last executing test programs: 1m14.527054339s ago: executing program 2 (id=666): mmap$auto(0x2, 0x40009, 0xa, 0x9b72, 0x2, 0x9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socket(0x11, 0x2, 0x1) r0 = socket(0x2, 0x801, 0x100) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x40054) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r1, r0, 0x9c, 0x0, 0x1, @relative_fd, 0x5}, 0x96) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) fstatfs$auto(0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) mmap$auto(0x0, 0x400008, 0xca23, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop4\x00', 0x804, 0x0) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) mkdirat$auto(r2, &(0x7f0000000080)='./cgroup\x00', 0x9) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x800, 0x0) read$auto(r4, 0x0, 0x7fff) read$auto(r3, 0x0, 0x39b8) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x21, &(0x7f0000000240), 0x1) landlock_create_ruleset$auto(&(0x7f0000000040)={0x9, 0x80000001, 0x4}, 0x153, 0x6) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2a0042, 0x0) 1m11.699974867s ago: executing program 2 (id=671): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd9/poll_stat\x00', 0x101200, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 32) socket(0xa, 0x2, 0x0) (rerun: 32) socket(0xa, 0x3, 0xff) open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) (async) socket(0x15, 0x5, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) open(0x0, 0x163340, 0x6a) (async) socket(0xa, 0x2, 0x88) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) (async) r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) write$auto_ftrace_event_filter_fops_trace_events(r0, 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f0000000300)={0x0, 0xffffffffffffffb7, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf250500000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) (async) ioctl$auto(0x3, 0x800005411, 0x38) (async) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) getdents64$auto(r3, &(0x7f0000000040)={0x1d6c, 0x1000000000, 0x2, 0x25}, 0x7f) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 1m10.687728952s ago: executing program 3 (id=672): socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x2, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x4000084, 0xc, 0x0, 0x4) listen$auto(0x3, 0x81) 1m9.764029653s ago: executing program 2 (id=676): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f00000000c0)={@_si_pad}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) write$auto(0x3, 0x0, 0xfdef) 1m9.68086896s ago: executing program 2 (id=677): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) (async) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) ppoll$auto(&(0x7f0000000000)={r0, 0x43}, 0x2, 0x0, 0x0, 0x8) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) socket(0x28, 0x3, 0x200000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="2f212abd7800fddbdf2521000000"], 0x14}}, 0x4000000) (async) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="2f212abd7800fddbdf2521000000"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x42, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D1\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) (async) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) read$auto(r3, 0x0, 0xcefbce6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, &(0x7f0000000680)=""/161, 0xa1) (async) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, &(0x7f0000000680)=""/161, 0xa1) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x9487, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x9]}, 0x0) madvise$auto(0x108000, 0x800034, 0xa) (async) madvise$auto(0x108000, 0x800034, 0xa) unshare$auto(0x40000080) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000c518c1d28239e5c4705403eb2fa9252c4df6d3bfe9f6f93e542c37c2b746f569c4594f6fa1fe923d0c42fdcb9289f9271a1a264b6ae54f66b792e55947b4884ebafc03ba0b8a764d52cb35c8b1430a0235901b2cd271e54c5275a39f0a4a1eab2263f168aadc6200e0557c3c0b4da7a3411653988831bed9bbcd07bee1a6813ff5ab1011c33ea0aee6826fef73e0f6ca692950026f9bae47c562385833d60185cab0", @ANYRES16=r4, @ANYBLOB="01002dbd7000f9dbdf25010000000a9983fbee9b19a0983394f65661057b8ef16ff25ed923a049f5d454f1b4e3ab0e09fb35f1aacea77c94e1d24e4c8d43172f10869a075db57557d122a40b52cbd0d6a52a9be1acaa02807fdca407d26d3520d886"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x840) (async) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000c518c1d28239e5c4705403eb2fa9252c4df6d3bfe9f6f93e542c37c2b746f569c4594f6fa1fe923d0c42fdcb9289f9271a1a264b6ae54f66b792e55947b4884ebafc03ba0b8a764d52cb35c8b1430a0235901b2cd271e54c5275a39f0a4a1eab2263f168aadc6200e0557c3c0b4da7a3411653988831bed9bbcd07bee1a6813ff5ab1011c33ea0aee6826fef73e0f6ca692950026f9bae47c562385833d60185cab0", @ANYRES16=r4, @ANYBLOB="01002dbd7000f9dbdf25010000000a9983fbee9b19a0983394f65661057b8ef16ff25ed923a049f5d454f1b4e3ab0e09fb35f1aacea77c94e1d24e4c8d43172f10869a075db57557d122a40b52cbd0d6a52a9be1acaa02807fdca407d26d3520d886"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x840) open$auto(&(0x7f0000000200)='./file0\x00', 0x3, 0x7) (async) r5 = open$auto(&(0x7f0000000200)='./file0\x00', 0x3, 0x7) ioctl$auto_PPPIOCGFLAGS(r5, 0x8004745a, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000040), 0xa8b403, 0x0) (async) r6 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000040), 0xa8b403, 0x0) ioctl$auto_COMEDI_LOCK(r6, 0x6405, 0x0) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000140)={0x0, 0x9}, 0x100000007) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0xd, 0x0, 0x0) (async) setsockopt$auto(0x3, 0x0, 0xd, 0x0, 0x0) 1m4.94389042s ago: executing program 2 (id=679): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) msgget$auto(0x0, 0x800e) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) ioprio_set$auto(0x10000, 0x0, 0x9) socket(0x15, 0x5, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) madvise$auto(0x6, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x8e77, 0x9, 0x3ff57696, 0x110, r0, 0x4) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6$auto(0x5, 0x0, &(0x7f0000000180)={[0x182, 0x3, 0x0, 0x20003, 0x40000000000058, 0xb5, 0x8, 0x400, 0x6, 0xae9, 0x7ff, 0xa5, 0x2, 0x7dde, 0xed1b, 0x8c5]}, 0x0, 0x0, 0x0) flock$auto(0x6, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x10001, 0x2) shmget$auto(0xa, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) read$auto_proc_pid_maps_operations_internal(r1, &(0x7f00000010c0)=""/4096, 0x1000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) 1m3.21276552s ago: executing program 2 (id=684): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x9, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = gettid() fcntl$auto(r0, 0x26, r2) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000140), 0xffffffffffffffff) r6 = geteuid() setreuid$auto(r6, 0x0) setuid$auto(r6) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x29c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0x100, 0x4, 0x0, 0x1, [@nested={0x4, 0xb2}, @typed={0x8, 0x142, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0xf8, 0x0, 0x0, @uid=0xee01}, @nested={0xe5, 0x1f, 0x0, 0x1, [@nested={0x4, 0x77}, @generic="1194ee670d3804958133b52b43e9ff02eaf714890badad3c6565dec96cd7aae83cc8a53400a671d6893f797e73c058409eaa7caf6029b8780be036c3cbd22ba1684d1ca080236cb88cfd2fbe64df8fa5171248ceb2e5e291729b9f1d0d4db08a0b7ae253d99dbc199491f3af1b2054325f3e29180aff33a0f51417b13bbd7222cf1f13b74f2b5b90182a591621d2c18190fb3c5f52620379528e1c03f4904f2e99fd6abebc601e117ff13adc273499e83d2085893d82f5ead337b808c2a00a6dd4e76aed35", @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x147, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x11, 0x0, 0x0, @fd}]}]}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x80}, @OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_NAME={0xf, 0x3, 'netdevsim0\x00'}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r4}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0xffffffffffffffff, 0x1, 0x3b2e, 0xfffffffffffffff8, 0x7, 0x1, 0x6ff0, 0x78f31b64}}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x8, 0x2000, 0x0, 0x3, 0x6, 0x1, 0xf, 0x8}}, @OVS_VPORT_ATTR_UPCALL_PID={0xda, 0x5, "0c671ad7c027c2a6641952f8541f6553f8db2fb8623a7f26cd14620ede969c47a97cc1e7009ce41ff83a183a8b87f8b7e2f2a65528017fe58e76b5fc4079e20a7a3f4c5377229f7ef86f547c32a0c3b2ce170747cb0e6f0ac074339abbff8534c7af7c0840ef549dea2cbee067fab7491a12738b667e14953758f930c9e6c7f072a45509f9cabd7da6c4b3d6001df7915633a4d6c36693e6b64085f43ff5f0633aaa1dbf08dc6b766e4928ab318ecd2c82872bed2ae215772f916a46d9060848990cc4326ce07e4c75fd641d452206b7329e5f644c68"}]}, 0x29c}, 0x1, 0x0, 0x0, 0x8080}, 0x40) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r2}, @OVS_DP_ATTR_NAME={0x17, 0x1, '/proc/self/pagemap\x00'}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x2}, @OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0x10001, 0x16, 0xffffffffffffffff, 0x8000) r7 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r7, 0xc0404d1a, 0x8) ioctl$auto_SNDCTL_DSP_RESET(r3, 0x5000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x39b8) fcntl$auto(0xffffffffffffffff, 0x5, 0x8) fcntl$auto(0x8000000000000001, 0x26, 0x8) 59.751949712s ago: executing program 3 (id=693): sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) (async) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc26cc1c11d58b767}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r0, 0x200, 0x70bd2a, 0x35dfdbfd, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20014014}, 0x28000) (async) readv$auto(0x3, 0x0, 0x1) unshare$auto(0x40000080) (async) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd13/trace/end_lba\x00', 0x1a1842, 0x0) (rerun: 64) write$auto(r1, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x80000000}, 0x1) pidfd_open$auto(0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop9/queue/rotational\x00', 0x103400, 0x0) socket(0x10, 0x2, 0x14) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0) socket(0x10, 0x3, 0x6) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 64) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) (rerun: 64) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) 51.391991415s ago: executing program 3 (id=706): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x205840, 0x0) (async) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, 0x0) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x1d0}, 0x1, 0x0, 0x0, 0x8004}, 0x4000001) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) mlockall$auto(0x6) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, r1, 0x8000) (async) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) (async) syz_genetlink_get_family_id$auto_l2tp(0x0, r2) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/def_reserved_size\x00', 0xc8000, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) (async) fstat$auto(r3, 0x0) (async) getpid() (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x80805, 0x0) capset$auto(0x0, 0x0) (async) mincore$auto(0x0, 0x10000, 0x0) 47.84827246s ago: executing program 32 (id=684): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x9, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = gettid() fcntl$auto(r0, 0x26, r2) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000140), 0xffffffffffffffff) r6 = geteuid() setreuid$auto(r6, 0x0) setuid$auto(r6) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x29c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0x100, 0x4, 0x0, 0x1, [@nested={0x4, 0xb2}, @typed={0x8, 0x142, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0xf8, 0x0, 0x0, @uid=0xee01}, @nested={0xe5, 0x1f, 0x0, 0x1, [@nested={0x4, 0x77}, @generic="1194ee670d3804958133b52b43e9ff02eaf714890badad3c6565dec96cd7aae83cc8a53400a671d6893f797e73c058409eaa7caf6029b8780be036c3cbd22ba1684d1ca080236cb88cfd2fbe64df8fa5171248ceb2e5e291729b9f1d0d4db08a0b7ae253d99dbc199491f3af1b2054325f3e29180aff33a0f51417b13bbd7222cf1f13b74f2b5b90182a591621d2c18190fb3c5f52620379528e1c03f4904f2e99fd6abebc601e117ff13adc273499e83d2085893d82f5ead337b808c2a00a6dd4e76aed35", @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x147, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x11, 0x0, 0x0, @fd}]}]}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x80}, @OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_NAME={0xf, 0x3, 'netdevsim0\x00'}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r4}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0xffffffffffffffff, 0x1, 0x3b2e, 0xfffffffffffffff8, 0x7, 0x1, 0x6ff0, 0x78f31b64}}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x8, 0x2000, 0x0, 0x3, 0x6, 0x1, 0xf, 0x8}}, @OVS_VPORT_ATTR_UPCALL_PID={0xda, 0x5, "0c671ad7c027c2a6641952f8541f6553f8db2fb8623a7f26cd14620ede969c47a97cc1e7009ce41ff83a183a8b87f8b7e2f2a65528017fe58e76b5fc4079e20a7a3f4c5377229f7ef86f547c32a0c3b2ce170747cb0e6f0ac074339abbff8534c7af7c0840ef549dea2cbee067fab7491a12738b667e14953758f930c9e6c7f072a45509f9cabd7da6c4b3d6001df7915633a4d6c36693e6b64085f43ff5f0633aaa1dbf08dc6b766e4928ab318ecd2c82872bed2ae215772f916a46d9060848990cc4326ce07e4c75fd641d452206b7329e5f644c68"}]}, 0x29c}, 0x1, 0x0, 0x0, 0x8080}, 0x40) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r2}, @OVS_DP_ATTR_NAME={0x17, 0x1, '/proc/self/pagemap\x00'}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x2}, @OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0x10001, 0x16, 0xffffffffffffffff, 0x8000) r7 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r7, 0xc0404d1a, 0x8) ioctl$auto_SNDCTL_DSP_RESET(r3, 0x5000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x39b8) fcntl$auto(0xffffffffffffffff, 0x5, 0x8) fcntl$auto(0x8000000000000001, 0x26, 0x8) 38.300036713s ago: executing program 3 (id=756): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x100000000, 0x7, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x100000800000000, 0x202000c, 0x3, 0xeb1, r0, 0x8003) madvise$auto(0x6, 0x1000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram14\x00', 0xe4242, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e23}, 0x67) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) rseq$auto(0x0, 0x8000, 0x0, 0x6) open(0x0, 0x62240, 0x154) mmap$auto(0x0, 0x5, 0xffffbffffffffdfe, 0x8012, 0x3, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xa, 0x2, 0x0) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) bpf$auto(0x0, 0x0, 0xfbf) shutdown$auto(0x200000003, 0x2) ioctl$auto(0x3, 0x541b, 0x38) ioperm$auto(0x50, 0x6, 0x25) rmdir$auto(&(0x7f0000000080)='.\x00') 35.058848642s ago: executing program 0 (id=767): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0xa4e00, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon7\x00', 0x200000, 0x0) read$auto_mon_fops_binary_mon_bin(r1, &(0x7f0000000a80)=""/229, 0xe5) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xc, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x3, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xcb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(&(0x7f0000000040)='/dev/sequencer2\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000840)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x22240, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r3) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x80000) 33.845064436s ago: executing program 0 (id=771): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/module/parameters/sig_enforce\x00', 0x2402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) setreuid$auto(0x0, 0xee00) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfs\x00', 0x2000, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008001300", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.4/usbmon/usbmon5/power/autosuspend_delay_ms\x00', 0x10000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000300)=""/163, 0xa3) r8 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000240)=ANY=[@ANYBLOB="39752c2723054d9d0327ab06f1801ab3bc6930fec5dbfad67bfa097dfe91937014ef8edee6faec297cff0484b7b8dc3765ff9ac3fbab101cfe72074378638c6a4c641638c3c3040dd0ed56f38713d973e384f3651c2782dbe8084636e5afb7acf49bc19aab2bc54bc5", @ANYRES16=r8, @ANYBLOB="5da929bd7000fcdbdf25020000000400020008000480000000000800010005000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40) 32.898549777s ago: executing program 0 (id=774): move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/pids.max\x00', 0x281, 0x0) r1 = socket(0x2, 0x6, 0x0) setsockopt$auto(r1, 0x0, 0x10, 0x0, 0x17) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000380), r1) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000540)={{@inferred, 0x1, 0x1, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x2, 0x5, 0x4, @inferred=0x0, @integer={0x7, 0x5, 0x5}, "7a9fc19906000000eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0eda71bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) rt_sigqueueinfo$auto(0x0, 0x100004, &(0x7f0000000000)={@siginfo_0_0={0x5, 0x7, 0xfffffffd, @_sigfault={&(0x7f0000000440)="1a1c7da5d9fbd83b902c2f53366e78daadf6e32d1eb87e030f9d435cd76b46dd20c57cccdab8b87f6827b3bf08daae8a1a298ccdf1336091b6f61bbf50a3fb6c4f97541ecaba82b6a7f2368900d81229d5279b12dd99e96676b96ae734f150ba9492dc697ee28312720cfd8ae3bb89d1141d8fe1978e9f4115636773dc3f9b28dce32136933ff04e63ddcd3c6698e0b7a546dfbd631b5e7d18962a99dfdc376acc57584edab192212ad936bd009dc3ba5a05f079c9fb3f2e470f9772fc9029559f8b5970cf6f3cddae21f336a2e698e75f95860db8ad452376", @_addr_lsb=0x2b3f}}}) r3 = socket(0x11, 0x3, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) timerfd_create$auto(0x9, 0x0) (async) timerfd_create$auto(0x9, 0x0) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x5}, 0x81, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x1f, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/nfsd\x00', 0x870dc1, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/nfsd\x00', 0x870dc1, 0x0) clone$auto(0x1, 0x1, &(0x7f0000000840)=0x80000000, &(0x7f0000000880)=0x5, 0xfffffffffffff0a0) (async) r6 = clone$auto(0x1, 0x1, &(0x7f0000000840)=0x80000000, &(0x7f0000000880)=0x5, 0xfffffffffffff0a0) kcmp$auto(r6, r2, 0x4, r3, r1) (async) kcmp$auto(r6, r2, 0x4, r3, r1) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd0001fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044010) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd0001fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044010) add_key$auto(&(0x7f0000000040)='[\xb7^:{\x92#,[*\x00', 0xfffffffffffffffe, 0x0, 0x0, 0xffffffff) (async) add_key$auto(&(0x7f0000000040)='[\xb7^:{\x92#,[*\x00', 0xfffffffffffffffe, 0x0, 0x0, 0xffffffff) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) pread64$auto(r7, 0x0, 0xf42c, 0x2) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r8 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) write$auto(r0, &(0x7f0000000000)='.&\x00', 0x9) r9 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r9, 0x107, 0x1, 0x0, 0x4) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000240), 0x141, 0x0) 32.387744114s ago: executing program 0 (id=777): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/interrupts/ff_pwr_btn\x00', 0x10b142, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x81, 0x100000000, 0x4000000000e2, 0xffff, r0, 0x10001) r1 = gettid() mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) process_vm_writev$auto(r1, &(0x7f0000000000)={0x0, 0x7ff}, 0x3, &(0x7f0000000080)={0x0, 0x800007}, 0x4, 0x0) prctl$auto_PR_GET_FP_MODE(0x2e, 0xf366, r1, 0x5, 0x8) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x2, 0x2, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0x18, 0x2, 0x0) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) socket(0x2, 0x3, 0xfffffff1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x15, 0x5, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x9, 0xfffffffffffffffd]}, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x5, 0x0) 31.505342468s ago: executing program 0 (id=782): r0 = open(&(0x7f0000000000)='./file0\x00', 0x149443, 0x14) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = socket(0x1e, 0x6, 0x20000100) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x800000000df, 0x9b72, 0xea8a, 0x8000) mincore$auto(0x0, 0x8000000000005a, 0x0) (async) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) r2 = socket(0x2a, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8953, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x3, 0xa) (async) eventfd$auto(0x3) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video40\x00', 0x40802, 0x0) eventfd$auto(0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) (async) pipe$auto(0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f00000000c0)={"c1a2ba53aedfdfd7220987a379c9ac9a9173a6a5583d365d84a105cbac1e3686439f7b6c7f35fd86c4df3b0d2302e1977d75f2cf32ae83b87633c02e944dee9ffc04661e132e48f2678a25661d1006f6f67b2252fbc3d1e24ceb533784c76f30f748695ea49b66b060c4358d7868a76c5f4bb7165a756d73178e253630643c28", "786ceb3cb0136171fdf11fdd3ff508e45d790a02f109988a334f423f681851bb10288fb107a482bb31a25ee6c31e99b5a9bf666ea9c67b3b689bf4dfb7529ff4f5a5b238b287236506974d18123ee6783d9f12a0df81cce6cfb1e3d77007b3c1ec1973d07da297a9b7e1df3abbdc1459468117c1bb4a685e6b4288012d24da53", 0x8}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="ce269d9bb6f16e42957371d5299db3a287f7c57ca836713fb268854be88bcfb18d70fd33b078806c3eb032205b527ed81e99fa9dc165c3a39a76d457fe1a8322695d570000"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x44000) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) (async) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x7, 0x3, &(0x7f00000000c0)={{0x8, 0x4}, {0x0, 0x83}}, 0x0) (async) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') (async) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TCFLSH2(r4, 0x400455c8, 0x0) 31.035927881s ago: executing program 0 (id=784): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r0 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) utime$auto(0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r1 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f00000020c0), 0x88840, 0x0) readv$auto(r2, &(0x7f0000003100)={0x0, 0x2}, 0xb4) r3 = gettid() process_vm_readv$auto(r3, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) r4 = getsid$auto(0xffffffffffffffff) rt_tgsigqueueinfo$auto(r4, r4, 0x10, &(0x7f0000000200)={@_si_pad}) execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0x100082) r5 = prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="a0018000c0f6ab72feae8ec5b658d4a148f52e8e1378ac7ebe04580e0ad123bfb57a91785095d66a3b4e13abadae0b8a7036737a4ad020f2b37afa111d0d88f26b1be1d31a8c63758afc205511eb5aee", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fddbdf25050000000400100004000e00fc00020030f439897e6073e42e51f49150ab2fc32074375b08a34540f11a36a61d71b1102a3ad2d7ba72edadcc535789d62b74777bad884f2241d56a5990b83625f84a093637d3627cc56d0d4f663ab0591aab28f6152db152b96bca8a94f0b06bbe3606d9d0f32538ca090acd4a5611f9da9f6208c3e799f5f72179a8b14f6f4c4e7e9260bacffb5b7f8e9d9b62dcc2923dd3fd9cd95944704bdd6eb6bc473d714158236e28173ea9b2ab507e99c4c2a241e17600036acbd282b811df93939a8c1924703670ad4d829b45290a41f0b6d2ff7849100ee83cce492e08bd4b6ccb3e2c0ac30fb151990a18a93142a98a3e0e9add03f803d69820e5609000000c0000000000040019007a0018004a7c5b8e982f6daa1f46c5d72cc430307bf7477d3bcfd9ed29f54e6914ce8b795942495ac17f0f3e9270086ca20564a7897d3beffe4d8731c2fbf2e31f1cc9fbfd9b1871c4ef208f91cb9fa72369f749cf658a3f61e66a8d74a3445fa53f154020c3fb058e0f8c55aa6ba21d5afbc43c77a13aab04e7000053ff0f00"], 0x1a0}, 0x1, 0x0, 0x0, 0x10}, 0x20048000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xffff}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40) 30.920563379s ago: executing program 3 (id=785): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyyf\x00', 0x80, 0x0) ioctl$auto_TIOCMSET2(r2, 0x5418, &(0x7f0000000240)="7831fc77c72b73eecba1218db6815ac0aca7a3302a113c229835f3cd94382e867f39f434f98ba34cd18bf3d274dd144199857104336ffaedeee5dc7b8456fdf3a6abe7810118a58f71d9a1547314c36abf95ac4573e27b73d2fe250f8cab28868188487b81e20839503ae099c855b1f44e483948cd9edbf2b5581ea270ad2ecac353d406950c8aa4cb75876a9694a4ab1562ba68011377d4ff5d6db9a60f483c8b186f") r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010029bd7000fddb05000000000000000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000084) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/bConfigurationValue\x00', 0x101142, 0x0) write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) 21.638787571s ago: executing program 3 (id=803): openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) mmap$auto(0x3, 0x400008, 0xdf, 0x9b74, 0x4, 0x8002) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x2a) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) write$auto(0x3, 0x0, 0xfdef) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x76, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x0, 0xd, 0x0, 0x0) uname$auto(0x0) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) 16.049092737s ago: executing program 33 (id=784): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r0 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) utime$auto(0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r1 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f00000020c0), 0x88840, 0x0) readv$auto(r2, &(0x7f0000003100)={0x0, 0x2}, 0xb4) r3 = gettid() process_vm_readv$auto(r3, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) r4 = getsid$auto(0xffffffffffffffff) rt_tgsigqueueinfo$auto(r4, r4, 0x10, &(0x7f0000000200)={@_si_pad}) execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0x100082) r5 = prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="a0018000c0f6ab72feae8ec5b658d4a148f52e8e1378ac7ebe04580e0ad123bfb57a91785095d66a3b4e13abadae0b8a7036737a4ad020f2b37afa111d0d88f26b1be1d31a8c63758afc205511eb5aee", @ANYRES16=0x0, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x10}, 0x20048000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xffff}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40) 12.065742344s ago: executing program 1 (id=817): r0 = socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="040000008057d007c068f55471511b961ab0ca6d9cb6dd67db9836b5fb78121bf1e8327eb94b0f335d6deb14904d49514cfb73b7efb262033c102a86287bec2cdba14275a458f72bdf6a0ec8a2b574c79c9aacb813fdec355f8f967eba581aa6c06dabc4a9fb79205bafbb63743282f5e60c8b3a62cedc92d44b2a3dc6bb134b1694e5132d272872429c7ef288664b8c4a3d420913bf3db9e03f9f070c1cd3181775b42fd72a97", @ANYRES16=0x0, @ANYRES8=0x0], 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x40) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r1 = socket(0xa, 0x4, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1a000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), r2) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="090f2abd8782b56be1b965f27000fddbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$auto(r1, &(0x7f0000000300)='nfc\x00', 0x6a9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80a02, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r4, 0x0, 0x400) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r5, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r5, 0x1, 0x0, 0x0) 10.688441461s ago: executing program 1 (id=818): socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x20000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) ioctl$auto(r0, 0x40045108, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PSE_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2cb79a00", @ANYRES16=r2, @ANYBLOB="0100273d7000fcdbdf25240000001800018014000200776c616e3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40d8) write$auto(r1, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x920x0, 0xee00, 0x10000, 0x12, 0x401, 0x1}, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0xf, 0x3, 0x1, 0x2, 0x8000000000000001, 0x1, 0x0, 0x80, 0x7fff, @inferred=0x0, @raw=0xfffffffa}) setresgid$auto(r10, 0x0, r10) shmctl$auto_IPC_SET(0x2, 0x1, &(0x7f00000004c0)={{0xa4, r8, 0x0, 0x5, 0x1, 0x3, 0x7}, 0x1, 0x200, 0x6, 0x26, @inferred, @raw=0xfe0, 0x3, 0x0, &(0x7f00000011c0)="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", &(0x7f00000003c0)="528d433512a398c147db0818194685d169b000cac431caff2944cb8cb75de6238ff73d50edd4c625e18d5b79075d10dc438d575bb3b63d5adeb4ff57ca907307c796e8c41323621df1cee15884fdcf19f62ea945f28bc772272d3448af96fe5de19ad2915a10d40b594864eae26f05a2b41469b56606c16f579b3ec59202ad4c29402f6ec1c1bdfc1ea9e8f8ba9d8ad908aea4db82fb78a10bbf1f50f4385788f3540a2f1b7794367bff7105b1cca06ace36d955f4c10706e9eed8fb2b0c8c158002b02080a6d7c0f4b29d115cb5"}) sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f0000001100)={&(0x7f0000000000), 0xc, &(0x7f00000010c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\v\x00\x00', @ANYRES16=r1, @ANYRES64=r9, @ANYRES32=r11, @ANYBLOB="08001900ff73c9480400178004007480040042eb8e9c80080033000a010102fe348978e1fd0d3960e169dc78d15b111bdeaf8c70b91a006f6bddf9c01f22ef95fa2166624ed8256bea8dd66a9d4d2e3d6846079e03f089f10e137a9bd2c2c77f8a4a66d959ee8639309bde837d09c89c98562d6e433fca0c16c3abeeccba3a3a6392a2f26551c31125afaf234078541c6b59c908f00057004d380c561e30e81e4112ca10fd7319f4932cb3f191b507f0aee4ad59d839556943bc0d2f6a3972e6be0b98c7c15c32270506af1cdbcac120dfbb08279b43667d9db7efcc68ef5831cd16f2dcfafb645ee36e542c71f311a31055d892e20189f7300bf8742c518deb8f55372aef078b17428d3b8f2f326683332e413618229b58378aa3e332e138164fad6dbb117e0836efb44356e7bb428f95f684bade80ef2e34104da1da9e68ddd3427185f9a010cf62f1df447b9fb372da2faae0589b2dae6ffb68d1f763b29c1d66ffd0bc6c44477e8a05f09bfc6e7985cb3e3040b55a44f1c8d8062b96b344a23b9c9ba0007580478d67e55bda68b07708", @ANYRES32=r3, @ANYBLOB="c7ae26bea13a599af1bd49c6aebbcc831dbb61497989520fd16290f64e2d4687ddad6a6717e82179d19174f8519f6e652d063b3240e7125acf015572fcfbf94e6b6f58be0f83036d4011207eec7f9c1aa18383f7a294d4fde1e5e7a153e6d13418eca67c0446545ef794e593d11fdca5b2e8bf393d0800bb00"/135, @ANYRES32=r4, @ANYRES16=r4, @ANYRES8=r0, @ANYBLOB="bae04f80d8b9e1d1334f6ef9591a0cf701c7873cd2ae63c8d5ffc304e134fb692936450b613e4a5c02410d9596798b690435ae572362db1376adcca05500cbe206c079bf803ad7e52de791af3931f26d19666f20f111f4139f913211acf437d8bf24bf86e1d0", @ANYRES32=r2, @ANYBLOB='\b\x00T\x00', @ANYRES32=r9, @ANYBLOB="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", @ANYRES64=r12, @ANYBLOB="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"], 0xb60}, 0x1, 0x0, 0x0, 0x4048804}, 0x800) r13 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd15/queue/max_hw_sectors_kb\x00', 0x0, 0x0) read$auto(r13, 0x0, 0x20) 7.297089334s ago: executing program 1 (id=823): sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x1d0}, 0x1, 0x0, 0x0, 0x200cc002}, 0x20006001) close_range$auto(0x2, 0x8, 0x8) r0 = socket(0x2, 0x80002, 0x73) syz_genetlink_get_family_id$auto_l2tp(0x0, r0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x40800, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket(0x10, 0x2, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mlockall$auto(0x7) inotify_rm_watch$auto(0xffffffffffffffff, 0x84e4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptycd\x00', 0x0, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) modify_ldt$auto(0x1, 0x0, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x2, 0xffffffffffff0009, 0x16) fallocate$auto(r1, 0x1, 0x6, 0x200000005) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x1) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) madvise$auto(0x0, 0x200007, 0x19) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24006001}, 0x20048000) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x5, 0x84) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) 5.984056885s ago: executing program 34 (id=803): openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) mmap$auto(0x3, 0x400008, 0xdf, 0x9b74, 0x4, 0x8002) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x2a) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) write$auto(0x3, 0x0, 0xfdef) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x76, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x0, 0xd, 0x0, 0x0) uname$auto(0x0) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) 5.74748739s ago: executing program 5 (id=811): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0xc}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4040010) r4 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r4, 0x0, 0xe) getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r6, 0x560a, 0x7) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="2f212cb97000c2ebdb3357c089cb08000300", @ANYRES32=r0], 0x34}}, 0x4000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup\x00', 0x8082, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) read$auto(0x3, 0x0, 0x1f40) write$auto(0x3, 0x0, 0x3f00) 5.053090576s ago: executing program 5 (id=826): rseq$auto(&(0x7f0000000080)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) getsockopt$auto(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000e1, 0xeb1, 0x401, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) ioperm$auto(0x7, 0x6, 0x2) ioperm$auto(0x2, 0x9, 0x7ff) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(0xffffffffffffffff, 0x0, 0x881) rseq$auto(0x0, 0x8000, 0x0, 0x2) r0 = socket(0x2, 0x1, 0x0) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x101) r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d63882a712, 0x0) socket(0x2b, 0x1, 0x1) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x40c01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) ioprio_set$auto(0x6, 0x0, 0x8) connect$auto(0xffffffffffffffff, 0x0, 0x8) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000140), 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0x3, 0x0, 0x56a) ioctl$auto_RNDGETENTCNT2(r2, 0x80045200, 0x0) listen$auto(r0, 0x7) accept$auto(r0, 0x0, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000) 5.052288983s ago: executing program 4 (id=827): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xc, 0x6}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1b, 0x100}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x9, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x810) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/lockdep\x00', 0x10b402, 0x0) pread64$auto(r1, &(0x7f0000000000)='/proc/NesH\x1fk\xdd\x00\x00\x00\x00\x88\x00\x00\x00\x00\x00:\x19\xf4\xe2\xb7:\x81\xf8\xedl\x9d\x9a\'\xf8D,\xc0x\x1d\xf5JE\xcd7\xc3^\xbc2\xc7\xbf\xe5\x7f\xb93 \xcd${!\x9a`\x96\x86\x96D|\xf0H\x8c\x05:\xae\xa6\x88x\t\x18\x8b\xec\xd7\xe8 1 [ 86.140465][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.154058][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.173897][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.182397][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.190199][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.198822][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.207397][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.216052][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.223829][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.227196][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.231319][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.261869][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.270028][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.277636][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.280466][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.286648][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.300772][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.309813][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.317561][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.327368][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.337155][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.348139][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.356021][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.728862][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.790452][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 86.855475][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 86.940473][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 86.996036][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.003930][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.011368][ T5837] bridge_slave_0: entered allmulticast mode [ 87.019496][ T5837] bridge_slave_0: entered promiscuous mode [ 87.050585][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.057845][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.065272][ T5837] bridge_slave_1: entered allmulticast mode [ 87.072559][ T5837] bridge_slave_1: entered promiscuous mode [ 87.103826][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.111013][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.118593][ T5835] bridge_slave_0: entered allmulticast mode [ 87.126083][ T5835] bridge_slave_0: entered promiscuous mode [ 87.133740][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.140835][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.148371][ T5835] bridge_slave_1: entered allmulticast mode [ 87.155421][ T5835] bridge_slave_1: entered promiscuous mode [ 87.228866][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.249520][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.259014][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.268112][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.275417][ T5845] bridge_slave_0: entered allmulticast mode [ 87.282542][ T5845] bridge_slave_0: entered promiscuous mode [ 87.291356][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.312521][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.331452][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.339323][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.346809][ T5845] bridge_slave_1: entered allmulticast mode [ 87.354187][ T5845] bridge_slave_1: entered promiscuous mode [ 87.408087][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.415759][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.427112][ T5846] bridge_slave_0: entered allmulticast mode [ 87.434938][ T5846] bridge_slave_0: entered promiscuous mode [ 87.447598][ T5835] team0: Port device team_slave_0 added [ 87.467267][ T5837] team0: Port device team_slave_0 added [ 87.473623][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.480870][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.489068][ T5846] bridge_slave_1: entered allmulticast mode [ 87.496822][ T5846] bridge_slave_1: entered promiscuous mode [ 87.505051][ T5835] team0: Port device team_slave_1 added [ 87.523016][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.540184][ T5837] team0: Port device team_slave_1 added [ 87.566817][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.578321][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.618847][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.651413][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.658635][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.685479][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.721013][ T5845] team0: Port device team_slave_0 added [ 87.730306][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.737490][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.763626][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.776695][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.783825][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.810766][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.823105][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.830194][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.856531][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.878877][ T5845] team0: Port device team_slave_1 added [ 87.920843][ T5846] team0: Port device team_slave_0 added [ 87.953590][ T5837] hsr_slave_0: entered promiscuous mode [ 87.961174][ T5837] hsr_slave_1: entered promiscuous mode [ 87.970086][ T5846] team0: Port device team_slave_1 added [ 87.979967][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.987496][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.013954][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.026919][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.034260][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.060310][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.109681][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.116946][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.143446][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.170351][ T5835] hsr_slave_0: entered promiscuous mode [ 88.176785][ T5835] hsr_slave_1: entered promiscuous mode [ 88.183761][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.192288][ T5835] Cannot create hsr debugfs directory [ 88.214590][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.222478][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.248934][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.272817][ T5851] Bluetooth: hci1: command tx timeout [ 88.321510][ T5845] hsr_slave_0: entered promiscuous mode [ 88.329364][ T5845] hsr_slave_1: entered promiscuous mode [ 88.336085][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.345311][ T5845] Cannot create hsr debugfs directory [ 88.351983][ T5851] Bluetooth: hci0: command tx timeout [ 88.408344][ T5846] hsr_slave_0: entered promiscuous mode [ 88.416118][ T5846] hsr_slave_1: entered promiscuous mode [ 88.422686][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.430681][ T5846] Cannot create hsr debugfs directory [ 88.436263][ T5851] Bluetooth: hci3: command tx timeout [ 88.442051][ T5851] Bluetooth: hci2: command tx timeout [ 88.741501][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.769945][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.792741][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.809825][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.828261][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.855066][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.882591][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.907262][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.941945][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.968579][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.996062][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.023819][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.063474][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.093003][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.114196][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.125948][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.178064][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.243484][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.272504][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.279755][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.304910][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.323194][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.330534][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.406102][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.458260][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.479805][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.487016][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.500691][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.507967][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.531026][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.547028][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.574063][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.581199][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.598652][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.605887][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.716539][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.776449][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.783721][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.794980][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.802278][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.921244][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.000778][ T5837] veth0_vlan: entered promiscuous mode [ 90.024554][ T5837] veth1_vlan: entered promiscuous mode [ 90.079740][ T5837] veth0_macvtap: entered promiscuous mode [ 90.106596][ T5837] veth1_macvtap: entered promiscuous mode [ 90.165968][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.190631][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.233072][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.247255][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.256791][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.266576][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.340771][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.350898][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.363522][ T5851] Bluetooth: hci1: command tx timeout [ 90.397867][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.442811][ T5851] Bluetooth: hci0: command tx timeout [ 90.471973][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.480042][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.514016][ T5851] Bluetooth: hci2: command tx timeout [ 90.519643][ T5851] Bluetooth: hci3: command tx timeout [ 90.559447][ T5845] veth0_vlan: entered promiscuous mode [ 90.587763][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.599583][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.615224][ T5835] veth0_vlan: entered promiscuous mode [ 90.629194][ T5846] veth0_vlan: entered promiscuous mode [ 90.646806][ T5845] veth1_vlan: entered promiscuous mode [ 90.665524][ T5846] veth1_vlan: entered promiscuous mode [ 90.690437][ T5835] veth1_vlan: entered promiscuous mode [ 90.759420][ T5846] veth0_macvtap: entered promiscuous mode [ 90.786380][ T5846] veth1_macvtap: entered promiscuous mode [ 90.796534][ T5845] veth0_macvtap: entered promiscuous mode [ 90.807665][ T5835] veth0_macvtap: entered promiscuous mode [ 90.827030][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.839302][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.841476][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.852594][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.884187][ T5845] veth1_macvtap: entered promiscuous mode [ 90.894463][ T5835] veth1_macvtap: entered promiscuous mode [ 90.913265][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.924436][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.936970][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.963886][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.973919][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.990409][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.000945][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.026767][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.039565][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.050465][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.061675][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.074675][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.118489][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.139957][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.150529][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.163484][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.175223][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.200673][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.218331][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.228529][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.240166][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.251051][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.262603][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.273961][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.297716][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.313303][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.323058][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.332402][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.377899][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.389775][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.402304][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.413004][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.423457][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.434145][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.445407][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.487365][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.497162][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.506153][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.515171][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.531376][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.553679][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.689425][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.710284][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.722136][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.730127][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.822235][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.838101][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.884498][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.912613][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.944192][ T1836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.968924][ T1836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.410657][ T5910] Invalid ELF header magic: != ELF [ 92.433001][ T5851] Bluetooth: hci1: command tx timeout [ 92.521631][ T5851] Bluetooth: hci0: command tx timeout [ 92.592110][ T5851] Bluetooth: hci3: command tx timeout [ 92.597790][ T5851] Bluetooth: hci2: command tx timeout [ 93.167206][ T5918] Zero length message leads to an empty skb [ 94.486831][ T5931] Line length is too long: Should be less than 4094 [ 94.512575][ T5838] Bluetooth: hci1: command tx timeout [ 94.547552][ T5931] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.608449][ T5838] Bluetooth: hci0: command tx timeout [ 94.673316][ T5838] Bluetooth: hci2: command tx timeout [ 94.678904][ T5851] Bluetooth: hci3: command tx timeout [ 95.281931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 95.291080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.312327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.320602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.384322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.713448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.438095][ T9] cfg80211: failed to load regulatory.db [ 98.149612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.088628][ T5985] mmap: syz.1.18 (5985): VmData 37396480 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 99.315818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.349052][ T6007] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.786080][ T6051] RDS: rds_bind could not find a transport for ::662f:6661:696c:2d6e, load rds_tcp or rds_rdma? [ 103.657957][ T6081] process 'syz.2.41' launched '++' with NULL argv: empty string added [ 104.557261][ T6099] mmap: syz.1.44 (6099) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.603307][ T6123] RDS: rds_bind could not find a transport for ::662f:6661:696c:2d6e, load rds_tcp or rds_rdma? [ 109.340541][ T1050] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 109.433515][ T6186] syz.2.70 uses obsolete (PF_INET,SOCK_PACKET) [ 111.324066][ T6214] Invalid ELF header magic: != ELF [ 112.197761][ T6222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.76'. [ 113.214241][ T6250] FAULT_INJECTION: forcing a failure. [ 113.214241][ T6250] name failslab, interval 1, probability 0, space 0, times 1 [ 113.271792][ T6250] CPU: 0 UID: 0 PID: 6250 Comm: syz.1.82 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 113.271834][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 113.271857][ T6250] Call Trace: [ 113.271867][ T6250] [ 113.271882][ T6250] dump_stack_lvl+0x16c/0x1f0 [ 113.272025][ T6250] should_fail_ex+0x50a/0x650 [ 113.272063][ T6250] ? fs_reclaim_acquire+0xae/0x150 [ 113.272119][ T6250] should_failslab+0xc2/0x120 [ 113.272175][ T6250] __kmalloc_cache_node_noprof+0x6f/0x3f0 [ 113.272213][ T6250] ? find_held_lock+0x2d/0x110 [ 113.272263][ T6250] ? blkg_alloc+0xb7/0xaf0 [ 113.272305][ T6250] blkg_alloc+0xb7/0xaf0 [ 113.272349][ T6250] blkcg_init_disk+0x51/0x160 [ 113.272393][ T6250] __alloc_disk_node+0x295/0x610 [ 113.272429][ T6250] __blk_mq_alloc_disk+0x89/0x120 [ 113.272462][ T6250] loop_add+0x49f/0xb60 [ 113.272503][ T6250] ? do_vfs_ioctl+0x513/0x1950 [ 113.272550][ T6250] ? __pfx_loop_add+0x10/0x10 [ 113.272589][ T6250] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 113.272658][ T6250] ? __pfx_lock_release+0x10/0x10 [ 113.272695][ T6250] ? trace_lock_acquire+0x14e/0x1f0 [ 113.272733][ T6250] loop_control_ioctl+0x13e/0x640 [ 113.272777][ T6250] ? __pfx_loop_control_ioctl+0x10/0x10 [ 113.272819][ T6250] ? __fget_files+0x206/0x3a0 [ 113.272856][ T6250] ? __pfx_loop_control_ioctl+0x10/0x10 [ 113.272902][ T6250] __x64_sys_ioctl+0x190/0x200 [ 113.272963][ T6250] do_syscall_64+0xcd/0x250 [ 113.273016][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.273061][ T6250] RIP: 0033:0x7f8b8f58cda9 [ 113.273094][ T6250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.273125][ T6250] RSP: 002b:00007f8b904d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.273155][ T6250] RAX: ffffffffffffffda RBX: 00007f8b8f7a5fa0 RCX: 00007f8b8f58cda9 [ 113.273175][ T6250] RDX: 00000000200001c0 RSI: 0000000000004c80 RDI: 0000000000000007 [ 113.273194][ T6250] RBP: 00007f8b8f60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 113.273213][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.273231][ T6250] R13: 0000000000000000 R14: 00007f8b8f7a5fa0 R15: 00007fff553d3ed8 [ 113.273269][ T6250] [ 113.503130][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.143482][ T6222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.211531][ T6222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.251501][ T6222] bond0 (unregistering): Released all slaves [ 116.773314][ T6320] capability: warning: `syz.0.97' uses 32-bit capabilities (legacy support in use) [ 117.299679][ T6295] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 118.475677][ T6336] Invalid ELF header magic: != ELF [ 122.642035][ T6409] Process accounting resumed [ 122.647774][ T6409] bonding: no command found in bonding_masters - use +ifname or -ifname [ 123.520072][ T29] audit: type=1400 audit(1738576459.117:2): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6430 comm="syz.2.118" [ 123.893352][ T6442] netlink: 146 bytes leftover after parsing attributes in process `syz.2.120'. [ 125.420702][ T6468] Invalid ELF header magic: != ELF [ 125.811888][ T6473] delete_channel: no stack [ 130.198157][ T29] audit: type=1800 audit(1738576465.807:3): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.140" name="discovery_nqn" dev="configfs" ino=9816 res=0 errno=0 [ 131.406739][ T6547] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 132.577253][ T6572] HSR: entered promiscuous mode [ 132.960010][ T6572] delete_channel: no stack [ 134.105928][ T6589] can: request_module (can-proto-0) failed. [ 134.348150][ T6593] block2mtd: error: cannot open device 3QI [ 135.357513][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.159'. [ 135.408701][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 135.442780][ T6618] netlink: 354 bytes leftover after parsing attributes in process `syz.3.160'. [ 135.503238][ T6619] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 137.166005][ T6642] Invalid ELF header magic: != ELF [ 138.374833][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.381848][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.534153][ T6655] bridge0: port 3(gretap0) entered blocking state [ 138.541233][ T6655] bridge0: port 3(gretap0) entered disabled state [ 138.562070][ T6655] gretap0: entered allmulticast mode [ 138.568746][ T6655] gretap0: entered promiscuous mode [ 138.584371][ T6655] bridge0: port 3(gretap0) entered blocking state [ 138.591308][ T6655] bridge0: port 3(gretap0) entered forwarding state [ 140.350629][ T6686] FAULT_INJECTION: forcing a failure. [ 140.350629][ T6686] name failslab, interval 1, probability 0, space 0, times 0 [ 140.391294][ T6686] CPU: 0 UID: 0 PID: 6686 Comm: syz.0.176 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 140.391342][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 140.391362][ T6686] Call Trace: [ 140.391372][ T6686] [ 140.391384][ T6686] dump_stack_lvl+0x16c/0x1f0 [ 140.391452][ T6686] should_fail_ex+0x50a/0x650 [ 140.391490][ T6686] ? fs_reclaim_acquire+0xae/0x150 [ 140.391549][ T6686] should_failslab+0xc2/0x120 [ 140.391588][ T6686] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 140.391626][ T6686] ? __kernfs_new_node+0xd3/0x890 [ 140.391682][ T6686] __kernfs_new_node+0xd3/0x890 [ 140.391738][ T6686] ? __pfx___kernfs_new_node+0x10/0x10 [ 140.391796][ T6686] ? __pfx_lock_release+0x10/0x10 [ 140.391836][ T6686] ? kernfs_add_one+0x39d/0x520 [ 140.391882][ T6686] ? up_write+0x1b2/0x520 [ 140.391932][ T6686] kernfs_new_node+0x186/0x240 [ 140.391974][ T6686] __kernfs_create_file+0x53/0x350 [ 140.392021][ T6686] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 140.392088][ T6686] internal_create_group+0x56c/0xf10 [ 140.392150][ T6686] ? __pfx_internal_create_group+0x10/0x10 [ 140.392210][ T6686] ? kernfs_create_link+0x1bd/0x240 [ 140.392258][ T6686] internal_create_groups+0x9d/0x150 [ 140.392314][ T6686] device_add+0xf33/0x1a70 [ 140.392361][ T6686] ? __pfx_device_add+0x10/0x10 [ 140.392409][ T6686] ? __init_waitqueue_head+0xca/0x150 [ 140.392469][ T6686] wakeup_source_device_create+0x214/0x2a0 [ 140.392512][ T6686] wakeup_source_sysfs_add+0x1c/0x90 [ 140.392552][ T6686] wakeup_source_register+0xaa/0x140 [ 140.392583][ T6686] device_wakeup_enable+0xfa/0x310 [ 140.392618][ T6686] device_set_wakeup_enable+0xfd/0x120 [ 140.392653][ T6686] usb_hcd_submit_urb+0xd93/0x1c60 [ 140.392695][ T6686] usb_submit_urb+0x87c/0x1730 [ 140.392738][ T6686] ? __init_swait_queue_head+0xca/0x150 [ 140.392794][ T6686] usbfs_start_wait_urb+0x128/0x3d0 [ 140.392827][ T6686] ? __pfx_usbfs_start_wait_urb+0x10/0x10 [ 140.392868][ T6686] ? __might_fault+0xe3/0x190 [ 140.392921][ T6686] do_proc_control+0x80e/0x1070 [ 140.392963][ T6686] ? __pfx_do_proc_control+0x10/0x10 [ 140.392996][ T6686] ? __might_fault+0xe3/0x190 [ 140.393048][ T6686] usbdev_ioctl+0x230c/0x3f90 [ 140.393099][ T6686] ? __pfx_usbdev_ioctl+0x10/0x10 [ 140.393135][ T6686] ? do_vfs_ioctl+0x513/0x1950 [ 140.393184][ T6686] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 140.393254][ T6686] ? __pfx_lock_release+0x10/0x10 [ 140.393292][ T6686] ? trace_lock_acquire+0x14e/0x1f0 [ 140.393323][ T6686] ? __sys_sendmsg+0x19a/0x220 [ 140.393365][ T6686] ? __fget_files+0x206/0x3a0 [ 140.393403][ T6686] ? __pfx_usbdev_ioctl+0x10/0x10 [ 140.393441][ T6686] __x64_sys_ioctl+0x190/0x200 [ 140.393492][ T6686] do_syscall_64+0xcd/0x250 [ 140.393547][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.393593][ T6686] RIP: 0033:0x7f41b0f8cda9 [ 140.393626][ T6686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.393657][ T6686] RSP: 002b:00007f41b1dce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.393688][ T6686] RAX: ffffffffffffffda RBX: 00007f41b11a6080 RCX: 00007f41b0f8cda9 [ 140.393709][ T6686] RDX: 00000000200004c0 RSI: 00000000c0185500 RDI: 000000000000000a [ 140.393728][ T6686] RBP: 00007f41b100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 140.393747][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.393765][ T6686] R13: 0000000000000000 R14: 00007f41b11a6080 R15: 00007ffd98771ca8 [ 140.393804][ T6686] [ 141.473475][ T6702] netlink: 334 bytes leftover after parsing attributes in process `syz.2.178'. [ 141.884428][ T6712] Invalid ELF header magic: != ELF [ 143.369554][ T6738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.183'. [ 145.538294][ T6779] Invalid ELF header magic: != ELF [ 148.713161][ T6816] program syz.1.201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.130371][ T6825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'. [ 149.191713][ T6825] vxcan1: entered promiscuous mode [ 149.222188][ T6826] netlink: 'syz.1.206': attribute type 9 has an invalid length. [ 149.453647][ T6831] Invalid ELF header magic: != ELF [ 149.487395][ T6828] Invalid ELF header magic: != ELF [ 150.200058][ T6828] zswap: compressor not available [ 150.444571][ T6828] Process accounting resumed [ 150.449479][ T6828] kernel write not supported for file /page_tables/current_user (pid: 6828 comm: syz.2.207) [ 150.847110][ T6854] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 150.965629][ T6858] kernel write not supported for file /page_tables/current_user (pid: 6858 comm: syz.2.211) [ 151.119145][ T6852] zswap: compressor not available [ 152.097751][ T6866] kernel write not supported for file /page_tables/current_user (pid: 6866 comm: syz.2.212) [ 152.324209][ T6898] Invalid ELF header magic: != ELF [ 152.332042][ T6900] netlink: 342 bytes leftover after parsing attributes in process `syz.2.217'. [ 152.343285][ T6900] netlink: 342 bytes leftover after parsing attributes in process `syz.2.217'. [ 152.516326][ T6900] kernel write not supported for file /page_tables/current_user (pid: 6900 comm: syz.2.217) [ 152.658154][ T6902] kernel write not supported for file /page_tables/current_user (pid: 6902 comm: syz.2.220) [ 153.844049][ T6909] kernel write not supported for file /page_tables/current_user (pid: 6909 comm: syz.2.221) [ 154.284163][ T6942] unsupported nla_type 32969 [ 154.311684][ T6941] netlink: 342 bytes leftover after parsing attributes in process `syz.3.226'. [ 155.249210][ T6939] kernel write not supported for file /page_tables/current_user (pid: 6939 comm: syz.2.227) [ 155.494587][ T6966] kernel write not supported for file /page_tables/current_user (pid: 6966 comm: syz.2.227) [ 155.962025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 155.970535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 156.084164][ T6985] netlink: 342 bytes leftover after parsing attributes in process `syz.0.233'. [ 156.432827][ T6970] kernel write not supported for file /page_tables/current_user (pid: 6970 comm: syz.2.231) [ 156.792271][ T6997] Invalid ELF header magic: != ELF [ 156.814548][ T6996] kernel write not supported for file /page_tables/current_user (pid: 6996 comm: syz.2.235) [ 157.374689][ T7003] kernel write not supported for file /page_tables/current_user (pid: 7003 comm: syz.2.236) [ 158.025348][ T7012] kernel write not supported for file /page_tables/current_user (pid: 7012 comm: syz.2.238) [ 158.622189][ T7024] openvswitch: netlink: IP tunnel dst address not specified [ 160.644055][ T7057] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(9) [ 160.680651][ T7057] bond0: Unable to set up delay as MII monitoring is disabled [ 162.564137][ T7027] kernel write not supported for file /page_tables/current_user (pid: 7027 comm: syz.2.241) [ 163.353943][ T7088] netlink: 'syz.1.259': attribute type 8 has an invalid length. [ 163.363394][ T7088] netlink: 'syz.1.259': attribute type 5 has an invalid length. [ 163.625204][ T7090] queue_state_write: unsupported operation '' [ 163.631939][ T7090] queue_state_write: use 'run', 'start' or 'kick' [ 163.734013][ T7098] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 163.748827][ T7030] kernel write not supported for file /page_tables/current_user (pid: 7030 comm: syz.2.241) [ 166.253911][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.264'. [ 167.565405][ T7090] kernel write not supported for file /page_tables/current_user (pid: 7090 comm: syz.2.258) [ 168.428077][ T7014] kernel write not supported for file /page_tables/current_user (pid: 7014 comm: syz.2.238) [ 168.632659][ T7017] kernel write not supported for file /page_tables/current_user (pid: 7017 comm: syz.2.238) [ 168.901253][ T7126] kernel write not supported for file /page_tables/current_user (pid: 7126 comm: syz.2.268) [ 169.460123][ T7152] kernel write not supported for file /page_tables/current_user (pid: 7152 comm: syz.2.273) [ 169.841327][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 170.954444][ T7160] kernel write not supported for file /page_tables/current_user (pid: 7160 comm: syz.2.274) [ 171.231077][ T29] audit: type=1800 audit(6033545850.899:4): pid=7177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.281" name="lu_gp_id" dev="configfs" ino=13945 res=0 errno=0 [ 171.309386][ T7174] kernel write not supported for file /page_tables/current_user (pid: 7174 comm: syz.2.281) [ 171.676557][ T7188] queue_state_write: unsupported operation '' [ 171.701768][ T7188] queue_state_write: use 'run', 'start' or 'kick' [ 172.949554][ T7189] kernel write not supported for file /page_tables/current_user (pid: 7189 comm: syz.2.284) [ 173.937195][ T7220] can: request_module (can-proto-0) failed. [ 173.999570][ T7221] zram: Added device: zram1 [ 174.049553][ T7224] kernel write not supported for file /page_tables/current_user (pid: 7224 comm: syz.2.291) [ 174.134539][ T7219] kernel write not supported for file /page_tables/current_user (pid: 7219 comm: syz.2.291) [ 174.425733][ T7232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.293'. [ 174.552257][ T7232] kernel write not supported for file /page_tables/current_user (pid: 7232 comm: syz.2.293) [ 174.972480][ T7245] FAULT_INJECTION: forcing a failure. [ 174.972480][ T7245] name failslab, interval 1, probability 0, space 0, times 0 [ 174.996681][ T7245] CPU: 1 UID: 0 PID: 7245 Comm: syz.2.296 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 174.996727][ T7245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 174.996747][ T7245] Call Trace: [ 174.996757][ T7245] [ 174.996768][ T7245] dump_stack_lvl+0x16c/0x1f0 [ 174.996826][ T7245] should_fail_ex+0x50a/0x650 [ 174.996865][ T7245] ? fs_reclaim_acquire+0xae/0x150 [ 174.996922][ T7245] should_failslab+0xc2/0x120 [ 174.996965][ T7245] __kmalloc_noprof+0xce/0x4f0 [ 174.997003][ T7245] ? xfrm_hash_alloc+0xd1/0x100 [ 174.997053][ T7245] xfrm_hash_alloc+0xd1/0x100 [ 174.997097][ T7245] xfrm_state_init+0x160/0x630 [ 174.997148][ T7245] ? __pfx_xfrm_net_init+0x10/0x10 [ 174.997194][ T7245] xfrm_net_init+0x211/0xcb0 [ 174.997247][ T7245] ? __pfx_xfrm_net_init+0x10/0x10 [ 174.997293][ T7245] ops_init+0x1df/0x5f0 [ 174.997332][ T7245] setup_net+0x21f/0x860 [ 174.997370][ T7245] ? __pfx_setup_net+0x10/0x10 [ 174.997402][ T7245] ? down_read_killable+0xcc/0x380 [ 174.997436][ T7245] ? __pfx_down_read_killable+0x10/0x10 [ 174.997472][ T7245] ? debug_mutex_init+0x37/0x70 [ 174.997529][ T7245] copy_net_ns+0x2b4/0x6c0 [ 174.997582][ T7245] create_new_namespaces+0x3ea/0xad0 [ 174.997641][ T7245] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 174.997694][ T7245] ksys_unshare+0x45d/0xa40 [ 174.997746][ T7245] ? __pfx_ksys_unshare+0x10/0x10 [ 174.997796][ T7245] ? xfd_validate_state+0x5d/0x180 [ 174.997854][ T7245] __x64_sys_unshare+0x31/0x40 [ 174.997907][ T7245] do_syscall_64+0xcd/0x250 [ 174.997962][ T7245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.998008][ T7245] RIP: 0033:0x7f898a78cda9 [ 174.998034][ T7245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.998064][ T7245] RSP: 002b:00007f898b62f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 174.998094][ T7245] RAX: ffffffffffffffda RBX: 00007f898a9a6080 RCX: 00007f898a78cda9 [ 174.998115][ T7245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 174.998134][ T7245] RBP: 00007f898a80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.998153][ T7245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.998172][ T7245] R13: 0000000000000000 R14: 00007f898a9a6080 R15: 00007ffc712de9c8 [ 174.998211][ T7245] [ 175.787465][ T7258] kernel write not supported for file /page_tables/current_user (pid: 7258 comm: syz.2.296) [ 176.866891][ T7271] kernel write not supported for file /page_tables/current_user (pid: 7271 comm: syz.2.301) [ 177.343223][ T7290] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 177.350273][ T7290] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 177.405838][ T7294] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 177.413553][ T7294] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 177.862165][ T7285] kernel write not supported for file /page_tables/current_user (pid: 7285 comm: syz.2.307) [ 177.931007][ T29] audit: type=1800 audit(6033545857.623:5): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.311" name=03 dev="tmpfs" ino=479 res=0 errno=0 [ 178.343267][ T7317] svc: failed to register nfsdv3 RPC service (errno 111). [ 178.373360][ T7317] svc: failed to register nfsaclv3 RPC service (errno 111). [ 179.033921][ T7335] kernel write not supported for file /page_tables/current_user (pid: 7335 comm: syz.2.312) [ 179.240162][ T7310] kernel write not supported for file /page_tables/current_user (pid: 7310 comm: syz.2.312) [ 179.926512][ T7359] kernel write not supported for file /page_tables/current_user (pid: 7359 comm: syz.2.322) [ 181.272615][ T7367] Process accounting paused [ 182.204247][ T7407] FAULT_INJECTION: forcing a failure. [ 182.204247][ T7407] name failslab, interval 1, probability 0, space 0, times 0 [ 182.309343][ T7407] CPU: 0 UID: 0 PID: 7407 Comm: syz.0.332 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 182.309388][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 182.309411][ T7407] Call Trace: [ 182.309421][ T7407] [ 182.309438][ T7407] dump_stack_lvl+0x16c/0x1f0 [ 182.309498][ T7407] should_fail_ex+0x50a/0x650 [ 182.309537][ T7407] ? fs_reclaim_acquire+0xae/0x150 [ 182.309592][ T7407] should_failslab+0xc2/0x120 [ 182.309631][ T7407] __kmalloc_noprof+0xce/0x4f0 [ 182.309677][ T7407] ? lsm_blob_alloc+0x68/0x90 [ 182.309728][ T7407] lsm_blob_alloc+0x68/0x90 [ 182.309774][ T7407] security_sk_alloc+0x30/0x270 [ 182.309828][ T7407] sk_prot_alloc+0x1c7/0x2a0 [ 182.309871][ T7407] sk_alloc+0x36/0xb90 [ 182.309921][ T7407] ? __pfx_genl_release+0x10/0x10 [ 182.309971][ T7407] __netlink_create+0x5e/0x2c0 [ 182.310005][ T7407] ? __wake_up+0x3f/0x60 [ 182.310043][ T7407] netlink_create+0x3a4/0x630 [ 182.310083][ T7407] ? __pfx_genl_bind+0x10/0x10 [ 182.310130][ T7407] ? __pfx_genl_unbind+0x10/0x10 [ 182.310182][ T7407] __sock_create+0x335/0x8d0 [ 182.310232][ T7407] __sys_socket+0x14f/0x260 [ 182.310277][ T7407] ? __pfx___sys_socket+0x10/0x10 [ 182.310323][ T7407] ? rcu_is_watching+0x12/0xc0 [ 182.310382][ T7407] __x64_sys_socket+0x72/0xb0 [ 182.310425][ T7407] ? lockdep_hardirqs_on+0x7c/0x110 [ 182.310473][ T7407] do_syscall_64+0xcd/0x250 [ 182.310527][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.310573][ T7407] RIP: 0033:0x7f41b0f8cda9 [ 182.310598][ T7407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.310628][ T7407] RSP: 002b:00007f41b1def038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 182.310658][ T7407] RAX: ffffffffffffffda RBX: 00007f41b11a5fa0 RCX: 00007f41b0f8cda9 [ 182.310687][ T7407] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 182.310706][ T7407] RBP: 00007f41b100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.310725][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.310745][ T7407] R13: 0000000000000000 R14: 00007f41b11a5fa0 R15: 00007ffd98771ca8 [ 182.310784][ T7407] [ 184.459111][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 184.469545][ T7446] vivid-003: ================= START STATUS ================= [ 184.508805][ T7446] vivid-003: Radio HW Seek Mode: Bounded [ 184.570523][ T7446] vivid-003: Radio Programmable HW Seek: false [ 184.673977][ T7446] vivid-003: RDS Rx I/O Mode: Block I/O [ 184.732597][ T7446] vivid-003: Generate RBDS Instead of RDS: false [ 184.781217][ T7446] vivid-003: RDS Reception: true [ 184.842588][ T7446] vivid-003: RDS Program Type: 0 inactive [ 184.884450][ T7446] vivid-003: RDS PS Name: inactive [ 184.889873][ T7446] vivid-003: RDS Radio Text: inactive [ 184.946708][ T7446] vivid-003: RDS Traffic Announcement: false inactive [ 185.041928][ T7446] vivid-003: RDS Traffic Program: false inactive [ 185.081719][ T7446] vivid-003: RDS Music: false inactive [ 185.087433][ T7446] vivid-003: ================== END STATUS ================== [ 187.370844][ T7480] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.107322][ T7486] Invalid ELF header magic: != ELF [ 191.919140][ T5838] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 192.724773][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 192.820087][ T7548] Invalid ELF header magic: != ELF [ 194.777836][ T7572] random: crng reseeded on system resumption [ 196.935363][ T29] audit: type=1326 audit(6033545876.732:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7593 comm="syz.2.372" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f898a78cda9 code=0x0 [ 196.938189][ T7595] Process accounting resumed [ 199.076126][ T7623] Invalid ELF header magic: != ELF [ 199.111782][ T7637] netlink: 342 bytes leftover after parsing attributes in process `syz.2.378'. [ 199.596707][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.603120][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.417942][ T7655] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.447304][ T7655] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.534588][ T7655] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.586469][ T7655] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.599292][ T7655] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.632043][ T7655] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.662464][ T7655] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.675836][ T7655] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.723654][ T7655] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.847170][ T7655] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.853216][ T7655] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.890390][ T7655] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.477511][ T7672] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.912415][ T7691] netlink: 202 bytes leftover after parsing attributes in process `syz.0.391'. [ 203.008580][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.201699][ T7689] sp0: Synchronizing with TNC [ 203.567626][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.724916][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.894227][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.077839][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.646039][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 205.695991][ T7750] netlink: 202 bytes leftover after parsing attributes in process `syz.2.401'. [ 205.712556][ T7746] sp0: Synchronizing with TNC [ 205.803933][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.966155][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.171583][ T7755] Invalid ELF header magic: != ELF [ 207.147102][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.715028][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.885198][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.042471][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 208.574647][ T5838] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 208.891538][ T29] audit: type=1800 audit(6033545888.754:7): pid=7816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.416" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 208.911493][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.457650][ T7829] loop5: detected capacity change from 0 to 4194304 [ 209.868608][ T7820] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 210.346863][ T7840] Invalid ELF header magic: != ELF [ 211.499809][ T7854] netlink: 186 bytes leftover after parsing attributes in process `syz.2.425'. [ 213.747949][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 215.758351][ T7929] Process accounting resumed [ 217.317255][ T7951] Invalid ELF header magic: != ELF [ 217.490658][ T7953] Invalid ELF header magic: != ELF [ 218.384070][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 218.549144][ T7978] ======================================================= [ 218.549144][ T7978] WARNING: The mand mount option has been deprecated and [ 218.549144][ T7978] and is ignored by this kernel. Remove the mand [ 218.549144][ T7978] option from the mount to silence this warning. [ 218.549144][ T7978] ======================================================= [ 218.584200][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.903550][ T29] audit: type=1804 audit(6033545898.816:8): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.454" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1300 res=1 errno=0 [ 220.009583][ T8005] Invalid ELF header magic: != ELF [ 220.254504][ T8008] Invalid ELF header magic: != ELF [ 220.956813][ T8022] sysfs_service_op_show: Client not running :-5: [ 221.063811][ T8019] can: request_module (can-proto-0) failed. [ 222.113490][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 225.329937][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 225.342198][ T8117] openvswitch: netlink: IPv6 tunnel dst address is zero [ 226.181907][ T8131] kAFS: bad VL server IP address [ 226.574629][ T8137] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 228.576673][ T8184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.494'. [ 228.664005][ T8184] hsr_slave_0: left promiscuous mode [ 228.709471][ T8184] hsr_slave_1: left promiscuous mode [ 229.095422][ T29] audit: type=1800 audit(6033545909.059:9): pid=8197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.499" name="discovery_nqn" dev="configfs" ino=18170 res=0 errno=0 [ 229.132685][ T8194] syz.1.498 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 229.296059][ T8195] Process accounting resumed [ 229.314225][ T8194] ubi0: attaching mtd0 [ 229.366012][ T8194] ubi0: scanning is finished [ 229.395618][ T8194] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 229.561647][ T8194] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 230.883907][ T8192] Invalid ELF header magic: != ELF [ 232.228121][ T5851] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 232.228171][ T5851] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 232.244555][ T5851] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 232.244621][ T5851] Bluetooth: hci3: Unknown advertising packet type: 0x40 [ 232.252485][ T5851] Bluetooth: hci3: Malformed LE Event: 0x0d [ 232.672861][ T8236] Process accounting resumed [ 233.930484][ T8262] FAULT_INJECTION: forcing a failure. [ 233.930484][ T8262] name failslab, interval 1, probability 0, space 0, times 0 [ 233.946922][ T8262] CPU: 1 UID: 0 PID: 8262 Comm: syz.2.511 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 233.946965][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 233.946984][ T8262] Call Trace: [ 233.946993][ T8262] [ 233.947006][ T8262] dump_stack_lvl+0x16c/0x1f0 [ 233.947065][ T8262] should_fail_ex+0x50a/0x650 [ 233.947104][ T8262] ? fs_reclaim_acquire+0xae/0x150 [ 233.947162][ T8262] should_failslab+0xc2/0x120 [ 233.947203][ T8262] __kmalloc_noprof+0xce/0x4f0 [ 233.947242][ T8262] ? xfrm_hash_alloc+0xd1/0x100 [ 233.947287][ T8262] ? __pfx_xfrm_net_init+0x10/0x10 [ 233.947336][ T8262] xfrm_hash_alloc+0xd1/0x100 [ 233.947388][ T8262] xfrm_state_init+0x96/0x630 [ 233.947437][ T8262] ? __pfx_xfrm_net_init+0x10/0x10 [ 233.947487][ T8262] xfrm_net_init+0x211/0xcb0 [ 233.947536][ T8262] ? __pfx_xfrm_net_init+0x10/0x10 [ 233.947582][ T8262] ops_init+0x1df/0x5f0 [ 233.947621][ T8262] setup_net+0x21f/0x860 [ 233.947659][ T8262] ? __pfx_setup_net+0x10/0x10 [ 233.947690][ T8262] ? down_read_killable+0xcc/0x380 [ 233.947723][ T8262] ? __pfx_down_read_killable+0x10/0x10 [ 233.947759][ T8262] ? debug_mutex_init+0x37/0x70 [ 233.947814][ T8262] copy_net_ns+0x2b4/0x6c0 [ 233.947854][ T8262] create_new_namespaces+0x3ea/0xad0 [ 233.947911][ T8262] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 233.947963][ T8262] ksys_unshare+0x45d/0xa40 [ 233.948016][ T8262] ? __pfx_ksys_unshare+0x10/0x10 [ 233.948064][ T8262] ? xfd_validate_state+0x5d/0x180 [ 233.948122][ T8262] __x64_sys_unshare+0x31/0x40 [ 233.948173][ T8262] do_syscall_64+0xcd/0x250 [ 233.948226][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.948273][ T8262] RIP: 0033:0x7f898a78cda9 [ 233.948300][ T8262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.948330][ T8262] RSP: 002b:00007f898b62f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 233.948368][ T8262] RAX: ffffffffffffffda RBX: 00007f898a9a6080 RCX: 00007f898a78cda9 [ 233.948389][ T8262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 233.948408][ T8262] RBP: 00007f898a80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 233.948426][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.948444][ T8262] R13: 0000000000000000 R14: 00007f898a9a6080 R15: 00007ffc712de9c8 [ 233.948484][ T8262] [ 234.917918][ T8271] mkiss: ax0: crc mode is auto. [ 238.352025][ T8335] tipc: Started in network mode [ 238.357698][ T8335] tipc: Node identity ee00, cluster identity 4711 [ 238.364798][ T8335] tipc: Node number set to 60928 [ 239.329308][ T8353] HSR: entered promiscuous mode [ 239.639766][ T8366] delete_channel: no stack [ 241.437990][ T8385] Invalid ELF header magic: != ELF [ 242.817075][ T8406] Invalid ELF header magic: != ELF [ 244.463146][ T8444] sp0: Synchronizing with TNC [ 245.133874][ T5596] mkiss: ax0: crc mode is auto. [ 245.925619][ T8456] Invalid ELF header magic: != ELF [ 247.049487][ T8468] mkiss: ax0: crc mode is auto. [ 251.507738][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 252.271329][ T8527] netlink: 344 bytes leftover after parsing attributes in process `syz.1.565'. [ 253.328729][ T8601] Process accounting resumed [ 253.490001][ T8599] Process accounting resumed [ 254.358357][ T8618] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 255.054693][ T8628] netlink: 338 bytes leftover after parsing attributes in process `syz.0.586'. [ 255.169827][ T8630] netlink: 338 bytes leftover after parsing attributes in process `syz.0.586'. [ 256.195425][ T8641] can: request_module (can-proto-0) failed. [ 256.728083][ T8652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.591'. [ 256.928702][ T8652] bridge_slave_1: left allmulticast mode [ 256.935858][ T8652] bridge_slave_1: left promiscuous mode [ 256.950733][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.136299][ T8657] Invalid ELF header magic: != ELF [ 257.172363][ T8652] bridge_slave_0: left allmulticast mode [ 257.190151][ T8652] bridge_slave_0: left promiscuous mode [ 257.217884][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.252339][ T8501] mkiss: ax0: crc mode is auto. [ 259.517571][ T8697] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 259.739696][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.604'. [ 259.756560][ T8702] bridge_slave_1: left allmulticast mode [ 259.785680][ T8702] bridge_slave_1: left promiscuous mode [ 259.802232][ T8702] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.834453][ T8702] bridge_slave_0: left allmulticast mode [ 259.851852][ T8702] bridge_slave_0: left promiscuous mode [ 259.873930][ T8702] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.714024][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.721761][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.930399][ T8745] usbip-vudc usbip-vudc.0: gadget not bound [ 262.999977][ T8744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.616'. [ 264.265445][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.622'. [ 264.300735][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.622'. [ 265.776148][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.631'. [ 266.137812][ T8837] netlink: zone id is out of range [ 266.165505][ T8837] netlink: zone id is out of range [ 266.202231][ T8837] netlink: zone id is out of range [ 266.213052][ T8837] netlink: zone id is out of range [ 266.228821][ T8837] netlink: zone id is out of range [ 266.252350][ T8837] netlink: zone id is out of range [ 266.262178][ T8837] netlink: zone id is out of range [ 266.277631][ T8837] netlink: zone id is out of range [ 266.293340][ T8837] netlink: zone id is out of range [ 266.311562][ T8837] netlink: get zone limit has 4 unknown bytes [ 266.922801][ T8859] netlink: 290 bytes leftover after parsing attributes in process `syz.3.643'. [ 267.445495][ T8874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.647'. [ 267.486289][ T8874] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 267.941910][ T8904] hugetlbfs: syz.0.653 (8904): Using mlock ulimits for SHM_HUGETLB is obsolete [ 268.152302][ T8912] netlink: 168 bytes leftover after parsing attributes in process `syz.0.655'. [ 268.630406][ T8923] cgroup: fork rejected by pids controller in /syz3 [ 270.839489][ T9008] netlink: 'syz.1.669': attribute type 11 has an invalid length. [ 270.858051][ T9008] netlink: 'syz.1.669': attribute type 11 has an invalid length. [ 270.865876][ T9008] netlink: 'syz.1.669': attribute type 11 has an invalid length. [ 272.029420][ T8691] mkiss: ax0: crc mode is auto. [ 282.320594][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 282.635178][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 283.452048][ T9028] mkiss: ax0: crc mode is auto. [ 294.313332][ T9217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.723'. [ 294.419839][ T9216] svc: failed to register nfsdv3 RPC service (errno 111). [ 294.443847][ T9216] svc: failed to register nfsaclv3 RPC service (errno 111). [ 294.698790][ T9122] mkiss: ax0: crc mode is auto. [ 295.687096][ T9239] netlink: 'syz.1.720': attribute type 10 has an invalid length. [ 295.695403][ T9239] netlink: 230 bytes leftover after parsing attributes in process `syz.1.720'. [ 295.735769][ T9239] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 296.911691][ T9261] netlink: 'syz.0.726': attribute type 27 has an invalid length. [ 296.949844][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.955209][ T9261] netlink: 334 bytes leftover after parsing attributes in process `syz.0.726'. [ 296.973145][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.985165][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.002648][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.014821][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 297.024962][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.702189][ T5848] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 297.702235][ T5848] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 297.717673][ T5848] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 297.717713][ T5848] Bluetooth: hci1: adv larger than maximum supported [ 297.726086][ T5848] Bluetooth: hci1: Unknown advertising packet type: 0x54 [ 297.733227][ T5848] Bluetooth: hci1: Malformed LE Event: 0x0d [ 297.785419][ T9265] chnl_net:caif_netlink_parms(): no params data found [ 298.354250][ T9265] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.374415][ T9265] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.390022][ T9265] bridge_slave_0: entered allmulticast mode [ 298.399062][ T9265] bridge_slave_0: entered promiscuous mode [ 298.417109][ T9265] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.434561][ T9265] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.453937][ T9265] bridge_slave_1: entered allmulticast mode [ 298.474649][ T9265] bridge_slave_1: entered promiscuous mode [ 298.591497][ T9265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.614208][ T9265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.836462][ T9265] team0: Port device team_slave_0 added [ 298.868943][ T9298] can: request_module (can-proto-0) failed. [ 298.987969][ T9265] team0: Port device team_slave_1 added [ 299.025930][ T9307] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 299.063393][ T5848] Bluetooth: hci3: command tx timeout [ 299.169934][ T9265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.189271][ T9265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.242265][ T9265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.264622][ T9265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.271803][ T9265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.379770][ T9265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.601234][ T9265] hsr_slave_0: entered promiscuous mode [ 299.608006][ T9265] hsr_slave_1: entered promiscuous mode [ 299.631077][ T9265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.653564][ T9265] Cannot create hsr debugfs directory [ 299.871284][ T29] audit: type=1800 audit(4294970421.204:10): pid=9319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.734" name="dbroot" dev="configfs" ino=23019 res=0 errno=0 [ 299.879129][ T9319] Process accounting resumed [ 299.955050][ T29] audit: type=1804 audit(4294970421.204:11): pid=9319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.734" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=23019 res=1 errno=0 [ 300.125430][ T9265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 300.158941][ T9265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 300.189778][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 300.190997][ T9265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 300.211793][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 300.243532][ T9265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 300.639694][ T9265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.721374][ T9265] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.869575][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.876996][ T6427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.972595][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.979778][ T8889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.133550][ T5848] Bluetooth: hci3: command tx timeout [ 301.191896][ T5848] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 301.191942][ T5848] Bluetooth: hci2: unexpected subevent 0x05 length: 725 > 12 [ 301.810111][ T9265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.818762][ T9363] ima: policy update failed [ 301.823543][ T29] audit: type=1802 audit(4294970423.165:12): pid=9363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.740" res=0 errno=0 [ 302.529929][ T9265] veth0_vlan: entered promiscuous mode [ 302.560189][ T9265] veth1_vlan: entered promiscuous mode [ 302.776177][ T9265] veth0_macvtap: entered promiscuous mode [ 302.786646][ T9265] veth1_macvtap: entered promiscuous mode [ 302.848680][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.882277][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.893511][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.938290][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.972904][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.001602][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.015894][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.047904][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.074513][ T9265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.134312][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.186078][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.200472][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 303.206744][ T5851] Bluetooth: hci3: command tx timeout [ 303.218313][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.255689][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.265958][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.280229][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.299588][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.327756][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.357403][ T9265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.488182][ T9265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.516302][ T9265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.535905][ T9265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.544980][ T9265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.844801][ T6427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.876809][ T6427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.959534][ T6423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.983997][ T6423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.994464][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 304.624337][ T9415] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 305.045688][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'. [ 305.174712][ T9433] FAULT_INJECTION: forcing a failure. [ 305.174712][ T9433] name failslab, interval 1, probability 0, space 0, times 0 [ 305.216243][ T9433] CPU: 1 UID: 0 PID: 9433 Comm: syz.4.755 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 305.216286][ T9433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 305.216304][ T9433] Call Trace: [ 305.216313][ T9433] [ 305.216324][ T9433] dump_stack_lvl+0x16c/0x1f0 [ 305.216379][ T9433] should_fail_ex+0x50a/0x650 [ 305.216415][ T9433] ? fs_reclaim_acquire+0xae/0x150 [ 305.216473][ T9433] should_failslab+0xc2/0x120 [ 305.216514][ T9433] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 305.216554][ T9433] ? __d_alloc+0x35/0x8c0 [ 305.216597][ T9433] __d_alloc+0x35/0x8c0 [ 305.216639][ T9433] d_alloc_pseudo+0x1c/0xc0 [ 305.216686][ T9433] alloc_file_pseudo+0xd2/0x200 [ 305.216731][ T9433] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 305.216780][ T9433] ? shmem_get_inode+0x737/0xf00 [ 305.216826][ T9433] __shmem_file_setup+0x210/0x300 [ 305.216873][ T9433] newseg+0x3b3/0xe60 [ 305.216915][ T9433] ? __pfx_newseg+0x10/0x10 [ 305.216968][ T9433] ipcget+0xe5/0xd80 [ 305.217004][ T9433] ? __pfx_do_futex+0x10/0x10 [ 305.217034][ T9433] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 305.217093][ T9433] ? __pfx_ipcget+0x10/0x10 [ 305.217129][ T9433] ? __x64_sys_futex+0x1e1/0x4c0 [ 305.217159][ T9433] ? __x64_sys_futex+0x1ea/0x4c0 [ 305.217200][ T9433] __x64_sys_shmget+0x13f/0x1b0 [ 305.217238][ T9433] ? __pfx___x64_sys_shmget+0x10/0x10 [ 305.217287][ T9433] do_syscall_64+0xcd/0x250 [ 305.217340][ T9433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.217384][ T9433] RIP: 0033:0x7f45a158cda9 [ 305.217407][ T9433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.217436][ T9433] RSP: 002b:00007f45a2489038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 305.217464][ T9433] RAX: ffffffffffffffda RBX: 00007f45a17a5fa0 RCX: 00007f45a158cda9 [ 305.217484][ T9433] RDX: 0000000000000005 RSI: 0000000000010563 RDI: 0000000000000000 [ 305.217502][ T9433] RBP: 00007f45a160e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 305.217520][ T9433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.217538][ T9433] R13: 0000000000000000 R14: 00007f45a17a5fa0 R15: 00007fffe5036678 [ 305.217577][ T9433] [ 305.367028][ T5851] Bluetooth: hci3: command tx timeout [ 305.864274][ T9241] mkiss: ax0: crc mode is auto. [ 307.945284][ T9470] netlink: 342 bytes leftover after parsing attributes in process `syz.4.764'. [ 309.028911][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.767'. [ 310.690330][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.771'. [ 311.220028][ T9513] program syz.4.773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.230454][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 312.262167][ T9530] can: request_module (can-proto-0) failed. [ 312.652760][ T9545] Invalid ELF header magic: != ELF [ 317.085847][ T9461] mkiss: ax0: crc mode is auto. [ 317.709268][ T9592] Process accounting resumed [ 318.704823][ T9602] HfR: entered promiscuous mode [ 318.737366][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.794'. [ 318.767161][ T9602] HfR: left promiscuous mode [ 321.840522][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.846894][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.689525][ T9656] delete_channel: no stack [ 328.557262][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.572795][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.587207][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.600535][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.608334][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 328.615906][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.649643][ T9598] mkiss: ax0: crc mode is auto. [ 329.532468][ T9678] random: crng reseeded on system resumption [ 329.965192][ T9669] chnl_net:caif_netlink_parms(): no params data found [ 330.215186][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.223039][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.231059][ T9669] bridge_slave_0: entered allmulticast mode [ 330.241837][ T9669] bridge_slave_0: entered promiscuous mode [ 330.266590][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.273766][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.315260][ T9669] bridge_slave_1: entered allmulticast mode [ 330.322610][ T9669] bridge_slave_1: entered promiscuous mode [ 330.653469][ T5851] Bluetooth: hci4: command tx timeout [ 330.698406][ T9669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.753226][ T9669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.008350][ T9669] team0: Port device team_slave_0 added [ 331.092106][ T9669] team0: Port device team_slave_1 added [ 331.120176][ T9694] Invalid ELF header magic: != ELF [ 331.182604][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.189625][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.279621][ T9669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.303965][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.349399][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.541257][ T9669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.061741][ T9669] hsr_slave_0: entered promiscuous mode [ 332.094016][ T9669] hsr_slave_1: entered promiscuous mode [ 332.121977][ T9669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.154985][ T9669] Cannot create hsr debugfs directory [ 332.722128][ T5851] Bluetooth: hci4: command tx timeout [ 333.132056][ T9669] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.242377][ T9669] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.399565][ T9669] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 333.500977][ T9669] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 333.730009][ T9706] usbip-vudc usbip-vudc.0: gadget not bound [ 333.828575][ T9706] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 333.884263][ T9669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.969457][ T9669] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.059156][ T8889] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.066400][ T8889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.120020][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.127331][ T8889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.328586][ T9669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.800972][ T5851] Bluetooth: hci4: command tx timeout [ 334.924533][ T9669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.813056][ T9669] veth0_vlan: entered promiscuous mode [ 335.886058][ T9669] veth1_vlan: entered promiscuous mode [ 335.999617][ T9669] veth0_macvtap: entered promiscuous mode [ 336.047810][ T9669] veth1_macvtap: entered promiscuous mode [ 336.126296][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.156347][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.195220][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.234386][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.283172][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.324262][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.362663][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.392680][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.426071][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.452232][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.485239][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.517668][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.551676][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.571436][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.641065][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.675994][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.721980][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.750491][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.773931][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.820283][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.850070][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.865111][ T5851] Bluetooth: hci4: command tx timeout [ 336.886806][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.988854][ T9669] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.039647][ T9669] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.048528][ T9669] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.128517][ T9669] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.549162][ T8891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.582210][ T8891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.690820][ T8891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.726585][ T8891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.349982][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.373107][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.383617][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.420542][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.446379][ T5848] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.453887][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.567748][ T9686] mkiss: ax0: crc mode is auto. [ 340.714489][ T9752] chnl_net:caif_netlink_parms(): no params data found [ 341.485358][ T5851] Bluetooth: hci5: command tx timeout [ 342.207772][ T9752] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.245587][ T9752] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.276195][ T9752] bridge_slave_0: entered allmulticast mode [ 342.342455][ T9752] bridge_slave_0: entered promiscuous mode [ 342.609517][ T9752] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.617223][ T9752] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.670570][ T9752] bridge_slave_1: entered allmulticast mode [ 342.698899][ T9752] bridge_slave_1: entered promiscuous mode [ 343.544785][ T5851] Bluetooth: hci5: command tx timeout [ 343.704217][ T9668] ------------[ cut here ]------------ [ 343.709901][ T9668] ODEBUG: free active (active state 0) object: ffff8880353b9248 object type: timer_list hint: hci_devcd_timeout+0x0/0x2f0 [ 343.986039][ T9752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.046261][ T9752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.244488][ T9796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.834'. [ 344.436442][ T9668] WARNING: CPU: 0 PID: 9668 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 344.446497][ T9668] Modules linked in: [ 344.450540][ T9668] CPU: 0 UID: 0 PID: 9668 Comm: syz.3.803 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 344.461093][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 344.471407][ T9668] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 344.477879][ T9668] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 60 d4 d2 8b 41 56 4c 89 e6 48 c7 c7 e0 c8 d2 8b e8 af 41 b8 fc 90 <0f> 0b 90 90 58 83 05 e6 76 9e 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 344.498809][ T9668] RSP: 0018:ffffc90004877798 EFLAGS: 00010286 [ 344.505403][ T9668] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff8179c479 [ 344.513557][ T9668] RDX: ffff888062960000 RSI: ffffffff8179c486 RDI: 0000000000000001 [ 344.522073][ T9668] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 344.530693][ T9668] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bd2cf80 [ 344.539081][ T9668] R13: ffffffff8b6f9ee0 R14: ffffffff8a540ff0 R15: ffffc900048778a8 [ 344.547284][ T9668] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 344.556388][ T9668] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.563199][ T9668] CR2: 0000555588768808 CR3: 000000000df80000 CR4: 00000000003526f0 [ 344.571536][ T9668] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 344.580458][ T9668] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.589696][ T9668] Call Trace: [ 344.593122][ T9668] [ 344.596115][ T9668] ? __warn+0xea/0x3c0 [ 344.600411][ T9668] ? preempt_schedule_notrace+0x62/0xe0 [ 344.606233][ T9668] ? debug_print_object+0x1a2/0x2b0 [ 344.611647][ T9668] ? report_bug+0x3c0/0x580 [ 344.616729][ T9668] ? handle_bug+0x54/0xa0 [ 344.621600][ T9668] ? exc_invalid_op+0x17/0x50 [ 344.626352][ T9668] ? asm_exc_invalid_op+0x1a/0x20 [ 344.632037][ T9668] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 344.638043][ T9668] ? __warn_printk+0x199/0x350 [ 344.643206][ T9668] ? __warn_printk+0x1a6/0x350 [ 344.648038][ T9668] ? debug_print_object+0x1a2/0x2b0 [ 344.653398][ T9668] ? debug_print_object+0x1a1/0x2b0 [ 344.658777][ T9668] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 344.664414][ T9668] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 344.670423][ T9668] debug_check_no_obj_freed+0x4b7/0x600 [ 344.676758][ T9668] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 344.683567][ T9668] ? kmem_cache_free+0x2e2/0x4d0 [ 344.688817][ T9668] ? kfree_skbmem+0x1a4/0x1f0 [ 344.693580][ T9668] kfree+0x29f/0x4d0 [ 344.697536][ T9668] ? hci_release_dev+0x4d9/0x600 [ 344.702627][ T9668] hci_release_dev+0x4d9/0x600 [ 344.707482][ T9668] ? __pfx_hci_release_dev+0x10/0x10 [ 344.712975][ T9668] ? rcu_is_watching+0x12/0xc0 [ 344.718000][ T9668] ? kfree+0x260/0x4d0 [ 344.722593][ T9668] bt_host_release+0x6a/0xb0 [ 344.727603][ T9668] ? __pfx_bt_host_release+0x10/0x10 [ 344.733373][ T9668] device_release+0xa1/0x240 [ 344.739141][ T9668] kobject_put+0x1e4/0x5a0 [ 344.743667][ T9668] ? __pfx_vhci_release+0x10/0x10 [ 344.749026][ T9668] put_device+0x1f/0x30 [ 344.753530][ T9668] vhci_release+0x81/0xf0 [ 344.758182][ T9668] __fput+0x3ff/0xb70 [ 344.762688][ T9668] task_work_run+0x14e/0x250 [ 344.767359][ T9668] ? __pfx_task_work_run+0x10/0x10 [ 344.772709][ T9668] do_exit+0xad8/0x2d70 [ 344.777379][ T9668] ? get_signal+0x8f7/0x2610 [ 344.782806][ T9668] ? __pfx_do_exit+0x10/0x10 [ 344.787579][ T9668] ? do_raw_spin_lock+0x12d/0x2c0 [ 344.793359][ T9668] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 344.799045][ T9668] do_group_exit+0xd3/0x2a0 [ 344.803825][ T9668] get_signal+0x2576/0x2610 [ 344.808617][ T9668] ? __pfx_get_signal+0x10/0x10 [ 344.813734][ T9668] arch_do_signal_or_restart+0x90/0x7e0 [ 344.819601][ T9668] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 344.826313][ T9668] ? do_user_addr_fault+0x6dc/0x13f0 [ 344.832080][ T9668] irqentry_exit_to_user_mode+0x13f/0x280 [ 344.838108][ T9668] asm_exc_page_fault+0x26/0x30 [ 344.843159][ T9668] RIP: 0033:0x7f2ee3e63c52 [ 344.847755][ T9668] Code: Unable to access opcode bytes at 0x7f2ee3e63c28. [ 344.854842][ T9668] RSP: 002b:00007fffd7adf920 EFLAGS: 00010246 [ 344.861136][ T9668] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 344.869386][ T9668] RDX: 0000001b30620000 RSI: 0000000000600000 RDI: 00007f2ee40967b0 [ 344.877534][ T9668] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 344.886199][ T9668] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 344.895021][ T9668] R13: 0000555568fde590 R14: 000000000004cab8 R15: 00007fffd7adfbe0 [ 344.903376][ T9668] [ 344.906478][ T9668] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 344.913815][ T9668] CPU: 0 UID: 0 PID: 9668 Comm: syz.3.803 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 344.924197][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 344.934327][ T9668] Call Trace: [ 344.937675][ T9668] [ 344.940657][ T9668] dump_stack_lvl+0x3d/0x1f0 [ 344.945334][ T9668] panic+0x71d/0x800 [ 344.949293][ T9668] ? __pfx_panic+0x10/0x10 [ 344.953794][ T9668] ? show_trace_log_lvl+0x29d/0x3d0 [ 344.959079][ T9668] ? check_panic_on_warn+0x1f/0xb0 [ 344.964260][ T9668] ? debug_print_object+0x1a2/0x2b0 [ 344.969532][ T9668] check_panic_on_warn+0xab/0xb0 [ 344.974627][ T9668] __warn+0xf6/0x3c0 [ 344.978580][ T9668] ? preempt_schedule_notrace+0x62/0xe0 [ 344.984287][ T9668] ? debug_print_object+0x1a2/0x2b0 [ 344.989609][ T9668] report_bug+0x3c0/0x580 [ 344.994035][ T9668] handle_bug+0x54/0xa0 [ 344.998251][ T9668] exc_invalid_op+0x17/0x50 [ 345.003394][ T9668] asm_exc_invalid_op+0x1a/0x20 [ 345.008338][ T9668] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 345.014362][ T9668] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 60 d4 d2 8b 41 56 4c 89 e6 48 c7 c7 e0 c8 d2 8b e8 af 41 b8 fc 90 <0f> 0b 90 90 58 83 05 e6 76 9e 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 345.034135][ T9668] RSP: 0018:ffffc90004877798 EFLAGS: 00010286 [ 345.040259][ T9668] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff8179c479 [ 345.048286][ T9668] RDX: ffff888062960000 RSI: ffffffff8179c486 RDI: 0000000000000001 [ 345.056412][ T9668] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 345.064423][ T9668] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bd2cf80 [ 345.072553][ T9668] R13: ffffffff8b6f9ee0 R14: ffffffff8a540ff0 R15: ffffc900048778a8 [ 345.080656][ T9668] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 345.086294][ T9668] ? __warn_printk+0x199/0x350 [ 345.091221][ T9668] ? __warn_printk+0x1a6/0x350 [ 345.096022][ T9668] ? debug_print_object+0x1a1/0x2b0 [ 345.101266][ T9668] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 345.106873][ T9668] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 345.112730][ T9668] debug_check_no_obj_freed+0x4b7/0x600 [ 345.118342][ T9668] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 345.124468][ T9668] ? kmem_cache_free+0x2e2/0x4d0 [ 345.129533][ T9668] ? kfree_skbmem+0x1a4/0x1f0 [ 345.134258][ T9668] kfree+0x29f/0x4d0 [ 345.138190][ T9668] ? hci_release_dev+0x4d9/0x600 [ 345.143197][ T9668] hci_release_dev+0x4d9/0x600 [ 345.148194][ T9668] ? __pfx_hci_release_dev+0x10/0x10 [ 345.153734][ T9668] ? rcu_is_watching+0x12/0xc0 [ 345.158902][ T9668] ? kfree+0x260/0x4d0 [ 345.163013][ T9668] bt_host_release+0x6a/0xb0 [ 345.167900][ T9668] ? __pfx_bt_host_release+0x10/0x10 [ 345.173396][ T9668] device_release+0xa1/0x240 [ 345.178117][ T9668] kobject_put+0x1e4/0x5a0 [ 345.182568][ T9668] ? __pfx_vhci_release+0x10/0x10 [ 345.187822][ T9668] put_device+0x1f/0x30 [ 345.192122][ T9668] vhci_release+0x81/0xf0 [ 345.196500][ T9668] __fput+0x3ff/0xb70 [ 345.200595][ T9668] task_work_run+0x14e/0x250 [ 345.205218][ T9668] ? __pfx_task_work_run+0x10/0x10 [ 345.210377][ T9668] do_exit+0xad8/0x2d70 [ 345.214665][ T9668] ? get_signal+0x8f7/0x2610 [ 345.219305][ T9668] ? __pfx_do_exit+0x10/0x10 [ 345.223924][ T9668] ? do_raw_spin_lock+0x12d/0x2c0 [ 345.228992][ T9668] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 345.234432][ T9668] do_group_exit+0xd3/0x2a0 [ 345.238970][ T9668] get_signal+0x2576/0x2610 [ 345.243528][ T9668] ? __pfx_get_signal+0x10/0x10 [ 345.248542][ T9668] arch_do_signal_or_restart+0x90/0x7e0 [ 345.254235][ T9668] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 345.260557][ T9668] ? do_user_addr_fault+0x6dc/0x13f0 [ 345.265907][ T9668] irqentry_exit_to_user_mode+0x13f/0x280 [ 345.271776][ T9668] asm_exc_page_fault+0x26/0x30 [ 345.276740][ T9668] RIP: 0033:0x7f2ee3e63c52 [ 345.281197][ T9668] Code: Unable to access opcode bytes at 0x7f2ee3e63c28. [ 345.288263][ T9668] RSP: 002b:00007fffd7adf920 EFLAGS: 00010246 [ 345.294367][ T9668] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 345.302372][ T9668] RDX: 0000001b30620000 RSI: 0000000000600000 RDI: 00007f2ee40967b0 [ 345.310469][ T9668] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 345.318493][ T9668] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 345.326513][ T9668] R13: 0000555568fde590 R14: 000000000004cab8 R15: 00007fffd7adfbe0 [ 345.334544][ T9668] [ 345.337938][ T9668] Kernel Offset: disabled [ 345.342346][ T9668] Rebooting in 86400 seconds..