x4, 'nl80211\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7f3493b4c295a75}, 0x8010) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8001) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket(0x1e, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(r4, &(0x7f00000001c0)='/dev/audio1\x00JR\xe7\xae\xd27M0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rseq$auto(&(0x7f0000000000)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x280, 0x0) mmap$auto(0x0, 0x7fffffff, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x100000000, 0xffffffffffff0001, 0x15) brk$auto(0xffffffffffffff66) fanotify_init$auto(0x65, 0x2) sysfs$auto(0x2, 0x7, 0x0) fsopen$auto(0x0, 0x1) kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) mmap$auto(0x2, 0x8, 0x3, 0x15, 0x5, 0x400000000001) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000080)) sendmsg$auto_NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="15c5e4bfaaba247a3daebbee85ce973cfaeec7c313267dfd07203d95e24e67560b828313b91a2ddd02379604338476458f41809ebda4e863228032202f3cfc264c1999880b6ac260c6c5ed38ed1664ae61acc2a774bd7c69c10debc53a0bc7ba537510440a9a2e60e416eb48240cf1", @ANYRES32=r3, @ANYRES32], 0x1d40}, 0x1, 0x0, 0x0, 0x4404}, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000d40)={{@inferred=r4, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="5d29f0ff6c66da3c8d62e8f6a2d4d6190eb2a0bbb3c176faaad23caeb55f27ef7a2e9b9f7e49b11925d33aea2094c0dcc3dadfdd6832a3f720c28eab70a927730ed2d2b21950da0c88c6324fcdf01c7de6422a24593aa05b868299926883690ae0d17f54a2670e87978f049c39c7252db666a3d5253948f6f27676017827eee8cfff1cfe902ab7ebdce6c091aa2ecbae3bc1a43296c74d0df6c7ad02109c6b24af67cfe5e8d583895c31668c6b5bf138574b71bcf68cc021e9c742cb020689061fa2579fd1659f0d75d6ca04e4bda7108da59fa513b0976ede7ebc87f5f9c66574f93e9629171c487085f23fc7cf3991ce264714903f5c83c2a199717f8dd62404add28aea76c977fee9481cd70f03d445d5d21a41b390fc1543d947f62347fef920a304a9227fd71201da2572539effbb2b9f8ba6adb28c586bac6eaafdb522ffd990a70761bd67428afc7488bdd303ff354fde37412c549af73a8a2b8ef44ae2ba59cbf8c016f1c5f043879aff54749fb99713f0459a1b16333e337c4347601a3070a1f885bd42472340feca71030e014ebe88096e3c6379fff202017e06cff06babb272374799da26a46ad623953231bcd75c3e10f0fc0e0326539a41e6ea0aa148c4951661677726f637574aaf2f7da85023bb77386a08088bd094ad7f8982d03131e9a8aeb7962e95be195c3777b6f220efa6b76e5a432703d83548a8d3", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) 3m11.156735316s ago: executing program 3 (id=3067): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000300"/17, 0x11) 3m10.962145945s ago: executing program 3 (id=3069): ioctl$auto_PPPIOCDISCONN(0xffffffffffffffff, 0x7439, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000125b97000fddbdf257e00002b0500af0000000500ee00070000000000"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x8c4) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop2\x00', 0x8080, 0x0) r1 = socket(0x2a, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r2 = setfsgid$auto(0xee01) setresgid$auto(r2, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) getsockopt$auto(r1, 0x84, 0x18, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x4000084) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x1) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x12, 0x3, 0x180000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x460041, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x100) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0xe0) write$auto(0x3, 0x0, 0x100082) setns(0xffffffffffffffff, 0x0) mmap$auto(0x1, 0x1000000044a, 0xffff, 0x40eb1, r3, 0x300000000000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000200), 0x1a1a81, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) 3m2.703687799s ago: executing program 34 (id=3029): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/uapsd_max_sp_len\x00', 0x802, 0x0) write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0xff92, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x40, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x16d}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x5}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffff7}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xfff}, @NFSD_A_SERVER_SCOPE={0xc, 0x4, 'nl80211\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7f3493b4c295a75}, 0x8010) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8001) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket(0x1e, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(r4, &(0x7f00000001c0)='/dev/audio1\x00JR\xe7\xae\xd27Mr1, 0x8, 0x7}, 0x6, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) ioctl$auto_PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000180)={0x1000, &(0x7f0000000140)={0xc51, 0x60, 0x6, @raw=0x5}}) 35.508411654s ago: executing program 4 (id=3638): socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x3) r0 = socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev1\x00', 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x9, &(0x7f0000000000)={0xc, 0xf1, 0xb0, @raw=0x43}}) write$auto(0x3, 0x0, 0x5c8) epoll_pwait2$auto(r0, 0x0, 0xffff8001, 0x0, 0x0, 0x8) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) 33.491588143s ago: executing program 4 (id=3644): openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x88041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/syscall\x00', 0x0, 0x0) bind$auto(r0, &(0x7f0000000100)=@nl=@unspec, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0xfff, &(0x7f0000000040)=@bpf_attr_4={0x1, r1, 0x5, r1}, 0x800) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0xa, 0x4, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0xf, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0xf) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc) mq_unlink$auto(0x0) 31.276887916s ago: executing program 4 (id=3648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0x450100, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30100000", @ANYBLOB="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"], 0x1030}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x24, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x1ff, r3, @relative_id=0x13, 0xe600}, 0xf) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0xc) close_range$auto(0x2, 0x8, 0x0) write$auto_proc_loginuid_operations_base(r2, &(0x7f0000000040)="edf67b1217091ff341284a6c6c942f0c3a285e35a9a3f0a61ff086254713d496b13fd6259a2b03e6fbee4088bfb9512459b58959c73755ce22e5b5ee6c651e58b1ecf186561a4a790989c45a81e738bc7c6f9de46632a116b78c852dd2af10b0dbac4974c0abb05f448e4ec4dca394f10839343667b6d68885c26a40e0e644413fb5bfbadebcc4a490da29c3258b", 0x8e) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mq_open$auto(0x0, 0xde8, 0xb, 0x0) close_range$auto(0x2, 0x8, 0x0) mq_unlink$auto(0x0) 30.265453846s ago: executing program 4 (id=3652): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = clone$auto(0x4, 0x80000001, 0x0, 0x0, 0xfff) move_pages$auto(r0, 0xd0, 0x0, 0x0, 0x0, 0x2) getpid() unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x8004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000080)={0x28, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x14, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'nfsd\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r3 = socket(0x1d, 0x5, 0x3) listen$auto(r3, 0x5ed) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x8001, 0x0) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[], 0x470}, 0x1, 0x0, 0x0, 0x40}, 0x0) futex$auto(0x0, 0x85, 0x10005, 0x0, 0x0, 0x10000007) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x323a81, 0x0) mount$auto(0x0, 0x0, 0x0, 0x3378, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183841, 0x0) openat$auto_memtype_fops_memtype(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x8, 0xffb, 0x8000000008011, 0x3, 0x0) 24.112726005s ago: executing program 8 (id=3668): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r3 = socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.type\x00', 0x103042, 0x0) sendfile$auto(r5, r5, 0x0, 0x200) listmount$auto(&(0x7f00000001c0)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) socket(0x11, 0x3, 0x1803) ioctl$auto(r1, 0xc8, 0x10000000000402) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r6, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x24, r8, 0x301, 0x70b52c, 0x25dfdafb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}, @CTRL_ATTR_OP={0x8, 0xa, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r7) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="01002dbd7000fbdb91f2519550cee6aefc354f2911747bb27f353aff37b1df", @ANYRES32=0x0, @ANYBLOB="080002800400a380"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) 23.279690699s ago: executing program 8 (id=3671): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x4, 0x6}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "87fe7b014077e08701ee88c6923077b8542c55f8c30ccb575540f50c0a515ca3"}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SNDCTL_TMR_START(r2, 0x5402, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) close_range$auto(0x2, 0x8, 0x0) ppoll$auto(&(0x7f0000000000)={r1, 0x3, 0x1}, 0x7368cd54, &(0x7f0000000080)={0x1, 0x4}, &(0x7f00000000c0)={0xda}, 0x8) write$auto(0x3, 0x0, 0x81) 22.822655048s ago: executing program 8 (id=3673): r0 = socket(0x1, 0x5, 0x0) socket(0x2, 0x6, 0x4000) mmap$auto(0x0, 0x40009, 0x4000df, 0x9b72, 0xffffffffffffffff, 0x28000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101800, 0x0) ioctl$auto(r1, 0x5424, 0x1) socket(0x2, 0x4, 0x100) socket(0x28, 0x1, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60300, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xffffffffffffb7f1, 0x948b, 0x2, 0x15f4da0d, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) mmap$auto(0x0, 0x80000000, 0x1, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) socket(0x2, 0x6, 0x2) epoll_ctl$auto(0x5, 0x1, r0, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/uprobe_events\x00', 0x4c0900, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES32, @ANYRESOCT=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x20060010) mmap$auto(0xfffffffffffffffe, 0x202000b, 0xfffffffffffffffd, 0x80000000000016, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(r1, 0x0, 0x2) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r3 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r3, 0x0, 0x20000001) mmap$auto(0x8001, 0x400005, 0x81, 0x13, r3, 0x7) 21.519599215s ago: executing program 8 (id=3675): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) clone$auto(0x20003b46, 0x1, 0x0, 0x0, 0x20000000020002) rseq$auto(&(0x7f00000002c0)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0xfffffff4, 0x0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffd) ioctl$auto_TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) set_mempolicy$auto(0x8003, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = getpid() r2 = pidfd_open$auto(r1, 0x0) process_madvise$auto_MADV_COLD(r2, &(0x7f0000000100)={0x0, 0x37e}, 0x1, 0x14, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) pidfd_open$auto(0x1, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x80108907, 0x0) ptrace$auto_PTRACE_POKETEXT(0x4, r0, 0xc6, 0x4) 20.552155716s ago: executing program 8 (id=3676): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r3 = socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.type\x00', 0x103042, 0x0) sendfile$auto(r5, r5, 0x0, 0x200) listmount$auto(&(0x7f00000001c0)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) socket(0x11, 0x3, 0x1803) ioctl$auto(r1, 0xc8, 0x10000000000402) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r6, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x24, r8, 0x301, 0x70b52c, 0x25dfdafb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}, @CTRL_ATTR_OP={0x8, 0xa, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r7) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="01002dbd7000fbdb91f2519550cee6aefc354f2911747bb27f353aff37b1df", @ANYRES32=0x0, @ANYBLOB="080002800400a380"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) 19.342217449s ago: executing program 8 (id=3678): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:00.0/device\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002980)=""/4075, 0xfeb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) listmount$auto(&(0x7f0000000040)={0x6, @raw=0x200, 0x7, 0x0, 0x8}, &(0x7f00000000c0)=0x10, 0x9, 0xfffffffa) 14.983056291s ago: executing program 37 (id=3652): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = clone$auto(0x4, 0x80000001, 0x0, 0x0, 0xfff) move_pages$auto(r0, 0xd0, 0x0, 0x0, 0x0, 0x2) getpid() unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x8004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000080)={0x28, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x14, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'nfsd\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r3 = socket(0x1d, 0x5, 0x3) listen$auto(r3, 0x5ed) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x8001, 0x0) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[], 0x470}, 0x1, 0x0, 0x0, 0x40}, 0x0) futex$auto(0x0, 0x85, 0x10005, 0x0, 0x0, 0x10000007) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x323a81, 0x0) mount$auto(0x0, 0x0, 0x0, 0x3378, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183841, 0x0) openat$auto_memtype_fops_memtype(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x8, 0xffb, 0x8000000008011, 0x3, 0x0) 11.582450308s ago: executing program 7 (id=3705): io_uring_setup$auto(0x2, &(0x7f00000001c0)={0x5, 0xdf, 0xffffffff, 0x0, 0x53, 0x2, 0xffffffffffffffff, [0x9574, 0x7, 0x9f], {0x9, 0x2, 0x100201, 0x7, 0x40, 0x6f53, 0x1005530, 0x3fe, 0x1}, {0x7, 0x0, 0xffff, 0x6, 0x400, 0x58, 0x2, 0x80000, 0x8000}}) r0 = socket(0x2, 0x801, 0x106) setsockopt$auto(r0, 0x1, 0x2, &(0x7f0000000040)='\xe2 \xa8\xf4', 0x7) connect$auto(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7fff) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) clone$auto(0x3, 0x9, 0x0, 0x0, 0x10001) r2 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf2501"], 0x1c}}, 0x40000) sendmsg$auto_ILA_CMD_FLUSH(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000540)={0x14, r4, 0x1, 0x2, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40844) r5 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r5, 0xc, &(0x7f00000001c0), 0x5) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40000, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) 9.822964823s ago: executing program 7 (id=3706): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_ucma_fops_ucma(0xffffffffffffffff, &(0x7f0000000200)="77b8fa73cfe072855c8a987b836875ff9ec92e12e42aa2d2836e845bba01da39f5167f466f947c46e2fa74eed0f5345c8e1d50fb15d9b6e105de4a407be8112d3e0be4bf1854ad63cc470c011fa223cc35f2a3f9263e5ecec1a111bebc464703b4", 0x61) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, 0x0, 0x20000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x4880) munmap$auto(0x8000, 0xffffffff) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000180)="bcb9c371f46d0d9bdb06c4837f6392975c3dce07fe23702dd7346a3e7774e8881be6660ef6514d314dc7c2a7b07582635940668ee4020f9bb4b577322dbddb1dcc92fbad285a54e448c0423f71bef721ac0eacdf0e2184faac074151ca1655bf5e8814d73eeff0e81576aad5aced36", 0x8000, 0x1}, 0x8}, 0x1, 0x100) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0xff, 0x0, 0x567, 0x4000007}, 0x7}, 0x21ea9eca, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) write$auto(0xffffffffffffffff, &(0x7f0000000100)='/dev/nullb0\x00', 0xa070) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/team_slave_0/forwarding\x00', 0xa60c0, 0x0) read$auto(r1, &(0x7f0000000100)='batadv\x00', 0xcb) mmap$auto(0x0, 0x2020009, 0x2, 0x400000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) sysinfo$auto(0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/o2cb/logmask/ERROR\x00', 0x183042, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 7.60570995s ago: executing program 7 (id=3708): mmap$auto(0x0, 0xa00006, 0x2, 0x13, 0x602, 0x300000000000) prctl$auto_PR_SET_MM_ARG_START(0x4, 0x8, 0xffffffffffffffff, 0xd, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb3, 0x401, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x102, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) mlockall$auto(0x7) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) ioctl$auto_IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x1000000009b72, 0x7, 0x28000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b) rt_sigaction$auto(0x4, &(0x7f0000000300)={&(0x7f0000000240)=0x0, 0x0, 0x0, {0x1}}, 0x0, 0x8) r0 = gettid() rt_sigqueueinfo$auto(r0, 0x1, 0x0) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x80000000, 0x2000a, 0x5, 0xeb2, 0x401, 0x7ffe) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(0x0, 0x201, 0x9, 0x4, 0x0) 5.181974379s ago: executing program 7 (id=3715): openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x88041, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0x450100, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30100000", @ANYBLOB="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"], 0x1030}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x24, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x1ff, r3, @relative_id=0x13, 0xe600}, 0xf) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0xc) close_range$auto(0x2, 0x8, 0x0) write$auto_proc_loginuid_operations_base(r2, &(0x7f0000000040)="edf67b1217091ff341284a6c6c942f0c3a285e35a9a3f0a61ff086254713d496b13fd6259a2b03e6fbee4088bfb9512459b58959c73755ce22e5b5ee6c651e58b1ecf186561a4a790989c45a81e738bc7c6f9de46632a116b78c852dd2af10b0dbac4974c0abb05f448e4ec4dca394f10839343667b6d68885c26a40e0e644413fb5bfbadebcc4a490da29c3258b", 0x8e) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mq_open$auto(0x0, 0xde8, 0xb, 0x0) close_range$auto(0x2, 0x8, 0x0) mq_unlink$auto(0x0) 4.71966376s ago: executing program 9 (id=3717): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) nanosleep$auto(&(0x7f0000000080)={0xfffffffffffffff7, 0x5ea}, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d000000060006"], 0x6c}}, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) setregid$auto(0x5, 0x6) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) keyctl$auto(0x6, 0xfffffffd, 0x5, 0x1, 0x6) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.426092005s ago: executing program 9 (id=3718): mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0xa, 0x801, 0x84) iopl$auto(0x2) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/i8042/serio1/firmware_id\x00', 0x800, 0x0) read$auto(r3, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.11/usb31/31-0:1.0/bInterfaceNumber\x00', 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000080), r2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x3c, r5, 0x1b, 0x74bd26, 0x25dfdbf9, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x6, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0xffffffffffffffc0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) symlinkat$auto(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 3.971308339s ago: executing program 9 (id=3719): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) write$auto(r2, 0x0, 0x4) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r3, 0x0, 0x81) r4 = socket(0x2e, 0xa, 0xfffffffd) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000000), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x1000000000000eb1, 0xfffffffffffffffa, 0x200000008000) socket(0x2, 0x80802, 0x0) r5 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1e, 0x9}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendto$auto(0x3, 0x0, 0xe7, 0xfd, 0x0, 0x403) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_STOP_POLL(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6400000040f0752160fd6feccc70e3e21295625e5e5fc48e0c99cb79a6c5264d20db6d7c8eb984138bb73e20a17c4d9a3f296d59d5358b0c4833d465683a1af63600"/76, @ANYRES64=r3, @ANYBLOB="00022abd7000fcdbdf2507000000080004000a00000007000200283a2d00080003000300"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/current\x00', 0x151001, 0x0) 3.819732016s ago: executing program 38 (id=3678): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:00.0/device\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002980)=""/4075, 0xfeb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) listmount$auto(&(0x7f0000000040)={0x6, @raw=0x200, 0x7, 0x0, 0x8}, &(0x7f00000000c0)=0x10, 0x9, 0xfffffffa) 3.286630217s ago: executing program 6 (id=3721): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0900, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) seccomp$auto(0x0, 0x100000000, 0xfffffffffffffffc) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x60, 0x0) syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/misc\x00', 0x10b402, 0x0) pread64$auto(r3, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) 2.726002055s ago: executing program 6 (id=3722): r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = getsockopt$auto_SO_REUSEPORT(0xffffffffffffffff, 0x6, 0xf, &(0x7f0000000040)=':(\x00', &(0x7f0000000080)=0x1) close_range$auto(r0, r1, 0x5) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f00000000c0)={r0, 0x0, 0x3, 0x120000, 0x8, 0x7d67}) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000140), r1) r4 = semctl$auto_SEM_STAT_ANY(0x5, 0x2, 0x14, 0x8) ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000180)={0x7ba, @raw=0x9, @raw=0x3, 0x9, 0x157, '\x00', {0x8, 0x9, 0x8001, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x79e3, 0x2f, {0x9, 0x1}, {0x8, 0x5}, {0x5, 0x6}, 0x3, 0x9, 0x7, 0x0, 0x6, 0x936, 0xc9e, 0x2, 0x1, 0x8000, '\x00', 0x4, 0x9, 0x1, 0xd03b}}) sendmsg$auto_IPVS_CMD_SET_CONFIG(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x210, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1e1, 0x1, 0x0, 0x1, [@generic="92503b21f8f47d656682e1747de83af403e0c23d3e05eed0313bceeefc1b7669616850ab802407e122facf7e19f9fdc23946fd3904b317c405097ba50931e22067aaef5f200dbdd5ffb1b17485b16eb4e91642d93d3ecbe6324fb45995e0c445b24d30caea4aba26469ba6867405a31be8264a44b9bbb10b07456ec2c16eae0418ae0e05fbada30611d3b579011a1828dac212cefacdc8c8cf948bf2aa355710700f", @typed={0x23, 0xca, 0x0, 0x0, @str='/sys/kernel/debug/sync/sw_sync\x00'}, @generic="715f0f435d30fa7046fb3bb6d6dc3039f1ef0aa9e1ee0c077e40fab19be8c9bd3f0afd45146fb1c47fb2c75d0d466aa7d5953621a395384491e66e966cce2d68104cafd339f955c04e2a47ccb1b977e799c7d789920d535bbd5ad7c51eed8a4f04a162a0e57cca05ba368f5b6081e618c80457c41cb98cb6ae4d8c", @nested={0x96, 0xb6, 0x0, 0x1, [@nested={0x4, 0x6e}, @typed={0x8, 0x3e, 0x0, 0x0, @pid=r4}, @typed={0x8, 0xee, 0x0, 0x0, @uid=r5}, @generic="488d0e84db93836101162d399dd6ca8c214958d74c1e425e09216361ecf320aa54464f5c610994d6280d34e99aa0b85abb3a7398470fc786358e753940d61d9acd5d9596c81c3d9ac7b1322a61eaec6ac34c82029ba32c8b4eb9bf03c131d0aef29493e8430393b2c1023a17e4ff7223990f07418fbe343ac181d19d4810"]}, @typed={0x4, 0x113}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x210}}, 0x10) r6 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x0, 0x0) ioctl$auto_BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000000540)={@inferred=r1, "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"}) r8 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001580), r7) sendmsg$auto_NBD_CMD_DISCONNECT(r1, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x34, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) pidfd_send_signal$auto_SIGCONT(r0, 0x12, &(0x7f0000001680)={@_si_pad}, 0x5) readv$auto(r0, &(0x7f0000001740)={&(0x7f0000001700)="a16194bc1fb45e1fcc261e46b70982f17f98df1ef155d6f908a1d5e817624676a5451b8b", 0x6ac}, 0xf) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001780)='/dev/ptya3\x00', 0x20000, 0x0) write$auto_fb_fops_fb_chrdev(r2, &(0x7f00000017c0)="6f77f7f1fee5ed4dc472ef7028e54f97066ba47bc17799a6c14f1b1b40f7f9a845d67b94cf5823e8bcc8fd8afb1da2e77e3aaf3ceec84cbaf449304a4bcc639aaf4044eeed30413f5883136c582fb4d829346c1e8278cab10a349a5af863470086030621e8201a66f3b62aac4b9696221772b2f8e4d4f4e69929194a107819f5507727d43fd9444cc95dbb81be9f97979ba6818f9cc7d4e80a0b82de41ac2c717fcc07916f4d782c891ae13fb5b35e0b9955deb02084101dc157c79df8512bfdcea0311fdb428f86fa9ef62e104a666b494bf68e9db49b90db8a219fb8671474eb725def", 0xe4) r9 = prctl$auto_PR_SET_VMA(0x53564d41, 0x4b, r4, 0x6, 0x8) r10 = prctl$auto_PR_GET_SECCOMP(0x15, 0x955, 0x0, 0xc4, 0x98a) ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(r10, 0x4004550a, &(0x7f00000018c0)=0x1c) write$auto(r6, &(0x7f0000001900)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x9) madvise$auto(0x10000, 0x8001, 0x2) pkey_free$auto(0x1) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) read$auto_fops_init_pkru_pkeys(r1, &(0x7f0000001940)=""/59, 0x3b) setsockopt$auto_SO_ATTACH_BPF(r10, 0x4, 0x32, &(0x7f0000001980)='/sys/kernel/debug/sync/sw_sync\x00', 0x3ae) r11 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/bus/usb/032/001\x00', 0x105101, 0x0) fcntl$auto_F_GETOWNER_UIDS(r11, 0x11, r4) read$auto_rng_chrdev_ops_core(r9, &(0x7f0000001a00)=""/202, 0xca) prctl$auto(0xe4cf, 0x100000000, r4, 0x3, 0x7) getsockopt$auto(r10, 0x1, 0x7, &(0x7f0000001b00)='\x00', &(0x7f0000001b40)=0x6) 2.62377449s ago: executing program 7 (id=3723): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000040)={0x7b3, 0x7ff, 0x6, 0x9, 0xe35, 0xffffffffffffffff}) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x3) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x801, 0x106) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2a, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0x2c, 0x3, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x2, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@iter_create={r0, 0x8}, 0xa3) 2.447028956s ago: executing program 9 (id=3724): mmap$auto(0x0, 0xa00006, 0x2, 0x13, 0x602, 0x300000000000) prctl$auto_PR_SET_MM_ARG_START(0x4, 0x8, 0xffffffffffffffff, 0xd, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb3, 0x401, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x102, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) mlockall$auto(0x7) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) ioctl$auto_IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x1000000009b72, 0x7, 0x28000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b) rt_sigaction$auto(0x4, &(0x7f0000000300)={&(0x7f0000000240)=0x0, 0x0, 0x0, {0x1}}, 0x0, 0x8) r0 = gettid() rt_sigqueueinfo$auto(r0, 0x1, 0x0) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x80000000, 0x2000a, 0x5, 0xeb2, 0x401, 0x7ffe) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(0x0, 0x201, 0x9, 0x4, 0x0) 2.431535299s ago: executing program 6 (id=3725): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) socket(0x15, 0x6, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) mremap$auto(0x8000000003, 0xda1, 0x3fd6, 0xb, 0xfffffffffffffffd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) timerfd_create$auto(0x9, 0x0) socket(0xa, 0x1, 0x0) setsockopt$auto(0x1, 0x1, 0x12, &(0x7f0000000040)='\x00\x89e\xad\x97\xc5\xe8\x91g\xc1\xceE\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5oB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4\x05>ry\xa1\xf1)#\xc0\x8d(', 0xbb) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0xb9}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x2, 0x5) getrandom$auto(0x0, 0x50436cfd, 0xffffffff) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x121c0, 0x0) mmap$auto(0x0, 0x810000, 0xffd, 0x8000000008011, 0x3, 0x8000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000080)=0x1) getrandom$auto(&(0x7f0000000140)='/dev/dvb/adapter0/frontend0\x00', 0x3, 0xae0f) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000180)={"236cf65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x40, 0x8000, 0x6, 0xff}) 1.947002874s ago: executing program 6 (id=3726): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r3 = socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.type\x00', 0x103042, 0x0) sendfile$auto(r5, r5, 0x0, 0x200) listmount$auto(&(0x7f00000001c0)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) socket(0x11, 0x3, 0x1803) ioctl$auto(r1, 0xc8, 0x10000000000402) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r6, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) (fail_nth: 1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x24, r8, 0x301, 0x70b52c, 0x25dfdafb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}, @CTRL_ATTR_OP={0x8, 0xa, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r7) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fbdb91f2519550cee6aefc354f2911747bb27f353aff37b1df", @ANYRES32=0x0, @ANYBLOB="080002800400a380"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) 1.924721306s ago: executing program 7 (id=3727): mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x9, 0xffffffffffff0005, 0x19) dup2$auto(r0, r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram14/queue/discard_granularity\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/4096, 0x1000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = fsopen$auto(0x0, 0x1) timerfd_settime$auto(r2, 0xf8, &(0x7f0000001040)={{0xffffffffffffffff, 0x6}, {0x349, 0x1}}, &(0x7f0000001080)={{0x7, 0x8000000000000001}, {0xce9, 0x5}}) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) getsockopt$auto_SO_PEERSEC(r0, 0x0, 0x1f, &(0x7f0000000000)='\x00', &(0x7f00000000c0)=0x401) get_robust_list$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x10) prctl$auto(0x1000, 0x3, 0x0, 0xc, 0x8d) 1.718578997s ago: executing program 6 (id=3728): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socketpair$auto(0x1, 0x6, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto_PR_SET_FPEXC(0xc, 0x8000000000000001, 0xffffffffffffffff, 0x100000000, 0x7) r1 = prctl$auto_PR_SET_MM_ARG_START(0x8, 0x8, 0x0, 0x200000000, 0x81) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000001c0), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x8081, 0x0) r3 = socketpair$auto(0x9, 0xe205, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c04, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c04, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) recvfrom$auto(r3, &(0x7f0000000080)="6fa119153979bcfe22b9013aedc75358", 0x800, 0x5e8, &(0x7f0000000140)=@hci={0x1f, 0xffffffffffffffff, 0x7}, &(0x7f0000000180)=0x5) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x88c00, 0x0) mincore$auto(0x1000, 0x8001, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x309200, 0x0) socketpair$auto(0x1c9, 0x1, 0x4, 0x0) io_uring_enter$auto(r0, 0x5, 0x82400801, 0xb, 0x0, 0x18) 1.407291302s ago: executing program 9 (id=3729): socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000840)="12915fb9d5") recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3222b14561ab0a8b}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_MLO_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r1) unshare$auto(0x40000080) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r4) mkdir$auto(&(0x7f00000002c0)='./cgroup\x00', 0x6) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x10000000000002d, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x88041, 0x0) 2.745302ms ago: executing program 9 (id=3730): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0900, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) seccomp$auto(0x0, 0x100000000, 0xfffffffffffffffc) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x60, 0x0) syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/misc\x00', 0x10b402, 0x0) pread64$auto(r3, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) 0s ago: executing program 6 (id=3731): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) nanosleep$auto(&(0x7f0000000080)={0xfffffffffffffff7, 0x5ea}, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d000000060006"], 0x6c}}, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) setfsuid$auto(0x401) setregid$auto(0x5, 0x6) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) keyctl$auto(0x6, 0xfffffffd, 0x5, 0x1, 0x6) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): on: batadv_slave_1 [ 535.323202][T14225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.350028][T14225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.384161][T14225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.403417][T14225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.406046][ T5148] Bluetooth: hci4: command tx timeout [ 535.428070][T14225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.440460][T14225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.595224][ T9863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.632869][ T9863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.683984][ T8590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.711116][ T8590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.954809][T14346] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2315'. [ 536.078988][T14349] snd_aloop snd_aloop.0: Parsing timer source 'iߩk' failed with -22 [ 536.195140][T14349] netlink: 198 bytes leftover after parsing attributes in process `syz.2.2354'. [ 536.388534][T14355] snd_aloop snd_aloop.0: Parsing timer source 'iߩk' failed with -22 [ 536.487988][T14355] netlink: 198 bytes leftover after parsing attributes in process `syz.2.2357'. [ 537.102901][T14369] snd_aloop snd_aloop.0: control 16781581:65535:6:'x?F/zF˷fC:0 is already present [ 537.203532][T14374] tipc: Started in network mode [ 537.226075][T14374] tipc: Node identity ee00, cluster identity 4711 [ 537.232727][T14374] tipc: Node number set to 60928 [ 537.484548][ T5148] Bluetooth: hci4: command tx timeout [ 537.837846][T14387] snd_aloop snd_aloop.0: Parsing timer source 'iߩk' failed with -22 [ 537.856684][T14387] netlink: 198 bytes leftover after parsing attributes in process `syz.3.2368'. [ 538.991841][T14414] netlink: 198 bytes leftover after parsing attributes in process `syz.4.2378'. [ 540.247293][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2387'. [ 540.597496][T14462] snd_aloop snd_aloop.0: Parsing timer source 'iߩk' failed with -22 [ 540.639338][T14462] netlink: 198 bytes leftover after parsing attributes in process `syz.3.2388'. [ 541.628311][T14476] snd_aloop snd_aloop.0: Parsing timer source 'iߩk' failed with -22 [ 542.181602][ T5148] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 542.181651][ T5148] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 542.203739][ T5148] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 542.203793][ T5148] Bluetooth: hci4: adv larger than maximum supported [ 542.211459][ T5148] Bluetooth: hci4: Malformed LE Event: 0x0d [ 542.560291][T14507] FAULT_INJECTION: forcing a failure. [ 542.560291][T14507] name failslab, interval 1, probability 0, space 0, times 0 [ 542.596622][T14507] CPU: 0 UID: 0 PID: 14507 Comm: syz.2.2400 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 542.596665][T14507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 542.596683][T14507] Call Trace: [ 542.596693][T14507] [ 542.596706][T14507] dump_stack_lvl+0x16c/0x1f0 [ 542.596748][T14507] should_fail_ex+0x512/0x640 [ 542.596777][T14507] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 542.596824][T14507] should_failslab+0xc2/0x120 [ 542.596877][T14507] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 542.596921][T14507] ? sk_prot_alloc+0x60/0x2a0 [ 542.596952][T14507] sk_prot_alloc+0x60/0x2a0 [ 542.596981][T14507] sk_alloc+0x36/0xc20 [ 542.597017][T14507] inet6_create+0x381/0x1300 [ 542.597050][T14507] ? inet6_create+0x7f/0x1300 [ 542.597081][T14507] __sock_create+0x335/0x8d0 [ 542.597116][T14507] inet_ctl_sock_create+0x94/0x230 [ 542.597157][T14507] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 542.597198][T14507] ? lockdep_init_map_type+0x5c/0x280 [ 542.597240][T14507] ? do_init_timer+0xc9/0x110 [ 542.597274][T14507] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 542.597307][T14507] sctp_ctrlsock_init+0x40/0xf0 [ 542.597338][T14507] ops_init+0x1df/0x5f0 [ 542.597380][T14507] setup_net+0x21e/0x850 [ 542.597425][T14507] ? __pfx_setup_net+0x10/0x10 [ 542.597466][T14507] ? lockdep_init_map_type+0x5c/0x280 [ 542.597507][T14507] ? __pfx_down_read_killable+0x10/0x10 [ 542.597553][T14507] ? debug_mutex_init+0x37/0x70 [ 542.597589][T14507] copy_net_ns+0x2a6/0x5f0 [ 542.597618][T14507] create_new_namespaces+0x3ea/0xad0 [ 542.597662][T14507] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 542.597702][T14507] ksys_unshare+0x45b/0xa40 [ 542.597744][T14507] ? __pfx_ksys_unshare+0x10/0x10 [ 542.597783][T14507] ? xfd_validate_state+0x5d/0x180 [ 542.597813][T14507] ? rcu_is_watching+0x12/0xc0 [ 542.597849][T14507] __x64_sys_unshare+0x31/0x40 [ 542.597894][T14507] do_syscall_64+0xcd/0x260 [ 542.597934][T14507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.597964][T14507] RIP: 0033:0x7fe040b8d169 [ 542.597988][T14507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.598028][T14507] RSP: 002b:00007fe03e9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 542.598055][T14507] RAX: ffffffffffffffda RBX: 00007fe040da5fa0 RCX: 00007fe040b8d169 [ 542.598091][T14507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 542.598109][T14507] RBP: 00007fe040c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 542.598128][T14507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.598146][T14507] R13: 0000000000000000 R14: 00007fe040da5fa0 R15: 00007ffeae408a88 [ 542.598178][T14507] [ 543.284395][T14520] snd_aloop snd_aloop.0: Parsing timer source 'iߩk' failed with -22 [ 543.599829][T14534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2409'. [ 543.630313][T14534] veth0_macvtap: left promiscuous mode [ 543.783077][T14536] busy [ 544.440339][T14548] netlink: 198 bytes leftover after parsing attributes in process `syz.1.2413'. [ 545.133556][T14568] busy [ 545.307377][T14574] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2418'. [ 545.944248][T14587] busy [ 546.488745][T14601] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2426'. [ 547.093316][T14611] busy [ 547.634121][T14627] FAULT_INJECTION: forcing a failure. [ 547.634121][T14627] name failslab, interval 1, probability 0, space 0, times 0 [ 547.648389][T14627] CPU: 0 UID: 0 PID: 14627 Comm: syz.2.2434 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 547.648433][T14627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 547.648451][T14627] Call Trace: [ 547.648461][T14627] [ 547.648473][T14627] dump_stack_lvl+0x16c/0x1f0 [ 547.648519][T14627] should_fail_ex+0x512/0x640 [ 547.648549][T14627] ? fs_reclaim_acquire+0xae/0x150 [ 547.648586][T14627] ? tomoyo_encode2+0x100/0x3e0 [ 547.648631][T14627] should_failslab+0xc2/0x120 [ 547.648682][T14627] __kmalloc_noprof+0xd2/0x510 [ 547.648734][T14627] tomoyo_encode2+0x100/0x3e0 [ 547.648785][T14627] tomoyo_encode+0x29/0x50 [ 547.648829][T14627] tomoyo_realpath_from_path+0x18f/0x6e0 [ 547.648886][T14627] tomoyo_check_open_permission+0x2ab/0x3c0 [ 547.648930][T14627] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 547.649004][T14627] ? __pfx_hook_file_open+0x10/0x10 [ 547.649060][T14627] tomoyo_file_open+0x6b/0x90 [ 547.649095][T14627] security_file_open+0x84/0x1e0 [ 547.649144][T14627] do_dentry_open+0x596/0x1c10 [ 547.649194][T14627] vfs_open+0x82/0x3f0 [ 547.649222][T14627] ? may_open+0x1f2/0x400 [ 547.649259][T14627] path_openat+0x1e5e/0x2d40 [ 547.649314][T14627] ? __pfx_path_openat+0x10/0x10 [ 547.649366][T14627] do_filp_open+0x20b/0x470 [ 547.649409][T14627] ? __pfx_do_filp_open+0x10/0x10 [ 547.649454][T14627] ? find_held_lock+0x2b/0x80 [ 547.649503][T14627] ? alloc_fd+0x420/0x760 [ 547.649552][T14627] do_sys_openat2+0x11b/0x1d0 [ 547.649583][T14627] ? __pfx_do_sys_openat2+0x10/0x10 [ 547.649617][T14627] ? __sys_sendmsg+0x199/0x220 [ 547.649667][T14627] __x64_sys_openat+0x174/0x210 [ 547.649700][T14627] ? __pfx___x64_sys_openat+0x10/0x10 [ 547.649734][T14627] ? rcu_is_watching+0x12/0xc0 [ 547.649773][T14627] do_syscall_64+0xcd/0x260 [ 547.649814][T14627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.649846][T14627] RIP: 0033:0x7fe040b8d169 [ 547.649870][T14627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.649901][T14627] RSP: 002b:00007fe03e9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 547.649930][T14627] RAX: ffffffffffffffda RBX: 00007fe040da5fa0 RCX: 00007fe040b8d169 [ 547.649951][T14627] RDX: 0000000000165e01 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 547.649972][T14627] RBP: 00007fe040c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 547.649992][T14627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.650011][T14627] R13: 0000000000000000 R14: 00007fe040da5fa0 R15: 00007ffeae408a88 [ 547.650053][T14627] [ 547.650077][T14627] ERROR: Out of memory at tomoyo_realpath_from_path. [ 548.064603][T14639] busy [ 548.685470][T14647] busy [ 549.451124][T14663] netlink: 198 bytes leftover after parsing attributes in process `syz.2.2443'. [ 549.715067][T14669] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2446'. [ 550.042968][T14673] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2448'. [ 550.069427][T14675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2449'. [ 550.317274][T14679] FAULT_INJECTION: forcing a failure. [ 550.317274][T14679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 550.331302][T14679] CPU: 1 UID: 0 PID: 14679 Comm: syz.3.2450 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 550.331347][T14679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 550.331368][T14679] Call Trace: [ 550.331378][T14679] [ 550.331391][T14679] dump_stack_lvl+0x16c/0x1f0 [ 550.331439][T14679] should_fail_ex+0x512/0x640 [ 550.331478][T14679] should_fail_alloc_page+0xe7/0x130 [ 550.331532][T14679] prepare_alloc_pages.constprop.0+0x172/0x570 [ 550.331579][T14679] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 550.331655][T14679] ? __pfx_stack_trace_save+0x10/0x10 [ 550.331693][T14679] ? stack_depot_save_flags+0x29/0x9c0 [ 550.331729][T14679] ? __lock_acquire+0xaa4/0x1ba0 [ 550.331787][T14679] ? kasan_save_stack+0x42/0x60 [ 550.331829][T14679] ? kasan_save_stack+0x33/0x60 [ 550.331871][T14679] ? kasan_save_track+0x14/0x30 [ 550.331914][T14679] ? kasan_save_free_info+0x3b/0x60 [ 550.331950][T14679] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 550.331998][T14679] ? consume_skb+0xcc/0x100 [ 550.332048][T14679] ? dev_hard_start_xmit+0x99/0x790 [ 550.332083][T14679] ? netlink_deliver_tap+0xa87/0xd30 [ 550.332120][T14679] ? netlink_unicast+0x6b2/0x7f0 [ 550.332159][T14679] ? netlink_ack+0x696/0xb80 [ 550.332197][T14679] ? netlink_rcv_skb+0x347/0x440 [ 550.332237][T14679] ? genl_rcv+0x28/0x40 [ 550.332278][T14679] ? netlink_unicast+0x53a/0x7f0 [ 550.332317][T14679] ? netlink_sendmsg+0x8da/0xd70 [ 550.332368][T14679] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 550.332419][T14679] ? policy_nodemask+0xea/0x4e0 [ 550.332471][T14679] alloc_pages_mpol+0x1fb/0x540 [ 550.332521][T14679] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 550.332580][T14679] folio_alloc_mpol_noprof+0x36/0x2f0 [ 550.332617][T14679] shmem_alloc_folio+0x135/0x160 [ 550.332667][T14679] shmem_alloc_and_add_folio+0x499/0xc20 [ 550.332707][T14679] ? shmem_huge_global_enabled+0x72/0x6b0 [ 550.332745][T14679] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 550.332784][T14679] ? shmem_allowable_huge_orders+0xd0/0x410 [ 550.332824][T14679] shmem_get_folio_gfp+0x687/0x1530 [ 550.332865][T14679] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 550.332903][T14679] ? filemap_map_pages+0xf72/0x1680 [ 550.332945][T14679] shmem_fault+0x204/0xb10 [ 550.332980][T14679] ? __pfx_shmem_fault+0x10/0x10 [ 550.333020][T14679] ? __pfx_filemap_map_pages+0x10/0x10 [ 550.333067][T14679] __do_fault+0x10a/0x490 [ 550.333100][T14679] do_pte_missing+0xed5/0x3ea0 [ 550.333149][T14679] ? __handle_mm_fault+0x1016/0x2a50 [ 550.333198][T14679] __handle_mm_fault+0x1043/0x2a50 [ 550.333253][T14679] ? __pfx___handle_mm_fault+0x10/0x10 [ 550.333316][T14679] ? find_vma+0xbf/0x140 [ 550.333349][T14679] ? __pfx_find_vma+0x10/0x10 [ 550.333384][T14679] ? kasan_save_stack+0x42/0x60 [ 550.333431][T14679] handle_mm_fault+0x3fa/0xaa0 [ 550.333482][T14679] do_user_addr_fault+0x7a9/0x1430 [ 550.333522][T14679] exc_page_fault+0x5c/0xc0 [ 550.333561][T14679] asm_exc_page_fault+0x26/0x30 [ 550.333592][T14679] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 550.333624][T14679] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 550.333657][T14679] RSP: 0018:ffffc9001982f9d8 EFLAGS: 00050206 [ 550.333683][T14679] RAX: 0000000000000001 RBX: 000000000000fdef RCX: 000000000000edef [ 550.333704][T14679] RDX: ffffed100b329fbe RSI: 0000000000001000 RDI: ffff888059941000 [ 550.333726][T14679] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100b329fbd [ 550.333785][T14679] R10: ffff88805994fdee R11: 0000000000000000 R12: 0000000000000000 [ 550.333805][T14679] R13: ffffc9001982fc58 R14: 000000000000fdef R15: ffff888059940000 [ 550.333844][T14679] _copy_from_iter+0x391/0x15b0 [ 550.333886][T14679] ? find_held_lock+0x2b/0x80 [ 550.333920][T14679] ? __pfx__copy_from_iter+0x10/0x10 [ 550.333964][T14679] ? __virt_addr_valid+0x5e/0x590 [ 550.334006][T14679] ? __phys_addr+0xc6/0x150 [ 550.334048][T14679] ? __phys_addr_symbol+0x30/0x80 [ 550.334091][T14679] ? __check_object_size+0x4c7/0x710 [ 550.334146][T14679] netlink_sendmsg+0x83a/0xd70 [ 550.334193][T14679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.334246][T14679] sock_write_iter+0x4fc/0x5b0 [ 550.334278][T14679] ? __pfx_sock_write_iter+0x10/0x10 [ 550.334320][T14679] ? bpf_lsm_file_permission+0x9/0x10 [ 550.334366][T14679] ? security_file_permission+0x71/0x210 [ 550.334417][T14679] ? rw_verify_area+0xcf/0x680 [ 550.334457][T14679] vfs_write+0x5ba/0x1180 [ 550.334499][T14679] ? __pfx_sock_write_iter+0x10/0x10 [ 550.334535][T14679] ? __pfx_vfs_write+0x10/0x10 [ 550.334575][T14679] ? find_held_lock+0x2b/0x80 [ 550.334625][T14679] ksys_write+0x205/0x240 [ 550.334668][T14679] ? __pfx_ksys_write+0x10/0x10 [ 550.334709][T14679] ? rcu_is_watching+0x12/0xc0 [ 550.334758][T14679] do_syscall_64+0xcd/0x260 [ 550.334802][T14679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.334836][T14679] RIP: 0033:0x7f6babf8d169 [ 550.334861][T14679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.334895][T14679] RSP: 002b:00007f6ba9df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 550.334925][T14679] RAX: ffffffffffffffda RBX: 00007f6bac1a5fa0 RCX: 00007f6babf8d169 [ 550.334947][T14679] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 550.334967][T14679] RBP: 00007f6bac00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 550.334988][T14679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.335008][T14679] R13: 0000000000000000 R14: 00007f6bac1a5fa0 R15: 00007ffeaad4c148 [ 550.335044][T14679] [ 550.878471][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.480870][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 551.503803][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 551.511963][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 551.520150][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 551.527776][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 551.535170][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.848539][T14698] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 551.871593][T14691] chnl_net:caif_netlink_parms(): no params data found [ 551.875631][T14698] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 551.928916][T14698] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 551.967274][T14698] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 552.008215][T14698] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 552.020725][T14698] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 552.039157][T14698] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 552.056190][T14698] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 552.066374][T14698] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 552.095225][T14698] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 552.104633][T14698] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 552.110633][T14698] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 552.129383][T14691] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.138543][T14698] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 552.164231][T14691] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.203889][T14691] bridge_slave_0: entered allmulticast mode [ 552.210365][T14715] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2460'. [ 552.210824][T14691] bridge_slave_0: entered promiscuous mode [ 552.330416][T14691] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.344086][T14691] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.362282][T14691] bridge_slave_1: entered allmulticast mode [ 552.373215][T14691] bridge_slave_1: entered promiscuous mode [ 552.437465][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2458'. [ 552.449842][T14691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.466874][T14691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.635338][ T5148] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 552.635386][ T5148] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 552.651727][ T5148] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 552.651772][ T5148] Bluetooth: hci4: adv larger than maximum supported [ 552.659308][ T5148] Bluetooth: hci4: Malformed LE Event: 0x0d [ 552.691875][T14691] team0: Port device team_slave_0 added [ 552.716605][T14691] team0: Port device team_slave_1 added [ 552.793122][T14691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.810249][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.853343][T14691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.881652][T14691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.895621][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.930268][T14691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.066826][T14691] hsr_slave_0: entered promiscuous mode [ 553.073208][T14691] hsr_slave_1: entered promiscuous mode [ 553.134635][T14691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.142248][T14691] Cannot create hsr debugfs directory [ 553.546539][T14691] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.698743][T14691] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.777792][T14691] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.870659][T14691] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.885345][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 554.030820][T14691] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 554.043800][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 554.062330][T14691] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 554.109485][T14691] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 554.123841][ T5148] Bluetooth: hci1: command 0x041b tx timeout [ 554.124932][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 554.168944][T14691] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 554.198773][T14750] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2469'. [ 554.290631][T14691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.312560][T14691] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.330965][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.338122][ T8584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.361474][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.368663][ T8584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.731051][T14691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.901798][T14691] veth0_vlan: entered promiscuous mode [ 554.919700][T14691] veth1_vlan: entered promiscuous mode [ 555.038477][T14691] veth0_macvtap: entered promiscuous mode [ 555.059103][T14691] veth1_macvtap: entered promiscuous mode [ 555.081824][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.094069][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.104591][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.115510][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.132631][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.152147][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.162710][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.183547][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.200758][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.217321][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.237334][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.262282][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.278596][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.291514][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.309533][T14691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.351350][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.369999][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.381711][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.401072][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.411434][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.426609][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.441083][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.459099][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.470929][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.490553][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.503794][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.514380][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.524368][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.535015][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.561982][T14691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.624479][T14691] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.633332][T14691] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.719860][T14691] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.730349][T14691] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.976631][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 555.990943][T14780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2477'. [ 556.123894][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 556.172264][T14783] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2478'. [ 556.203808][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 556.205135][ T5148] Bluetooth: hci1: command 0x041b tx timeout [ 556.217910][ T8614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.232381][ T8614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.267629][ T8584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.288420][ T8584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.054447][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 558.213621][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 558.286657][ T5148] Bluetooth: hci1: command 0x041b tx timeout [ 558.293900][ T5148] Bluetooth: hci4: command 0x0c1a tx timeout [ 559.493866][T14851] snd_aloop snd_aloop.0: control 16781581:65535:6:'x?F/zF˷fC:0 is already present [ 560.180065][T14872] busy [ 560.364266][ T5148] Bluetooth: hci1: command 0x041b tx timeout [ 561.150087][T14876] netlink: 198 bytes leftover after parsing attributes in process `syz.1.2499'. [ 562.249459][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2508'. [ 562.445225][ T5148] Bluetooth: hci1: command 0x041b tx timeout [ 563.285700][T14917] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 563.326274][T14917] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 563.351866][T14917] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 563.395226][T14917] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 563.519923][T14943] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2515'. [ 564.684908][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 564.865146][T14988] netlink: 198 bytes leftover after parsing attributes in process `syz.3.2527'. [ 565.013428][T14993] netlink: 'syz.1.2528': attribute type 13 has an invalid length. [ 565.344675][ T5148] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 565.344721][ T5148] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 565.359693][ T5148] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 565.359733][ T5148] Bluetooth: hci0: adv larger than maximum supported [ 565.367863][ T5148] Bluetooth: hci0: Malformed LE Event: 0x0d [ 565.403742][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 565.415500][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 565.421602][ T5148] Bluetooth: hci1: command 0x041b tx timeout [ 565.561090][T15007] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2533'. [ 566.165343][T15034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2538'. [ 567.887865][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.894403][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.085622][T15102] netlink: 198 bytes leftover after parsing attributes in process `syz.3.2557'. [ 569.672619][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2566'. [ 570.014368][T15137] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2571'. [ 571.153650][ T5148] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 571.487158][T15180] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2581'. [ 572.188408][T15196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2583'. [ 573.507864][T15226] netlink: 206 bytes leftover after parsing attributes in process `syz.2.2593'. [ 574.945013][T15259] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2604'. [ 575.366972][T15268] netlink: 206 bytes leftover after parsing attributes in process `syz.4.2607'. [ 576.549905][T15303] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2615'. [ 577.459435][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2624'. [ 578.037110][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2626'. [ 579.145260][T15366] Invalid ELF header magic: != ELF [ 579.265999][T15375] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2637'. [ 580.223748][ T30] audit: type=1800 audit(6037951474.025:11): pid=15388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2643" name="ram7" dev="tmpfs" ino=384 res=0 errno=0 [ 580.656092][T15394] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2645'. [ 581.744559][T15419] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2651'. [ 581.785413][T15413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2652'. [ 581.885469][T15419] : renamed from bond0 (while UP) [ 583.317000][T15450] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2662'. [ 584.559221][T15484] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2670'. [ 585.138493][T15498] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2676'. [ 586.071022][ T5148] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 586.071071][ T5148] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 586.086251][ T5148] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 586.086291][ T5148] Bluetooth: hci1: adv larger than maximum supported [ 586.094002][ T5148] Bluetooth: hci1: Malformed LE Event: 0x0d [ 586.455002][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2683'. [ 587.545982][T15549] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2694'. [ 588.405819][T15575] netlink: 'syz.3.2699': attribute type 13 has an invalid length. [ 588.889987][ T5148] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 588.890031][ T5148] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 588.905967][ T5148] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 588.906008][ T5148] Bluetooth: hci1: adv larger than maximum supported [ 588.913094][ T5148] Bluetooth: hci1: Malformed LE Event: 0x0d [ 590.894475][T15602] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2709'. [ 591.274946][T15614] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2714'. [ 591.325958][T15615] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2714'. [ 592.210281][T15618] kexec: Could not allocate control_code_buffer [ 592.793421][ T5148] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 593.000971][T15648] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2722'. [ 594.658213][T15680] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2734'. [ 596.640000][T15722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2746'. [ 596.656065][T15722] ipvlan1: entered allmulticast mode [ 596.661576][T15722] veth0_vlan: entered allmulticast mode [ 597.781856][T15760] netlink: 'syz.4.2756': attribute type 13 has an invalid length. [ 598.000870][ T5148] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 598.000912][ T5148] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 598.018038][ T5148] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 598.018096][ T5148] Bluetooth: hci2: adv larger than maximum supported [ 598.026168][ T5148] Bluetooth: hci2: Malformed LE Event: 0x0d [ 598.418814][T15779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2762'. [ 598.465936][T15779] veth0_macvtap: left promiscuous mode [ 599.038865][T15800] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2770'. [ 599.971151][T15823] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2780'. [ 600.137473][T15815] Invalid ELF header magic: != ELF [ 601.227721][T15855] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2791'. [ 602.171949][T15880] netlink: 222 bytes leftover after parsing attributes in process `syz.2.2799'. [ 602.258829][T15880] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.540752][T15001] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 603.549433][T15001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 603.563024][T15001] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 603.589007][T15001] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 603.603377][T15001] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 603.616324][T15001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 604.043353][T15910] chnl_net:caif_netlink_parms(): no params data found [ 604.515893][T15910] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.549833][T15910] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.558955][T15910] bridge_slave_0: entered allmulticast mode [ 604.566189][T15910] bridge_slave_0: entered promiscuous mode [ 604.591690][T15910] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.613736][T15910] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.621051][T15910] bridge_slave_1: entered allmulticast mode [ 604.628568][T15910] bridge_slave_1: entered promiscuous mode [ 604.783031][T15910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.815386][T15910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.919191][T15910] team0: Port device team_slave_0 added [ 604.966580][T15910] team0: Port device team_slave_1 added [ 605.125725][T15910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.132728][T15910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.201743][T15910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.283390][T15910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.321716][T15910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.373053][T15910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.723804][ T5148] Bluetooth: hci3: command tx timeout [ 605.874637][T15910] hsr_slave_0: entered promiscuous mode [ 605.881116][T15910] hsr_slave_1: entered promiscuous mode [ 605.914997][T15910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 605.923347][T15910] Cannot create hsr debugfs directory [ 606.666192][T15910] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 606.686615][T15910] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 606.743746][T15910] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 606.801644][T15910] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 607.138832][T15910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.209962][T15910] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.309957][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.317204][ T8613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.407167][ T8615] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.414443][ T8615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.662429][T15945] kexec: Could not allocate control_code_buffer [ 607.807753][ T5148] Bluetooth: hci3: command tx timeout [ 608.052880][T15910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.763395][T15910] veth0_vlan: entered promiscuous mode [ 608.845990][T15910] veth1_vlan: entered promiscuous mode [ 608.971279][T15910] veth0_macvtap: entered promiscuous mode [ 608.997931][T15910] veth1_macvtap: entered promiscuous mode [ 609.062088][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.081308][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.135590][T16011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2832'. [ 609.154054][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.200644][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.223075][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.239673][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.263923][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.303325][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.324005][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.337926][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.368472][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.399439][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.429653][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.460650][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.481863][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.493935][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.506477][T15910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.641401][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.672540][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.703641][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.724238][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.747884][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.759730][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.770090][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.780890][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.814085][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.839783][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.862814][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.884289][ T5148] Bluetooth: hci3: command tx timeout [ 609.912423][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.943641][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.969954][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.993642][T15910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.013687][T15910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.035771][T15910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.165587][T15910] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.193662][T15910] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.202498][T15910] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.243848][T15910] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.893808][ T8615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.948035][ T8615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.100755][ T8585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.129061][ T8585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.551846][T16039] could not allocate digest TFM handle binfmt_misc [ 611.963872][ T5148] Bluetooth: hci3: command tx timeout [ 613.140673][T16080] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2845'. [ 613.721318][T16098] snd_aloop snd_aloop.0: Parsing timer source 'iߩk' failed with -22 [ 614.981275][T16122] Process accounting resumed [ 616.203691][T16166] netlink: zone id is out of range [ 616.233403][T16166] netlink: zone id is out of range [ 616.255633][T16166] netlink: zone id is out of range [ 616.291284][T16166] netlink: zone id is out of range [ 616.353865][T16166] netlink: zone id is out of range [ 616.373016][T16166] netlink: zone id is out of range [ 616.381842][T16166] netlink: zone id is out of range [ 616.447961][T16166] netlink: zone id is out of range [ 616.477279][T16166] netlink: zone id is out of range [ 616.497606][T16166] netlink: zone id is out of range [ 617.774237][T16200] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe04 [ 617.812756][T16200] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 617.873132][T16200] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 617.947278][T16200] page_type: f5(slab) [ 618.023769][T16200] raw: 00fff00000000040 ffff88814040aa00 0000000000000000 0000000000000001 [ 618.032443][T16200] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 618.203083][T16200] head: 00fff00000000040 ffff88814040aa00 0000000000000000 0000000000000001 [ 618.241205][T16200] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 618.288064][T16202] could not allocate digest TFM handle binfmt_misc [ 618.408446][T16200] head: 00fff00000000002 ffffea0001ff8101 ffffffffffffffff 0000000000000000 [ 618.563649][T16200] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 618.580543][T16200] page dumped because: unmovable page [ 618.598850][T16200] page_owner tracks the page as allocated [ 618.622728][T16200] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5218, tgid 5218 (udevd), ts 43810792662, free_ts 29912323278 [ 618.671327][T16200] post_alloc_hook+0x181/0x1b0 [ 618.677190][T16200] get_page_from_freelist+0x10c4/0x34c0 [ 618.682880][T16200] __alloc_frozen_pages_noprof+0x223/0x24d0 [ 618.697490][T16200] alloc_pages_mpol+0x1fb/0x540 [ 618.719619][T16200] new_slab+0x23c/0x330 [ 618.732825][T16200] ___slab_alloc+0xd9c/0x1940 [ 618.743352][T16200] __slab_alloc.constprop.0+0x56/0xb0 [ 618.750279][T16200] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 618.756453][T16200] alloc_inode+0xc3/0x240 [ 618.760986][T16200] iget_locked+0x2e4/0x830 [ 618.778440][T16200] kernfs_get_inode+0x48/0x460 [ 618.783441][T16200] kernfs_iop_lookup+0x1ec/0x330 [ 618.793419][T16200] __lookup_slow+0x24e/0x460 [ 618.800586][T16200] walk_component+0x353/0x5b0 [ 618.811343][T16200] path_lookupat+0x17e/0x780 [ 618.818449][T16200] filename_lookup+0x224/0x5f0 [ 618.829037][T16200] page last free pid 1 tgid 1 stack trace: [ 618.839407][T16200] free_frozen_pages+0x6d8/0xf40 [ 618.850253][T16200] free_contig_range+0x133/0x3f0 [ 618.857845][T16200] destroy_args+0x66f/0x830 [ 618.862575][T16200] debug_vm_pgtable+0x130e/0x2d50 [ 618.872864][T16200] do_one_initcall+0x120/0x6e0 [ 618.882039][T16200] kernel_init_freeable+0x5c2/0x900 [ 618.896833][T16200] kernel_init+0x1c/0x2b0 [ 618.903010][T16200] ret_from_fork+0x45/0x80 [ 618.911714][T16200] ret_from_fork_asm+0x1a/0x30 [ 622.161086][T16295] netlink: 'syz.2.2908': attribute type 13 has an invalid length. [ 623.199773][ T5148] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 623.199821][ T5148] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 623.215003][ T5148] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 623.215053][ T5148] Bluetooth: hci4: adv larger than maximum supported [ 623.223106][ T5148] Bluetooth: hci4: Malformed LE Event: 0x0d [ 624.253502][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2924'. [ 625.342804][T16367] snd_aloop snd_aloop.0: Parsing timer source 'iߩk' failed with -22 [ 626.160361][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2937'. [ 626.857279][T16410] netlink: 544 bytes leftover after parsing attributes in process `syz.5.2943'. [ 627.396376][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2944'. [ 627.413915][T16409] net_ratelimit: 794 callbacks suppressed [ 627.413938][T16409] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 627.484040][T16418] netlink: 544 bytes leftover after parsing attributes in process `syz.3.2947'. [ 627.768759][T16425] netlink: 326 bytes leftover after parsing attributes in process `syz.5.2950'. [ 627.814114][T16425] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2950'. [ 628.594551][T16456] snd_aloop snd_aloop.0: control 1:6:-2147483647:_heR:6 is already present [ 629.338604][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.349834][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.710157][T16492] busy [ 630.325377][T16504] busy [ 630.561234][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2977'. [ 631.395564][T16526] netlink: 198 bytes leftover after parsing attributes in process `syz.3.2981'. [ 632.102563][ T8607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.446952][ T8607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.744025][ T8607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.999922][ T8607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.049721][T16563] netlink: 'syz.4.2994': attribute type 13 has an invalid length. [ 633.339098][T16566] ovs9: entered promiscuous mode [ 633.372973][ T8607] bridge_slave_1: left allmulticast mode [ 633.383427][ T8607] bridge_slave_1: left promiscuous mode [ 633.399530][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.504519][ T8607] bridge_slave_0: left allmulticast mode [ 633.513741][ T8607] bridge_slave_0: left promiscuous mode [ 633.525314][ T5148] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 633.525360][ T5148] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 633.540656][ T5148] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 633.540695][ T5148] Bluetooth: hci2: adv larger than maximum supported [ 633.547928][ T5148] Bluetooth: hci2: Malformed LE Event: 0x0d [ 633.564542][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.005113][ T8607]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.050739][ T8607]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.093448][ T8607]  (unregistering): Released all slaves [ 635.572516][T16610] snd_aloop snd_aloop.0: control 1:6:-2147483647:_heR:6 is already present [ 635.602183][T16612] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3006'. [ 636.196862][ T8607] hsr_slave_0: left promiscuous mode [ 636.225321][ T8607] hsr_slave_1: left promiscuous mode [ 636.259722][ T8607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.287760][ T8607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.351313][ T8607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.393990][ T8607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.511621][ T8607] veth1_macvtap: left promiscuous mode [ 636.535512][ T8607] veth0_macvtap: left promiscuous mode [ 636.553758][ T8607] veth1_vlan: left promiscuous mode [ 636.562300][ T8607] veth0_vlan: left promiscuous mode [ 636.902791][T16632] zswap: compressor not available [ 637.519759][ T8607] team0 (unregistering): Port device team_slave_1 removed [ 637.566779][ T8607] team0 (unregistering): Port device team_slave_0 removed [ 639.739423][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3017'. [ 639.829644][T16694] netlink: 93 bytes leftover after parsing attributes in process `syz.3.3017'. [ 640.444624][T16712] snd_aloop snd_aloop.0: control 16781581:65535:7:'x?F/zF˷fC:0 is already present [ 647.501568][T16952] netlink: 198 bytes leftover after parsing attributes in process `syz.3.3060'. [ 647.789374][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3064'. [ 648.031293][T16963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3063'. [ 656.622277][T15910] Process accounting paused [ 656.763347][T17030] netlink: 'syz.4.3078': attribute type 13 has an invalid length. [ 657.074439][T15001] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 657.086971][T15001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 657.113750][T15001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 657.141577][T15001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 657.156770][T15001] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 657.164337][T15001] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 657.265054][T15001] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 657.265096][T15001] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 657.280329][T15001] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 657.280358][T15001] Bluetooth: hci2: adv larger than maximum supported [ 657.287581][T15001] Bluetooth: hci2: Malformed LE Event: 0x0d [ 657.888635][T17035] chnl_net:caif_netlink_parms(): no params data found [ 658.155133][T17035] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.162270][T17035] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.192703][T17035] bridge_slave_0: entered allmulticast mode [ 658.214342][T17035] bridge_slave_0: entered promiscuous mode [ 658.246771][T17035] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.254207][T17035] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.272412][T17035] bridge_slave_1: entered allmulticast mode [ 658.284864][T17035] bridge_slave_1: entered promiscuous mode [ 658.347166][T17035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.385620][T17035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.546728][T17035] team0: Port device team_slave_0 added [ 658.585860][T17035] team0: Port device team_slave_1 added [ 658.619519][T17035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.626621][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.654641][T17035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.685701][T17035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.701846][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.753663][T17035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.989881][T17035] hsr_slave_0: entered promiscuous mode [ 659.006009][T17035] hsr_slave_1: entered promiscuous mode [ 659.025482][T17035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.044224][T17035] Cannot create hsr debugfs directory [ 659.244009][T15001] Bluetooth: hci0: command tx timeout [ 659.432189][T17035] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 659.461390][T17035] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 659.494997][T17035] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 659.543103][T17035] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 659.782343][T17035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.827334][T17035] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.878848][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.886031][ T8614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.948906][ T8595] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.956100][ T8595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.096920][T17035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 660.593197][T17035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.325572][T15001] Bluetooth: hci0: command tx timeout [ 661.345875][T17035] veth0_vlan: entered promiscuous mode [ 661.404934][T17035] veth1_vlan: entered promiscuous mode [ 661.499078][T17035] veth0_macvtap: entered promiscuous mode [ 661.528645][T17035] veth1_macvtap: entered promiscuous mode [ 661.615065][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.662771][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.686698][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.703296][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.713967][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.753596][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.763446][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.812502][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.843767][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.884408][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.913575][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.952042][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.983778][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.013822][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.042467][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.070732][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.084775][T17035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.161372][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.181710][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.223935][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.241753][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.279991][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.299758][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.329772][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.341839][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.367165][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.402567][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.421202][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.449073][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.478241][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.504607][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.530863][T17035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.553757][T17035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.573475][T17035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.602949][T17035] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.657671][T17035] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.690340][T17035] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.724074][T17035] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.926063][ T8597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.954561][ T8597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.035337][ T8617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.043224][ T8617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.403872][ T5148] Bluetooth: hci0: command tx timeout [ 664.365227][T15001] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 664.384797][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 664.403660][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 664.433908][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 664.450681][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 664.465543][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 665.485325][ T5843] Bluetooth: hci0: command tx timeout [ 665.842368][T17236] busy [ 666.523661][ T5843] Bluetooth: hci5: command tx timeout [ 666.614441][T17218] chnl_net:caif_netlink_parms(): no params data found [ 667.125691][T17218] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.132839][T17218] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.144125][T17218] bridge_slave_0: entered allmulticast mode [ 667.151138][T17218] bridge_slave_0: entered promiscuous mode [ 667.211069][T17250] snd_aloop snd_aloop.0: Parsing timer source 'iߩk' failed with -22 [ 667.268346][T17218] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.283936][T17218] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.311583][T17218] bridge_slave_1: entered allmulticast mode [ 667.321360][T17218] bridge_slave_1: entered promiscuous mode [ 667.509980][T17218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.596411][T17218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.772240][T17218] team0: Port device team_slave_0 added [ 667.816334][T17218] team0: Port device team_slave_1 added [ 667.996482][T17218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.003486][T17218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.081489][T17218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.115433][T17218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.141449][T17218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.217723][T17218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.235693][T17261] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3101'. [ 668.246732][T17261] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3101'. [ 668.451424][T17262] netlink: 210 bytes leftover after parsing attributes in process `syz.2.3101'. [ 668.516913][T17218] hsr_slave_0: entered promiscuous mode [ 668.523194][T17218] hsr_slave_1: entered promiscuous mode [ 668.546901][T17218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 668.569815][T17218] Cannot create hsr debugfs directory [ 668.613602][ T5843] Bluetooth: hci5: command tx timeout [ 669.088888][T17218] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 669.172996][T17218] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 669.187851][T17218] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 669.266552][T17218] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 669.668624][T17218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.732019][T17218] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.835358][ T8597] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.842565][ T8597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.198572][ T8597] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.205787][ T8597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.683692][ T5843] Bluetooth: hci5: command tx timeout [ 670.980882][T17218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.620608][T17218] veth0_vlan: entered promiscuous mode [ 671.676620][T17218] veth1_vlan: entered promiscuous mode [ 671.766240][T17218] veth0_macvtap: entered promiscuous mode [ 671.810931][T17218] veth1_macvtap: entered promiscuous mode [ 671.895029][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.945950][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.985815][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.013726][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.024696][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.036894][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.065511][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.095561][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.113614][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.133869][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.153639][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.178000][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.205250][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.227020][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.249129][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.270488][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.293678][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.314728][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.339411][T17218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.361222][T17324] netlink: 338 bytes leftover after parsing attributes in process `syz.6.3115'. [ 672.384162][T17326] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3115'. [ 672.417691][T17325] netlink: 338 bytes leftover after parsing attributes in process `syz.6.3115'. [ 672.503451][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.533639][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.549264][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.569966][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.614163][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.630023][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.653175][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.744028][T17329] busy [ 672.764059][ T5843] Bluetooth: hci5: command tx timeout [ 673.093574][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.217827][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.228390][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.238451][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.249215][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.259126][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.269647][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.279507][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.290026][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.300726][T17218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.312259][T17218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.324966][T17218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.431285][T17218] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.463577][T17218] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.472322][T17218] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.513631][T17218] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.876386][T17337] busy [ 674.293729][ T8607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.301594][ T8607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.433650][ T8592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.443141][ T8592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.698697][T17346] FAULT_INJECTION: forcing a failure. [ 674.698697][T17346] name failslab, interval 1, probability 0, space 0, times 0 [ 674.722450][T17346] CPU: 0 UID: 0 PID: 17346 Comm: syz.6.3120 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 674.722493][T17346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 674.722513][T17346] Call Trace: [ 674.722522][T17346] [ 674.722533][T17346] dump_stack_lvl+0x16c/0x1f0 [ 674.722578][T17346] should_fail_ex+0x512/0x640 [ 674.722607][T17346] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 674.722652][T17346] should_failslab+0xc2/0x120 [ 674.722697][T17346] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 674.722738][T17346] ? trace_kmalloc+0x2b/0xd0 [ 674.722763][T17346] ? seq_open+0x55/0x170 [ 674.722795][T17346] seq_open+0x55/0x170 [ 674.722823][T17346] __seq_open_private+0x3e/0xd0 [ 674.722858][T17346] tracing_open+0x25f/0xfa0 [ 674.722895][T17346] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 674.722942][T17346] do_dentry_open+0x741/0x1c10 [ 674.722981][T17346] ? __pfx_tracing_open+0x10/0x10 [ 674.723011][T17346] ? inode_permission+0xdd/0x5f0 [ 674.723042][T17346] vfs_open+0x82/0x3f0 [ 674.723066][T17346] ? may_open+0x1f2/0x400 [ 674.723100][T17346] path_openat+0x1e5e/0x2d40 [ 674.723149][T17346] ? __pfx_path_openat+0x10/0x10 [ 674.723196][T17346] do_filp_open+0x20b/0x470 [ 674.723236][T17346] ? __pfx_do_filp_open+0x10/0x10 [ 674.723276][T17346] ? find_held_lock+0x2b/0x80 [ 674.723322][T17346] ? alloc_fd+0x420/0x760 [ 674.723366][T17346] do_sys_openat2+0x11b/0x1d0 [ 674.723395][T17346] ? __pfx_do_sys_openat2+0x10/0x10 [ 674.723434][T17346] __x64_sys_openat+0x174/0x210 [ 674.723465][T17346] ? __pfx___x64_sys_openat+0x10/0x10 [ 674.723497][T17346] ? rcu_is_watching+0x12/0xc0 [ 674.723539][T17346] do_syscall_64+0xcd/0x260 [ 674.723580][T17346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.723609][T17346] RIP: 0033:0x7ffa6298d169 [ 674.723633][T17346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.723674][T17346] RSP: 002b:00007ffa63832038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 674.723701][T17346] RAX: ffffffffffffffda RBX: 00007ffa62ba6080 RCX: 00007ffa6298d169 [ 674.723720][T17346] RDX: 0000000000000600 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 674.723738][T17346] RBP: 00007ffa62a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 674.723754][T17346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.723770][T17346] R13: 0000000000000000 R14: 00007ffa62ba6080 R15: 00007fff485581f8 [ 674.723799][T17346] [ 676.962245][ T30] audit: type=1800 audit(6037951578.767:12): pid=17380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3128" name=22050820 dev="tmpfs" ino=1347 res=0 errno=0 [ 678.464393][T17419] FAULT_INJECTION: forcing a failure. [ 678.464393][T17419] name failslab, interval 1, probability 0, space 0, times 0 [ 678.488783][T17419] CPU: 0 UID: 0 PID: 17419 Comm: syz.6.3138 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 678.488826][T17419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 678.488844][T17419] Call Trace: [ 678.488853][T17419] [ 678.488864][T17419] dump_stack_lvl+0x16c/0x1f0 [ 678.488907][T17419] should_fail_ex+0x512/0x640 [ 678.488936][T17419] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 678.488979][T17419] should_failslab+0xc2/0x120 [ 678.489022][T17419] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 678.489064][T17419] ? alloc_unbound_pwq+0x3ff/0xe10 [ 678.489100][T17419] alloc_unbound_pwq+0x3ff/0xe10 [ 678.489171][T17419] apply_wqattrs_prepare+0x3af/0xbd0 [ 678.489213][T17419] apply_workqueue_attrs_locked+0x64/0xe0 [ 678.489248][T17419] __alloc_workqueue+0xf41/0x1810 [ 678.489291][T17419] alloc_workqueue+0xd2/0x200 [ 678.489328][T17419] ? __pfx_alloc_workqueue+0x10/0x10 [ 678.489368][T17419] ? rcu_is_watching+0x12/0xc0 [ 678.489394][T17419] ? trace_kmalloc+0x2b/0xd0 [ 678.489419][T17419] ? do_raw_spin_lock+0x12c/0x2b0 [ 678.489468][T17419] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 678.489512][T17419] ieee80211_register_hw+0x1e18/0x4020 [ 678.489550][T17419] ? _raw_spin_unlock_bh+0x21/0x30 [ 678.489578][T17419] ? __debug_object_init+0x211/0x3d0 [ 678.489619][T17419] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 678.489662][T17419] ? find_held_lock+0x2b/0x80 [ 678.489692][T17419] ? __asan_memset+0x23/0x50 [ 678.489726][T17419] ? __hrtimer_init+0x106/0x2c0 [ 678.489771][T17419] mac80211_hwsim_new_radio+0x3041/0x54f0 [ 678.489845][T17419] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 678.489899][T17419] hwsim_new_radio_nl+0xb51/0x12c0 [ 678.489943][T17419] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 678.489996][T17419] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 678.490043][T17419] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 678.490095][T17419] genl_family_rcv_msg_doit+0x206/0x2f0 [ 678.490147][T17419] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 678.490189][T17419] ? trace_cap_capable+0x18d/0x200 [ 678.490226][T17419] ? bpf_lsm_capable+0x9/0x10 [ 678.490251][T17419] ? security_capable+0x7e/0x260 [ 678.490282][T17419] ? ns_capable+0xd7/0x110 [ 678.490312][T17419] genl_rcv_msg+0x55c/0x800 [ 678.490355][T17419] ? __pfx_genl_rcv_msg+0x10/0x10 [ 678.490394][T17419] ? __pfx___dev_queue_xmit+0x10/0x10 [ 678.490425][T17419] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 678.490477][T17419] ? __lock_acquire+0xaa4/0x1ba0 [ 678.490520][T17419] netlink_rcv_skb+0x16a/0x440 [ 678.490556][T17419] ? __pfx_genl_rcv_msg+0x10/0x10 [ 678.490598][T17419] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 678.490646][T17419] ? __pfx_down_read+0x10/0x10 [ 678.490686][T17419] ? netlink_deliver_tap+0x1ae/0xd30 [ 678.490723][T17419] genl_rcv+0x28/0x40 [ 678.490758][T17419] netlink_unicast+0x53a/0x7f0 [ 678.490796][T17419] ? __pfx_netlink_unicast+0x10/0x10 [ 678.490832][T17419] ? __phys_addr_symbol+0x30/0x80 [ 678.490868][T17419] ? __check_object_size+0x4c7/0x710 [ 678.490916][T17419] netlink_sendmsg+0x8da/0xd70 [ 678.490954][T17419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.491032][T17419] ____sys_sendmsg+0xa8d/0xc60 [ 678.491061][T17419] ? copy_msghdr_from_user+0x10a/0x160 [ 678.491099][T17419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.491138][T17419] ___sys_sendmsg+0x134/0x1d0 [ 678.491176][T17419] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.491270][T17419] __sys_sendmsg+0x16d/0x220 [ 678.491316][T17419] ? __pfx___sys_sendmsg+0x10/0x10 [ 678.491361][T17419] ? __x64_sys_futex+0x1e0/0x4c0 [ 678.491406][T17419] ? rcu_is_watching+0x12/0xc0 [ 678.491447][T17419] do_syscall_64+0xcd/0x260 [ 678.491504][T17419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.491536][T17419] RIP: 0033:0x7ffa6298d169 [ 678.491562][T17419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.491594][T17419] RSP: 002b:00007ffa63853038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.491625][T17419] RAX: ffffffffffffffda RBX: 00007ffa62ba5fa0 RCX: 00007ffa6298d169 [ 678.491647][T17419] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000006 [ 678.491668][T17419] RBP: 00007ffa62a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 678.491690][T17419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.491709][T17419] R13: 0000000000000000 R14: 00007ffa62ba5fa0 R15: 00007fff485581f8 [ 678.491745][T17419] [ 678.922424][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.679951][T17440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3142'. [ 681.260972][T17468] netlink: 146 bytes leftover after parsing attributes in process `syz.7.3150'. [ 681.365804][T17473] netlink: 'syz.6.3151': attribute type 33 has an invalid length. [ 681.409046][T17473] netlink: 322 bytes leftover after parsing attributes in process `syz.6.3151'. [ 681.496302][T17478] Invalid ELF header magic: != ELF [ 683.112017][T17509] netlink: 338 bytes leftover after parsing attributes in process `syz.7.3160'. [ 683.197095][T17506] netlink: 'syz.4.3159': attribute type 5 has an invalid length. [ 683.213626][T17506] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3159'. [ 685.248932][T17548] snd_aloop snd_aloop.0: Parsing timer source 'iߩk' failed with -22 [ 685.587566][T17555] sd 0:0:1:0: PR command failed: 1026 [ 685.593918][T17555] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 685.624399][T17555] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 686.320440][T17568] netlink: 'syz.7.3175': attribute type 33 has an invalid length. [ 686.345102][T17568] netlink: 322 bytes leftover after parsing attributes in process `syz.7.3175'. [ 686.474672][T17568] Invalid ELF header magic: != ELF [ 686.868576][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 687.400461][T17586] netlink: 'syz.4.3179': attribute type 13 has an invalid length. [ 688.005230][ T5843] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 688.005273][ T5843] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 688.020281][ T5843] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 688.020318][ T5843] Bluetooth: hci2: adv larger than maximum supported [ 688.028058][ T5843] Bluetooth: hci2: Malformed LE Event: 0x0d [ 690.767010][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.773543][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.593695][T17682] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3205'. [ 692.602919][T17678] can: request_module (can-proto-0) failed. [ 693.559357][T17706] Invalid ELF header magic: != ELF [ 694.584044][T17722] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3217'. [ 694.799338][T17723] ptrace attach of "./syz-executor exec"[17218] was attempted by "./syz-executor exec"[17723] [ 695.805561][T17746] busy [ 698.905154][ T5843] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 699.366305][T17797] netlink: 186 bytes leftover after parsing attributes in process `syz.7.3237'. [ 699.884784][T17805] snd_aloop snd_aloop.0: control 16781581:65535:6:'x?F/zF˷fC:0 is already present [ 702.755279][ T5843] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 703.373818][T17882] busy [ 704.313918][T17902] netlink: 186 bytes leftover after parsing attributes in process `syz.7.3264'. [ 704.345610][T17902] netlink: 186 bytes leftover after parsing attributes in process `syz.7.3264'. [ 704.464489][T17907] netlink: 186 bytes leftover after parsing attributes in process `syz.7.3264'. [ 704.673608][T17914] busy [ 705.576532][T17928] busy [ 706.046934][ T5148] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 706.056960][ T5148] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 706.067145][ T5148] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 706.077543][ T5148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 706.086136][ T5148] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 706.094775][ T5148] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 706.439539][T17943] netlink: 346 bytes leftover after parsing attributes in process `syz.6.3274'. [ 706.618008][T17944] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3274'. [ 706.666279][T17943] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3274'. [ 706.809565][T17934] chnl_net:caif_netlink_parms(): no params data found [ 707.105791][T17934] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.150275][T17934] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.177642][T17934] bridge_slave_0: entered allmulticast mode [ 707.194699][T17934] bridge_slave_0: entered promiscuous mode [ 707.257323][T17934] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.281152][T17934] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.304554][ T5148] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 707.304598][ T5148] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 707.309406][T17934] bridge_slave_1: entered allmulticast mode [ 707.315092][ T5148] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 707.327844][ T5148] Bluetooth: hci0: adv larger than maximum supported [ 707.335004][ T5148] Bluetooth: hci0: Malformed LE Event: 0x0d [ 707.335904][T17934] bridge_slave_1: entered promiscuous mode [ 707.539521][T17934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.623381][T17934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.744119][T17934] team0: Port device team_slave_0 added [ 707.758507][T17934] team0: Port device team_slave_1 added [ 707.780566][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3279'. [ 707.915327][T17934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.922850][T17934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.992634][T17981] QAT: failed to copy from user. [ 708.014503][T17934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.087190][T17934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.116476][T17934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.216202][ T5148] Bluetooth: hci6: command tx timeout [ 708.223735][T17934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.437567][T17934] hsr_slave_0: entered promiscuous mode [ 708.454666][T17934] hsr_slave_1: entered promiscuous mode [ 708.460778][T17934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.484289][T17934] Cannot create hsr debugfs directory [ 708.817598][T18000] snd_aloop snd_aloop.0: Parsing timer source 'iߩk' failed with -22 [ 708.891401][T18000] netlink: 198 bytes leftover after parsing attributes in process `syz.6.3286'. [ 709.033018][T17934] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 709.088725][T17934] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 709.163714][T17934] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 709.219576][T17934] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 709.428377][T17934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.502608][T17934] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.541300][ T8592] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.548526][ T8592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.616543][ T8592] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.623809][ T8592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.992706][T18026] could not allocate digest TFM handle binfmt_misc [ 710.284146][ T5148] Bluetooth: hci6: command tx timeout [ 710.672170][T17934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.835183][ T5148] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 711.291672][T17934] veth0_vlan: entered promiscuous mode [ 711.388955][T17934] veth1_vlan: entered promiscuous mode [ 711.484926][T17934] veth0_macvtap: entered promiscuous mode [ 711.597935][T17934] veth1_macvtap: entered promiscuous mode [ 711.668110][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.699055][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.718358][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.743749][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.762313][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.783875][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.814038][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.834072][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.858341][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.886262][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.921839][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.942518][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.962754][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.988382][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.009142][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.040605][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.064153][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.085899][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.100170][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.123108][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.197108][T17934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.244952][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.264557][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.277266][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.297855][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.318526][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.340203][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.363783][ T5148] Bluetooth: hci6: command tx timeout [ 712.369568][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.388571][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.426642][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.458708][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.472021][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.486704][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.496930][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.507742][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.518818][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.538072][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.554755][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.573649][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.593663][T17934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.607787][T17934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.632790][T17934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.640433][T18082] netlink: 334 bytes leftover after parsing attributes in process `syz.7.3306'. [ 712.678694][T18088] netlink: 198 bytes leftover after parsing attributes in process `syz.4.3308'. [ 712.718663][T17934] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.728170][T17934] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.738001][T17934] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.748072][T17934] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.203663][ T8617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.229084][ T8617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.389874][ T8585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.398320][ T8585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.443937][ T5148] Bluetooth: hci6: command tx timeout [ 716.017190][T18165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3327'. [ 717.374878][T18194] Invalid ELF header magic: != ELF [ 719.459342][T18228] netlink: 198 bytes leftover after parsing attributes in process `syz.4.3345'. [ 719.691703][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3346'. [ 720.150365][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3347'. [ 721.505373][T18266] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3356'. [ 721.993842][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3360'. [ 722.022262][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3361'. [ 722.487356][T18294] netlink: 'syz.6.3366': attribute type 13 has an invalid length. [ 722.516713][T18293] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3367'. [ 722.862188][ T5148] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 722.862238][ T5148] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 722.878224][ T5148] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 722.878269][ T5148] Bluetooth: hci0: adv larger than maximum supported [ 722.886174][ T5148] Bluetooth: hci0: Malformed LE Event: 0x0d [ 723.863716][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3374'. [ 723.895915][T18320] netlink: 252 bytes leftover after parsing attributes in process `syz.7.3374'. [ 724.776315][T18328] can: request_module (can-proto-0) failed. [ 726.035742][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3383'. [ 726.694019][T18369] snd_aloop snd_aloop.0: control 1:6:-2147483647:_heR:6 is already present [ 726.825020][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3387'. [ 726.899080][T18371] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3387'. [ 728.689933][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 731.253719][T18420] netlink: 198 bytes leftover after parsing attributes in process `syz.4.3402'. [ 732.474429][T18442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3406'. [ 732.992003][T18452] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3410'. [ 733.292502][T18457] netlink: 'syz.6.3409': attribute type 13 has an invalid length. [ 733.553747][ T5148] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 733.553791][ T5148] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 733.568709][ T5148] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 733.568744][ T5148] Bluetooth: hci0: adv larger than maximum supported [ 733.575876][ T5148] Bluetooth: hci0: Malformed LE Event: 0x0d [ 733.885589][T18475] busy [ 733.924786][T18474] netlink: 'syz.7.3414': attribute type 13 has an invalid length. [ 734.733412][ T5148] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 734.733462][ T5148] Bluetooth: hci5: unexpected subevent 0x0d length: 725 > 260 [ 734.749964][ T5148] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 734.750024][ T5148] Bluetooth: hci5: adv larger than maximum supported [ 734.773652][ T5148] Bluetooth: hci5: Malformed LE Event: 0x0d [ 735.436741][T18499] netlink: 198 bytes leftover after parsing attributes in process `syz.6.3422'. [ 736.241195][T18511] netlink: 198 bytes leftover after parsing attributes in process `syz.6.3426'. [ 736.756189][T18525] netlink: 'syz.6.3428': attribute type 13 has an invalid length. [ 737.077778][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3430'. [ 737.179621][ T5148] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 737.179662][ T5148] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 737.195056][ T5148] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 737.195101][ T5148] Bluetooth: hci0: adv larger than maximum supported [ 737.202256][ T5148] Bluetooth: hci0: Malformed LE Event: 0x0d [ 737.694059][T18550] snd_aloop snd_aloop.0: Parsing timer source 'iߩk' failed with -22 [ 738.749288][T18554] netlink: 198 bytes leftover after parsing attributes in process `syz.8.3434'. [ 739.056113][T18564] [U] [ 739.058896][T18564] [U] [ 739.061651][T18564] [U] [ 739.064430][T18564] [U] [ 739.089446][T18564] [U] [ 739.092222][T18564] [U] [ 739.094960][T18564] [U] [ 739.097710][T18564] [U] [ 739.166905][T18564] [U] [ 739.169767][T18564] [U] [ 739.172509][T18564] [U] [ 739.175328][T18564] [U] [ 739.254624][T18564] [U] [ 739.257427][T18564] [U] [ 739.260314][T18564] [U] [ 739.263070][T18564] [U] [ 739.369884][T18564] [U] [ 739.372680][T18564] [U] [ 739.375420][T18564] [U] [ 739.378168][T18564] [U] [ 739.431016][T18564] [U] [ 739.433803][T18564] [U] [ 739.436540][T18564] [U] [ 739.439360][T18564] [U] [ 739.482424][T18564] [U] [ 739.485227][T18564] [U] [ 739.487936][T18564] [U] [ 739.490655][T18564] [U] [ 739.689325][T18564] [U] [ 739.692127][T18564] [U] [ 739.694881][T18564] [U] [ 739.697631][T18564] [U] [ 739.784115][T18564] [U] [ 739.786910][T18564] [U] [ 739.789654][T18564] [U] [ 739.792403][T18564] [U] [ 739.869716][T18564] [U] [ 739.872531][T18564] [U] [ 739.875282][T18564] [U] [ 739.878012][T18564] [U] [ 740.142362][T18564] [U] [ 740.145176][T18564] [U] [ 740.147921][T18564] [U] [ 740.150681][T18564] [U] [ 740.207390][T18564] [U] [ 740.210187][T18564] [U] [ 740.212928][T18564] [U] [ 740.215674][T18564] [U] [ 740.276258][T18564] [U] [ 740.279031][T18564] [U] [ 740.281762][T18564] [U] [ 740.284512][T18564] [U] [ 740.356590][T18564] [U] [ 740.359373][T18564] [U] [ 740.362124][T18564] [U] [ 740.364880][T18564] [U] [ 740.456557][T18564] [U] [ 740.459352][T18564] [U] [ 740.462077][T18564] [U] [ 740.464795][T18564] [U] [ 740.520743][T18564] [U] [ 740.523534][T18564] [U] [ 740.526273][T18564] [U] [ 740.529010][T18564] [U] [ 740.571931][T18564] [U] [ 740.574716][T18564] [U] [ 740.577459][T18564] [U] [ 740.580208][T18564] [U] [ 740.642895][T18564] [U] [ 740.645681][T18564] [U] [ 740.648458][T18564] [U] [ 740.651198][T18564] [U] [ 740.757985][T18564] [U] [ 740.760769][T18564] [U] [ 740.763512][T18564] [U] [ 740.766244][T18564] [U] [ 740.848836][T18564] [U] [ 741.200234][T18585] netlink: 252 bytes leftover after parsing attributes in process `syz.7.3441'. [ 741.936869][T18599] netlink: 'syz.4.3443': attribute type 13 has an invalid length. [ 742.013100][T18600] snd_aloop snd_aloop.0: control 1:6:-2147483647:_heR:6 is already present [ 743.343232][ T5148] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 743.343269][ T5148] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 743.383366][ T5148] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 743.383407][ T5148] Bluetooth: hci2: adv larger than maximum supported [ 743.390766][ T5148] Bluetooth: hci2: Malformed LE Event: 0x0d [ 743.702630][T18626] netlink: 'syz.7.3452': attribute type 13 has an invalid length. [ 744.944840][ T5148] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 744.944885][ T5148] Bluetooth: hci5: unexpected subevent 0x0d length: 725 > 260 [ 744.961218][ T5148] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 744.961277][ T5148] Bluetooth: hci5: adv larger than maximum supported [ 744.968729][ T5148] Bluetooth: hci5: Malformed LE Event: 0x0d [ 748.195527][ T8615] bridge_slave_1: left allmulticast mode [ 748.239842][ T8615] bridge_slave_1: left promiscuous mode [ 748.259325][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.315964][ T8615] bridge_slave_0: left allmulticast mode [ 748.321824][ T8615] bridge_slave_0: left promiscuous mode [ 748.348804][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.990532][ T8615] erspan0 (unregistering): left allmulticast mode [ 749.721802][T18739] capability: warning: `syz.6.3477' uses deprecated v2 capabilities in a way that may be insecure [ 749.833140][ T8615]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.933990][ T8615]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.960092][ T8615]  (unregistering): Released all slaves [ 750.870491][ T8615] : left promiscuous mode [ 750.896602][ T8615] hsr_slave_1: left promiscuous mode [ 750.914405][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.942017][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.014715][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.039363][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.126189][ T8615] veth1_macvtap: left promiscuous mode [ 751.174053][ T8615] veth1_vlan: left promiscuous mode [ 751.179399][ T8615] veth0_vlan: left promiscuous mode [ 752.208496][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.215001][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.766556][ T8615] team0 (unregistering): Port device team_slave_1 removed [ 752.989123][ T8615] team0 (unregistering): Port device team_slave_0 removed [ 755.251361][T18804] snd_aloop snd_aloop.0: control 16781581:65535:6:'x?F/zF˷fC:0 is already present [ 756.061164][T18810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3495'. [ 757.891558][ T8615] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.176717][ T8615] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.426246][ T8615] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.738540][ T8615] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.333767][ T8615] bridge_slave_1: left allmulticast mode [ 759.340388][ T8615] bridge_slave_1: left promiscuous mode [ 759.346250][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.534854][ T8615] bridge_slave_0: left allmulticast mode [ 759.541476][ T8615] bridge_slave_0: left promiscuous mode [ 759.553745][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.645590][ T8615] bridge_slave_1: left allmulticast mode [ 759.652283][ T8615] bridge_slave_1: left promiscuous mode [ 759.684781][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.727178][ T8615] bridge_slave_0: left allmulticast mode [ 759.767431][ T8615] bridge_slave_0: left promiscuous mode [ 759.773194][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.260032][ T8615] erspan0 (unregistering): left allmulticast mode [ 762.232780][ T8615]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.280869][ T8615]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.322561][ T8615]  (unregistering): Released all slaves [ 762.549212][ T8615]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.584083][ T8615]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.617170][ T8615]  (unregistering): Released all slaves [ 762.731119][ T8615] HfR: left promiscuous mode [ 765.253675][T18976] busy [ 766.505851][T19007] netlink: 'syz.7.3528': attribute type 13 has an invalid length. [ 766.545161][T19008] netlink: 'syz.4.3529': attribute type 13 has an invalid length. [ 766.557674][T19006] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3527'. [ 766.642740][ T5148] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 766.642783][ T5148] Bluetooth: hci5: unexpected subevent 0x0d length: 725 > 260 [ 766.665394][ T5148] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 766.665437][ T5148] Bluetooth: hci5: adv larger than maximum supported [ 766.672700][ T5148] Bluetooth: hci5: Malformed LE Event: 0x0d [ 766.900484][ T5148] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 766.900527][ T5148] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 766.916209][ T5148] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 766.916245][ T5148] Bluetooth: hci2: adv larger than maximum supported [ 766.930568][ T5148] Bluetooth: hci2: Malformed LE Event: 0x0d [ 768.067733][ T8615] hsr_slave_0: left promiscuous mode [ 768.098378][ T8615] hsr_slave_1: left promiscuous mode [ 768.120409][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.163068][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.218547][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.262330][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.343927][ T8615] hsr_slave_0: left promiscuous mode [ 768.366661][ T8615] hsr_slave_1: left promiscuous mode [ 768.394596][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.402085][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.474198][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.481651][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.658655][ T8615] veth1_macvtap: left promiscuous mode [ 768.690701][ T8615] veth1_vlan: left promiscuous mode [ 768.704114][ T8615] veth0_vlan: left promiscuous mode [ 768.733389][ T8615] veth1_macvtap: left promiscuous mode [ 768.748605][ T8615] veth1_vlan: left promiscuous mode [ 768.768940][ T8615] veth0_vlan: left promiscuous mode [ 770.015917][ T8615] team0 (unregistering): Port device team_slave_1 removed [ 770.117169][ T8615] team0 (unregistering): Port device team_slave_0 removed [ 771.221189][ T8615] team0 (unregistering): Port device team_slave_1 removed [ 771.255872][ T8615] team0 (unregistering): Port device team_slave_0 removed [ 775.543995][T19136] netlink: 'syz.4.3545': attribute type 13 has an invalid length. [ 775.943674][ T5148] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 775.943719][ T5148] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 775.958942][ T5148] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 775.958981][ T5148] Bluetooth: hci2: adv larger than maximum supported [ 775.966270][ T5148] Bluetooth: hci2: Malformed LE Event: 0x0d [ 778.118659][T19185] snd_aloop snd_aloop.0: control 16781581:65535:6:'x?F/zF˷fC:0 is already present [ 779.294444][T19216] snd_aloop snd_aloop.0: control 16781581:65535:6:'x?F/zF˷fC:0 is already present [ 779.883798][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 780.390963][ T5148] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 782.534828][T19289] netlink: 'syz.6.3567': attribute type 1 has an invalid length. [ 782.662875][T19293] busy [ 783.721201][T19320] netlink: 'syz.4.3574': attribute type 13 has an invalid length. [ 784.193997][ T5148] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 784.194040][ T5148] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 784.211111][ T5148] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 784.211153][ T5148] Bluetooth: hci2: adv larger than maximum supported [ 784.219181][ T5148] Bluetooth: hci2: Malformed LE Event: 0x0d [ 784.629863][ T5148] Bluetooth: hci6: unexpected event 0x3e length: 726 > 260 [ 784.629906][ T5148] Bluetooth: hci6: unexpected subevent 0x0d length: 725 > 260 [ 784.645250][ T5148] Bluetooth: hci6: Unknown advertising packet type: 0x7f [ 784.645310][ T5148] Bluetooth: hci6: adv larger than maximum supported [ 784.652954][ T5148] Bluetooth: hci6: Malformed LE Event: 0x0d [ 785.983979][T19379] busy [ 786.747616][T19389] netlink: 'syz.4.3587': attribute type 13 has an invalid length. [ 787.201708][ T5148] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 787.201750][ T5148] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 787.219077][ T5148] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 787.219117][ T5148] Bluetooth: hci2: adv larger than maximum supported [ 787.228057][ T5148] Bluetooth: hci2: Malformed LE Event: 0x0d [ 787.982157][T19390] kexec: Could not allocate control_code_buffer [ 788.695962][ T8617] bridge_slave_1: left allmulticast mode [ 788.729227][ T8617] bridge_slave_1: left promiscuous mode [ 788.743854][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.793326][ T8617] bridge_slave_0: left allmulticast mode [ 788.816592][ T8617] bridge_slave_0: left promiscuous mode [ 788.838389][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.035321][ T8617]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.095035][ T8617]  (unregistering): Released all slaves [ 790.123868][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 790.354761][T19447] netlink: 338 bytes leftover after parsing attributes in process `syz.6.3595'. [ 790.376370][ T8617] HfR: left promiscuous mode [ 790.396942][T19447] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.405469][T19447] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.419807][T19449] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3596'. [ 791.501728][T19458] netlink: 'syz.7.3598': attribute type 13 has an invalid length. [ 791.842103][ T5148] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 791.842151][ T5148] Bluetooth: hci5: unexpected subevent 0x0d length: 725 > 260 [ 791.857102][ T5148] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 791.857139][ T5148] Bluetooth: hci5: adv larger than maximum supported [ 791.864331][ T5148] Bluetooth: hci5: Malformed LE Event: 0x0d [ 791.931110][ T8617] hsr_slave_0: left promiscuous mode [ 791.948240][ T8617] hsr_slave_1: left promiscuous mode [ 791.964704][ T8617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.972180][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.000423][ T8617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.028313][ T8617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.097209][ T8617] veth1_macvtap: left promiscuous mode [ 792.102788][ T8617] veth0_macvtap: left promiscuous mode [ 792.148858][ T8617] veth1_vlan: left promiscuous mode [ 792.168196][ T8617] veth0_vlan: left promiscuous mode [ 792.525696][T19482] netlink: 'syz.6.3599': attribute type 13 has an invalid length. [ 793.102295][ T5148] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 793.102343][ T5148] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 793.121108][ T5148] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 793.121153][ T5148] Bluetooth: hci0: adv larger than maximum supported [ 793.131903][ T5148] Bluetooth: hci0: Malformed LE Event: 0x0d [ 793.667079][ T8617] team0 (unregistering): Port device team_slave_1 removed [ 793.815961][ T8617] team0 (unregistering): Port device team_slave_0 removed [ 794.770125][T19480] bridge0: port 3(syz_tun) entered blocking state [ 794.777617][T19480] bridge0: port 3(syz_tun) entered disabled state [ 794.803637][T19480] syz_tun: entered allmulticast mode [ 794.810063][T19480] syz_tun: entered promiscuous mode [ 794.833984][T19480] bridge0: port 3(syz_tun) entered blocking state [ 794.840583][T19480] bridge0: port 3(syz_tun) entered forwarding state [ 798.525688][T19562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3612'. [ 798.948927][T19599] netlink: 'syz.6.3618': attribute type 1 has an invalid length. [ 799.651226][T19608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3619'. [ 801.375335][T19667] busy [ 802.946076][T19686] sock: sock_timestamping_bind_phc: sock not bind to device [ 805.075860][T19729] snd_aloop snd_aloop.0: control 1:6:-2147483647:_heR:6 is already present [ 807.515865][T19763] Invalid ELF header magic: != ELF [ 810.737674][T19785] can: request_module (can-proto-3) failed. [ 813.658652][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.665111][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.352053][T19874] netlink: 338 bytes leftover after parsing attributes in process `syz.7.3669'. [ 815.477115][T19874] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.485677][T19874] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.502657][T19875] busy [ 819.146512][T19912] busy [ 821.239384][T19931] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3681'. [ 822.296025][T19950] can: request_module (can-proto-5) failed. [ 823.710662][T19974] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 823.727226][T19974] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 824.943679][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 824.952399][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 824.961209][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 824.971262][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 824.984054][ T5843] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 824.991350][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 825.778046][T19988] chnl_net:caif_netlink_parms(): no params data found [ 826.307439][T19988] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.319877][T19988] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.328440][T19988] bridge_slave_0: entered allmulticast mode [ 826.340605][T19988] bridge_slave_0: entered promiscuous mode [ 826.349538][T19988] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.361933][T19988] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.370944][T19988] bridge_slave_1: entered allmulticast mode [ 826.383076][T19988] bridge_slave_1: entered promiscuous mode [ 826.642260][T19988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.675848][T19988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.867561][T19988] team0: Port device team_slave_0 added [ 826.882498][T19988] team0: Port device team_slave_1 added [ 826.980672][T19988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.999427][T19988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.062190][T19988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.084993][T19988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.086260][ T5148] Bluetooth: hci7: command tx timeout [ 827.092408][T19988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.175060][T19988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.369801][T19988] hsr_slave_0: entered promiscuous mode [ 827.391367][T19988] hsr_slave_1: entered promiscuous mode [ 827.788330][T19988] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 827.896638][T19988] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 827.910162][T19988] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 827.927498][T19988] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 828.137712][T19988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.186743][T19988] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.208925][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.216095][ T8617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.273147][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.280324][ T8585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.674822][T19988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.047281][T20020] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3705'. [ 829.163781][ T5843] Bluetooth: hci7: command tx timeout [ 829.300636][T19988] veth0_vlan: entered promiscuous mode [ 829.372132][T19988] veth1_vlan: entered promiscuous mode [ 829.460227][T19988] veth0_macvtap: entered promiscuous mode [ 829.497236][T19988] veth1_macvtap: entered promiscuous mode [ 829.571388][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.623589][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.688937][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.723920][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.749853][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.793627][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.814000][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.851996][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.876218][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.913510][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.943792][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.973594][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.013634][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.033806][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.074867][T19988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.117243][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.169844][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.190717][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.219587][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.269849][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.311549][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.352510][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.425869][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.463543][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.493572][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.523657][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.573509][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.583379][T19988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.609175][T19988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.634925][T19988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.685939][T19988] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.708735][T19988] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.733621][T19988] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.742364][T19988] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.011095][ T8596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.060934][ T8596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.084007][ T5843] Bluetooth: hci6: command 0x0406 tx timeout [ 831.125229][ T8607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.133174][ T8607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.243680][ T5148] Bluetooth: hci7: command tx timeout [ 833.192053][T20065] snd_aloop snd_aloop.0: control 1:6:-2147483647:_heR:6 is already present [ 833.325458][ T5148] Bluetooth: hci7: command tx timeout [ 834.674295][T20081] netlink: 338 bytes leftover after parsing attributes in process `syz.9.3717'. [ 834.703075][T20081] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.710520][T20081] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.962843][T20083] FAULT_INJECTION: forcing a failure. [ 834.962843][T20083] name failslab, interval 1, probability 0, space 0, times 0 [ 835.004015][T20083] CPU: 0 UID: 0 PID: 20083 Comm: syz.9.3718 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 835.004059][T20083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 835.004078][T20083] Call Trace: [ 835.004087][T20083] [ 835.004099][T20083] dump_stack_lvl+0x16c/0x1f0 [ 835.004143][T20083] should_fail_ex+0x512/0x640 [ 835.004190][T20083] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 835.004241][T20083] should_failslab+0xc2/0x120 [ 835.004288][T20083] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 835.004331][T20083] ? security_file_alloc+0x34/0x2b0 [ 835.004379][T20083] security_file_alloc+0x34/0x2b0 [ 835.004423][T20083] init_file+0x93/0x4c0 [ 835.004467][T20083] alloc_empty_file+0x73/0x1e0 [ 835.004501][T20083] alloc_file_pseudo+0x13a/0x230 [ 835.004536][T20083] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 835.004570][T20083] ? alloc_fd+0x420/0x760 [ 835.004617][T20083] sock_alloc_file+0x50/0x210 [ 835.004665][T20083] __sys_socket+0x1c0/0x260 [ 835.004698][T20083] ? __pfx___sys_socket+0x10/0x10 [ 835.004736][T20083] ? do_user_addr_fault+0x850/0x1430 [ 835.004773][T20083] __x64_sys_socket+0x72/0xb0 [ 835.004805][T20083] ? lockdep_hardirqs_on+0x7c/0x110 [ 835.004845][T20083] do_syscall_64+0xcd/0x260 [ 835.004888][T20083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.004921][T20083] RIP: 0033:0x7fd82b58f087 [ 835.004946][T20083] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.004978][T20083] RSP: 002b:00007fd82c3c5fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 835.005008][T20083] RAX: ffffffffffffffda RBX: 00007fd82b7a5fa0 RCX: 00007fd82b58f087 [ 835.005030][T20083] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 835.005049][T20083] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 835.005069][T20083] R10: 0000200000001940 R11: 0000000000000286 R12: 0000000000000000 [ 835.005089][T20083] R13: 0000000000000000 R14: 00007fd82b7a5fa0 R15: 00007ffc86e0b9e8 [ 835.005124][T20083] [ 835.765190][T20090] CIFS: VFS: Unsupported security flags: 0x200 [ 836.583928][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 836.595090][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 836.609534][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 836.617648][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 836.625605][ T5843] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 836.632917][ T5843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 837.037701][T20097] chnl_net:caif_netlink_parms(): no params data found [ 837.841386][T20097] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.865212][T20097] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.893144][T20097] bridge_slave_0: entered allmulticast mode [ 837.914983][T20097] bridge_slave_0: entered promiscuous mode [ 837.933113][T20097] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.960664][T20097] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.990871][T20097] bridge_slave_1: entered allmulticast mode [ 838.008111][T20097] bridge_slave_1: entered promiscuous mode [ 838.306409][T20097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.411411][T20097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.703644][ T5148] Bluetooth: hci8: command tx timeout [ 838.848464][T20097] team0: Port device team_slave_0 added [ 838.965217][T20097] team0: Port device team_slave_1 added [ 839.366360][T20097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.373351][T20097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.383101][T20138] FAULT_INJECTION: forcing a failure. [ 839.383101][T20138] name failslab, interval 1, probability 0, space 0, times 0 [ 839.399299][ C1] vkms_vblank_simulate: vblank timer overrun [ 839.462905][T20097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.484867][T20138] CPU: 0 UID: 0 PID: 20138 Comm: syz.9.3730 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 839.484907][T20138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 839.484925][T20138] Call Trace: [ 839.484934][T20138] [ 839.484954][T20138] dump_stack_lvl+0x16c/0x1f0 [ 839.484997][T20138] should_fail_ex+0x512/0x640 [ 839.485027][T20138] ? __kmalloc_noprof+0xbf/0x510 [ 839.485072][T20138] ? rfkill_alloc+0xac/0x330 [ 839.485109][T20138] should_failslab+0xc2/0x120 [ 839.485153][T20138] __kmalloc_noprof+0xd2/0x510 [ 839.485203][T20138] rfkill_alloc+0xac/0x330 [ 839.485244][T20138] wiphy_new_nm+0x1217/0x2160 [ 839.485283][T20138] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 839.485327][T20138] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 839.485368][T20138] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 839.485408][T20138] ? __local_bh_enable_ip+0xa4/0x120 [ 839.485444][T20138] mac80211_hwsim_new_radio+0x1d4/0x54f0 [ 839.485502][T20138] ? __asan_memset+0x23/0x50 [ 839.485538][T20138] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 839.485591][T20138] hwsim_new_radio_nl+0xb51/0x12c0 [ 839.485637][T20138] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 839.485690][T20138] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 839.485739][T20138] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 839.485793][T20138] genl_family_rcv_msg_doit+0x206/0x2f0 [ 839.485839][T20138] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 839.485882][T20138] ? trace_cap_capable+0x18d/0x200 [ 839.485921][T20138] ? bpf_lsm_capable+0x9/0x10 [ 839.485958][T20138] ? security_capable+0x7e/0x260 [ 839.485992][T20138] ? ns_capable+0xd7/0x110 [ 839.486027][T20138] genl_rcv_msg+0x55c/0x800 [ 839.486075][T20138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 839.486117][T20138] ? __pfx___dev_queue_xmit+0x10/0x10 [ 839.486152][T20138] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 839.486198][T20138] ? __lock_acquire+0xaa4/0x1ba0 [ 839.486243][T20138] netlink_rcv_skb+0x16a/0x440 [ 839.486281][T20138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 839.486327][T20138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 839.486377][T20138] ? __pfx_down_read+0x10/0x10 [ 839.486419][T20138] ? netlink_deliver_tap+0x1ae/0xd30 [ 839.486459][T20138] genl_rcv+0x28/0x40 [ 839.486498][T20138] netlink_unicast+0x53a/0x7f0 [ 839.486538][T20138] ? __pfx_netlink_unicast+0x10/0x10 [ 839.486578][T20138] ? __phys_addr_symbol+0x30/0x80 [ 839.486617][T20138] ? __check_object_size+0x4c7/0x710 [ 839.486669][T20138] netlink_sendmsg+0x8da/0xd70 [ 839.486711][T20138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.486759][T20138] ____sys_sendmsg+0xa8d/0xc60 [ 839.486790][T20138] ? copy_msghdr_from_user+0x10a/0x160 [ 839.486831][T20138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 839.486873][T20138] ___sys_sendmsg+0x134/0x1d0 [ 839.486915][T20138] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.486995][T20138] __sys_sendmsg+0x16d/0x220 [ 839.487036][T20138] ? __pfx___sys_sendmsg+0x10/0x10 [ 839.487077][T20138] ? __x64_sys_futex+0x1e0/0x4c0 [ 839.487120][T20138] ? rcu_is_watching+0x12/0xc0 [ 839.487157][T20138] do_syscall_64+0xcd/0x260 [ 839.487198][T20138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.487226][T20138] RIP: 0033:0x7fd82b58d169 [ 839.487251][T20138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.487281][T20138] RSP: 002b:00007fd82c3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.487309][T20138] RAX: ffffffffffffffda RBX: 00007fd82b7a5fa0 RCX: 00007fd82b58d169 [ 839.487329][T20138] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000005 [ 839.487348][T20138] RBP: 00007fd82b60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 839.487367][T20138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.487385][T20138] R13: 0000000000000000 R14: 00007fd82b7a5fa0 R15: 00007ffc86e0b9e8 [ 839.487418][T20138] [ 839.487436][T20138] INFO: trying to register non-static key. [ 839.869542][T20138] The code is fine but needs lockdep annotation, or maybe [ 839.876652][T20138] you didn't initialize this object before use? [ 839.882888][T20138] turning off the locking correctness validator. [ 839.889217][T20138] CPU: 0 UID: 0 PID: 20138 Comm: syz.9.3730 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 839.889250][T20138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 839.889265][T20138] Call Trace: [ 839.889272][T20138] [ 839.889282][T20138] dump_stack_lvl+0x116/0x1f0 [ 839.889319][T20138] register_lock_class+0x4a3/0x4c0 [ 839.889358][T20138] __lock_acquire+0x99/0x1ba0 [ 839.889394][T20138] lock_acquire+0x179/0x350 [ 839.889426][T20138] ? cfg80211_dev_free+0x30/0x3d0 [ 839.889464][T20138] ? dump_stack_lvl+0x1a1/0x1f0 [ 839.889495][T20138] _raw_spin_lock_irqsave+0x3a/0x60 [ 839.889522][T20138] ? cfg80211_dev_free+0x30/0x3d0 [ 839.889556][T20138] cfg80211_dev_free+0x30/0x3d0 [ 839.889592][T20138] ? __pfx_wiphy_dev_release+0x10/0x10 [ 839.889630][T20138] device_release+0xa1/0x240 [ 839.889654][T20138] kobject_put+0x1e4/0x5a0 [ 839.889688][T20138] put_device+0x1f/0x30 [ 839.889709][T20138] wiphy_new_nm+0x1c1f/0x2160 [ 839.889741][T20138] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 839.889777][T20138] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 839.889812][T20138] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 839.889845][T20138] ? __local_bh_enable_ip+0xa4/0x120 [ 839.889876][T20138] mac80211_hwsim_new_radio+0x1d4/0x54f0 [ 839.889921][T20138] ? __asan_memset+0x23/0x50 [ 839.889951][T20138] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 839.889991][T20138] hwsim_new_radio_nl+0xb51/0x12c0 [ 839.890028][T20138] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 839.890068][T20138] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 839.890108][T20138] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 839.890155][T20138] genl_family_rcv_msg_doit+0x206/0x2f0 [ 839.890193][T20138] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 839.890229][T20138] ? trace_cap_capable+0x18d/0x200 [ 839.890259][T20138] ? bpf_lsm_capable+0x9/0x10 [ 839.890282][T20138] ? security_capable+0x7e/0x260 [ 839.890308][T20138] ? ns_capable+0xd7/0x110 [ 839.890333][T20138] genl_rcv_msg+0x55c/0x800 [ 839.890370][T20138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 839.890405][T20138] ? __pfx___dev_queue_xmit+0x10/0x10 [ 839.890432][T20138] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 839.890470][T20138] ? __lock_acquire+0xaa4/0x1ba0 [ 839.890503][T20138] netlink_rcv_skb+0x16a/0x440 [ 839.890534][T20138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 839.890571][T20138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 839.890608][T20138] ? __pfx_down_read+0x10/0x10 [ 839.890642][T20138] ? netlink_deliver_tap+0x1ae/0xd30 [ 839.890672][T20138] genl_rcv+0x28/0x40 [ 839.890703][T20138] netlink_unicast+0x53a/0x7f0 [ 839.890735][T20138] ? __pfx_netlink_unicast+0x10/0x10 [ 839.890767][T20138] ? __phys_addr_symbol+0x30/0x80 [ 839.890800][T20138] ? __check_object_size+0x4c7/0x710 [ 839.890839][T20138] netlink_sendmsg+0x8da/0xd70 [ 839.890872][T20138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.890909][T20138] ____sys_sendmsg+0xa8d/0xc60 [ 839.890933][T20138] ? copy_msghdr_from_user+0x10a/0x160 [ 839.890967][T20138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 839.890995][T20138] ___sys_sendmsg+0x134/0x1d0 [ 839.891028][T20138] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.891074][T20138] __sys_sendmsg+0x16d/0x220 [ 839.891107][T20138] ? __pfx___sys_sendmsg+0x10/0x10 [ 839.891145][T20138] ? __x64_sys_futex+0x1e0/0x4c0 [ 839.891176][T20138] ? rcu_is_watching+0x12/0xc0 [ 839.891203][T20138] do_syscall_64+0xcd/0x260 [ 839.891236][T20138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.891261][T20138] RIP: 0033:0x7fd82b58d169 [ 839.891280][T20138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.891305][T20138] RSP: 002b:00007fd82c3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.891347][T20138] RAX: ffffffffffffffda RBX: 00007fd82b7a5fa0 RCX: 00007fd82b58d169 [ 839.891365][T20138] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000005 [ 839.891383][T20138] RBP: 00007fd82b60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 839.891400][T20138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.891416][T20138] R13: 0000000000000000 R14: 00007fd82b7a5fa0 R15: 00007ffc86e0b9e8 [ 839.891440][T20138] [ 839.892720][T20138] ------------[ cut here ]------------ [ 840.304928][T20138] WARNING: CPU: 0 PID: 20138 at net/wireless/core.c:1197 cfg80211_dev_free+0x2e7/0x3d0 [ 840.314604][T20138] Modules linked in: [ 840.318524][T20138] CPU: 0 UID: 0 PID: 20138 Comm: syz.9.3730 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 840.330264][T20138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 840.340335][T20138] RIP: 0010:cfg80211_dev_free+0x2e7/0x3d0 [ 840.346089][T20138] Code: 00 00 49 8b bd e0 08 00 00 e8 c5 21 66 f7 4c 89 ef 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 af 21 66 f7 e8 ba 3f 0e f7 90 <0f> 0b 90 e9 6f fd ff ff 4c 89 ff e8 09 f0 70 f7 e9 aa fe ff ff 4c [ 840.365719][T20138] RSP: 0018:ffffc9000d4df1b0 EFLAGS: 00010046 [ 840.371809][T20138] RAX: 0000000000080000 RBX: 0000000000000283 RCX: ffffc900192b9000 [ 840.379805][T20138] RDX: 0000000000080000 RSI: ffffffff8aacb5d6 RDI: ffffc9000d4df120 [ 840.387834][T20138] RBP: ffff8880648a06a8 R08: 0000000000000001 R09: fffff52001a9be24 [ 840.395828][T20138] R10: 0000000000000003 R11: ffff8880648a06d0 R12: ffff8880648a06b8 [ 840.403810][T20138] R13: ffff8880648a0000 R14: ffff8880748cd2c0 R15: 0000000000000000 [ 840.411805][T20138] FS: 00007fd82c3c76c0(0000) GS:ffff888124e5a000(0000) knlGS:0000000000000000 [ 840.420762][T20138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 840.427365][T20138] CR2: 0000001b2caedff8 CR3: 000000008e594000 CR4: 00000000003526f0 [ 840.435355][T20138] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 840.443344][T20138] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 840.451355][T20138] Call Trace: [ 840.454647][T20138] [ 840.457583][T20138] ? __warn+0xea/0x3c0 [ 840.461683][T20138] ? cfg80211_dev_free+0x2e7/0x3d0 [ 840.466866][T20138] ? report_bug+0x3c3/0x580 [ 840.471390][T20138] ? cfg80211_dev_free+0x2e7/0x3d0 [ 840.476532][T20138] ? handle_bug+0x184/0x210 [ 840.481072][T20138] ? exc_invalid_op+0x17/0x50 [ 840.485772][T20138] ? asm_exc_invalid_op+0x1a/0x20 [ 840.490810][T20138] ? cfg80211_dev_free+0x2e6/0x3d0 [ 840.495955][T20138] ? cfg80211_dev_free+0x2e7/0x3d0 [ 840.501106][T20138] ? __pfx_wiphy_dev_release+0x10/0x10 [ 840.506586][T20138] device_release+0xa1/0x240 [ 840.511183][T20138] kobject_put+0x1e4/0x5a0 [ 840.515624][T20138] put_device+0x1f/0x30 [ 840.519806][T20138] wiphy_new_nm+0x1c1f/0x2160 [ 840.524528][T20138] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 840.531056][T20138] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 840.537843][T20138] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 840.543321][T20138] ? __local_bh_enable_ip+0xa4/0x120 [ 840.548623][T20138] mac80211_hwsim_new_radio+0x1d4/0x54f0 [ 840.554281][T20138] ? __asan_memset+0x23/0x50 [ 840.558886][T20138] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 840.564985][T20138] hwsim_new_radio_nl+0xb51/0x12c0 [ 840.570137][T20138] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 840.575704][T20138] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 840.583096][T20138] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 840.590495][T20138] genl_family_rcv_msg_doit+0x206/0x2f0 [ 840.596090][T20138] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 840.602181][T20138] ? trace_cap_capable+0x18d/0x200 [ 840.607318][T20138] ? bpf_lsm_capable+0x9/0x10 [ 840.612010][T20138] ? security_capable+0x7e/0x260 [ 840.616970][T20138] ? ns_capable+0xd7/0x110 [ 840.621424][T20138] genl_rcv_msg+0x55c/0x800 [ 840.625964][T20138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 840.631021][T20138] ? __pfx___dev_queue_xmit+0x10/0x10 [ 840.636410][T20138] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 840.641988][T20138] ? __lock_acquire+0xaa4/0x1ba0 [ 840.646958][T20138] netlink_rcv_skb+0x16a/0x440 [ 840.651744][T20138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 840.656803][T20138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 840.662120][T20138] ? __pfx_down_read+0x10/0x10 [ 840.666911][T20138] ? netlink_deliver_tap+0x1ae/0xd30 [ 840.672301][T20138] genl_rcv+0x28/0x40 [ 840.676320][T20138] netlink_unicast+0x53a/0x7f0 [ 840.681104][T20138] ? __pfx_netlink_unicast+0x10/0x10 [ 840.686408][T20138] ? __phys_addr_symbol+0x30/0x80 [ 840.691457][T20138] ? __check_object_size+0x4c7/0x710 [ 840.696781][T20138] netlink_sendmsg+0x8da/0xd70 [ 840.701578][T20138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.706912][T20138] ____sys_sendmsg+0xa8d/0xc60 [ 840.711698][T20138] ? copy_msghdr_from_user+0x10a/0x160 [ 840.717188][T20138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.722498][T20138] ___sys_sendmsg+0x134/0x1d0 [ 840.727214][T20138] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.732455][T20138] __sys_sendmsg+0x16d/0x220 [ 840.737163][T20138] ? __pfx___sys_sendmsg+0x10/0x10 [ 840.742303][T20138] ? __x64_sys_futex+0x1e0/0x4c0 [ 840.747273][T20138] ? rcu_is_watching+0x12/0xc0 [ 840.752065][T20138] do_syscall_64+0xcd/0x260 [ 840.756593][T20138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.762536][T20138] RIP: 0033:0x7fd82b58d169 [ 840.766963][T20138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.786603][T20138] RSP: 002b:00007fd82c3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.795037][T20138] RAX: ffffffffffffffda RBX: 00007fd82b7a5fa0 RCX: 00007fd82b58d169 [ 840.803020][T20138] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000005 [ 840.811001][T20138] RBP: 00007fd82b60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 840.818983][T20138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.826973][T20138] R13: 0000000000000000 R14: 00007fd82b7a5fa0 R15: 00007ffc86e0b9e8 [ 840.834986][T20138] [ 840.838021][T20138] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 840.845315][T20138] CPU: 0 UID: 0 PID: 20138 Comm: syz.9.3730 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 840.857069][T20138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 840.867141][T20138] Call Trace: [ 840.870428][T20138] [ 840.873367][T20138] dump_stack_lvl+0x3d/0x1f0 [ 840.877985][T20138] panic+0x71c/0x800 [ 840.881918][T20138] ? __pfx_panic+0x10/0x10 [ 840.886365][T20138] ? show_trace_log_lvl+0x29c/0x3c0 [ 840.891588][T20138] ? cfg80211_dev_free+0x2e7/0x3d0 [ 840.896733][T20138] check_panic_on_warn+0xab/0xb0 [ 840.901710][T20138] __warn+0xf6/0x3c0 [ 840.905655][T20138] ? cfg80211_dev_free+0x2e7/0x3d0 [ 840.910793][T20138] report_bug+0x3c3/0x580 [ 840.915137][T20138] ? cfg80211_dev_free+0x2e7/0x3d0 [ 840.920293][T20138] handle_bug+0x184/0x210 [ 840.924667][T20138] exc_invalid_op+0x17/0x50 [ 840.929224][T20138] asm_exc_invalid_op+0x1a/0x20 [ 840.934099][T20138] RIP: 0010:cfg80211_dev_free+0x2e7/0x3d0 [ 840.939860][T20138] Code: 00 00 49 8b bd e0 08 00 00 e8 c5 21 66 f7 4c 89 ef 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 af 21 66 f7 e8 ba 3f 0e f7 90 <0f> 0b 90 e9 6f fd ff ff 4c 89 ff e8 09 f0 70 f7 e9 aa fe ff ff 4c [ 840.959506][T20138] RSP: 0018:ffffc9000d4df1b0 EFLAGS: 00010046 [ 840.965599][T20138] RAX: 0000000000080000 RBX: 0000000000000283 RCX: ffffc900192b9000 [ 840.973593][T20138] RDX: 0000000000080000 RSI: ffffffff8aacb5d6 RDI: ffffc9000d4df120 [ 840.981591][T20138] RBP: ffff8880648a06a8 R08: 0000000000000001 R09: fffff52001a9be24 [ 840.989586][T20138] R10: 0000000000000003 R11: ffff8880648a06d0 R12: ffff8880648a06b8 [ 840.997574][T20138] R13: ffff8880648a0000 R14: ffff8880748cd2c0 R15: 0000000000000000 [ 841.005558][T20138] ? cfg80211_dev_free+0x2e6/0x3d0 [ 841.010695][T20138] ? __pfx_wiphy_dev_release+0x10/0x10 [ 841.016176][T20138] device_release+0xa1/0x240 [ 841.020780][T20138] kobject_put+0x1e4/0x5a0 [ 841.025224][T20138] put_device+0x1f/0x30 [ 841.029393][T20138] wiphy_new_nm+0x1c1f/0x2160 [ 841.034098][T20138] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 841.040646][T20138] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 841.047443][T20138] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 841.052949][T20138] ? __local_bh_enable_ip+0xa4/0x120 [ 841.058281][T20138] mac80211_hwsim_new_radio+0x1d4/0x54f0 [ 841.063971][T20138] ? __asan_memset+0x23/0x50 [ 841.068587][T20138] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 841.074704][T20138] hwsim_new_radio_nl+0xb51/0x12c0 [ 841.079878][T20138] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 841.085451][T20138] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 841.092845][T20138] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 841.100241][T20138] genl_family_rcv_msg_doit+0x206/0x2f0 [ 841.105811][T20138] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 841.111904][T20138] ? trace_cap_capable+0x18d/0x200 [ 841.117049][T20138] ? bpf_lsm_capable+0x9/0x10 [ 841.121747][T20138] ? security_capable+0x7e/0x260 [ 841.126708][T20138] ? ns_capable+0xd7/0x110 [ 841.131149][T20138] genl_rcv_msg+0x55c/0x800 [ 841.135690][T20138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 841.140746][T20138] ? __pfx___dev_queue_xmit+0x10/0x10 [ 841.146141][T20138] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 841.151718][T20138] ? __lock_acquire+0xaa4/0x1ba0 [ 841.156708][T20138] netlink_rcv_skb+0x16a/0x440 [ 841.161522][T20138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 841.166583][T20138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 841.171904][T20138] ? __pfx_down_read+0x10/0x10 [ 841.176702][T20138] ? netlink_deliver_tap+0x1ae/0xd30 [ 841.182022][T20138] genl_rcv+0x28/0x40 [ 841.186040][T20138] netlink_unicast+0x53a/0x7f0 [ 841.190836][T20138] ? __pfx_netlink_unicast+0x10/0x10 [ 841.196152][T20138] ? __phys_addr_symbol+0x30/0x80 [ 841.201203][T20138] ? __check_object_size+0x4c7/0x710 [ 841.206548][T20138] netlink_sendmsg+0x8da/0xd70 [ 841.211343][T20138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.216660][T20138] ____sys_sendmsg+0xa8d/0xc60 [ 841.221439][T20138] ? copy_msghdr_from_user+0x10a/0x160 [ 841.226926][T20138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.232236][T20138] ___sys_sendmsg+0x134/0x1d0 [ 841.236946][T20138] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.242192][T20138] __sys_sendmsg+0x16d/0x220 [ 841.246822][T20138] ? __pfx___sys_sendmsg+0x10/0x10 [ 841.251962][T20138] ? __x64_sys_futex+0x1e0/0x4c0 [ 841.256941][T20138] ? rcu_is_watching+0x12/0xc0 [ 841.261732][T20138] do_syscall_64+0xcd/0x260 [ 841.266268][T20138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.272195][T20138] RIP: 0033:0x7fd82b58d169 [ 841.276622][T20138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.296247][T20138] RSP: 002b:00007fd82c3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.304676][T20138] RAX: ffffffffffffffda RBX: 00007fd82b7a5fa0 RCX: 00007fd82b58d169 [ 841.312671][T20138] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000005 [ 841.320648][T20138] RBP: 00007fd82b60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 841.328625][T20138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.336608][T20138] R13: 0000000000000000 R14: 00007fd82b7a5fa0 R15: 00007ffc86e0b9e8 [ 841.344602][T20138] [ 841.347985][T20138] Kernel Offset: disabled [ 841.352320][T20138] Rebooting in 86400 seconds..