last executing test programs: 2m28.478980533s ago: executing program 1 (id=98): shmctl$auto_SHM_STAT_ANY(0x20000, 0xf, 0x0) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd29, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) setresuid$auto(0x2, 0x5, 0x200) r2 = syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r2, 0x0, 0xc0000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xfffffffe) r3 = socket(0x2, 0x1, 0x0) ioperm$auto(0x7, 0x6, 0x3) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) ioctl$auto(0x3, 0x8912, 0x46) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x80045530, 0x38) socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000005c0), r3) sendmsg$auto_TIPC_NL_LINK_GET(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(&(0x7f0000000040)='/dev/sequencer2\x00') acct$auto(&(0x7f0000000000)='/dev/snd/controlC1\x00') syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000340), r3) 2m28.039748372s ago: executing program 1 (id=100): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x24, 0x940, 0x1ffde, 0x3, 0x6, 0x8000002, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x32, 0x3, 0x1000005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mprotect$auto(0x8, 0xac, 0xe1e0058000000000) r0 = socket(0x25, 0x2, 0xfffffffc) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/set_event\x00', 0x20001, 0x0) write$auto(r1, &(0x7f0000000040)='nbd\x00', 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x8, 0x2, 0xfffffffffffffffc, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) mmap$auto(0x6, 0x40000b, 0x8, 0x9b72, 0x2, 0x8001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x5, 0x0, &(0x7f0000000400)={[0x2, 0x8, 0xf, 0x3, 0xa, 0x1000, 0xa, 0x100000001, 0xe, 0x0, 0x4, 0x7fff, 0xffffffffffffffff, 0x5, 0x8, 0x7]}, &(0x7f0000000480)={[0x6, 0x8d96, 0x1, 0x4199226f, 0x0, 0x4, 0x380000000000000, 0x89ce, 0x5, 0xc2, 0x100000000, 0x3, 0xfffffffffffffe01, 0x4, 0xd2, 0xffffffff]}, &(0x7f0000000140)={0x3, 0x2}) mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0xd2d2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r4 = gettid() process_vm_readv$auto(r4, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x4f, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x50020) stat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x3, 0x800000004, 0x8000, 0xee00, 0xffffffffffffffff, 0x0, 0x6, 0x4ff, 0x7, 0x800, 0xc, 0xa58, 0x3, 0x2, 0xce, 0x8}) io_uring_register$auto(0x2, 0x8, &(0x7f00000001c0)="e91953b4785d", 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x0, 0x0) 2m26.904167732s ago: executing program 1 (id=105): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = io_uring_setup$auto(0x85, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2c082, 0x0) ioctl$auto(r1, 0x40104d13, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) madvise$auto(0x110c234000, 0x1, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(r0, &(0x7f0000000040)=@ethernet={0x6, @broadcast}, 0x6a) socket(0xa, 0x6, 0x21) madvise$auto(0xa0000000000, 0x7fffffffffffffff, 0x7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x101600, 0x0) read$auto(r2, &(0x7f0000000040)='\x04\x00\x86\xd2\x0f\x84\xe7\x05}\x88\x04\xc2&\x14^\v\x802\x89Y\xf2;\xe8\xf4a\xab\x01\xf5\x1f\xd5\xf5\x89lg\x0f+S\xbf\xa7\xc3\xd0\x1e\x18\xc2\xe8\x87\xa9\x9a4I;\xf6wP\'go\xf2\xf13\x91I\x819nz65-\x84\x11\x7f^\xed^\xbc\x17\x17\x82r\xa4\xf6\x86m\x81YI\xa7\xe7\x97%\x9d\bs\xc92\x1b\t\xf9q\a*\xf1\r\xc1\x18\xa7\x05m\xb1\xda\apU\xb8)b\x7f\xe9rQ\xc5N~,,\xad\xf0\x011\x8b`\xb8\x06\x01$\'\xb4\x03g\xe6\xf8\x18liR-\x97\xadX\x7f\v\xa4\xb5\xfa\xe0k\xa1\xc3\x89\x01\xb1J\xdcy!\x99\xf65\x9e\xcd\xe2[\xd78\x0e\xde-!u\x9bh\a\xbbHC\x91\xde\xd2\x9a}S\xf0\x85\x7f\x86/\xd7||\xf4\xca\xc9A\xac\xfb\x1f\xcb\xed\xbaF\xe5\xb2\xdc/Z\x1b\xc9\xb8\xc9\x83O2F\x91\a\x8c\xcd\xe57\xaa\x12\x03\xe4=\x85\xb3\xa7L', 0xc) unshare$auto(0x200) prctl$auto(0x1000000001a, 0x1, 0x9, 0x7, 0x32) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) msgget$auto(0x0, 0x5) bind$auto(0xffffffffffffffff, &(0x7f0000000140)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x7ff) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) epoll_create$auto(0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) socket$nl_generic(0x10, 0x3, 0x10) msgsnd$auto(0x0, &(0x7f0000000600)={0x7fc, 0x7}, 0x400, 0x2) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000200)="4509780f5117ff6be2032209823f6a61559412a837f5525573cb9b93c37c1809d2f15f73172bc0bd7f54e5743df57302f8c0fb346612abc5d4642f8d63e1803be012819fe17818e8cb13a145889df944c4f9ae3f55693612cebfbe8961b131c31ba9194a12b41487bc228a04d83af5a1b65f5e3fc621bcfb06877181e56251d78f2bfcfd2848861bf7d6040f13be0e5d2196dd09fd88de670b64c97c13bd8d4cde7ccabb9100603dd3a8bb8fba3ca06594fac02da5ff9c") msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) 2m26.520042321s ago: executing program 1 (id=107): mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d63882a712, 0x0) socket(0x2b, 0x1, 0x1) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x40c01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) r1 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/current_tracer\x00', 0x1a3642, 0x0) writev$auto(r1, &(0x7f0000000100)={0x0, 0x8}, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xc, 0x3, 0x6, 0x4, 0xb4, 0x40009, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x500ffffffffffe, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xff7ffffffffffffd, 0xfffffffffffffffd, 0x200000000001, 0x0, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0x6, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8840}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f00000000c0)={{0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)="fbff07bf17ebac17840073041dd6f9115705e3dd94fcaa75e9ca6202f21f1f45768e9090c1cf0d4c7bd6ec747a1d080aed75e79bc1100610bebd6b5774993400000c00000000000000b299b2cd46a2714fcd39479b00c8a25a79c74078272aaf1b46b8f68e60532f4193d6163f148ad7e8fd7ea70dec75f2e780aff64b1e11cef96ef5272ab5a06da8bb1e117ea641ccb9fd61638b0f209e393d", 0x800000fc2}, 0x400000000002, &(0x7f0000000680)="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", 0x0, 0xa505}, 0x80000800}, 0x7, 0x4008) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) r4 = fsopen$auto(0x0, 0x1) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, r4) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x2, 0x0) mmap$auto(0x0, 0x400004, 0x80, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) getpid() 2m25.012050647s ago: executing program 1 (id=113): r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x6181, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/0000:00:03.0/consistent_dma_mask_bits\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/40, 0x28) epoll_ctl$auto_EPOLL_CTL_DEL(r0, 0x2, r1, &(0x7f0000000080)={0x7, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0xfc, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xe6, 0x3, 0x0, 0x1, [@typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x2a}, @typed={0x4, 0x11}, @typed={0x8, 0x2e, 0x0, 0x0, @fd}, @generic="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b33dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014", @nested={0x10, 0x5, 0x0, 0x1, [@typed={0xc, 0xc5, 0x0, 0x0, @u64=0x3}]}, @nested={0x18, 0x140, 0x0, 0x1, [@typed={0x14, 0x113, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}]}]}]}, 0xfc}}, 0x50) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x7, 0x47, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) writev$auto(0xca, &(0x7f0000000080)={0x0, 0x2}, 0x2000000000000003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000380)="072202dcbf19845aac0d7867db9fbcbd256a865678573b2f78a694fd6d42eda0521e1035b429ce8787ef20da14103e5fa6266105934ec742787b331067ecb6505c1422abfcef5fee92d3b4a21a616900dfe8186d725903511088d32cd21dfa6fda9cc987ef08eb2bf0839919f964fc346f6e1154", 0x74) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="720100", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) 2m24.512949228s ago: executing program 1 (id=114): setgroups$auto(0x3, 0xfffffffffffffffc) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{&(0x7f0000000240), 0xc8b, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80000000}, 0x6}, 0x3b87, 0xa) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setuid$auto(0xe) ioctl$auto(0x3, 0x400454ca, 0x38) io_uring_register$auto(0x2, 0x0, 0x0, 0x5) 2m11.359260391s ago: executing program 2 (id=140): r0 = socket(0x11, 0x801, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xc008aec1, 0x0) getsockopt$auto(r0, 0x84, 0x83, 0x0, &(0x7f0000000000)=0x9000c) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001e00)={0x14, r2, 0x309, 0x2070bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x10, 0x0, 0x600, 0x3}, "66ac0801cefa303f5ce268d590eb0d4a4cada7272464294b9183169eef4c1f9a8fdcc8ecc66fdd10316f064ebd893007abb4c0bbc3b82e9b6d2924ad63d5e2bddb6aaf40cddc110d71771552c03de658", 0x7}) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) truncate$auto(0x0, 0x100000000000001) write$auto(0x3, 0x0, 0x9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sem\x00', 0x80401, 0x0) r3 = prctl$auto_PR_SET_MEMORY_MERGE(0x43, 0xffffffff, 0xffffffffffffffff, 0xfff, 0xac6) ioctl$auto_XFS_IOC_ERROR_INJECTION(r3, 0x40085874, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) read$auto(r4, 0x0, 0xb5) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) keyctl$auto(0x1f, 0x0, 0x0, 0x5, 0x8) msgctl$auto_IPC_STAT(0xfc, 0x2, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0xfffffe00, 0xc7, 0xfffffff4, 0x200}, &(0x7f0000000000)=0xff, &(0x7f0000000040)=0x1, 0x5a, 0xdf, 0xffffffffffffffff, 0x3, 0xfcf, 0x9, 0xcf08, 0x8, @inferred, @inferred=0xffffffffffffffff}) r5 = epoll_create$auto(0x2) epoll_pwait2$auto(r5, 0x0, 0x8, &(0x7f0000002780)={0x800000000000000, 0x6}, 0x0, 0x8) shmctl$auto(0x2, 0x6, &(0x7f0000000280)={{0xdb, 0x0, 0xee01, 0xcc, 0x8000, 0x0, 0xf}, 0x9, 0x0, 0x101, 0xe05c, @inferred, @inferred, 0xfff, 0x0, &(0x7f00000001c0)="8daa57a3c3a4cb", &(0x7f0000000240)="d75d249465d2061bc854a71317ee47af2857199bed"}) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x28080008}, 0xc, &(0x7f0000001d80)={&(0x7f0000000300)=ANY=[@ANYBLOB="441a0000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf250f000000c80408800800d280040063809f00558004000180af4d18d43e7bc0cd52212356e790a9a47f8284009cedc72849881596436f4c97444fe0b3ba63cd5cb9ac3f18fc39e1625b4ce2a00e27fe81c4e716e369250a41588b506dfda5f8f459a6b5b42356e8a295e60a24d8aa5e1c83dd3dabb8d5e4ff1ab5ea95ffd4a8e6276f8660ee96c2ffd7109bc113ab5a81d7e196acfdab38520ad25879b13776efa68468825a6db2b500888837b93b0c0008000500", @ANYRES32=0x0, @ANYBLOB="0800b70009000000e301e480d8005f00dcf37bd85c1910be5780f4067762e8c599c79c617aae538475383d827dbe2f545b6e8265014add776be93459b3f2dc464dbdfdaf20a4e56c1b235db371259837974c310950507be47695ddf700f146fe357750114863513991f5ae76505aeb354195d4af7170db4797bee5c712267eafc0a5987c0fab96462d11476c5dfb353095b849d3e0c536eb7ea4b5990e286775cd5ffd912ee34eda11350db422e79a442ddcbb6c3aa06a17bf69f540dd1bcecd81d1107fa7d5b9f7ed2281e2e4f73ab7681edf1bd30ec5f8a17693544a0f126b2adf1aad0800de00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="600104809800278020bac89bb33486605536033aed9de05152a26505549fb880dd60bb0bfcf5df5279622046079d3c09775a9994d22917e803dc00ad49fbbe290ff178f3c7a187fcd6d16c2ba74f2cf7ce674b5cf7802ad6f9fb3135413f7fbe8cc35726a474e14114800e6516ccfd0dc843ea74fdc1576d903d20636c9444e508009a00", @ANYRES32=r5, @ANYBLOB='\b\x00<\x00', @ANYRES32=r6, @ANYBLOB="0400b18004005a800400458008003d00", @ANYRES32=r3, @ANYBLOB="bc00a58008002500", @ANYRES32=r3, @ANYBLOB="0400f480040000800400a480080096005b2425006947100046dfc16a92a16f522b1bc9f46d9d559fc20e4646c2f03711adde99e4e982b1fed90d8087a3fc1e2fcd6f6c95e24a6b2787916d691ed436cecaed4ff0153b1aab2cbd643d1f51a2b8b65b840bf45f21de166e15debc50f1e1176d47631e3f939609bd202660507b28de5c64d7e74c50e1a2ec403f488dab56d766053a06e6e427cfe271243450e0c1af6faec9ad1b665ec1cf366004009c80080003805eae35ed"], 0x1a44}, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_setup$auto(0x6, 0x0) r7 = getpgid$auto(0xffffffffffffffff) syz_open_procfs$namespace(r7, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m9.389115971s ago: executing program 32 (id=114): setgroups$auto(0x3, 0xfffffffffffffffc) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{&(0x7f0000000240), 0xc8b, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80000000}, 0x6}, 0x3b87, 0xa) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setuid$auto(0xe) ioctl$auto(0x3, 0x400454ca, 0x38) io_uring_register$auto(0x2, 0x0, 0x0, 0x5) 2m4.915480547s ago: executing program 2 (id=155): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0x7bffffff, 0xeda, r0, 0xffffffffffffffff) ioctl$auto_TIOCVHANGUP(r0, 0x5437, &(0x7f0000000080)="1c82fda84ca3ca5d6b463dc82bbe71379f3281848bcd1c364a6a9eede7f6a05f4af53eff244d") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/xfs/panic_mask\x00', 0x40101, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(r1, 0x0, 0xfdef) 2m0.52113977s ago: executing program 2 (id=159): mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbe787ee88a90900000004000380"], 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x200008000) mmap$auto(0x0, 0x20009, 0xdf, 0x12, 0x40000000000a5, 0x8002) remap_file_pages$auto(0x40, 0x2000fff, 0x0, 0xdc, 0x100000) open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001a40), r1) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8}]}, 0x1c}}, 0x90) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0xfffffffa, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) getsockopt$auto(r4, 0x84, 0xa, 0x0, 0x0) pread64$auto(r3, 0x0, 0xbfe7, 0x8) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x1, 0x5, 0x7181, 0x3ffde, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0x3, 0x9, 0x10007, 0x80, 0x2a0, 0x0, 0xa, 0x8, 0x202, 0x4, 0x84, [0x3, 0x8, 0x0, 0x5, 0x200, 0x2000, 0x0, 0x0, 0x70624ce7, 0x1, 0xfffffffffffffffd, 0x8, 0x8, 0x0, 0x6, 0x4, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10004000000, 0x1, 0x4, 0xfffffffffffffe00, 0x0, 0x0, 0x3, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x6, 0xffffffffffff7fff, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x8001, 0x1, 0x1, 0xc567]}, 0x1fe, 0xd) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r6 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/rc_rateidx_vht_mcs_mask_5ghz\x00', 0x40000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r6, 0x0, 0x0) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) madvise$auto(0xfffffffffffffff6, 0x5ed, 0x6) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffffffffffd02, &(0x7f00000001c0)) 1m53.862416056s ago: executing program 2 (id=173): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x8, 0x1) io_uring_setup$auto(0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x22240, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x121042, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x441, 0x0) write$auto(r2, 0x0, 0x9) read$auto_proc_uid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0x9b72, r1, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto(0x3, 0x541b, 0x10000000000402) fcntl$auto(r0, 0x10, 0x2) r3 = socket(0x2, 0x6, 0x0) setsockopt$auto(r3, 0x0, 0x10, 0x0, 0x17) r4 = socket(0x10, 0x2, 0x6) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) 1m47.692754163s ago: executing program 2 (id=186): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr9\x00', 0x480800, 0x0) mmap$auto(0x6, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000001) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) socket(0xa, 0x2, 0xfffffff7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x8000004, 0xfffffffffff7fffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x200000000268e, 0x2, {0x2100000000, 0x10000}, 0x5, 0x6, 0xffffffeffffffffd, 0x1007ffe, 0x0, 0x42f9, 0x84, 0xffffffffffff628e, 0x4, 0xdeb1, 0x800}) r1 = socket(0x2b, 0x1, 0x1) close_range$auto(0xffffffffffffffff, r1, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) unshare$auto(0x40000080) mmap$auto(0x9, 0x4, 0x4000000000df, 0x100000010, 0x401, 0xd82) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/dev_snmp6/veth0_vlan\x00', 0x90c00, 0x0) read$auto_proc_single_file_operations_base(r2, &(0x7f00000051c0)=""/103, 0x67) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x0, 0x0) r3 = fcntl$auto_F_GETFL(r0, 0x3, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, r0, 0x8000) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8a802, 0x0) ioctl$auto(r4, 0xffffffff, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101800, 0x0) acct$auto(0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x68a80, 0x0) unshare$auto(0x40000080) setsockopt$auto_SO_DEVMEM_DONTNEED(r4, 0xb379, 0x50, &(0x7f0000000240)='\x00', 0xf8f) ioctl$auto_SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000080)="a0cdd5b7d104cd6d4a93a05948465a2cb2d3f5ece0a5cfe5a7005874fa41ff871305d828b3eaf2a706560b8828d946e0b6be2cdba5baea4cffdf37aec08f7e409efa7b950a4cdf58a432a7dd4377f4833b1b9c28ee50aa2586f60ff25896d5e817c61d212641af25d7934a379b1fd1") waitid$auto_P_ALL(0x0, 0xffffffffffffffff, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x10000, 0xb30f, @_timer={0xffffffffffffffff, 0x40000, @sival_ptr=&(0x7f0000000100)="28fc7f3de762c2df46cf55e4f509bc4c706f60fba6a25415c0f28804f2395e5b4eda8e4a31c0032c65aa1c1f5ea41e2115fbea5a31369f177356396a4e46be9c084eb55aa02db814fc981c18a872b63332018f4f9308eec7de", 0xfffffffc}}}, 0x4, 0x0) fcntl$auto_F_GET_RW_HINT(r3, 0x40b, r5) sendfile$auto(0x1, 0x3, 0x0, 0xc01) epoll_create$auto(0x3e) 1m37.051937699s ago: executing program 2 (id=211): r0 = gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) process_vm_readv$auto(r0, &(0x7f0000000040)={0x0, 0x8}, 0x4, 0x0, 0x6, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/numa_maps\x00', 0x121240, 0x0) mmap$auto(0x0, 0xea5, 0x2000000000000df, 0xeb1, 0xffffffffffffffff, 0x0) prctl$auto_PR_MCE_KILL(0x21, 0xffffffffffffffff, 0x0, 0x3, 0x100003) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci4\x00', 0x10f301, 0x0) socket(0x2, 0x1, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000126584", 0x7) socket(0x2, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xf, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xffffffffffffffff, 0x948b, 0x4, 0x15f4da0a, 0x1, 0xffffffffffffffff, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0xd5, 0x2]}, 0x0) getsockopt$auto(0xffffffffffffffff, 0x8c, 0x6, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x4c7, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x8, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) ioctl$auto(0x3, 0x6f29, 0x10000000000402) getpgrp(0xffffffffffffffff) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1m21.946247353s ago: executing program 33 (id=211): r0 = gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) process_vm_readv$auto(r0, &(0x7f0000000040)={0x0, 0x8}, 0x4, 0x0, 0x6, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/numa_maps\x00', 0x121240, 0x0) mmap$auto(0x0, 0xea5, 0x2000000000000df, 0xeb1, 0xffffffffffffffff, 0x0) prctl$auto_PR_MCE_KILL(0x21, 0xffffffffffffffff, 0x0, 0x3, 0x100003) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci4\x00', 0x10f301, 0x0) socket(0x2, 0x1, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000126584", 0x7) socket(0x2, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xf, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xffffffffffffffff, 0x948b, 0x4, 0x15f4da0a, 0x1, 0xffffffffffffffff, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0xd5, 0x2]}, 0x0) getsockopt$auto(0xffffffffffffffff, 0x8c, 0x6, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x4c7, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x8, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) ioctl$auto(0x3, 0x6f29, 0x10000000000402) getpgrp(0xffffffffffffffff) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 57.084265609s ago: executing program 0 (id=311): mmap$auto(0x0, 0x1, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x894b, 0x38) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0x1a9701, 0x0) write$auto(r0, 0x0, 0x9) 56.368119846s ago: executing program 0 (id=313): ioctl$auto(0xffffffffffffffff, 0x4b49, 0xffffffffffffffff) 56.313420896s ago: executing program 0 (id=314): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001480)='/proc/self/net/rxrpc/locals\x00', 0x40, 0x0) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x120, r2, 0x32192137f4649d9, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [@nested={0xc, 0xfc, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @pid}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PUBLIC_KEY={0xe2, 0x4, "ef2501b0eacc405fd93ba7ef41dd97b48cc3a5cf4cc7a5c8fec079720fc2bdd3a0635fce798c776b469504a0efb4c3801b3973f20e54d6e2a909f77f981318f24bf82ff6f00950a93e97bfbd510ae0f4585da1d6d89eba8994aa9ec8a5f557db057aa82bbd03540f8851af4f3e0bb336f91886a5087bb78d0f64e9b9d8e3f79390950d6f3fe3161e97f11fcdccbf3c84118d0a346852cb0b6c3437b9a53a49e21878dbe8b20f9fe1f51d806aabdc281f1445bac9bf3b75dbed6352b317e33f7e96659a7bc12bbd0a35c045ea9a0230e9e7f96d35b8bd7cac828657401123"}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000811}, 0x4000010) io_uring_setup$auto(0xf, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x0, 0x4000000000df, 0xeb3, 0x401, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6b, 0x0, 0x7d, 0xfffffffffffffffd, 0xd4, 0x35800000000000, 0x4, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1007ffe, 0x0, 0x4, 0x81, 0xffffffffffff628e, 0xa747, 0x0, 0x804}) clone3$auto(&(0x7f00000000c0)={0x8, 0x5, 0x1000, 0x5, 0x3, 0x2, 0x1, 0x3, 0xc23, 0x8, 0xd}, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xfff, r0) rseq$auto(0x0, 0x8004, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) 53.658306881s ago: executing program 0 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_DISCONNECT(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf253000000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4040800) socket(0x18, 0x5, 0x0) 53.307565478s ago: executing program 0 (id=329): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/hci7:200/power/control\x00', 0x1, 0x0) mmap$auto(0xd, 0x2020009, 0x5, 0xeb1, r0, 0x8000) r1 = socket(0x2, 0x3, 0xa) connect$auto(r1, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) ustat$auto(0x20000801, &(0x7f0000000000)={0xbff, 0x2, "be5705f65205", "064885ca64ad"}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r0, 0x40084149, &(0x7f0000000100)=0x1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001ec0)='/dev/loop6\x00', 0x2a080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c0a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x54, r2, 0x1, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x6}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x7}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5, 0x4, 0xe9}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0xf7}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0xa3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x0, 0xdf, 0x10, 0xffffffffffffffff, 0x28000) close_range$auto(r1, r1, 0x1) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x1) madvise$auto(0x0, 0x80000001, 0x4000e) r6 = gettid() process_vm_writev$auto(r6, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x7, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) r7 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r7, 0xffffffff800a6f2f, 0x0) 52.656233657s ago: executing program 0 (id=331): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, 0x0, 0xc800) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x0, 0x0) ioperm$auto(0x3, 0x2, 0x2000000000000149) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, r0, 0x8000) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x2, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x20048800) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r3, 0x40085112, 0x3) (async) ioprio_set$auto(0x7, 0x0, 0xfff) unshare$auto(0x40000080) (async) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) ioprio_set$auto(0x1, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48020020}, 0xc, &(0x7f0000000180)={&(0x7f0000001980)={0x614, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_VENDOR_DATA={0xa2, 0xc5, "752f3cfd76b364ca0b5abc60798f6dad2f3c70e09999630d8f674216762a626360ed26a186b0b8ca8ab3ed7bb241a09420f788581f3e269fe2df27e4b56bfadc8d5777df06166e8c7dd9c8e0eab55b3d3ddffc53aa2e412b771c9c39b7de02e5e476c6ef30670d2b15bbb734e4b55f70365c7baebbd98b6cd614318b0f03e832a69265badebd1eb40e5f42897032327a72d6e92b9453957529bb7ebbe2fe"}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_STA_FLAGS2={0x39, 0x43, "4d577164ae86803d4f05c6c336ea77749a2d7315030a749f9f0f015e11331299a06b89ed37a77c0e35ca37c484525ffea8039bc61c"}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf8}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, "0f01e64a04e3aa9f90291853830d"}, @NL80211_ATTR_IE_RIC={0x4e9, 0xb2, "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"}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x614}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) 36.584302217s ago: executing program 34 (id=331): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, 0x0, 0xc800) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x0, 0x0) ioperm$auto(0x3, 0x2, 0x2000000000000149) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, r0, 0x8000) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x2, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x20048800) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r3, 0x40085112, 0x3) (async) ioprio_set$auto(0x7, 0x0, 0xfff) unshare$auto(0x40000080) (async) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) ioprio_set$auto(0x1, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48020020}, 0xc, &(0x7f0000000180)={&(0x7f0000001980)={0x614, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_VENDOR_DATA={0xa2, 0xc5, "752f3cfd76b364ca0b5abc60798f6dad2f3c70e09999630d8f674216762a626360ed26a186b0b8ca8ab3ed7bb241a09420f788581f3e269fe2df27e4b56bfadc8d5777df06166e8c7dd9c8e0eab55b3d3ddffc53aa2e412b771c9c39b7de02e5e476c6ef30670d2b15bbb734e4b55f70365c7baebbd98b6cd614318b0f03e832a69265badebd1eb40e5f42897032327a72d6e92b9453957529bb7ebbe2fe"}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_STA_FLAGS2={0x39, 0x43, "4d577164ae86803d4f05c6c336ea77749a2d7315030a749f9f0f015e11331299a06b89ed37a77c0e35ca37c484525ffea8039bc61c"}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf8}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, "0f01e64a04e3aa9f90291853830d"}, @NL80211_ATTR_IE_RIC={0x4e9, 0xb2, "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"}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x614}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) 7.215542593s ago: executing program 5 (id=460): mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = io_uring_setup$auto(0x85, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x8001, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/max_sectors_kb\x00', 0xa081, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$auto(r1, 0x541c, r2) (async) ioctl$auto(0x4000000000000c8, 0x400454d1, 0x3) ioctl$auto_VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) dup3$auto(r3, 0xffffffffffffffff, 0x0) (async) r4 = socket(0xa, 0x2, 0x3a) (async) r5 = socket(0x11, 0x3, 0x2) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) (async) select$auto(0x7, 0x0, &(0x7f0000000cc0)={[0x9, 0x1, 0x4, 0x8, 0x6, 0x14b, 0x6, 0x745ad93d, 0x9, 0x5, 0x7, 0x9, 0x6, 0x1, 0x6, 0x9]}, 0x0, 0x0) (async) getsockopt$auto(r5, 0x107, 0xb, 0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x9, 0x0, 0x1b) (async) ioctl$auto(r4, 0x7, r0) 6.808139195s ago: executing program 5 (id=461): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = memfd_create$auto(0x0, 0xb) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) pread64$auto(r1, 0x0, 0x8, 0x7ac8e6ba) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/tty/ptyw2/dev\x00', 0x2002, 0x0) write$auto(r2, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/tty/ttyw6/power/runtime_active_time\x00', 0x50000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.4/usbmon/usbmon17/power/runtime_active_time\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r4, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) r5 = socket(0x2, 0x1, 0x106) getsockopt$auto(r5, 0x11c, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) prctl$auto(0x34, 0x17, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0xd0800, 0x0) write$auto_fuse_dev_operations_fuse_i(r6, &(0x7f0000000440)="19000003d30000", 0x7) socket(0x9, 0x1, 0x9) rt_sigaction$auto(0xf43, &(0x7f0000000180)={0x0, 0x5, 0x0, {0xe00000}}, &(0x7f0000000340)={&(0x7f0000000200)=&(0x7f00000001c0)=0x4, 0x7, 0x0, {0x5c80}}, 0x8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x801, 0x0) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x80000000000000d, 0x1, 0x948d, 0x6, 0x15f4da0a, 0x1, 0x8, 0x1000000, 0xfffffffffffffffd, 0x3, 0xed3c, 0x5, 0x2]}, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) ioctl$auto_FIOQSIZE(r0, 0x5460, r0) 3.625462999s ago: executing program 6 (id=473): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x23c00, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x8) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x20, 0xf1, 0xb0, @raw=0xfffff03c}}) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, 0x0, 0xc040810) socket(0x2, 0x1, 0x106) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000a44cc37d6ee292bcc76dd474", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) ioperm$auto(0x800, 0x5, 0xd) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) 3.336199354s ago: executing program 5 (id=474): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x3, 0x6) eventfd$auto(0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) bind$auto(0x7, &(0x7f0000000000)=@in={0x1d, 0x0, @rand_addr=0x64010102}, 0x3e) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0) pread64$auto(r1, 0x0, 0x10000000000b, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2400, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6b, 0x0, 0x7d, 0xfffffffffffffffd, 0xd4, 0x4, 0x4, 0x0, 0x1, 0x368e, 0x2, {0x8, 0x10000}, 0x7f, 0x6, 0xfffffffffffffffd, 0x1007ffc, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0x0, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x2, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x0, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x7, 0x10000000007, 0x6d3f, 0x9, 0x2, 0xffffffffffffffff]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/fs/cifs/SecurityFlags\x00', 0x22040, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) read$auto_ftrace_event_filter_fops_trace_events(r0, &(0x7f00000001c0)=""/250, 0xfa) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socket(0xa, 0x801, 0x106) 3.317501415s ago: executing program 3 (id=475): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2a482, 0x0) socket(0x2, 0x801, 0x6) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0xc, 0xb, 0x0, 0x0, @u64=0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr2/queues/tx-0/xps_rxqs\x00', 0x22701, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000027c0)='H', 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) read$auto(0x4, 0x0, 0xfdef) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video44\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) pipe2$auto(&(0x7f0000000100)=r2, 0x6fca) fanotify_mark$auto(r0, 0x7ff, 0x5, r5, &(0x7f0000000380)='./file0\x00') statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x17, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x8, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x716, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffeff]}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3fc, 0x4}, 0xf3, 0x0, 0x0, 0x8) 2.408305087s ago: executing program 5 (id=477): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') ioctl$auto(0x3, 0x6f43, 0x38) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x4, 0xffd, 0x12, 0x3, 0x0) 2.405255278s ago: executing program 6 (id=478): mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d63882a712, 0x0) socket(0x2b, 0x1, 0x1) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/current_tracer\x00', 0x1a3642, 0x0) writev$auto(r0, &(0x7f0000000100)={0x0, 0x8}, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='<', @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x10000000000048, 0x0) r1 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, r1) 2.264745791s ago: executing program 4 (id=479): unshare$auto(0x40000080) (async) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r0, 0x110, 0x4, 0x0, 0x7) mmap$auto(0x0, 0x400005, 0x2df, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/midi2\x00', 0x82102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) read$auto(0x3, 0x0, 0x7) socket(0x18, 0x2, 0x0) (async) quotactl_fd$auto(0xffffffffffffffff, 0x876, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x5, 0xfffffffffffffffd, 0xd1, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x4000000002, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x6, 0xffffffffffff628e, 0x7fffffff, 0xdeb1, 0x804}) (async) socket(0xa, 0x6, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) (async) write$auto_proc_gid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$auto(0xffffffffffffffff, 0x0, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) fsconfig$auto(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 2.209550706s ago: executing program 3 (id=480): socket(0x2, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) (async) recvmmsg$auto(0x3, 0x0, 0x8, 0x0, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x2, 0xebf, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$auto(r1, 0xc0b45545, 0xffffffffffffffff) (async) mmap$auto(0xf369, 0x1, 0x4, 0x100000011, 0xe3d5, 0xf) (async) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) (async) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) read$auto(r2, 0x0, 0x1f3c) (async) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 2.083807379s ago: executing program 5 (id=481): open(&(0x7f0000000000)='./file0\x00', 0xa48c2, 0x4) socket(0x2, 0x801, 0x100) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x599200, 0x0) pipe$auto(&(0x7f0000000080)=0xffffffffffffffff) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) read$auto_stat_fops_per_vm_kvm_main(r0, &(0x7f00000000c0)=""/211, 0xd3) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(&(0x7f0000000300)='./file0\x00', 0x7efd, 0x3) write$auto(0x3, 0x0, 0x100082) clone$auto(0x6, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x603, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x401, 0x0) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) shmctl$auto_IPC_STAT(0x1, 0x2, &(0x7f0000000180)={{0x5, 0x0, 0xffffffffffffffff, 0x4, 0x8, 0x80, 0x800}, 0x7, 0x80000000, 0x800, 0x6, @inferred=0xffffffffffffffff, @raw=0x3, 0x8, 0x0, &(0x7f0000000040)="b057d39cbca4ac6619c8634604cc5e27a8ae7d637d90b4536e89eaa0efc1084c0ba836b58deade55915176862bbf475882b8ff1c76b4f1009348f6a3ece7aa2944a735f97142986aa4b7a5dd8b6b3146eb2fb37dc3f7a49ebc69c33f4d1ffde17193a514121a251a413a6878df020d7a8040107a9958dc49ab0c70c0eab550049393d2298d38b4c8582f3c7296ac9b1aa208fd684a1ffce1797824bacfd1c55e1588887c1d8bc3373fdf1f4cb41d7d17461441a529bdd22a73e9f42dbb6b7e7fe6c77a586634ad3aa5e93edc7a36d0f6aa2f1527aeb5906ff41b61246c80f6505729954679d1388620cfafbb32cf7998dda85a1503380b4214", &(0x7f0000000140)="d05acb81a38634dea141f57d642daeeaaa1b1cea5a1ef00bf4eafd69fef7cc09"}) getegid() close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba441b1011a4", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 1.467243652s ago: executing program 6 (id=482): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setxattrat$auto(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0, 0x5d8) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x9]}, &(0x7f0000000040)={0x0, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xa}, 0x9}, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x7111}, 0x400000000008) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/hugetlb.1GB.max_usage_in_bytes\x00', 0x1002, 0x0) read$auto(r1, &(0x7f0000000040)='%]!@.,\xcd[+]%!*,]&', 0x6) 1.46660564s ago: executing program 3 (id=483): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioperm$auto(0xfb, 0x5, 0xe) r1 = socket(0x2, 0x3, 0x6) r2 = geteuid() setreuid$auto(r2, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r1) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) close_range$auto(0x2, 0x8, 0x0) fadvise64$auto_POSIX_FADV_RANDOM(0xffffffffffffffff, 0x7, 0x1a, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x400000) 1.156233792s ago: executing program 4 (id=484): r0 = getsockopt$auto_SO_DONTROUTE(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x2) ioctl$auto(0xffffffffffffffff, 0x8, r0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) shmctl$auto_SHM_STAT(0x3f, 0xd, &(0x7f0000000280)={{0xa, 0xee00, 0xee00, 0x80000000, 0xfffff797, 0xfffffff7, 0x7fff}, 0xb277, 0xfffffffffffffc00, 0x9, 0x3, @raw=0x416a, @inferred=0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)="f5b17ae9c64a862aed8fc5367f61b085523c90e18c57a31cc4f94a654c1fd735411b74874679eeb5baf7d1e0c6c2600c68ae646ca3fc9c13b909eb2031316f757074ddc595ce4d7fa881d9974ecabc9af35bd7249ff45b369833378367e8a7bbeb55acab2ee66a43ad1f1f1ed66ae8c39f8083ea7ca9b2a4ec5f081caa62ebb2cfc8ca174e44cd409d3e1b", &(0x7f00000001c0)="89739f277a72a42cc1c1e04eb32df5100decf652fa48a9d854b62b73709163722d13be1c635d90001813761b6acfe6b7f879f85e9741079d1f5c4553efd151650faf2949a4c6af22af2996c6720138e13301fb4ed970d057902c4858cd4dd632e1e45c9c0dc999c78f0cb1da09d38ea7ff6f9cf68565dbf98c06cb993a6ae2c556b805a81ebc200f15e3139882067055a6a36128d15beb95b3af8b9762549e30ae21c5a2e053f55af7d97f4968b9b35c3b69b0d4fecf888057e8f875d4f7"}) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x244, r1, 0x201, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x84}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x5}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x200, 0x2b, 0x0, 0x1, [@generic="831d290aa6264f988d6d9476ab1e2642b0a27e1e5ab42657e77a9e5b54cb6201ee6d9f3880d2b15f9193aec2e17b75a64fc796202313b3ec5b611bed3181a89c22537cb93f37f726bad95dba080492ece101ecfc2909aab3f7962b2666ab1cd48d24971692f8d96839cb3cc5099629699062230a4e822b31da09be17012a31d53eca82d92f67997db94a6a73ca6db9910101dd0ea0d443058ae2b29221317191990d0947bc680be85c4cc0ffc0ef643b2fb2d82b8365e261656747d418968b109bf2", @nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x5a}, @nested={0x4, 0x72}]}, @nested={0x109, 0x1d, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @uid=r2}, @generic="2e1dfc8cf50759053ce19be1b79e9bdf57002e49a852cdc4599d2f84bc35df826b3ea4084fa30fe9e529b500d37925c38ad26da7da8caeaa760a47db372a7d52a2f97ee7c1878a07b1e566771b75a0048913786fc64bc300454f26819e85035c420412e33d1378336f5153d6684271f58fe1f5e37978de633fe87d430815ea9122b79084e7e26d4b559fed932416550211af1c48734943adc069fd4e91dca7017e347d8c93e9c226858a5b754e04b4113c4cb23ab1a27d13b9f330c0cd7131212aca56039bb97f38d1f897764b2b40d985677911a660df2576835915e83daa2a95c65343166d84700554a7f4b6", @typed={0x8, 0x57, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}]}, @generic="3cbc424c670adb2cc1e358d1656d4c1729a6bd06b9fd50540ab2b893bd09", @typed={0x4, 0x5e}]}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x8001}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}]}, 0x244}, 0x1, 0x0, 0x0, 0x40081}, 0x4000) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/netdevsim/netdevsim4/health/break_health\x00', 0x1, 0x0) io_uring_register$auto(r4, 0x0, &(0x7f0000000640)="ddb5a870fb5dc485218944142860324c90c8a73d71de28c2fd71a2d076e944e4d7f0ab578833b80659548af7b76f336b6811a13d65c6b0cd0c4cfa70eba9b82b097328c7eab249eea95089370847a094d00789a816a2a86dd2e15d58b75a1037171bfbed56808c6f3bd14737358b5152cc62f6fae252104c0c4e15e834682602fb50adee4faf88d4931a959745ca290de2ff63e60a4a954f659c8e9162e6ae8fdb36185696085cfdcfa0b65a54dfcc5cdea34965a991130672549426e754c6e13af613b086b70230688cb66c8108471b95cc7714c4bdd3bf", 0x3) r5 = socket(0x25, 0xa, 0x94) read$auto_media_devnode_fops_mc_devnode(r0, &(0x7f0000000740)=""/143, 0x8f) mremap$auto(0x7, 0x5a2c60b3, 0x9, 0x6, 0xffffffffffffce27) write$auto(r5, &(0x7f0000000800)='\x00', 0x7) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x3}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x9ed3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000940)=0x3ff) mmap$auto(0x3, 0x7, 0x4, 0x11, r0, 0x400) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000980)='/sys/kernel/debug/bdi/7:8/stats\x00', 0x100, 0x0) r6 = socket(0xf, 0x6, 0x5b72) move_pages$auto(r3, 0x7, &(0x7f0000000a40)=&(0x7f00000009c0)="ddad02878748729cdbaf0bd128d71d738a4c7f55b9ebf2537018f8a7403643bc189dc4ac1e54cbdd4afb7c95566ef9c9d0dbf62c7d172b31ce42b777f3be28edb32cd31fcd9e53a64a7942e3f45196a9e647f1f8968ea04af84a8ae03b63b07ac98d0f62196728759940", &(0x7f0000000a80)=0xe7c9, &(0x7f0000000ac0)=0x3, 0xe) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000b40), r0) sendmsg$auto_NFSD_CMD_LISTENER_GET(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r7, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20026040}, 0x4000000) r8 = semctl$auto_GETALL(0x2a1, 0x5, 0xd, 0x0) sendmsg$auto_IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001040)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001000)={&(0x7f0000000c80)={0x378, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x362, 0x1, 0x0, 0x1, [@generic="a2d985d5ed13", @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x170, 0x8f, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @pid=r8}, @typed={0x4, 0x3a}, @nested={0x4, 0xa0}, @typed={0xc, 0x127, 0x0, 0x0, @u64=0x1295}, @generic="89af289f5daed0c907995eca60ae05102d1e85b6d6b4346f289ea3289df3642b8c4afc8634c3854ff00a9c67f3ae73914d10d3e922ae04eb10f60439d74bf21412480c6747d2a3bda7281502076c8b3811a12edc217a71bbd2c32dd83e5676b2730d58b8ae79a5c1747659406cd661c8681fe844c1cf2e1aeb1d6511f4d5fea109dfa8e0528924dc17f09e4a7cd5a240e22753e6b0928e92bed05fa050506643c2089ef5dfd3ea00e1ee4940bdcee1cb699a39749fcc96e9368d1919c35d0b839dd24ed85f0150902dbf26edf7d4315b473580eefdfb2b27f1db94f88cb28f4f0502d3b3", @typed={0x8, 0xfe, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x47, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="cff63db0541b42497d531cf657ec571e161c4577fe2db9b27fde8c4d6e2db99bad16ee5c391f90f389db0f38c4e8418390b493ef4b5d51ad1d1a4a2f0232922661e465c0bf61fbc550991c5456e8f4756273c84f891aa0bf9bd90b2f"]}, @typed={0x9, 0x52, 0x0, 0x0, @str='nfsd\x00'}, @nested={0x1d2, 0x81, 0x0, 0x1, [@generic="1b4ccde85638a5f91c8e794f954d286e1ee99a53f91317ff969f32ce03471c244cc7", @generic="f9ce3387963d3eb1b0eec62b142571be6e04592e4a959198", @generic="850f5801d8fd6f93e19354b0db52808b501ac2da37c7869aee24d649fe1bf87d6e7d61a0a290acd7083955afe5d5432cc88b7614295ee6023999e1c37fcf9a43433cc540923579d3c7ba46f1a2329050b34830a71b0b771157858af223de12fd116fe1afdb6a524103b6f0248f14b1b5993b26d101b84ff29fe41650fc801daa6d4dee8e294eb87f9427b0e66865dea20215aa138be1", @typed={0x8, 0xe7, 0x0, 0x0, @fd=r6}, @generic="b943e839cd6f5ba665ceb3552e1eed62c862227d77995e244bf7887086aadac3f06a11fa673fe2fa9f440d41ef3136f7bd632a758a75d2649a41f3211010eea1c675f462a33e1f75265187e1013bfeb2270a2f320175eed9de57481afe79b07cb5b0668a5a0efa0ab7a54fe66ab731c7ccf1ca0725bd03bc5f1b6d4a81b36807cf7a98cebee4a563ab2fa2b7db235591d31e84e9976d417ec4985aa1052fcbfa0de9b406a14848de64835232c90bd71e61", @typed={0x7, 0x12, 0x0, 0x0, @str='/.\x00'}, @generic="064fe2a30beb19a4e9eff854d9f357ef029e5c90883e3c7700cf4b8a9dbf84e1ad92c3cc9b203de4605510febd23e8b0b2036fe750cd1078adaba79f0d"]}]}]}, 0x378}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000010c0), r6) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r5, &(0x7f0000001640)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001100)={0x4d4, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x4b7, 0x2, 0x0, 0x1, [@generic="55ffd9b112772b30ee0ab1721654d8ccb258426432afb0c2dd5fba4c7eef3a0fb4a279b617d45fb10c7d50b6b024f3c6603bc0fc9e32deb738f41ad4067f994a990e082cb0831ec7a53797c8164fa46ec45fa220464df865e58779e62a9feca8980a62b15374eb7a8be59cafcddc7ce189ea64a1c162b5453fa49188e02f456d75650d7e37d95a299b7f201057d97fba3d958c1cd23857a868d8b56ecdb08e98a886b719c99bf908378d610b2fe00d891c8d577b780ee3214c62d5b43e2a1ad25e9b593c556435b1c9b80264be9b00be8c1f44", @generic="2671d2cc453b6d0b12119b053df55330e6bfbca78c758e8d4cbf44682e6565410636dbb8314be4d3499c1d6fee64bec0549dea3f6dd5c1278f2f4bee5efdfd09009bb698e574638066d333f13a3d0477bdf1b20f96b10ae1", @nested={0x2f9, 0xf2, 0x0, 0x1, [@generic="f17d2618566a9e5a3523f0b9c0b874f3ccfc11aecc4c0efde20a08cc38c51ee8137ec6b52ec9d25aacd7ec9dded09cb840b21b69f4ce550e1e106ee235fb3e4ea37e47744b9f6d8fc74cf1046d2162fa235bffb32e04e3a78b42d034fc2ecb4b1b1d418e865c86dd6a8155", @generic="73afd3d0262ed51f2112a56a5502095be83f450aa2eb974e1bbd0d59b5143203f06ec0cde21409cab2744c944567d30e5a4041a0359bd00a16bc03e9b106b9349f676579526b672199c360dd04e2e92ea3f85986063bf867e476ea0783d879e601e2aab01cf5be24580d03a7d1a5f65051", @nested={0x4, 0xaf}, @typed={0xc5, 0xba, 0x0, 0x0, @binary="fc9d63af5e04a12ff360a2c86e19de60797b883db84d0d83f25b48fb52e07519e927f74cd76aacdb3f2b6db83aaee503cc25bf0f593638ba437691fe68569268870c378d5c88af7b3e8ae93630ec2b1d97470c25f27020eeb24cf5ffc7720ed4865f6a2efa2ba83c613b3701a2f5494c3d0d0f580f6097d934c594616ac1b052e5fea624b87aba7011eb59d972bdcec7e081d2661a56d08eeff7970c2187847582b2bc7f6f0efb53d795794eef134f8a6fd831ac26ef6e03532f6b981b20f0d965"}, @typed={0x8, 0xd1, 0x0, 0x0, @u32=0xedaf}, @generic="af283993905885be5feef8eba425dbbcb521d5caef54597d956268dd826fae53b53c862bd1f2e02aeb4056cc4a87e841c50d1cf782a2c73993b6e044c45dd77fd63156bbd922c9a8e0ed7ebf84e93c24a62cce9c7c9288d88cb50c2b08961aad012ee0cadd30f12a23bd185ad2ef5328ebf47fce29c559c2493b041a7a618bd43cf4174a9cc6470d255c7ebaf1e20b1e", @nested={0x4, 0x6}, @generic="5408331251c2965b3aef1a61db995cf71cd912271ff0792540ab7e1156588a0dc92b0cf5dcb29c1deea0e3d4fc8bcccd3d9b165496d223e2117a0970737b1db6d1b9d54ea341546d1664737c5aeb9cce9e4a88d9aaa74c604302b5e4c7cacce241bdde5b45dc0a35007e1ee2ffe16802b6d5b9cb252ade7343cbb8a40c1ea815497c8303ead4b907cdc92aa7cfb191c9ee95567122fbdb089d2ed4f25d857f2650a73e60875ea43b8a9a71bbc22df300cf"]}, @nested={0x8c, 0xd8, 0x0, 0x1, [@generic="ea1ece5749c45aa0eb96dc3486b22259e898992d40468cc3b76128c896cd76cd79f33ad06685902663bd71a840a6496dc22e9dab0ef5ab1541cf4addaa8c3ee43d54198f529af9b2a06a2d6cf8cb8f2b8c1e0c43e1f8548fbb1b4a49509a96dcd3891a4269b98778855c", @generic="c0d29715f7ff", @typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0xab}]}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4808) r10 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000016c0), r5) r11 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000001700), 0x280500, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(r6, &(0x7f0000001c80)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001740)={0x4d8, r10, 0x400, 0x5, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x104, 0xa, 0x0, 0x1, [@typed={0x14, 0x121, 0x0, 0x0, @ipv6=@remote}, @generic, @typed={0x4, 0x5c}, @nested={0xbf, 0x110, 0x0, 0x1, [@typed={0x5b, 0x1a, 0x0, 0x0, @binary="60f77351ec050320ed995ff366e71874bd22bdc99d2e757a08e481e82bcf2d828a2d203a980162aad88d4cec0ebf2846b9ded862a32289e905be7d9911927fe13acf98d22281225d6c52eb17a694e741560986924e45d7"}, @nested={0x4, 0xff}, @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@local}, @generic="6d702b3c3c7526d43b0222cdf7857811872a45a4e349110d4ec72bab2cec3b94007f5a0efbb0178e13727dbe0c3933ae43bc17c6f764e60fd8a7e159f6abf64905b2a1a30bbd605a1fae5ca475f00f", @nested={0x4, 0x9c}]}, @typed={0x1f, 0x130, 0x0, 0x0, @binary="a65c7dca1ed197f1be925da324438ff6f22082e7aba013c39bebbf"}, @typed={0x8, 0xcb, 0x0, 0x0, @fd=r11}]}, @OVS_VPORT_ATTR_OPTIONS={0x2c, 0x4, 0x0, 0x1, [@nested={0x14, 0x92, 0x0, 0x1, [@nested={0x4, 0xf4}, @nested={0x4, 0x13c}, @nested={0x4, 0xd}, @nested={0x4, 0x1}]}, @typed={0xc, 0xc4, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x110, 0x0, 0x0, @ipv4=@broadcast}]}, @OVS_VPORT_ATTR_NAME={0xd, 0x3, 'nl802154\x00'}, @OVS_VPORT_ATTR_UPCALL_STATS={0x36c, 0xa, 0x0, 0x1, [@typed={0x5, 0xd5, 0x0, 0x0, @str='\x00'}, @nested={0x2f5, 0x11e, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0xd2}, @generic="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", @typed={0x14, 0x64, 0x0, 0x0, @ipv6=@mcast2}, @generic="ad4b125cf599b9ed7aa962517aca9544ec7a79f1e98441a7d9b05fb2358765fdd33b8b0dc5ef27822c7f098c2934dfbe854e8643c574b4292e0fadf586dc20943fe5937a04f220cb69886b68dda64c8c589b59d66d45b96df9578cf2c41677e4004ac00560f329db27cf1ad61eab0f0104cbd3f0a4b373cf022f4664261c0b54f6e6bc7545b1be364cf84b47df5fd4688dac108cfbdf3d57b10226b5be40747d5babda144241127fd6807ca27481827f084479b857fc8b5af9f59f0936", @generic="c842d8f60b118dd92ed6a5954d595e4c45e6f1b86fae9759fbf7ac8f921611312b42dc9ad0efe68ffc41cc958f21c93880445a909d0d719bae1dc110d2dbaade90d2210d96788862d7ca41911b2a5d02d997b216f7dd039e37bd5db9d059aaf1f875f915f176be24c618ec04f276ba6c957f914acd0520a7c0c39c54ea62afd82a7c1886c433c1144a43144749b65c1fec49435ce484fc", @generic="8d0f29e68fa43852ff65058cf42428c943024a732287c4e1247498e3a14ed6b8483727c8bde0ca3b5814f68a246bb600513c75e1b30e8d7b3fb84c0a68a5ffa81992394c09121dee28451389bfe58a7cb35a2980edeef065fed4a7f438023e5235657a5adff1d42eca5b9335402843baf67885949ad2d256dce9a17fc29b"]}, @generic="f9ca53b66a3c19abff1ed1fa398b25e8e4582a441cee9834cd621bd9bfb792f402effee89129fa226d05a1e0188d6fe333d59d207c8bafb44c14c4fa5d0dbdcded644baf60f27e37e8f76e87c090aa60cb0a2fe6cd108214841a6552ab14c0d8", @typed={0x8, 0x114, 0x0, 0x0, @uid=r2}]}, @OVS_VPORT_ATTR_OPTIONS={0xe, 0x4, 0x0, 0x1, [@generic="6bfea539f59d72764753"]}, @OVS_VPORT_ATTR_NAME={0x7, 0x3, '[^\x00'}]}, 0x4d8}}, 0xc010) r12 = prctl$auto_PR_PAC_GET_ENABLED_KEYS(0x3d, 0x7, r3, 0x9, 0xfffffffffffffffd) r13 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000001d00), r0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000001d40)={'wg1\x00', 0x0}) sendmsg$auto_IEEE802154_LLSEC_ADD_KEY(r12, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x2c, r13, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x60}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c8}, 0x40) 992.083706ms ago: executing program 4 (id=485): r0 = creat$auto(&(0x7f0000000000)='./cgroup\x00', 0x721e) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) write$auto(r0, &(0x7f0000000280)='\'\x00', 0x3) shutdown$auto(r0, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24010008}, 0x240010d1) sendmsg$auto_NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x168, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0xf9}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_TID_CONFIG={0x138, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x9}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HE={0x4c, 0x5, "ae9d10ce313c03ae1df2be3434f3eedcac78cc84366845a71fac74a4a853cdc7cc6713040e4c3dd0ab6ddbf717582ba86964168d39603dd50041ecf606ea431909a9fca2c292d482"}, @NL80211_TXRATE_GI={0x5, 0x4, 0xd}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7f}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xf}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4}, @NL80211_TXRATE_LEGACY={0xa, 0x1, "c0921e88b658"}, @NL80211_TXRATE_LEGACY={0x15, 0x1, "f2234507c1f23995dc1a78c945f92293cc"}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x29}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x5}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x4000c41) creat$auto(&(0x7f0000000000)='./cgroup\x00', 0x721e) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) write$auto(r0, &(0x7f0000000280)='\'\x00', 0x3) (async) shutdown$auto(r0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24010008}, 0x240010d1) (async) sendmsg$auto_NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x168, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0xf9}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_TID_CONFIG={0x138, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x9}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HE={0x4c, 0x5, "ae9d10ce313c03ae1df2be3434f3eedcac78cc84366845a71fac74a4a853cdc7cc6713040e4c3dd0ab6ddbf717582ba86964168d39603dd50041ecf606ea431909a9fca2c292d482"}, @NL80211_TXRATE_GI={0x5, 0x4, 0xd}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7f}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xf}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4}, @NL80211_TXRATE_LEGACY={0xa, 0x1, "c0921e88b658"}, @NL80211_TXRATE_LEGACY={0x15, 0x1, "f2234507c1f23995dc1a78c945f92293cc"}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x29}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x5}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x4000c41) (async) 845.012048ms ago: executing program 4 (id=486): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/msr\x00', 0x80080, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/profile\x00', 0x2, 0x0) setresuid$auto(0x2, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x14) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000540)='/dev/cpu/0/msr\x00', 0x0, 0x0) ioctl$auto_X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000bc0)=[0x7, 0x80083, 0x9, 0x4, 0x1000, 0x7, 0x777, 0x9]) pread64$auto(r0, &(0x7f0000000000)='/sys/module/block2mtd/parameters/block2mtd\x00', 0xfffffffffffffffd, 0xffffffff) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="72010000", @ANYRES16=r4], 0x1ac}, 0x1, 0x0, 0x0, 0x4c040}, 0x4004) sendmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x60da, &(0x7f00000002c0)={0x0, 0xc4}, 0x8001, 0x0, 0x1, 0x4a0}, 0x7}, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x4000000) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c0d4}, 0x20000013) 775.636481ms ago: executing program 6 (id=487): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = getsockopt$auto_SO_BPF_EXTENSIONS(r1, 0x6, 0x30, &(0x7f0000000080)='\xd5\x00', &(0x7f00000000c0)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r5, 0x301, 0x70bd2c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x11, 0x2, 'ovs_datapath\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4019}, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES32=r3, @ANYRES64=r5, @ANYRES64, @ANYRES8=r4, @ANYRESDEC=r2, @ANYRES16=r0], 0x24}}, 0x80) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$auto_SO_BPF_EXTENSIONS(r1, 0x6, 0x30, &(0x7f0000000080)='\xd5\x00', &(0x7f00000000c0)=0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r5, 0x301, 0x70bd2c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x11, 0x2, 'ovs_datapath\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4019}, 0x0) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES32=r3, @ANYRES64=r5, @ANYRES64, @ANYRES8=r4, @ANYRESDEC=r2, @ANYRES16=r0], 0x24}}, 0x80) (async) 642.290578ms ago: executing program 3 (id=488): r0 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x4200, 0x0) ioctl$auto_BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000040)={@raw, "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"}) r1 = getsockopt$auto_SO_TIMESTAMP_NEW(r0, 0x9, 0x3f, &(0x7f0000001040)='/sys/devices/virtual/bluetooth/hci7/power\x00', &(0x7f0000001080)=0x9) ioctl$auto_SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f00000010c0)="d13131bcf182a438f3aad09e1397c2c3934b388143b870f599cbb8c87238684daffa661262bdc718dc01e1") r2 = semctl$auto_SETVAL(0x9, 0x0, 0x10, 0x1) r3 = prctl$auto(0x8, 0x1, r2, 0x2, 0x100000000) r4 = mq_open$auto(&(0x7f0000001100)='\x00', 0x1, 0x5, &(0x7f0000001140)={0x5, 0x4, 0x200, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000011c0), r4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001240)={'pimreg\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r3, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x78, r5, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x61}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}]}, @ETHTOOL_A_PLCA_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x30000000}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r8 = clone3$auto(&(0x7f0000001380)={0x8, 0xffffffffffffffc0, 0x769, 0x5, 0x8000000000000000, 0x0, 0xff, 0x0, 0x8, 0x1, 0x8}, 0x0) r9 = prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0x7ac, r8, 0x8, 0x8) r10 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x80401, 0x0) write$auto_drm_edid_fops_drm_debugfs(r10, &(0x7f0000001440)="c3309485f50dca8e402189824beec52b8674a4cc5032fc4b7b1c4811ee9a0704524459ac84c1e4f3b797bef6eb807ad4d97894b9248a679b0fe0bddf3b7ab0d72f", 0x41) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001500), r3) sendmsg$auto_BATADV_CMD_TP_METER(r4, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x44, r12, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ROUTER={0xa, 0x1d, @random="03c49f31f6ad"}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x344}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x800) close_range$auto(r10, r9, 0xd) r13 = bpf$auto(0x2, &(0x7f0000001640)=@enable_stats={0x3}, 0xfffffffb) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000001700), r3) r14 = socket$auto(0xff, 0x2, 0x3) getsockopt$auto_SO_SELECT_ERR_QUEUE(r14, 0x5, 0x2d, &(0x7f0000001740)='\x00', &(0x7f0000001780)) mmap$auto(0x2, 0x7, 0x1, 0x11, r11, 0x9) getrandom$auto(&(0x7f00000017c0)='-{^^.\x00', 0x7f, 0xfffffe00) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000001840)={'ip6tnl0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r15, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x31028426}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x8c, r5, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x4}, @ETHTOOL_A_COALESCE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6c}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r13, 0x4048587b, &(0x7f0000001d00)={{r0, &(0x7f00000019c0), 0x8, &(0x7f0000001a00)="30a0eaf77f22193369e7783291985725baf72049239614187a0f93547f06a8972fe434af4933f3a8adfde5709ab2e6bb073fc5f18357fc195f97f43b59a5bd9df0f818ff7a6e9acacffa50b588028c268556af15ba84200d720940e8ceee1c8c02a2322ea33e6692da92d5659224aefd061b209883efae3d1c07ced7d6cd1b73a883dfa0262a600bbddff3d53fe8d5b36f428eb36da7fa699e52e2cb0991901754ad5e2465a40c8c5a9a929e40c19c", 0x4, &(0x7f0000001ac0)="9ad8b8fcdd96fa241770f3d7d91b2c3e5ac18ba5", &(0x7f0000001b00)=0x2}, 0x2, &(0x7f0000001cc0)={0x2, 0x1, &(0x7f0000001b40)="431794af174c613495681a52aec070e805652333a8f38ef0d0af0150ef7676b182ae5a7f72d5548ee8bd7598781b7a04fad4bf49ce6daaadc1bb2be5b1ef34265a385a81c2928d9d388cdc59462c35bff9c48d8af16d846eb4ccd5616689cae48b03bbda7b0b15923826d31b5a096056eb60a447814c5c2c3ca1160a46a272bfd0", &(0x7f0000001c00)="65303c59ac0f63dc3d8f1c677113805d2356c1aa3c5c8800674d53d22762a004c9150f4f85fb6db9c2474e51c9790c06a4c4b47009e1eb9952eaf043ed49137ef4cac941956de5bc0325469af3c05f178f3fd8e1a8c14143f69aea2643adccf95ce136762086b5fbf7cf0c72cbc84f7a668536a39c5c651c4647c33cea6129c58602dbcff3776f69ffc6e3b622d8a12baa78f4f4ab2b04f64518ce28ce2b5d32b7547320e6de32ee6ec3cbaf59a915d9b7b59089b5", 0x8, 0x800}}) openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0xa80, 0x0) 584.223194ms ago: executing program 4 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x118, 0x0, 0x102, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xec, 0x8, 0x0, 0x1, [@typed={0xe8, 0x7b, 0x0, 0x0, @binary="9c787343e45d063e01fa33ce6466ccf26b1da096fcb98cc42187f064b74a3d505368e25dfc9ca97d53251fc64f7c7149a62e17f2bd35861ee4a7332a4933bce1d1db231e7397acc6621718f20f2e1909925d2efe72e3101db08bfcc0299c931358a8fd771fa8c95f06084fb7daccb3945c311eb02ce775d337d32451f8db52ddb8fe09f213925b438e885bf285bf500896cdee4cfb595e38cbc1162f172decce0d33417f41f909dbab00f852af5a3651089a13ee586dbb0304e12a51254e0237d461d07ed0a60d79e232b2f1a2b03fcc30dfd1d80ef59ac0587766d5e77feb1f143931f4"}]}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5}, @NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0x6}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x20004081) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000041c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) 583.895507ms ago: executing program 5 (id=490): mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d63882a712, 0x0) socket(0x2b, 0x1, 0x1) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/current_tracer\x00', 0x1a3642, 0x0) writev$auto(r0, &(0x7f0000000100)={0x0, 0x8}, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='<', @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x10000000000048, 0x0) r1 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, r1) 527.717933ms ago: executing program 6 (id=491): mmap$auto(0x0, 0x400005, 0xdf, 0x9b74, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48011}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x20400, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) open(0x0, 0x22240, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.6/usb7/ep_00/power/autosuspend_delay_ms\x00', 0x80800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000180)=""/187, 0xbb) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000240), 0x4803, 0x0) poll$auto(&(0x7f0000000000)={r3, 0xe7f1, 0x1723}, 0x8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r4, &(0x7f0000000080)=""/4096, 0x1000) 415.644727ms ago: executing program 3 (id=492): mmap$auto(0x0, 0x400005, 0xdf, 0x9b74, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48011}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x20400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) open(0x0, 0x22240, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.6/usb7/ep_00/power/autosuspend_delay_ms\x00', 0x80800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/187, 0xbb) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000240), 0x4803, 0x0) poll$auto(&(0x7f0000000000)={r2, 0xe7f1, 0x1723}, 0x8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r3, &(0x7f0000000080)=""/4096, 0x1000) 299.925357ms ago: executing program 4 (id=493): r0 = socketcall$auto_SYS_RECVFROM(0xc, &(0x7f0000000000)=0xfffffffffffffff9) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) setsockopt$auto_SO_DEVMEM_DONTNEED(r1, 0x4, 0x50, &(0x7f0000000080)='%\\:\x00', 0x5) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd4, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_FLAGS2={0xbd, 0x43, "fae5678f35401c441b78a4591f89f9cc34a98b5eb305997d7fcb2bed100a011666c69694920d368bd458a74e43abe275ba20663f558cfbaba0b57cb192659f5ff5a520772da97ac920cc60af03c15f296465923384a436adbe72b288827e07e6ef555fc614ea13e5edc9e63d205369e72e878c043913825657d39a8ce0c9ce0ec020dd13c23c8be50d1d6e7face4357d1a4568d4fe411980da4e048444e5778e216a8f51807cf9814927a960e29778b05920ce5741b28f8b34"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000}, 0x20004894) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x689a3645d22185b1}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HWSIM_ATTR_ADDR_RECEIVER={0x2d, 0x1, "f7c813df4600e64ea4c3eec63fed179f7a9b563df504d4bd033af28977f0c3cdf54c27d355c59a2869"}, @HWSIM_ATTR_TX_INFO_FLAGS={0xb6, 0x15, "6d1e8f3eb048d7b4459a7d7d4d97338835813c58c3cf0cc2f8e78237581a56ade2f9b471a719eb73e657f165fa8562c9f2ef6439c50adca7c74748837115cebfc02623019671d02383636146e50f1af6969b954cedb25455b7bc7c1f6e92886183808f1c1a35f39dd3c21217d78521b97033ea77f2156dc3a37c2f828277a4629319c18f670d99d0359e7fa154093da3c8d3b4655da9a7ba0ef6b87ba30634ecd97e63f75bd5e48e11476f22098e57223a4e"}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_NO_VIF={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x14}, 0x2000c000) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f00000004c0), r0) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000500)='/proc/swaps\x00', 0x8002, 0x0) sendmmsg$auto(r4, &(0x7f00000016c0)={{&(0x7f0000000540)="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", 0x9, &(0x7f00000015c0)={&(0x7f0000001540)="3897cadda160d838d3ccaa8c35e3bd75e74574877967ff7108d0bdb80ec82d9ecd856e7566cb7e826723e0a68a8a4cf2198a87abd020debe3bb37fd566188e86aa002a5f8a05d0db84a4c970203211a59f0b43", 0x4}, 0x6, &(0x7f0000001600)="9dfc4440e8b5f5806dc72dcd6c518ebad3f90c947fcd5544365acd394b1bf182a7ea7e2fd216890498760dd50a199ae4efdd70e708d5ed3c20f2fb462e34c97dfd15281cdd453b97baba332653774ce5c2a04ae4f420f42e345f7a68bcbffc0ee0e04465d4e2bd406d831c2c1eb2216852191be8c15cb25146e642239b28a005d1", 0x7f, 0x9}, 0xb72da7e5}, 0x7111, 0x3) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001700), 0x2800, 0x0) bind$auto(r0, &(0x7f0000001740)=@phonet={0x23, 0x7f, 0x24, 0x8}, 0x6) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000017c0), 0xffffffffffffffff) r7 = clone$auto(0x1, 0x1, &(0x7f0000001800)=0x6c90a0b1, &(0x7f0000001840)=0x5, 0x8) r8 = getpid() sendmsg$auto_NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000001d40)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x44082000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001880)={0x460, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xffffffff}, @NL80211_ATTR_BEACON_HEAD={0x35, 0xe, "496e1fbfdb5221cf97b70fa58516c9179fb11d0b8120d58803758e422973613f617df857f513f3a973cb0a9f1c12af9073"}, @NL80211_ATTR_MAC_ADDRS={0x3fa, 0xa6, 0x0, 0x1, [@generic="8b579e53b4236df7d20a98553982a2475121d4aa5d6147c4441038b9b3caf1c033fd29242fe2646875779d98562b96c8a21f035a84e51401f8bba1914da80dc2fc0f8f55b49c91cf8adcfccfc4a634e30c0cfbbbb6ef4710fd95088d54281370a45a7e9dbfa82d9332a1ef779c3bea0e24e3beab14863ee670e962182711e0e12fda7f4a5d1154ddc9cc01d0f82032505f702d6f9a788e039851b4e6c7ec524dc129cd8ce79efe689ead2e0c14d9", @typed={0x14, 0x100, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="1ccada", @typed={0x8, 0x39, 0x0, 0x0, @ipv4=@broadcast}, @generic="d4bb11d866d9cd9fb896cde039969e7db83fa3b6814a3412094669c7ce3cd160938e9ef700571c1ce903f68a7951f7b0f46d81ae7158794e2ff91ecb202074fcb2a603a4eab950f88c887ba1e4a87c3947ebfbb7e986e07bc4cb7337fa3afcff4d64550e805e018405c312ffa0b31ade7ff5d0c9ae2aee495ab7c9c27c0814deb54c7d46b3b9c62912416b762472ae441fde754df3280bd0b112de9ac9dd5a4efb84ba0a5f5e989d606aca00cfb0aedfeb4141aa69d51e16a53da8925107fa43e9523798e76d3c54fd795486c78a5f69353c48c7c9354e31a2db1b185b", @nested={0x52, 0x120, 0x0, 0x1, [@generic="961dff2ff5b09af6eea69c0caab6f7af88906871346692ff9c2737bcecc923519559e560ade273d0dfcb7ee42e7f7120a0c1dde5d537f4a5588cbcb3880300f69087a38f96ebd5c99303888a1701"]}, @typed={0xe6, 0x5b, 0x0, 0x0, @binary="f11265bc187eb4cf736ae31b728255c5b9510808310d926afb472e56536c1b8c7189560907f5e6983a9b79f8a55a68022ad1cd8fa5e024ae3126ea63e826418d07d97aa0f80a7ee6e900e7e84da2b7c95600184ae6ebc8d86c37f35558972917e4e83ecddb370d7d2e46d0c6991d1036f6273abc64c44ee6e3b1a79a8dd38f5376981b2534935d2fe3d78420e522fc3f1b514860f9350b750f9b5cff3dc99defdda6f28c2179dac08876d41582137ef425cdeb3254c814b633970ae051bfc41d8b97268907dac68389435ccc9ef72fdd1f1a82c1c3c880d83ce60b2194b245d181cd"}, @nested={0x110, 0x3d, 0x0, 0x1, [@generic="9146dacc5ff13d517f3c5ac8e9be7af53687cbde400c", @typed={0x8, 0x44, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x125, 0x0, 0x0, @pid=r8}, @generic="5ae5b28debf18c70194f8da0c688d07155a57ede511080b0f860ad0a41123148792d93351ba89d6e377b2cfdcf63650101c2309c6b5781b941bff2d2eff70f6543c18cd19d2cd5b505456389cc70597d2354ba3b758abcc5faad58056abb43b81bd77159cf8d73dc8cc22d56fc5597c46512834b21fb299a3ba13d6432992ccd7ecc2caf0337df9c197417fc1649900b37a61b476a5b7c7b1fb26f0f6586a9", @generic="332e353fd4905387be339175cf7df9e72bf81c49057ee06e02859ff90045d20b9d6501f6b458e2db6cf2b50c170a9e49310a1c117967a0b3f9ca7cbbe77e1dafd28c2aad92f266"]}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}]}, 0x460}, 0x1, 0x0, 0x0, 0x800}, 0x805) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001d80)={'veth0_to_bridge\x00', 0x0}) r10 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000001dc0), 0x140, 0x0) r11 = bpf$auto(0x2, &(0x7f0000001e00)=@bpf_attr_3={0x400, 0x6, 0x40, 0x4, 0x0, 0x3, 0x0, 0x6, 0x9, "19c2ace48893bc60eadc6eddf8652ba9", r9, 0x7, r5, 0x8, 0x7fffffff, 0x7f2, 0x5, 0x7, 0x7e11, 0x5, @attach_prog_fd=r4, 0x9, 0x2, 0x0, 0x5, 0x5, r10}, 0x6) pread64$auto(r10, &(0x7f0000001ec0)='[/-$#.g\x00', 0x800, 0x8) r13 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f40), r3) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x54, r13, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_BLA_OWN={0x4}, @BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @random="0ab05a46ebdf"}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x5a}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffff7f0}, @BATADV_ATTR_MCAST_FLAGS_PRIV={0x8}]}, 0x54}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002080)={'veth0_virt_wifi\x00'}) r14 = open$dir(&(0x7f00000020c0)='./file0\x00', 0xa002, 0x100) dup2$auto(r3, r14) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002100), 0x80000, 0x0) r15 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002180), r11) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r11, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x2c, r15, 0x502, 0x70bd2b, 0x25dfdbfc, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0xe}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r9}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$auto_SO_WIFI_STATUS(r11, 0x9, 0x29, &(0x7f0000002280)='\x00', 0x6) prctl$auto_PR_RISCV_SET_ICACHE_FLUSH_CTX(0x47, 0x2, r8, 0x6, 0x8) 193.85124ms ago: executing program 6 (id=494): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mbind$auto(0x0, 0x5, 0x6, 0x0, 0x8, 0x3) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) madvise$auto(0x0, 0x2000040080000004, 0xe) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$auto(0x6, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400408, 0x2000000df, 0x9b72, 0x2, 0x80000000008000) (async, rerun: 64) ioprio_set$auto(0x3, 0x0, 0x4b34) (async) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) msgrcv$auto(0xffee, &(0x7f0000000000)={0x4, 0x7}, 0x3ff, 0x6, 0x9) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) (async, rerun: 64) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x1000000003, 0xeb1, 0x8, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye4\x00', 0x2401, 0x0) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) madvise$auto(0x0, 0x7fffffffffffffff, 0x16) (rerun: 64) mmap$auto(0x4, 0x0, 0x6, 0x140eb2, 0x402, 0x300000000000) (async) close_range$auto(0x0, 0xfffff004, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004881}, 0x800) (async) shmctl$auto(0x0, 0xc, &(0x7f0000000180)={{0x7, 0x0, 0xee01, 0x4, 0xa, 0x100, 0xfff9}, 0x0, 0x80d, 0x3fc, 0x6, @raw=0x9, @inferred, 0x4, 0x0, 0x0, 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) 0s ago: executing program 3 (id=495): mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/force_wakeup\x00', 0x88f42, 0x0) write$auto_force_wakeup_fops_hci_vhci(r1, &(0x7f0000001780)='T', 0x1) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x8, 0x0, 0x2, 0x7}, 0xfff}, 0x5, 0x6da) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. [ 65.364713][ T5820] cgroup: Unknown subsys name 'net' [ 65.536035][ T5820] cgroup: Unknown subsys name 'cpuset' [ 65.544478][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.945295][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.728727][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.738834][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.746500][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.755307][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.762577][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.770947][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.779355][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.779429][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.788751][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.795298][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.802337][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.808729][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.816152][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.822988][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.830620][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.839828][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.846233][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.851360][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.861676][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.903598][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.911117][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.919446][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.927270][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.934837][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.112672][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 69.274012][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.281946][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.290725][ T5834] bridge_slave_0: entered allmulticast mode [ 69.298152][ T5834] bridge_slave_0: entered promiscuous mode [ 69.309616][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.316836][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.324481][ T5834] bridge_slave_1: entered allmulticast mode [ 69.331465][ T5834] bridge_slave_1: entered promiscuous mode [ 69.377401][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 69.388876][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.412183][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.492893][ T5834] team0: Port device team_slave_0 added [ 69.513684][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 69.528510][ T5834] team0: Port device team_slave_1 added [ 69.553787][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 69.599950][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.607080][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.634174][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.664659][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.671636][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.697603][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.710179][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.717816][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.725435][ T5829] bridge_slave_0: entered allmulticast mode [ 69.732010][ T5829] bridge_slave_0: entered promiscuous mode [ 69.760665][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.767905][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.775383][ T5829] bridge_slave_1: entered allmulticast mode [ 69.781946][ T5829] bridge_slave_1: entered promiscuous mode [ 69.844614][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.851757][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.859599][ T5832] bridge_slave_0: entered allmulticast mode [ 69.866488][ T5832] bridge_slave_0: entered promiscuous mode [ 69.877379][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.909941][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.917255][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.924539][ T5832] bridge_slave_1: entered allmulticast mode [ 69.931102][ T5832] bridge_slave_1: entered promiscuous mode [ 69.939072][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.957127][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.964406][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.971536][ T5839] bridge_slave_0: entered allmulticast mode [ 69.978450][ T5839] bridge_slave_0: entered promiscuous mode [ 70.022410][ T5829] team0: Port device team_slave_0 added [ 70.028530][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.038268][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.045535][ T5839] bridge_slave_1: entered allmulticast mode [ 70.052319][ T5839] bridge_slave_1: entered promiscuous mode [ 70.072560][ T5834] hsr_slave_0: entered promiscuous mode [ 70.078818][ T5834] hsr_slave_1: entered promiscuous mode [ 70.088349][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.099509][ T5829] team0: Port device team_slave_1 added [ 70.131897][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.145682][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.164341][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.195901][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.202857][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.229979][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.243191][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.250157][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.276866][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.314389][ T5839] team0: Port device team_slave_0 added [ 70.324344][ T5832] team0: Port device team_slave_0 added [ 70.350934][ T5839] team0: Port device team_slave_1 added [ 70.366573][ T5832] team0: Port device team_slave_1 added [ 70.398351][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.405581][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.431643][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.472526][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.479702][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.505965][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.524910][ T5829] hsr_slave_0: entered promiscuous mode [ 70.531006][ T5829] hsr_slave_1: entered promiscuous mode [ 70.538363][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.546199][ T5829] Cannot create hsr debugfs directory [ 70.556626][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.563683][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.589683][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.602206][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.609346][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.636754][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.731504][ T5839] hsr_slave_0: entered promiscuous mode [ 70.738093][ T5839] hsr_slave_1: entered promiscuous mode [ 70.744641][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.752211][ T5839] Cannot create hsr debugfs directory [ 70.770379][ T5832] hsr_slave_0: entered promiscuous mode [ 70.776525][ T5832] hsr_slave_1: entered promiscuous mode [ 70.783747][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.791356][ T5832] Cannot create hsr debugfs directory [ 70.908613][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.930603][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.934818][ T53] Bluetooth: hci0: command tx timeout [ 70.937745][ T5837] Bluetooth: hci2: command tx timeout [ 70.947214][ T5831] Bluetooth: hci1: command tx timeout [ 70.987898][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.014111][ T5831] Bluetooth: hci3: command tx timeout [ 71.020054][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.109983][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.127781][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.137655][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.157612][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.241338][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.261409][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.291329][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.299160][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.324391][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.360371][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.372885][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.387737][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.400018][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.407427][ T4399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.422214][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.429353][ T4399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.439992][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.451409][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.532805][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.570384][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.597385][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.604552][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.630811][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.637978][ T4399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.732672][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.747978][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.818713][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.826920][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.854752][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.882158][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.910223][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.934534][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.941704][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.967173][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.979714][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.991045][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.998263][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.030497][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.037632][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.048715][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.055848][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.112775][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.144316][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.151534][ T5834] veth0_vlan: entered promiscuous mode [ 72.198105][ T5834] veth1_vlan: entered promiscuous mode [ 72.307875][ T5834] veth0_macvtap: entered promiscuous mode [ 72.332519][ T5832] veth0_vlan: entered promiscuous mode [ 72.358069][ T5834] veth1_macvtap: entered promiscuous mode [ 72.367887][ T5832] veth1_vlan: entered promiscuous mode [ 72.422962][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.449733][ T5832] veth0_macvtap: entered promiscuous mode [ 72.464036][ T5832] veth1_macvtap: entered promiscuous mode [ 72.476805][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.486913][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.508983][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.518060][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.529589][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.538665][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.567536][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.579311][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.592299][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.602674][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.614026][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.625210][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.654201][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.662941][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.672478][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.681880][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.698328][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.751785][ T5829] veth0_vlan: entered promiscuous mode [ 72.798866][ T5829] veth1_vlan: entered promiscuous mode [ 72.842273][ T5839] veth0_vlan: entered promiscuous mode [ 72.844537][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.861420][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.889671][ T5839] veth1_vlan: entered promiscuous mode [ 72.915658][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.932456][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.968422][ T5829] veth0_macvtap: entered promiscuous mode [ 72.999506][ T5829] veth1_macvtap: entered promiscuous mode [ 73.014385][ T5831] Bluetooth: hci1: command tx timeout [ 73.014406][ T5837] Bluetooth: hci0: command tx timeout [ 73.014439][ T5837] Bluetooth: hci2: command tx timeout [ 73.020187][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.042600][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.051265][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.057401][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.069464][ T5839] veth0_macvtap: entered promiscuous mode [ 73.093863][ T5837] Bluetooth: hci3: command tx timeout [ 73.102421][ T5839] veth1_macvtap: entered promiscuous mode [ 73.144644][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.166863][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.179312][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.190928][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.204694][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.215818][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.227120][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.227553][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.257618][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.268267][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.279967][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.305567][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.318206][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.328279][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.343586][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.365288][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.383665][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.410645][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.431387][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.456113][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.468315][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.481866][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.502333][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.524742][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.539221][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.558322][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.569905][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.581752][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.593562][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.604484][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.616225][ T5896] Zero length message leads to an empty skb [ 73.616406][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.631894][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.641278][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.820331][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.845181][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.872614][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.884085][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.927562][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.957848][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.978445][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.017499][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.457519][ T5917] cougar: G6 mapped to space [ 74.739090][ T5919] program syz.3.8 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.780030][ T5919] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 75.093347][ T5837] Bluetooth: hci1: command tx timeout [ 75.093459][ T53] Bluetooth: hci0: command tx timeout [ 75.098782][ T5837] Bluetooth: hci2: command tx timeout [ 75.175760][ T5831] Bluetooth: hci3: command tx timeout [ 76.122957][ T5938] can: request_module (can-proto-3) failed. [ 76.190841][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.398377][ T5948] lo: entered allmulticast mode [ 76.510911][ T5950] lo: left allmulticast mode [ 76.789022][ T5954] mmap: syz.3.15 (5954) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.175034][ T5831] Bluetooth: hci0: command tx timeout [ 77.183137][ T5831] Bluetooth: hci2: command tx timeout [ 77.189580][ T53] Bluetooth: hci1: command tx timeout [ 77.254361][ T5831] Bluetooth: hci3: command tx timeout [ 77.801770][ T5967] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.923179][ T5985] can: request_module (can-proto-3) failed. [ 79.349045][ T5994] can: request_module (can-proto-3) failed. [ 79.679340][ T6014] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 80.113497][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 80.256870][ T5831] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 80.256914][ T5831] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 80.272668][ T5831] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 80.272734][ T5831] Bluetooth: hci3: Unknown advertising packet type: 0x40 [ 80.282136][ T5831] Bluetooth: hci3: adv larger than maximum supported [ 80.290455][ T5831] Bluetooth: hci3: adv larger than maximum supported [ 80.298095][ T5831] Bluetooth: hci3: adv larger than maximum supported [ 80.304941][ T5831] Bluetooth: hci3: Malformed LE Event: 0x0d [ 81.970943][ T6055] netlink: 342 bytes leftover after parsing attributes in process `syz.3.34'. [ 81.991983][ T6045] process 'syz.3.34' launched ':,' with NULL argv: empty string added [ 83.301547][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 83.420368][ T5831] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 83.420406][ T5831] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 83.436631][ T5831] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 83.436689][ T5831] Bluetooth: hci1: Unknown advertising packet type: 0x40 [ 83.444111][ T5831] Bluetooth: hci1: adv larger than maximum supported [ 83.451183][ T5831] Bluetooth: hci1: adv larger than maximum supported [ 83.458063][ T5831] Bluetooth: hci1: adv larger than maximum supported [ 83.464828][ T5831] Bluetooth: hci1: Malformed LE Event: 0x0d [ 83.580377][ T6078] can: request_module (can-proto-3) failed. [ 87.182602][ T8] cfg80211: failed to load regulatory.db [ 87.936111][ T6142] zswap: compressor not available [ 89.894602][ T6016] Process accounting resumed [ 89.981260][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 90.122589][ T5831] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 90.122631][ T5831] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 90.137730][ T5831] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 90.137785][ T5831] Bluetooth: hci2: Unknown advertising packet type: 0x40 [ 90.145245][ T5831] Bluetooth: hci2: adv larger than maximum supported [ 90.152317][ T5831] Bluetooth: hci2: adv larger than maximum supported [ 90.159343][ T5831] Bluetooth: hci2: adv larger than maximum supported [ 90.166138][ T5831] Bluetooth: hci2: Malformed LE Event: 0x0d [ 90.451279][ T6186] Process accounting resumed [ 92.132046][ T5831] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 93.847918][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 93.978751][ T5831] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 93.978789][ T5831] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 93.993796][ T5831] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 93.993851][ T5831] Bluetooth: hci0: Unknown advertising packet type: 0x40 [ 94.001144][ T5831] Bluetooth: hci0: adv larger than maximum supported [ 94.008313][ T5831] Bluetooth: hci0: adv larger than maximum supported [ 94.015090][ T5831] Bluetooth: hci0: adv larger than maximum supported [ 94.021788][ T5831] Bluetooth: hci0: Malformed LE Event: 0x0d [ 94.958159][ T6266] can: request_module (can-proto-0) failed. [ 95.617831][ T5831] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 95.617869][ T5831] Bluetooth: hci1: unexpected subevent 0x05 length: 725 > 12 [ 96.098690][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 96.178066][ T5831] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 96.178106][ T5831] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 96.193896][ T5831] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 96.193935][ T5831] Bluetooth: hci2: Unknown advertising packet type: 0x40 [ 96.201013][ T5831] Bluetooth: hci2: adv larger than maximum supported [ 96.208571][ T5831] Bluetooth: hci2: adv larger than maximum supported [ 96.216873][ T5831] Bluetooth: hci2: adv larger than maximum supported [ 96.225707][ T5831] Bluetooth: hci2: Malformed LE Event: 0x0d [ 97.653250][ T5831] Bluetooth: hci1: command tx timeout [ 97.838546][ T6335] cgroup: fork rejected by pids controller in /syz2 [ 99.525601][ T6417] TCP: TCP_TX_DELAY enabled [ 99.868618][ T6426] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.139802][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 101.223579][ T5831] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 101.223616][ T5831] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 101.243687][ T5831] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 101.243727][ T5831] Bluetooth: hci2: Unknown advertising packet type: 0x40 [ 101.250817][ T5831] Bluetooth: hci2: adv larger than maximum supported [ 101.260466][ T5831] Bluetooth: hci2: adv larger than maximum supported [ 101.267588][ T5831] Bluetooth: hci2: adv larger than maximum supported [ 101.274781][ T5831] Bluetooth: hci2: Malformed LE Event: 0x0d [ 105.383929][ T6492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.122'. [ 108.404071][ T6509] delete_channel: no stack [ 112.171856][ T29] audit: type=1400 audit(6034526578.032:2): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6557 comm="syz.0.135" [ 114.365645][ T6612] can: request_module (can-proto-3) failed. [ 114.829561][ T6508] syz.2.125 (6508) used greatest stack depth: 21520 bytes left [ 116.915500][ T6638] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.953146][ T6638] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 117.329391][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.339989][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.349682][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.358144][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.367331][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.375135][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.682297][ T6638] syz.3.146 (6638) used greatest stack depth: 20864 bytes left [ 117.908107][ T6646] chnl_net:caif_netlink_parms(): no params data found [ 118.345300][ T6646] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.361632][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.393392][ T6646] bridge_slave_0: entered allmulticast mode [ 118.413384][ T6646] bridge_slave_0: entered promiscuous mode [ 118.430390][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.444368][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.463380][ T6646] bridge_slave_1: entered allmulticast mode [ 118.470454][ T6646] bridge_slave_1: entered promiscuous mode [ 118.630261][ T6646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.677330][ T6646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.027096][ T6646] team0: Port device team_slave_0 added [ 119.072250][ T6646] team0: Port device team_slave_1 added [ 119.291053][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.298169][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.373110][ T6646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.402617][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.413197][ T5831] Bluetooth: hci4: command tx timeout [ 119.423217][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.449743][ T6646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.767203][ T6646] hsr_slave_0: entered promiscuous mode [ 119.790570][ T6646] hsr_slave_1: entered promiscuous mode [ 119.799673][ T6646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.822734][ T6646] Cannot create hsr debugfs directory [ 120.552754][ T6646] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.789413][ T6646] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.865651][ T6646] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.941686][ T6646] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.076116][ T6620] Process accounting paused [ 121.375375][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 121.457935][ T6646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.493230][ T5831] Bluetooth: hci4: command tx timeout [ 121.542607][ T6646] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.609662][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.616875][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.676413][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.683591][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.794462][ T6681] FAULT_INJECTION: forcing a failure. [ 121.794462][ T6681] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 121.911992][ T6681] CPU: 0 UID: 0 PID: 6681 Comm: syz.0.156 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 121.912032][ T6681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 121.912055][ T6681] Call Trace: [ 121.912062][ T6681] [ 121.912075][ T6681] dump_stack_lvl+0x16c/0x1f0 [ 121.912117][ T6681] should_fail_ex+0x50a/0x650 [ 121.912153][ T6681] ? __pfx___might_resched+0x10/0x10 [ 121.912194][ T6681] should_fail_alloc_page+0xe7/0x130 [ 121.912221][ T6681] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 121.912258][ T6681] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 121.912298][ T6681] ? stack_depot_save_flags+0x38f/0x9c0 [ 121.912334][ T6681] ? __pfx_lock_release+0x10/0x10 [ 121.912372][ T6681] ? hlock_class+0x4e/0x130 [ 121.912397][ T6681] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 121.912446][ T6681] ? __pfx___lock_acquire+0x10/0x10 [ 121.912476][ T6681] ? kasan_save_stack+0x42/0x60 [ 121.912507][ T6681] ? kasan_save_stack+0x33/0x60 [ 121.912537][ T6681] ? kasan_save_track+0x14/0x30 [ 121.912567][ T6681] ? __kasan_slab_alloc+0x89/0x90 [ 121.912600][ T6681] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 121.912634][ T6681] ? alloc_vmap_area+0x636/0x2a60 [ 121.912659][ T6681] ? __get_vm_area_node+0x19e/0x2f0 [ 121.912687][ T6681] ? __vmalloc_node_range_noprof+0x26a/0x1530 [ 121.912716][ T6681] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.912752][ T6681] ? policy_nodemask+0xea/0x4e0 [ 121.912786][ T6681] alloc_pages_mpol+0x1fc/0x540 [ 121.912820][ T6681] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 121.912851][ T6681] ? __page_table_check_ptes_set+0x16b/0x3e0 [ 121.912896][ T6681] ? do_raw_spin_lock+0x12d/0x2c0 [ 121.912938][ T6681] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 121.912983][ T6681] alloc_pages_noprof+0x131/0x390 [ 121.913019][ T6681] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 121.913049][ T6681] get_free_pages_noprof+0xc/0x40 [ 121.913071][ T6681] kasan_populate_vmalloc_pte+0x2d/0x160 [ 121.913102][ T6681] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 121.913134][ T6681] __apply_to_page_range+0x5fd/0xd30 [ 121.913167][ T6681] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 121.913203][ T6681] ? __pfx___apply_to_page_range+0x10/0x10 [ 121.913234][ T6681] ? insert_vmap_area+0x2ef/0x4d0 [ 121.913263][ T6681] alloc_vmap_area+0x93e/0x2a60 [ 121.913304][ T6681] ? __pfx_alloc_vmap_area+0x10/0x10 [ 121.913340][ T6681] __get_vm_area_node+0x19e/0x2f0 [ 121.913377][ T6681] __vmalloc_node_range_noprof+0x26a/0x1530 [ 121.913410][ T6681] ? __do_sys_listmount+0x1bf/0xeb0 [ 121.913445][ T6681] ? find_held_lock+0x2d/0x110 [ 121.913474][ T6681] ? __do_sys_listmount+0x1bf/0xeb0 [ 121.913511][ T6681] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.913545][ T6681] ? rcu_is_watching+0x12/0xc0 [ 121.913570][ T6681] ? trace_kmalloc+0x2d/0xd0 [ 121.913595][ T6681] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 121.913623][ T6681] ? __do_sys_listmount+0x1bf/0xeb0 [ 121.913655][ T6681] __kvmalloc_node_noprof+0x14f/0x1a0 [ 121.913688][ T6681] ? __do_sys_listmount+0x1bf/0xeb0 [ 121.913720][ T6681] __do_sys_listmount+0x1bf/0xeb0 [ 121.913755][ T6681] ? __x64_sys_futex+0x1e1/0x4c0 [ 121.913783][ T6681] ? __x64_sys_futex+0x1ea/0x4c0 [ 121.913812][ T6681] ? __pfx___do_sys_listmount+0x10/0x10 [ 121.913842][ T6681] ? xfd_validate_state+0x5d/0x180 [ 121.913895][ T6681] do_syscall_64+0xcd/0x250 [ 121.913928][ T6681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.913964][ T6681] RIP: 0033:0x7f2b1d78cde9 [ 121.913997][ T6681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.914026][ T6681] RSP: 002b:00007f2b1e662038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 121.914050][ T6681] RAX: ffffffffffffffda RBX: 00007f2b1d9a5fa0 RCX: 00007f2b1d78cde9 [ 121.914067][ T6681] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000400000000100 [ 121.914083][ T6681] RBP: 00007f2b1d80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 121.914098][ T6681] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 121.914113][ T6681] R13: 0000000000000000 R14: 00007f2b1d9a5fa0 R15: 00007fffd1e879e8 [ 121.914142][ T6681] [ 122.593365][ T6681] syz.0.156: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 122.753136][ T6681] CPU: 1 UID: 0 PID: 6681 Comm: syz.0.156 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 122.753171][ T6681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 122.753184][ T6681] Call Trace: [ 122.753191][ T6681] [ 122.753200][ T6681] dump_stack_lvl+0x16c/0x1f0 [ 122.753233][ T6681] warn_alloc+0x24d/0x3a0 [ 122.753272][ T6681] ? __pfx_warn_alloc+0x10/0x10 [ 122.753305][ T6681] ? kfree+0x2c4/0x4d0 [ 122.753341][ T6681] ? __get_vm_area_node+0x1dc/0x2f0 [ 122.753377][ T6681] __vmalloc_node_range_noprof+0xd24/0x1530 [ 122.753415][ T6681] ? find_held_lock+0x2d/0x110 [ 122.753445][ T6681] ? __do_sys_listmount+0x1bf/0xeb0 [ 122.753484][ T6681] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.753522][ T6681] ? rcu_is_watching+0x12/0xc0 [ 122.753548][ T6681] ? trace_kmalloc+0x2d/0xd0 [ 122.753574][ T6681] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 122.753602][ T6681] ? __do_sys_listmount+0x1bf/0xeb0 [ 122.753634][ T6681] __kvmalloc_node_noprof+0x14f/0x1a0 [ 122.753668][ T6681] ? __do_sys_listmount+0x1bf/0xeb0 [ 122.753700][ T6681] __do_sys_listmount+0x1bf/0xeb0 [ 122.753737][ T6681] ? __x64_sys_futex+0x1e1/0x4c0 [ 122.753766][ T6681] ? __x64_sys_futex+0x1ea/0x4c0 [ 122.753794][ T6681] ? __pfx___do_sys_listmount+0x10/0x10 [ 122.753825][ T6681] ? xfd_validate_state+0x5d/0x180 [ 122.753870][ T6681] do_syscall_64+0xcd/0x250 [ 122.753902][ T6681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.753936][ T6681] RIP: 0033:0x7f2b1d78cde9 [ 122.753957][ T6681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.753979][ T6681] RSP: 002b:00007f2b1e662038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 122.754002][ T6681] RAX: ffffffffffffffda RBX: 00007f2b1d9a5fa0 RCX: 00007f2b1d78cde9 [ 122.754029][ T6681] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000400000000100 [ 122.754045][ T6681] RBP: 00007f2b1d80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 122.754060][ T6681] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 122.754075][ T6681] R13: 0000000000000000 R14: 00007f2b1d9a5fa0 R15: 00007fffd1e879e8 [ 122.754106][ T6681] [ 122.754116][ T6681] Mem-Info: [ 123.025076][ T6646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.077407][ T6681] active_anon:70011 inactive_anon:65548 isolated_anon:0 [ 123.077407][ T6681] active_file:15203 inactive_file:37993 isolated_file:0 [ 123.077407][ T6681] unevictable:2998 dirty:216 writeback:0 [ 123.077407][ T6681] slab_reclaimable:10600 slab_unreclaimable:99670 [ 123.077407][ T6681] mapped:48867 shmem:127359 pagetables:999 [ 123.077407][ T6681] sec_pagetables:0 bounce:0 [ 123.077407][ T6681] kernel_misc_reclaimable:0 [ 123.077407][ T6681] free:1179856 free_pcp:11801 free_cma:0 [ 123.183215][ T6681] Node 0 active_anon:280944kB inactive_anon:262192kB active_file:40808kB inactive_file:151896kB unevictable:10456kB isolated(anon):0kB isolated(file):0kB mapped:190148kB dirty:788kB writeback:0kB shmem:508800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12036kB pagetables:4096kB sec_pagetables:0kB all_unreclaimable? no [ 123.326093][ T6681] Node 1 active_anon:0kB inactive_anon:0kB active_file:20004kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:6852kB dirty:76kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 123.477085][ T6681] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 123.513518][ T6681] lowmem_reserve[]: 0 2487 2487 0 0 [ 123.546556][ T6681] Node 0 DMA32 free:859932kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:287280kB inactive_anon:261400kB active_file:40808kB inactive_file:151796kB unevictable:10456kB writepending:796kB present:3129332kB managed:2547560kB mlocked:8920kB bounce:0kB free_pcp:1956kB local_pcp:1144kB free_cma:0kB [ 123.583785][ T5831] Bluetooth: hci4: command tx timeout [ 123.734441][ T6681] lowmem_reserve[]: 0 0 0 0 0 [ 123.803312][ T6681] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 123.895514][ T6646] veth0_vlan: entered promiscuous mode [ 123.937542][ T6646] veth1_vlan: entered promiscuous mode [ 123.997701][ T6681] lowmem_reserve[]: 0 0 0 0 0 [ 124.002508][ T6681] Node 1 Normal free:3839732kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20004kB inactive_file:76kB unevictable:1536kB writepending:76kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:44404kB local_pcp:17660kB free_cma:0kB [ 124.047193][ T6646] veth0_macvtap: entered promiscuous mode [ 124.077624][ T6646] veth1_macvtap: entered promiscuous mode [ 124.119983][ T6681] lowmem_reserve[]: 0 0 0 0 0 [ 124.129731][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.173438][ T6681] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 124.187075][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.207278][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.239961][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.263331][ T6681] Node 0 DMA32: 4*4kB (UME) 5*8kB (UME) 10*16kB (ME) 9*32kB (UE) 2*64kB (E) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (ME) 1*2048kB (E) 205*4096kB (M) = 845048kB [ 124.283048][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.323088][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.332950][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.383315][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.403355][ T6681] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 124.416707][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.463993][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.593321][ T6681] Node 1 Normal: 0*4kB 7*8kB (UME) 1*16kB (U) 205*32kB (UE) 97*64kB (UME) 38*128kB (UE) 16*256kB (UE) 5*512kB (UM) 2*1024kB (U) 4*2048kB (UME) 929*4096kB (M) = 3839784kB [ 124.659114][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.683147][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.704279][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.718061][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.754858][ T6681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.765229][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.783400][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.812580][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.828062][ T6681] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 124.844240][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.874919][ T6681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.898683][ T6646] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.941731][ T6646] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.963097][ T6646] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.984594][ T6681] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 124.987589][ T6646] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.074705][ T6681] 187481 total pagecache pages [ 125.079540][ T6681] 35 pages in swap cache [ 125.132072][ T6681] Free swap = 93840kB [ 125.210276][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.218197][ T6681] Total swap = 124996kB [ 125.218217][ T6681] 2097051 pages RAM [ 125.218226][ T6681] 0 pages HighMem/MovableOnly [ 125.218234][ T6681] 428503 pages reserved [ 125.218243][ T6681] 0 pages cma reserved [ 125.278150][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.336118][ T4399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.373130][ T4399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.522399][ T6693] FAULT_INJECTION: forcing a failure. [ 125.522399][ T6693] name failslab, interval 1, probability 0, space 0, times 1 [ 125.543371][ T6693] CPU: 1 UID: 0 PID: 6693 Comm: syz.3.157 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 125.543408][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 125.543423][ T6693] Call Trace: [ 125.543430][ T6693] [ 125.543440][ T6693] dump_stack_lvl+0x16c/0x1f0 [ 125.543488][ T6693] should_fail_ex+0x50a/0x650 [ 125.543539][ T6693] ? fs_reclaim_acquire+0xae/0x150 [ 125.543571][ T6693] should_failslab+0xc2/0x120 [ 125.543606][ T6693] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 125.543643][ T6693] ? sock_alloc_inode+0x25/0x1c0 [ 125.543679][ T6693] ? __pfx_sock_alloc_inode+0x10/0x10 [ 125.543711][ T6693] sock_alloc_inode+0x25/0x1c0 [ 125.543742][ T6693] alloc_inode+0x5d/0x230 [ 125.543764][ T6693] sock_alloc+0x40/0x280 [ 125.543799][ T6693] sock_create_lite+0x82/0x120 [ 125.543837][ T6693] __netlink_kernel_create+0xbe/0x750 [ 125.543864][ T6693] ? do_raw_spin_unlock+0x101/0x230 [ 125.543888][ T6693] ? __pfx___netlink_kernel_create+0x10/0x10 [ 125.543920][ T6693] ? fib_default_rule_add+0x342/0x420 [ 125.543956][ T6693] fib_net_init+0x237/0x3d0 [ 125.543984][ T6693] ? __pfx_fib_net_init+0x10/0x10 [ 125.544013][ T6693] ? __pfx_nl_fib_input+0x10/0x10 [ 125.544043][ T6693] ? devinet_init_net+0x5c1/0x900 [ 125.544073][ T6693] ? __pfx_fib_net_init+0x10/0x10 [ 125.544095][ T6693] ops_init+0x1df/0x5f0 [ 125.544127][ T6693] setup_net+0x21f/0x860 [ 125.544161][ T6693] ? __pfx_setup_net+0x10/0x10 [ 125.544191][ T6693] ? down_read_killable+0xcc/0x380 [ 125.544222][ T6693] ? __pfx_down_read_killable+0x10/0x10 [ 125.544247][ T6693] ? __raw_spin_lock_init+0x3a/0x110 [ 125.544283][ T6693] ? debug_mutex_init+0x37/0x70 [ 125.544311][ T6693] copy_net_ns+0x2b4/0x6c0 [ 125.544351][ T6693] create_new_namespaces+0x3ea/0xad0 [ 125.544396][ T6693] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 125.544434][ T6693] ksys_unshare+0x45d/0xa40 [ 125.544458][ T6693] ? __pfx_ksys_unshare+0x10/0x10 [ 125.544491][ T6693] ? xfd_validate_state+0x5d/0x180 [ 125.544540][ T6693] __x64_sys_unshare+0x31/0x40 [ 125.544563][ T6693] do_syscall_64+0xcd/0x250 [ 125.544594][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.544626][ T6693] RIP: 0033:0x7f355598cde9 [ 125.544647][ T6693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.544668][ T6693] RSP: 002b:00007f3556749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 125.544692][ T6693] RAX: ffffffffffffffda RBX: 00007f3555ba5fa0 RCX: 00007f355598cde9 [ 125.544708][ T6693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 125.544720][ T6693] RBP: 00007f3555a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 125.544732][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.544745][ T6693] R13: 0000000000000000 R14: 00007f3555ba5fa0 R15: 00007ffe8b0bfd48 [ 125.544778][ T6693] [ 125.935009][ T5831] Bluetooth: hci4: command tx timeout [ 126.258970][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 126.501136][ T5831] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 126.501176][ T5831] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 126.516573][ T5831] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 126.516611][ T5831] Bluetooth: hci0: Unknown advertising packet type: 0x40 [ 126.524103][ T5831] Bluetooth: hci0: adv larger than maximum supported [ 126.532101][ T5831] Bluetooth: hci0: adv larger than maximum supported [ 126.539426][ T5831] Bluetooth: hci0: adv larger than maximum supported [ 126.546551][ T5831] Bluetooth: hci0: Malformed LE Event: 0x0d [ 127.187577][ T6589] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.566089][ T6589] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.921675][ T6589] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.074760][ T6589] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.435375][ T6589] bridge_slave_1: left allmulticast mode [ 128.463268][ T6589] bridge_slave_1: left promiscuous mode [ 128.470580][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.646168][ T6589] bridge_slave_0: left allmulticast mode [ 128.651871][ T6589] bridge_slave_0: left promiscuous mode [ 128.685141][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.776012][ T6732] FAULT_INJECTION: forcing a failure. [ 128.776012][ T6732] name failslab, interval 1, probability 0, space 0, times 0 [ 128.803174][ T6732] CPU: 0 UID: 0 PID: 6732 Comm: syz.3.165 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 128.803214][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 128.803228][ T6732] Call Trace: [ 128.803236][ T6732] [ 128.803246][ T6732] dump_stack_lvl+0x16c/0x1f0 [ 128.803281][ T6732] should_fail_ex+0x50a/0x650 [ 128.803317][ T6732] ? fs_reclaim_acquire+0xae/0x150 [ 128.803349][ T6732] ? file_f_owner_allocate+0x8a/0x140 [ 128.803373][ T6732] should_failslab+0xc2/0x120 [ 128.803412][ T6732] __kmalloc_cache_noprof+0x68/0x410 [ 128.803451][ T6732] file_f_owner_allocate+0x8a/0x140 [ 128.803476][ T6732] generic_setlease+0x5c3/0x1310 [ 128.803506][ T6732] ? __pfx_lock_release+0x10/0x10 [ 128.803543][ T6732] ? __pfx_generic_setlease+0x10/0x10 [ 128.803580][ T6732] kernel_setlease+0x106/0x140 [ 128.803609][ T6732] vfs_setlease+0x258/0x2d0 [ 128.803639][ T6732] fcntl_setlease+0x3ee/0x5a0 [ 128.803666][ T6732] ? __pfx_fcntl_setlease+0x10/0x10 [ 128.803703][ T6732] ? __fget_files+0x1fc/0x3a0 [ 128.803740][ T6732] do_fcntl+0x768/0x15b0 [ 128.803765][ T6732] ? __pfx_do_fcntl+0x10/0x10 [ 128.803797][ T6732] ? tomoyo_file_fcntl+0x6c/0xc0 [ 128.803837][ T6732] __x64_sys_fcntl+0x170/0x200 [ 128.803865][ T6732] do_syscall_64+0xcd/0x250 [ 128.803896][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.803929][ T6732] RIP: 0033:0x7f355598cde9 [ 128.803949][ T6732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.803978][ T6732] RSP: 002b:00007f3556749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 128.804002][ T6732] RAX: ffffffffffffffda RBX: 00007f3555ba5fa0 RCX: 00007f355598cde9 [ 128.804019][ T6732] RDX: 9ec0000000000000 RSI: 0000000000000400 RDI: 0000000000000003 [ 128.804035][ T6732] RBP: 00007f3555a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 128.804050][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.804065][ T6732] R13: 0000000000000000 R14: 00007f3555ba5fa0 R15: 00007ffe8b0bfd48 [ 128.804096][ T6732] [ 129.611425][ T6745] FAULT_INJECTION: forcing a failure. [ 129.611425][ T6745] name failslab, interval 1, probability 0, space 0, times 0 [ 129.670830][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: syz.3.167 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 129.670866][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 129.670882][ T6745] Call Trace: [ 129.670890][ T6745] [ 129.670900][ T6745] dump_stack_lvl+0x16c/0x1f0 [ 129.670948][ T6745] should_fail_ex+0x50a/0x650 [ 129.670986][ T6745] ? fs_reclaim_acquire+0xae/0x150 [ 129.671021][ T6745] should_failslab+0xc2/0x120 [ 129.671058][ T6745] __kmalloc_node_noprof+0xd1/0x510 [ 129.671093][ T6745] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 129.671132][ T6745] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 129.671177][ T6745] ? n_tty_open+0x1a/0x170 [ 129.671214][ T6745] ? __ldsem_down_write_nested+0x10f/0x8d0 [ 129.671250][ T6745] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 129.671294][ T6745] ? n_tty_open+0x1a/0x170 [ 129.671327][ T6745] vzalloc_noprof+0x6b/0x90 [ 129.671366][ T6745] ? n_tty_open+0x1a/0x170 [ 129.671398][ T6745] ? __pfx_n_tty_open+0x10/0x10 [ 129.671430][ T6745] n_tty_open+0x1a/0x170 [ 129.671463][ T6745] ? __pfx_n_tty_open+0x10/0x10 [ 129.671496][ T6745] tty_ldisc_open+0x9c/0x120 [ 129.671523][ T6745] tty_ldisc_setup+0x40/0x100 [ 129.671550][ T6745] tty_init_dev.part.0+0x1e7/0x660 [ 129.671584][ T6745] tty_open+0xac1/0xf80 [ 129.671614][ T6745] ? chrdev_open+0x596/0x6a0 [ 129.671653][ T6745] ? __pfx_tty_open+0x10/0x10 [ 129.671681][ T6745] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 129.671718][ T6745] ? lock_acquire+0x2f/0xb0 [ 129.671748][ T6745] ? chrdev_open+0x36b/0x6a0 [ 129.671787][ T6745] ? __pfx_tty_open+0x10/0x10 [ 129.671816][ T6745] chrdev_open+0x237/0x6a0 [ 129.671853][ T6745] ? __pfx_chrdev_open+0x10/0x10 [ 129.671891][ T6745] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 129.671929][ T6745] do_dentry_open+0x735/0x1c40 [ 129.671962][ T6745] ? __pfx_chrdev_open+0x10/0x10 [ 129.671997][ T6745] ? inode_permission+0xdd/0x5f0 [ 129.672026][ T6745] vfs_open+0x82/0x3f0 [ 129.672048][ T6745] ? may_open+0x1f2/0x400 [ 129.672078][ T6745] path_openat+0x1e88/0x2d80 [ 129.672126][ T6745] ? __pfx_path_openat+0x10/0x10 [ 129.672160][ T6745] ? __pfx___lock_acquire+0x10/0x10 [ 129.672190][ T6745] ? lock_acquire.part.0+0x11b/0x380 [ 129.672221][ T6745] ? find_held_lock+0x2d/0x110 [ 129.672251][ T6745] do_filp_open+0x20c/0x470 [ 129.672285][ T6745] ? __pfx_do_filp_open+0x10/0x10 [ 129.672316][ T6745] ? find_held_lock+0x2d/0x110 [ 129.672373][ T6745] ? alloc_fd+0x41f/0x760 [ 129.672415][ T6745] do_sys_openat2+0x17a/0x1e0 [ 129.672439][ T6745] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.672475][ T6745] __x64_sys_openat+0x175/0x210 [ 129.672501][ T6745] ? __pfx___x64_sys_openat+0x10/0x10 [ 129.672542][ T6745] do_syscall_64+0xcd/0x250 [ 129.672574][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.672607][ T6745] RIP: 0033:0x7f355598cde9 [ 129.672629][ T6745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.672651][ T6745] RSP: 002b:00007f3556749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.672675][ T6745] RAX: ffffffffffffffda RBX: 00007f3555ba5fa0 RCX: 00007f355598cde9 [ 129.672691][ T6745] RDX: 0000000000022e01 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 129.672707][ T6745] RBP: 00007f3555a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.672721][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.672735][ T6745] R13: 0000000000000000 R14: 00007f3555ba5fa0 R15: 00007ffe8b0bfd48 [ 129.672769][ T6745] [ 130.100854][ T6745] pty pty163: ldisc open failed (-12), clearing slot 163 [ 131.014983][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 131.144584][ T5831] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 131.144626][ T5831] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 131.164346][ T5831] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 131.164388][ T5831] Bluetooth: hci3: Unknown advertising packet type: 0x40 [ 131.171572][ T5831] Bluetooth: hci3: adv larger than maximum supported [ 131.179164][ T5831] Bluetooth: hci3: adv larger than maximum supported [ 131.187719][ T5831] Bluetooth: hci3: adv larger than maximum supported [ 131.194933][ T5831] Bluetooth: hci3: Malformed LE Event: 0x0d [ 131.688618][ T6589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.721734][ T6589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.765636][ T6589] bond0 (unregistering): Released all slaves [ 132.959778][ T6589] hsr_slave_0: left promiscuous mode [ 132.984881][ T6589] hsr_slave_1: left promiscuous mode [ 133.001658][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.021459][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.056643][ T6589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.069971][ T6589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.127770][ T6589] veth1_macvtap: left promiscuous mode [ 133.150481][ T6589] veth0_macvtap: left promiscuous mode [ 133.162085][ T6589] veth1_vlan: left promiscuous mode [ 133.168302][ T6589] veth0_vlan: left promiscuous mode [ 133.259791][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.266282][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.167939][ T6589] team0 (unregistering): Port device team_slave_1 removed [ 134.246964][ T6589] team0 (unregistering): Port device team_slave_0 removed [ 135.907919][ T6807] syz.3.177 uses obsolete (PF_INET,SOCK_PACKET) [ 136.873321][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 137.006000][ T6837] FAULT_INJECTION: forcing a failure. [ 137.006000][ T6837] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 137.042672][ T6837] CPU: 1 UID: 0 PID: 6837 Comm: syz.3.182 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 137.042704][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 137.042717][ T6837] Call Trace: [ 137.042723][ T6837] [ 137.042732][ T6837] dump_stack_lvl+0x16c/0x1f0 [ 137.042765][ T6837] should_fail_ex+0x50a/0x650 [ 137.042803][ T6837] _copy_from_user+0x2e/0xd0 [ 137.042827][ T6837] copy_msghdr_from_user+0x99/0x160 [ 137.042857][ T6837] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 137.042886][ T6837] ? __lock_acquire+0xcc5/0x3c40 [ 137.042929][ T6837] ___sys_sendmsg+0xff/0x1e0 [ 137.042961][ T6837] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.043004][ T6837] ? trace_lock_acquire+0x14e/0x1f0 [ 137.043051][ T6837] __sys_sendmmsg+0x201/0x420 [ 137.043082][ T6837] ? __pfx___sys_sendmmsg+0x10/0x10 [ 137.043118][ T6837] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.043157][ T6837] ? fput+0x67/0x440 [ 137.043180][ T6837] ? ksys_write+0x1ba/0x250 [ 137.043208][ T6837] ? __pfx_ksys_write+0x10/0x10 [ 137.043244][ T6837] __x64_sys_sendmmsg+0x9c/0x100 [ 137.043274][ T6837] ? lockdep_hardirqs_on+0x7c/0x110 [ 137.043298][ T6837] do_syscall_64+0xcd/0x250 [ 137.043327][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.043359][ T6837] RIP: 0033:0x7f355598cde9 [ 137.043378][ T6837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.043399][ T6837] RSP: 002b:00007f3556728038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 137.043421][ T6837] RAX: ffffffffffffffda RBX: 00007f3555ba6080 RCX: 00007f355598cde9 [ 137.043437][ T6837] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 137.043451][ T6837] RBP: 00007f3556728090 R08: 0000000000000000 R09: 0000000000000000 [ 137.043464][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.043478][ T6837] R13: 0000000000000000 R14: 00007f3555ba6080 R15: 00007ffe8b0bfd48 [ 137.043508][ T6837] [ 137.250461][ T5831] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 137.250502][ T5831] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 137.265516][ T5831] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 137.265556][ T5831] Bluetooth: hci3: Unknown advertising packet type: 0x40 [ 137.272617][ T5831] Bluetooth: hci3: adv larger than maximum supported [ 137.279780][ T5831] Bluetooth: hci3: adv larger than maximum supported [ 137.287166][ T5831] Bluetooth: hci3: adv larger than maximum supported [ 137.293952][ T5831] Bluetooth: hci3: Malformed LE Event: 0x0d [ 138.330427][ T6866] Invalid ELF header magic: != ELF [ 139.448255][ T6890] Invalid ELF header magic: != ELF [ 142.099290][ T6949] cougar: G6 mapped to space [ 143.914414][ T6992] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 143.996634][ T6992] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 144.912141][ T5831] Bluetooth: hci4: Malformed LE Event: 0x1d [ 145.082289][ T7009] Invalid ELF header magic: != ELF [ 147.040917][ T7026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.201'. [ 147.994420][ T7049] team0: mtu greater than device maximum [ 148.155379][ T29] audit: type=1800 audit(6034526614.022:3): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.207" name="dummy_udc" dev="gadgetfs" ino=6930 res=0 errno=0 [ 149.152949][ T7068] Process accounting resumed [ 149.278467][ T7070] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 149.302428][ T7070] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 151.093488][ T7096] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 151.133724][ T7096] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 152.210953][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 152.325597][ T5831] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 152.325635][ T5831] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 152.340970][ T5831] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 152.341011][ T5831] Bluetooth: hci0: Unknown advertising packet type: 0x40 [ 152.349493][ T5831] Bluetooth: hci0: adv larger than maximum supported [ 152.356708][ T5831] Bluetooth: hci0: adv larger than maximum supported [ 152.363479][ T5831] Bluetooth: hci0: adv larger than maximum supported [ 152.370271][ T5831] Bluetooth: hci0: Malformed LE Event: 0x0d [ 153.600433][ T7106] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.626857][ T7106] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.682326][ T7106] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.735629][ T7106] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.765533][ T7106] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.787355][ T7106] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.805692][ T7106] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.821624][ T7106] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.850710][ T7106] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.880632][ T7106] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.898239][ T7106] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 153.911142][ T7106] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 154.133263][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.733401][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.813115][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.893253][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 156.214521][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.423190][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 157.813286][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.893641][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.973090][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 158.293498][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.657763][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 158.726594][ T7250] FAULT_INJECTION: forcing a failure. [ 158.726594][ T7250] name failslab, interval 1, probability 0, space 0, times 0 [ 158.794091][ T7250] CPU: 0 UID: 0 PID: 7250 Comm: syz.4.234 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 158.794123][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 158.794136][ T7250] Call Trace: [ 158.794143][ T7250] [ 158.794152][ T7250] dump_stack_lvl+0x16c/0x1f0 [ 158.794186][ T7250] should_fail_ex+0x50a/0x650 [ 158.794221][ T7250] ? fs_reclaim_acquire+0xae/0x150 [ 158.794254][ T7250] should_failslab+0xc2/0x120 [ 158.794291][ T7250] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 158.794326][ T7250] ? ptlock_alloc+0x1f/0x70 [ 158.794371][ T7250] ptlock_alloc+0x1f/0x70 [ 158.794403][ T7250] pte_alloc_one+0x74/0x390 [ 158.794438][ T7250] do_pte_missing+0x1aff/0x3e10 [ 158.794472][ T7250] ? do_raw_spin_unlock+0x172/0x230 [ 158.794498][ T7250] ? __pmd_alloc+0x3c2/0x870 [ 158.794531][ T7250] __handle_mm_fault+0x1166/0x2c60 [ 158.794575][ T7250] ? __pfx___handle_mm_fault+0x10/0x10 [ 158.794607][ T7250] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 158.794659][ T7250] ? find_vma+0xc0/0x140 [ 158.794686][ T7250] ? __pfx_find_vma+0x10/0x10 [ 158.794718][ T7250] handle_mm_fault+0x3fa/0xaa0 [ 158.794759][ T7250] do_user_addr_fault+0x7a3/0x13f0 [ 158.794798][ T7250] exc_page_fault+0x5c/0xc0 [ 158.794824][ T7250] asm_exc_page_fault+0x26/0x30 [ 158.794855][ T7250] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 158.794891][ T7250] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 158.794912][ T7250] RSP: 0018:ffffc900033977e0 EFLAGS: 00050206 [ 158.794931][ T7250] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 158.794944][ T7250] RDX: ffffed100625e619 RSI: 0000000000000000 RDI: ffff8880312f3000 [ 158.794957][ T7250] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100625e618 [ 158.794970][ T7250] R10: ffff8880312f30c3 R11: 0000000000000000 R12: ffffc90003397d60 [ 158.794983][ T7250] R13: 00000000000000c4 R14: ffff8880312f3000 R15: 00007ffffffff000 [ 158.795012][ T7250] _copy_from_iter+0x385/0x1560 [ 158.795037][ T7250] ? trace_lock_acquire+0x14e/0x1f0 [ 158.795070][ T7250] ? __alloc_skb+0x1fe/0x380 [ 158.795099][ T7250] ? __pfx__copy_from_iter+0x10/0x10 [ 158.795120][ T7250] ? __virt_addr_valid+0x1a4/0x590 [ 158.795149][ T7250] ? __virt_addr_valid+0x5e/0x590 [ 158.795173][ T7250] ? __phys_addr_symbol+0x30/0x80 [ 158.795195][ T7250] ? __check_object_size+0x488/0x710 [ 158.795221][ T7250] netlink_sendmsg+0x813/0xd70 [ 158.795257][ T7250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.795300][ T7250] ____sys_sendmsg+0xaaf/0xc90 [ 158.795324][ T7250] ? copy_msghdr_from_user+0x10b/0x160 [ 158.795365][ T7250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.795387][ T7250] ? __lock_acquire+0xcc5/0x3c40 [ 158.795434][ T7250] ___sys_sendmsg+0x135/0x1e0 [ 158.795467][ T7250] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.795514][ T7250] ? trace_lock_acquire+0x14e/0x1f0 [ 158.795563][ T7250] __sys_sendmmsg+0x201/0x420 [ 158.795600][ T7250] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.795644][ T7250] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.795685][ T7250] ? fput+0x67/0x440 [ 158.795708][ T7250] ? ksys_write+0x1ba/0x250 [ 158.795738][ T7250] ? __pfx_ksys_write+0x10/0x10 [ 158.795773][ T7250] __x64_sys_sendmmsg+0x9c/0x100 [ 158.795804][ T7250] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.795830][ T7250] do_syscall_64+0xcd/0x250 [ 158.795858][ T7250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.795890][ T7250] RIP: 0033:0x7fb4b438cde9 [ 158.795909][ T7250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.795929][ T7250] RSP: 002b:00007fb4b5290038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.795958][ T7250] RAX: ffffffffffffffda RBX: 00007fb4b45a6080 RCX: 00007fb4b438cde9 [ 158.795973][ T7250] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 158.795987][ T7250] RBP: 00007fb4b5290090 R08: 0000000000000000 R09: 0000000000000000 [ 158.796001][ T7250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.796015][ T7250] R13: 0000000000000000 R14: 00007fb4b45a6080 R15: 00007ffe4221c748 [ 158.796048][ T7250] [ 159.253954][ T5831] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 159.253993][ T5831] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 159.270061][ T5831] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 159.270140][ T5831] Bluetooth: hci4: Unknown advertising packet type: 0x40 [ 159.277651][ T5831] Bluetooth: hci4: adv larger than maximum supported [ 159.284944][ T5831] Bluetooth: hci4: adv larger than maximum supported [ 159.291656][ T5831] Bluetooth: hci4: adv larger than maximum supported [ 159.298436][ T5831] Bluetooth: hci4: Malformed LE Event: 0x0d [ 159.893398][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.973182][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.053064][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 162.488496][ T7307] ubi0: attaching mtd0 [ 162.525856][ T7307] ubi0: scanning is finished [ 162.530528][ T7307] ubi0: empty MTD device detected [ 162.943166][ T7307] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 162.973222][ T7307] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 163.006680][ T7307] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 163.056943][ T7307] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 163.064638][ T7307] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 163.071436][ T7307] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 163.084134][ T7307] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3200478677 [ 163.229707][ T7307] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 163.322280][ T7369] ubi0: background thread "ubi_bgt0d" started, PID 7369 [ 164.014176][ T7341] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.034664][ T7366] Invalid ELF header magic: != ELF [ 164.051336][ T7341] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.067765][ T7341] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.081239][ T7341] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 164.227984][ T5832] Process accounting resumed [ 164.765220][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 164.995096][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.007597][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.016780][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.028260][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.037446][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 165.045044][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.098840][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.122052][ T7400] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 165.150706][ T7400] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 165.506592][ T7397] chnl_net:caif_netlink_parms(): no params data found [ 166.053885][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.133717][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.139125][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.413068][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.420236][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.442643][ T7397] bridge_slave_0: entered allmulticast mode [ 166.454513][ T7397] bridge_slave_0: entered promiscuous mode [ 166.473553][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.480859][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.504815][ T7397] bridge_slave_1: entered allmulticast mode [ 166.541356][ T7397] bridge_slave_1: entered promiscuous mode [ 166.594314][ T7165] syz.0.222 (7165) used greatest stack depth: 18784 bytes left [ 167.093201][ T53] Bluetooth: hci2: command tx timeout [ 167.347958][ T7397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.398448][ T7397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.747828][ T7397] team0: Port device team_slave_0 added [ 169.082486][ T7397] team0: Port device team_slave_1 added [ 169.173501][ T53] Bluetooth: hci2: command tx timeout [ 169.994794][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.001785][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.109200][ T7397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.122229][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.129686][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.201467][ T7397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.603200][ T7397] hsr_slave_0: entered promiscuous mode [ 170.619900][ T7397] hsr_slave_1: entered promiscuous mode [ 171.253109][ T53] Bluetooth: hci2: command tx timeout [ 172.404081][ T6358] syz.2.97 (6358) used greatest stack depth: 18624 bytes left [ 172.568010][ T7397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.662228][ T7397] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.893661][ T7397] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.929156][ T7397] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.227292][ T7397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.286059][ T7397] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.333418][ T53] Bluetooth: hci2: command tx timeout [ 173.360850][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.368030][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.466867][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.474053][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.588588][ T7397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.118634][ T4399] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.268026][ T7397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.352595][ T4399] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.571592][ T4399] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.659980][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 174.775276][ T4399] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.701955][ T7397] veth0_vlan: entered promiscuous mode [ 175.739596][ T7397] veth1_vlan: entered promiscuous mode [ 175.823426][ T4399] bridge_slave_1: left allmulticast mode [ 175.829127][ T4399] bridge_slave_1: left promiscuous mode [ 175.853736][ T7519] can: request_module (can-proto-0) failed. [ 175.859026][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.887159][ T4399] bridge_slave_0: left allmulticast mode [ 175.913573][ T4399] bridge_slave_0: left promiscuous mode [ 175.919366][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.199398][ T7535] block mtdblock0: the capability attribute has been deprecated. [ 177.435028][ T4399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.457489][ T4399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.469041][ T4399] bond0 (unregistering): Released all slaves [ 177.569777][ T7397] veth0_macvtap: entered promiscuous mode [ 177.578806][ T7553] netlink: 330 bytes leftover after parsing attributes in process `syz.0.273'. [ 177.584136][ T7397] veth1_macvtap: entered promiscuous mode [ 177.640490][ T7553] netlink: 330 bytes leftover after parsing attributes in process `syz.0.273'. [ 177.649241][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.661568][ T53] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 177.661603][ T53] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 177.667188][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.669917][ T53] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 177.682645][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.686282][ T53] Bluetooth: hci0: Unknown advertising packet type: 0x40 [ 177.686309][ T53] Bluetooth: hci0: adv larger than maximum supported [ 177.686330][ T53] Bluetooth: hci0: adv larger than maximum supported [ 177.686346][ T53] Bluetooth: hci0: Malformed LE Event: 0x0d [ 177.749900][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.761334][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.779339][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.789755][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.800870][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.816471][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.899629][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.918640][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.929223][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.941297][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.951736][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.962619][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.988117][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.009414][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.049636][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.193257][ T7397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.212408][ T7397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.230673][ T7397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.249823][ T7397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.327348][ T4399] hsr_slave_0: left promiscuous mode [ 178.347453][ T4399] hsr_slave_1: left promiscuous mode [ 178.353601][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.378744][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.402549][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.415521][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.437827][ T4399] veth1_macvtap: left promiscuous mode [ 178.443860][ T4399] veth0_macvtap: left promiscuous mode [ 178.450034][ T4399] veth1_vlan: left promiscuous mode [ 178.471944][ T4399] veth0_vlan: left promiscuous mode [ 179.287757][ T4399] team0 (unregistering): Port device team_slave_1 removed [ 179.368881][ T4399] team0 (unregistering): Port device team_slave_0 removed [ 180.403118][ T7579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.411006][ T7579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.493977][ T6600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.523892][ T6600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.629515][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.780313][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 181.485944][ T7616] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 181.558810][ T7616] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 181.841300][ T7635] can: request_module (can-proto-0) failed. [ 182.253110][ T7644] FAULT_INJECTION: forcing a failure. [ 182.253110][ T7644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.318839][ T7644] CPU: 1 UID: 0 PID: 7644 Comm: syz.5.284 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 182.318872][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 182.318888][ T7644] Call Trace: [ 182.318895][ T7644] [ 182.318907][ T7644] dump_stack_lvl+0x16c/0x1f0 [ 182.318939][ T7644] should_fail_ex+0x50a/0x650 [ 182.318976][ T7644] _copy_to_user+0x32/0xd0 [ 182.319003][ T7644] simple_read_from_buffer+0xd0/0x160 [ 182.319034][ T7644] proc_fail_nth_read+0x198/0x270 [ 182.319063][ T7644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.319093][ T7644] ? rw_verify_area+0xcf/0x680 [ 182.319119][ T7644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.319145][ T7644] vfs_read+0x1df/0xbf0 [ 182.319174][ T7644] ? __fget_files+0x1fc/0x3a0 [ 182.319205][ T7644] ? __pfx___mutex_lock+0x10/0x10 [ 182.319231][ T7644] ? __pfx_vfs_read+0x10/0x10 [ 182.319270][ T7644] ? __fget_files+0x206/0x3a0 [ 182.319310][ T7644] ksys_read+0x12b/0x250 [ 182.319338][ T7644] ? __pfx_ksys_read+0x10/0x10 [ 182.319378][ T7644] do_syscall_64+0xcd/0x250 [ 182.319406][ T7644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.319435][ T7644] RIP: 0033:0x7f3d36f8b7fc [ 182.319453][ T7644] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 182.319473][ T7644] RSP: 002b:00007f3d37e14030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.319492][ T7644] RAX: ffffffffffffffda RBX: 00007f3d371a5fa0 RCX: 00007f3d36f8b7fc [ 182.319506][ T7644] RDX: 000000000000000f RSI: 00007f3d37e140a0 RDI: 0000000000000005 [ 182.319520][ T7644] RBP: 00007f3d37e14090 R08: 0000000000000000 R09: 0000000000000000 [ 182.319533][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.319546][ T7644] R13: 0000000000000000 R14: 00007f3d371a5fa0 R15: 00007ffd6f3961f8 [ 182.319593][ T7644] [ 182.737220][ T53] Bluetooth: hci2: unexpected subevent 0x01 length: 125 > 18 [ 182.745040][ T53] Bluetooth: hci2: Invalid handle: 0x1e1a > 0x0eff [ 183.181747][ T7650] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.285'. [ 183.195296][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 184.464758][ T7650] netlink: 32 bytes leftover after parsing attributes in process `syz.0.285'. [ 184.958050][ T7701] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 185.003063][ T7701] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 185.931413][ T7736] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 186.298208][ T7741] netlink: 314 bytes leftover after parsing attributes in process `syz.4.298'. [ 186.920862][ T7758] FAULT_INJECTION: forcing a failure. [ 186.920862][ T7758] name failslab, interval 1, probability 0, space 0, times 0 [ 187.006161][ T7758] CPU: 0 UID: 0 PID: 7758 Comm: syz.4.304 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 187.006198][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 187.006213][ T7758] Call Trace: [ 187.006220][ T7758] [ 187.006230][ T7758] dump_stack_lvl+0x16c/0x1f0 [ 187.006265][ T7758] should_fail_ex+0x50a/0x650 [ 187.006302][ T7758] ? fs_reclaim_acquire+0xae/0x150 [ 187.006337][ T7758] should_failslab+0xc2/0x120 [ 187.006376][ T7758] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 187.006412][ T7758] ? __d_alloc+0x31/0xaa0 [ 187.006439][ T7758] __d_alloc+0x31/0xaa0 [ 187.006465][ T7758] d_alloc+0x4a/0x1e0 [ 187.006489][ T7758] d_alloc_parallel+0xe7/0x12b0 [ 187.006532][ T7758] ? __pfx_d_alloc_parallel+0x10/0x10 [ 187.006559][ T7758] ? hlock_class+0x4e/0x130 [ 187.006584][ T7758] ? lockdep_init_map_type+0x16d/0x7d0 [ 187.006619][ T7758] ? lockdep_init_map_type+0x16d/0x7d0 [ 187.006662][ T7758] __lookup_slow+0x194/0x470 [ 187.006690][ T7758] ? __pfx___lookup_slow+0x10/0x10 [ 187.006715][ T7758] ? trace_lock_acquire+0x14e/0x1f0 [ 187.006761][ T7758] ? d_lookup+0xe7/0x190 [ 187.006795][ T7758] lookup_one_len+0x181/0x1b0 [ 187.006821][ T7758] ? __pfx_lookup_one_len+0x10/0x10 [ 187.006851][ T7758] ? mntput+0x10/0x90 [ 187.006884][ T7758] start_creating.part.0+0x12f/0x3a0 [ 187.006924][ T7758] __debugfs_create_file+0xa5/0x6b0 [ 187.006963][ T7758] debugfs_create_file_full+0x41/0x60 [ 187.007004][ T7758] kvm_dev_ioctl+0x14c6/0x1a90 [ 187.007053][ T7758] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 187.007094][ T7758] ? __fget_files+0x206/0x3a0 [ 187.007131][ T7758] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 187.007195][ T7758] __x64_sys_ioctl+0x190/0x200 [ 187.007228][ T7758] do_syscall_64+0xcd/0x250 [ 187.007260][ T7758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.007293][ T7758] RIP: 0033:0x7fb4b438cde9 [ 187.007314][ T7758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.007335][ T7758] RSP: 002b:00007fb4b52b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.007358][ T7758] RAX: ffffffffffffffda RBX: 00007fb4b45a5fa0 RCX: 00007fb4b438cde9 [ 187.007374][ T7758] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 187.007388][ T7758] RBP: 00007fb4b440e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 187.007403][ T7758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.007416][ T7758] R13: 0000000000000000 R14: 00007fb4b45a5fa0 R15: 00007ffe4221c748 [ 187.007449][ T7758] [ 188.508271][ T7787] warn_alloc: 2 callbacks suppressed [ 188.508290][ T7787] syz.3.309: vmalloc error: size 208896, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 188.583076][ T7787] CPU: 1 UID: 0 PID: 7787 Comm: syz.3.309 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 188.583110][ T7787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 188.583122][ T7787] Call Trace: [ 188.583128][ T7787] [ 188.583137][ T7787] dump_stack_lvl+0x16c/0x1f0 [ 188.583170][ T7787] warn_alloc+0x24d/0x3a0 [ 188.583207][ T7787] ? __pfx_warn_alloc+0x10/0x10 [ 188.583239][ T7787] ? alloc_pages_mpol+0x25b/0x540 [ 188.583275][ T7787] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 188.583308][ T7787] ? trace_kmalloc+0x2d/0xd0 [ 188.583343][ T7787] __vmalloc_node_range_noprof+0x12bd/0x1530 [ 188.583387][ T7787] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 188.583426][ T7787] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 188.583467][ T7787] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 188.583497][ T7787] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 188.583526][ T7787] vmalloc_user_noprof+0x6b/0x90 [ 188.583556][ T7787] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 188.583583][ T7787] vb2_vmalloc_alloc+0x11e/0x3d0 [ 188.583615][ T7787] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 188.583644][ T7787] __vb2_queue_alloc+0x896/0x1230 [ 188.583692][ T7787] vb2_core_reqbufs+0xa73/0xfb0 [ 188.583730][ T7787] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 188.583794][ T7787] __vb2_init_fileio+0x3f3/0x1110 [ 188.583822][ T7787] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.583847][ T7787] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 188.583873][ T7787] ? __pollwait+0x26d/0x4c0 [ 188.583909][ T7787] vb2_core_poll+0x486/0x700 [ 188.583944][ T7787] vb2_poll+0x33/0x150 [ 188.583972][ T7787] vb2_fop_poll+0x10f/0x2c0 [ 188.584004][ T7787] ? __pfx_vb2_fop_poll+0x10/0x10 [ 188.584040][ T7787] v4l2_poll+0x160/0x320 [ 188.584078][ T7787] ? __pfx_v4l2_poll+0x10/0x10 [ 188.584110][ T7787] do_sys_poll+0x524/0xde0 [ 188.584151][ T7787] ? __pfx_do_sys_poll+0x10/0x10 [ 188.584206][ T7787] ? futex_wait_queue+0x103/0x1f0 [ 188.584236][ T7787] ? futex_unqueue+0xba/0x140 [ 188.584264][ T7787] ? __futex_wait+0x324/0x3c0 [ 188.584295][ T7787] ? __pfx___pollwait+0x10/0x10 [ 188.584330][ T7787] ? __pfx_pollwake+0x10/0x10 [ 188.584415][ T7787] ? __pfx_timespec64_add_safe+0x10/0x10 [ 188.584452][ T7787] ? ktime_get_ts64+0x2d2/0x400 [ 188.584484][ T7787] ? read_tsc+0x9/0x20 [ 188.584509][ T7787] ? ktime_get_ts64+0x256/0x400 [ 188.584548][ T7787] __x64_sys_poll+0x1a8/0x450 [ 188.584581][ T7787] ? __pfx___x64_sys_poll+0x10/0x10 [ 188.584626][ T7787] do_syscall_64+0xcd/0x250 [ 188.584658][ T7787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.584692][ T7787] RIP: 0033:0x7f355598cde9 [ 188.584713][ T7787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.584735][ T7787] RSP: 002b:00007f3556749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 188.584759][ T7787] RAX: ffffffffffffffda RBX: 00007f3555ba5fa0 RCX: 00007f355598cde9 [ 188.584775][ T7787] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000400000000480 [ 188.584789][ T7787] RBP: 00007f3555a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 188.584804][ T7787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.584818][ T7787] R13: 0000000000000000 R14: 00007f3555ba5fa0 R15: 00007ffe8b0bfd48 [ 188.584852][ T7787] [ 188.584862][ T7787] Mem-Info: [ 188.955063][ T7787] active_anon:16270 inactive_anon:0 isolated_anon:0 [ 188.955063][ T7787] active_file:15286 inactive_file:40016 isolated_file:0 [ 188.955063][ T7787] unevictable:768 dirty:328 writeback:0 [ 188.955063][ T7787] slab_reclaimable:10643 slab_unreclaimable:99415 [ 188.955063][ T7787] mapped:23855 shmem:7933 pagetables:1050 [ 188.955063][ T7787] sec_pagetables:0 bounce:0 [ 188.955063][ T7787] kernel_misc_reclaimable:0 [ 188.955063][ T7787] free:1316444 free_pcp:10633 free_cma:0 [ 189.000462][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.068603][ T7787] Node 0 active_anon:61480kB inactive_anon:0kB active_file:41220kB inactive_file:159908kB unevictable:1536kB isolated(anon):1300kB isolated(file):0kB mapped:95268kB dirty:1168kB writeback:0kB shmem:26596kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12112kB pagetables:3800kB sec_pagetables:0kB all_unreclaimable? no [ 189.101291][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.135258][ T7787] Node 1 active_anon:0kB inactive_anon:0kB active_file:19924kB inactive_file:156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152kB dirty:144kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 189.166156][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.293032][ T7787] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.360341][ T7792] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 189.373423][ T7787] lowmem_reserve[]: 0 2487 2487 0 0 [ 189.373885][ T7792] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 189.378762][ T7787] Node 0 DMA32 free:1417180kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:49284kB inactive_anon:0kB active_file:41220kB inactive_file:159812kB unevictable:1536kB writepending:1180kB present:3129332kB managed:2547560kB mlocked:0kB bounce:0kB free_pcp:10828kB local_pcp:852kB free_cma:0kB [ 189.419798][ T7808] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 189.429544][ T7792] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 189.442062][ T7792] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 189.448715][ T7792] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 189.453535][ T7808] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 189.463726][ T7787] lowmem_reserve[]: 0 0 0 0 0 [ 189.468511][ T7787] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.495332][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.538491][ T7787] lowmem_reserve[]: 0 0 0 0 0 [ 189.550735][ T7787] Node 1 [ 189.551403][ T7792] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 189.569581][ T7787] Normal free:3848104kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:19924kB inactive_file:156kB unevictable:1536kB writepending:144kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:36116kB local_pcp:22164kB free_cma:0kB [ 189.667300][ T7787] lowmem_reserve[]: 0 0 0 0 0 [ 189.682466][ T7787] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 189.763553][ T7787] Node 0 DMA32: 5054*4kB (UME) 2801*8kB (UME) 1916*16kB (UME) 1091*32kB (UME) 833*64kB (UME) 556*128kB (UME) 364*256kB (UM) 230*512kB (UM) 103*1024kB (UM) 35*2048kB (UME) 197*4096kB (M) = 1427680kB [ 189.792390][ T7787] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 189.819155][ T7787] Node 1 Normal: 218*4kB (UM) 22*8kB (UME) 17*16kB (UM) 218*32kB (UM) 97*64kB (UME) 40*128kB (UME) 21*256kB (UME) 7*512kB (UM) 2*1024kB (U) 4*2048kB (UME) 930*4096kB (M) = 3848104kB [ 189.875339][ T7787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.892929][ T7787] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 189.924908][ T7787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.963079][ T7787] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 189.983086][ T7787] 56997 total pagecache pages [ 189.987823][ T7787] 0 pages in swap cache [ 189.992000][ T7787] Free swap = 123176kB [ 190.013201][ T7787] Total swap = 124996kB [ 190.017484][ T7787] 2097051 pages RAM [ 190.021763][ T7787] 0 pages HighMem/MovableOnly [ 190.040969][ T7787] 428503 pages reserved [ 190.063400][ T7787] 0 pages cma reserved [ 190.429512][ T7840] FAULT_INJECTION: forcing a failure. [ 190.429512][ T7840] name failslab, interval 1, probability 0, space 0, times 0 [ 190.454887][ T7840] CPU: 1 UID: 0 PID: 7840 Comm: syz.5.318 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 190.454922][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 190.454936][ T7840] Call Trace: [ 190.454943][ T7840] [ 190.454953][ T7840] dump_stack_lvl+0x16c/0x1f0 [ 190.454990][ T7840] should_fail_ex+0x50a/0x650 [ 190.455027][ T7840] ? fs_reclaim_acquire+0xae/0x150 [ 190.455059][ T7840] should_failslab+0xc2/0x120 [ 190.455095][ T7840] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 190.455131][ T7840] ? __kernfs_new_node+0xd3/0x890 [ 190.455167][ T7840] __kernfs_new_node+0xd3/0x890 [ 190.455201][ T7840] ? __pfx___kernfs_new_node+0x10/0x10 [ 190.455232][ T7840] ? __pfx_lock_release+0x10/0x10 [ 190.455264][ T7840] ? kernfs_add_one+0x39d/0x520 [ 190.455309][ T7840] ? up_write+0x1b2/0x520 [ 190.455348][ T7840] kernfs_new_node+0x186/0x240 [ 190.455389][ T7840] __kernfs_create_file+0x53/0x350 [ 190.455418][ T7840] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 190.455456][ T7840] internal_create_group+0x56c/0xf10 [ 190.455498][ T7840] ? __pfx_internal_create_group+0x10/0x10 [ 190.455536][ T7840] ? kernfs_create_link+0x1bd/0x240 [ 190.455566][ T7840] internal_create_groups+0x9d/0x150 [ 190.455602][ T7840] device_add+0x781/0x1a70 [ 190.455637][ T7840] ? __pfx_device_add+0x10/0x10 [ 190.455672][ T7840] ? __init_waitqueue_head+0xca/0x150 [ 190.455707][ T7840] netdev_register_kobject+0x183/0x3a0 [ 190.455744][ T7840] register_netdevice+0x147b/0x1eb0 [ 190.455782][ T7840] ? idr_alloc+0xde/0x130 [ 190.455814][ T7840] ? __pfx_register_netdevice+0x10/0x10 [ 190.455861][ T7840] ppp_dev_configure+0x99e/0xc80 [ 190.455896][ T7840] ppp_ioctl+0x17eb/0x2590 [ 190.455922][ T7840] ? __pfx_lock_release+0x10/0x10 [ 190.455953][ T7840] ? trace_lock_acquire+0x14e/0x1f0 [ 190.455981][ T7840] ? __pfx_ppp_ioctl+0x10/0x10 [ 190.456015][ T7840] ? __fget_files+0x206/0x3a0 [ 190.456052][ T7840] ? __pfx_ppp_ioctl+0x10/0x10 [ 190.456079][ T7840] __x64_sys_ioctl+0x190/0x200 [ 190.456111][ T7840] do_syscall_64+0xcd/0x250 [ 190.456141][ T7840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.456175][ T7840] RIP: 0033:0x7f3d36f8cde9 [ 190.456194][ T7840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.456215][ T7840] RSP: 002b:00007f3d37e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.456238][ T7840] RAX: ffffffffffffffda RBX: 00007f3d371a5fa0 RCX: 00007f3d36f8cde9 [ 190.456255][ T7840] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 190.456270][ T7840] RBP: 00007f3d3700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.456284][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.456299][ T7840] R13: 0000000000000000 R14: 00007f3d371a5fa0 R15: 00007ffd6f3961f8 [ 190.456331][ T7840] [ 190.740047][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.746055][ C1] hrtimer: interrupt took 283109751 ns [ 190.846077][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.093164][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.495301][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.495316][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 191.501363][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.714290][ T7869] netlink: 330 bytes leftover after parsing attributes in process `syz.4.320'. [ 191.779109][ T5831] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 191.779148][ T5831] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 191.795115][ T5831] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 191.795153][ T5831] Bluetooth: hci4: Unknown advertising packet type: 0x40 [ 191.803331][ T5831] Bluetooth: hci4: adv larger than maximum supported [ 191.810562][ T5831] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 191.827260][ T5831] Bluetooth: hci4: Malformed LE Event: 0x0d [ 192.522646][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 193.574246][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.103371][ T7927] raw_sendmsg: syz.4.332 forgot to set AF_INET. Fix it! [ 194.711859][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.718393][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.123465][ T7949] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 195.193169][ T7949] CIFS mount error: No usable UNC path provided in device string! [ 195.193169][ T7949] [ 195.236371][ T7949] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 195.655628][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.325602][ T8012] FAULT_INJECTION: forcing a failure. [ 197.325602][ T8012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.403086][ T8012] CPU: 1 UID: 0 PID: 8012 Comm: syz.3.351 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 197.403132][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 197.403144][ T8012] Call Trace: [ 197.403154][ T8012] [ 197.403163][ T8012] dump_stack_lvl+0x16c/0x1f0 [ 197.403197][ T8012] should_fail_ex+0x50a/0x650 [ 197.403238][ T8012] _copy_from_iter+0x2a1/0x1560 [ 197.403265][ T8012] ? trace_lock_acquire+0x14e/0x1f0 [ 197.403297][ T8012] ? __pfx__copy_from_iter+0x10/0x10 [ 197.403318][ T8012] ? __virt_addr_valid+0x1a4/0x590 [ 197.403355][ T8012] ? __virt_addr_valid+0x5e/0x590 [ 197.403377][ T8012] ? __phys_addr+0xc6/0x150 [ 197.403398][ T8012] ? __phys_addr_symbol+0x30/0x80 [ 197.403422][ T8012] ? __check_object_size+0x488/0x710 [ 197.403450][ T8012] proc_sys_call_handler+0x31e/0x5a0 [ 197.403489][ T8012] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 197.403539][ T8012] vfs_write+0x5ae/0x1150 [ 197.403572][ T8012] ? __pfx_proc_sys_write+0x10/0x10 [ 197.403608][ T8012] ? __pfx___mutex_lock+0x10/0x10 [ 197.403636][ T8012] ? __pfx_vfs_write+0x10/0x10 [ 197.403689][ T8012] ksys_write+0x12b/0x250 [ 197.403720][ T8012] ? __pfx_ksys_write+0x10/0x10 [ 197.403763][ T8012] do_syscall_64+0xcd/0x250 [ 197.403793][ T8012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.403826][ T8012] RIP: 0033:0x7f355598cde9 [ 197.403845][ T8012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.403866][ T8012] RSP: 002b:00007f3556749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.403900][ T8012] RAX: ffffffffffffffda RBX: 00007f3555ba5fa0 RCX: 00007f355598cde9 [ 197.403916][ T8012] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 197.403929][ T8012] RBP: 00007f3556749090 R08: 0000000000000000 R09: 0000000000000000 [ 197.403942][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.403956][ T8012] R13: 0000000000000000 R14: 00007f3555ba5fa0 R15: 00007ffe8b0bfd48 [ 197.403987][ T8012] [ 199.722139][ T8051] FAULT_INJECTION: forcing a failure. [ 199.722139][ T8051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 199.794909][ T8051] CPU: 1 UID: 0 PID: 8051 Comm: syz.5.362 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 199.794940][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 199.794953][ T8051] Call Trace: [ 199.794959][ T8051] [ 199.794969][ T8051] dump_stack_lvl+0x16c/0x1f0 [ 199.795004][ T8051] should_fail_ex+0x50a/0x650 [ 199.795037][ T8051] ? __pfx___might_resched+0x10/0x10 [ 199.795077][ T8051] should_fail_alloc_page+0xe7/0x130 [ 199.795103][ T8051] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 199.795146][ T8051] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 199.795186][ T8051] ? __pfx_mark_lock+0x10/0x10 [ 199.795215][ T8051] ? hlock_class+0x4e/0x130 [ 199.795239][ T8051] ? __lock_acquire+0xcc5/0x3c40 [ 199.795279][ T8051] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 199.795316][ T8051] ? hlock_class+0x4e/0x130 [ 199.795357][ T8051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 199.795394][ T8051] ? policy_nodemask+0xea/0x4e0 [ 199.795433][ T8051] alloc_pages_mpol+0x1fc/0x540 [ 199.795475][ T8051] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 199.795510][ T8051] ? find_held_lock+0x2d/0x110 [ 199.795541][ T8051] alloc_pages_noprof+0x131/0x390 [ 199.795578][ T8051] __pmd_alloc+0x3f/0x870 [ 199.795611][ T8051] __handle_mm_fault+0x9fb/0x2c60 [ 199.795654][ T8051] ? __pfx___handle_mm_fault+0x10/0x10 [ 199.795686][ T8051] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 199.795738][ T8051] ? find_vma+0xc0/0x140 [ 199.795765][ T8051] ? __pfx_find_vma+0x10/0x10 [ 199.795797][ T8051] handle_mm_fault+0x3fa/0xaa0 [ 199.795837][ T8051] do_user_addr_fault+0x7a3/0x13f0 [ 199.795877][ T8051] exc_page_fault+0x5c/0xc0 [ 199.795903][ T8051] asm_exc_page_fault+0x26/0x30 [ 199.795934][ T8051] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 199.795968][ T8051] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 199.795989][ T8051] RSP: 0018:ffffc900033a7b28 EFLAGS: 00050206 [ 199.796008][ T8051] RAX: 0000000000000001 RBX: 000000000000fdef RCX: 000000000000fdef [ 199.796022][ T8051] RDX: ffffed100f5f3fbe RSI: 0000000000000000 RDI: ffff88807af90000 [ 199.796037][ T8051] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100f5f3fbd [ 199.796051][ T8051] R10: ffff88807af9fdee R11: 0000000000000000 R12: ffffc900033a7da0 [ 199.796065][ T8051] R13: 000000000000fdef R14: ffff88807af90000 R15: 00007ffffffff000 [ 199.796099][ T8051] _copy_from_iter+0x385/0x1560 [ 199.796125][ T8051] ? trace_lock_acquire+0x14e/0x1f0 [ 199.796164][ T8051] ? __pfx__copy_from_iter+0x10/0x10 [ 199.796185][ T8051] ? __virt_addr_valid+0x1a4/0x590 [ 199.796214][ T8051] ? __virt_addr_valid+0x5e/0x590 [ 199.796235][ T8051] ? __phys_addr+0xc6/0x150 [ 199.796256][ T8051] ? __phys_addr_symbol+0x30/0x80 [ 199.796279][ T8051] ? __check_object_size+0x488/0x710 [ 199.796306][ T8051] proc_sys_call_handler+0x31e/0x5a0 [ 199.796345][ T8051] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 199.796393][ T8051] vfs_write+0x5ae/0x1150 [ 199.796425][ T8051] ? __pfx_proc_sys_write+0x10/0x10 [ 199.796460][ T8051] ? __pfx___mutex_lock+0x10/0x10 [ 199.796487][ T8051] ? __pfx_vfs_write+0x10/0x10 [ 199.796540][ T8051] ksys_write+0x12b/0x250 [ 199.796571][ T8051] ? __pfx_ksys_write+0x10/0x10 [ 199.796613][ T8051] do_syscall_64+0xcd/0x250 [ 199.796643][ T8051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.796673][ T8051] RIP: 0033:0x7f3d36f8cde9 [ 199.796691][ T8051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.796711][ T8051] RSP: 002b:00007f3d37e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.796731][ T8051] RAX: ffffffffffffffda RBX: 00007f3d371a5fa0 RCX: 00007f3d36f8cde9 [ 199.796746][ T8051] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 199.796760][ T8051] RBP: 00007f3d37e14090 R08: 0000000000000000 R09: 0000000000000000 [ 199.796773][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.796786][ T8051] R13: 0000000000000000 R14: 00007f3d371a5fa0 R15: 00007ffd6f3961f8 [ 199.796818][ T8051] [ 201.203289][ T8075] FAULT_INJECTION: forcing a failure. [ 201.203289][ T8075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.243656][ T8075] CPU: 1 UID: 0 PID: 8075 Comm: syz.3.368 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 201.243696][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 201.243712][ T8075] Call Trace: [ 201.243720][ T8075] [ 201.243731][ T8075] dump_stack_lvl+0x16c/0x1f0 [ 201.243770][ T8075] should_fail_ex+0x50a/0x650 [ 201.243818][ T8075] _copy_to_user+0x32/0xd0 [ 201.243849][ T8075] tomoyo_flush+0x168/0x500 [ 201.243893][ T8075] tomoyo_set_string+0xaf/0xe0 [ 201.243928][ T8075] tomoyo_io_printf+0x26f/0x2f0 [ 201.243966][ T8075] ? __pfx_tomoyo_io_printf+0x10/0x10 [ 201.244013][ T8075] ? __pfx_tomoyo_addprintf+0x10/0x10 [ 201.244086][ T8075] ? __might_fault+0x13b/0x190 [ 201.244125][ T8075] tomoyo_print_number_union_nospace.part.0+0x1e1/0x2a0 [ 201.244167][ T8075] ? __pfx_tomoyo_print_number_union_nospace.part.0+0x10/0x10 [ 201.244232][ T8075] tomoyo_print_entry+0x2086/0x2720 [ 201.244271][ T8075] ? __might_fault+0x13b/0x190 [ 201.244296][ T8075] ? __pfx_lock_release+0x10/0x10 [ 201.244330][ T8075] ? trace_lock_acquire+0x14e/0x1f0 [ 201.244363][ T8075] ? __pfx_tomoyo_print_entry+0x10/0x10 [ 201.244399][ T8075] ? lock_acquire+0x2f/0xb0 [ 201.244429][ T8075] ? __might_fault+0xe3/0x190 [ 201.244455][ T8075] ? __might_fault+0xe3/0x190 [ 201.244487][ T8075] ? _copy_to_user+0x48/0xd0 [ 201.244522][ T8075] tomoyo_read_domain2+0xa3/0x380 [ 201.244564][ T8075] tomoyo_read_domain+0x3d2/0x9c0 [ 201.244612][ T8075] tomoyo_read_control+0x2a0/0x550 [ 201.244654][ T8075] ? __pfx_tomoyo_read+0x10/0x10 [ 201.244690][ T8075] vfs_read+0x1df/0xbf0 [ 201.244725][ T8075] ? __fget_files+0x1fc/0x3a0 [ 201.244760][ T8075] ? __pfx___mutex_lock+0x10/0x10 [ 201.244790][ T8075] ? __pfx_vfs_read+0x10/0x10 [ 201.244833][ T8075] ? __fget_files+0x206/0x3a0 [ 201.244879][ T8075] ksys_read+0x12b/0x250 [ 201.244912][ T8075] ? __pfx_ksys_read+0x10/0x10 [ 201.244957][ T8075] do_syscall_64+0xcd/0x250 [ 201.244989][ T8075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.245032][ T8075] RIP: 0033:0x7f355598cde9 [ 201.245055][ T8075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.245078][ T8075] RSP: 002b:00007f3556749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.245103][ T8075] RAX: ffffffffffffffda RBX: 00007f3555ba5fa0 RCX: 00007f355598cde9 [ 201.245120][ T8075] RDX: 0000000000001000 RSI: 0000400000000080 RDI: 0000000000000007 [ 201.245136][ T8075] RBP: 00007f3555a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.245152][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.245167][ T8075] R13: 0000000000000000 R14: 00007f3555ba5fa0 R15: 00007ffe8b0bfd48 [ 201.245202][ T8075] [ 203.729050][ T8119] nfs: Unknown parameter 'Œ'Àå†ØSÇEûõ²\aš‡íïµÃ§’šhpœø1éW #ŽÕ N' [ 204.477559][ T8107] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 210.292551][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.310547][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.323890][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.333932][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.341555][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.353707][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.889439][ T8237] chnl_net:caif_netlink_parms(): no params data found [ 211.371369][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.399277][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.413408][ T8237] bridge_slave_0: entered allmulticast mode [ 211.433710][ T8237] bridge_slave_0: entered promiscuous mode [ 211.470363][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.513421][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.520737][ T8237] bridge_slave_1: entered allmulticast mode [ 211.550457][ T8237] bridge_slave_1: entered promiscuous mode [ 211.855105][ T8237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.904359][ T8237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.325377][ T8237] team0: Port device team_slave_0 added [ 212.384890][ T8237] team0: Port device team_slave_1 added [ 212.453165][ T5831] Bluetooth: hci1: command tx timeout [ 212.800760][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.833052][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.917045][ T8237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.136361][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.165439][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.249017][ T8237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.814039][ T8237] hsr_slave_0: entered promiscuous mode [ 213.820522][ T8237] hsr_slave_1: entered promiscuous mode [ 213.859083][ T8237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.883095][ T8237] Cannot create hsr debugfs directory [ 214.540798][ T5831] Bluetooth: hci1: command tx timeout [ 215.003281][ T8237] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 215.085738][ T8237] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 215.127885][ T8237] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 215.171790][ T8237] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 215.836502][ T8237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.915244][ T8237] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.984425][ T7581] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.991605][ T7581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.205497][ T7581] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.212659][ T7581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.613450][ T5831] Bluetooth: hci1: command tx timeout [ 217.077862][ T8237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.237307][ T8318] FAULT_INJECTION: forcing a failure. [ 217.237307][ T8318] name failslab, interval 1, probability 0, space 0, times 0 [ 217.273213][ T8318] CPU: 0 UID: 0 PID: 8318 Comm: syz.5.400 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 217.273248][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 217.273262][ T8318] Call Trace: [ 217.273270][ T8318] [ 217.273281][ T8318] dump_stack_lvl+0x16c/0x1f0 [ 217.273317][ T8318] should_fail_ex+0x50a/0x650 [ 217.273355][ T8318] ? fs_reclaim_acquire+0xae/0x150 [ 217.273388][ T8318] ? sk_prot_alloc+0x1a8/0x2a0 [ 217.273427][ T8318] should_failslab+0xc2/0x120 [ 217.273464][ T8318] __kmalloc_noprof+0xcb/0x510 [ 217.273499][ T8318] ? __wake_up+0x3f/0x60 [ 217.273534][ T8318] sk_prot_alloc+0x1a8/0x2a0 [ 217.273573][ T8318] sk_alloc+0x36/0xb90 [ 217.273602][ T8318] ? __pfx_genl_release+0x10/0x10 [ 217.273634][ T8318] __netlink_create+0x5e/0x2c0 [ 217.273655][ T8318] ? __wake_up+0x3f/0x60 [ 217.273686][ T8318] netlink_create+0x3a4/0x630 [ 217.273712][ T8318] ? __pfx_genl_bind+0x10/0x10 [ 217.273741][ T8318] ? __pfx_genl_unbind+0x10/0x10 [ 217.273773][ T8318] __sock_create+0x335/0x8d0 [ 217.273811][ T8318] __sys_socket+0x14f/0x260 [ 217.273838][ T8318] ? __pfx___sys_socket+0x10/0x10 [ 217.273868][ T8318] ? do_user_addr_fault+0x83d/0x13f0 [ 217.273906][ T8318] __x64_sys_socket+0x72/0xb0 [ 217.273930][ T8318] ? lockdep_hardirqs_on+0x7c/0x110 [ 217.273957][ T8318] do_syscall_64+0xcd/0x250 [ 217.273987][ T8318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.274031][ T8318] RIP: 0033:0x7f3d36f8ed07 [ 217.274051][ T8318] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.274075][ T8318] RSP: 002b:00007f3d37e12fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 217.274098][ T8318] RAX: ffffffffffffffda RBX: 00007f3d371a5fa0 RCX: 00007f3d36f8ed07 [ 217.274114][ T8318] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 217.274129][ T8318] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 217.274143][ T8318] R10: 0000400000000040 R11: 0000000000000286 R12: 0000000000000000 [ 217.274158][ T8318] R13: 0000000000000000 R14: 00007f3d371a5fa0 R15: 00007ffd6f3961f8 [ 217.274188][ T8318] [ 218.212300][ T8237] veth0_vlan: entered promiscuous mode [ 218.287435][ T8237] veth1_vlan: entered promiscuous mode [ 218.436516][ T8237] veth0_macvtap: entered promiscuous mode [ 218.484868][ T8237] veth1_macvtap: entered promiscuous mode [ 218.551584][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.583163][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.613004][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.643161][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.673111][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.693119][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.693228][ T5831] Bluetooth: hci1: command tx timeout [ 218.764515][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.818970][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.872489][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.899055][ T8335] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 218.903897][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.937121][ T8335] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 218.943017][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.965769][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.003024][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.012905][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.042999][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.052877][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.103367][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.134651][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.165514][ T8237] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.183747][ T8237] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.192511][ T8237] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.233298][ T8237] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.629716][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.663495][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.828130][ T7579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.866627][ T7579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.874980][ T7579] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.233532][ T7579] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.395175][ T7579] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.588567][ T29] audit: type=1326 audit(6034526695.455:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.6.386" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3198f8cde9 code=0x0 [ 221.643359][ T7579] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.016014][ T7579] bridge_slave_1: left allmulticast mode [ 222.021865][ T7579] bridge_slave_1: left promiscuous mode [ 222.037111][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.126990][ T7579] bridge_slave_0: left allmulticast mode [ 222.132704][ T7579] bridge_slave_0: left promiscuous mode [ 222.154815][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.653135][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 223.805922][ T7579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.837807][ T7579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.870279][ T7579] bond0 (unregistering): Released all slaves [ 224.625034][ T8420] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 224.690594][ T8420] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 225.278956][ T7579] hsr_slave_0: left promiscuous mode [ 225.295624][ T7579] hsr_slave_1: left promiscuous mode [ 225.301691][ T7579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.317566][ T7579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.334060][ T7579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.353418][ T7579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.396239][ T7579] veth1_macvtap: left promiscuous mode [ 225.401823][ T7579] veth0_macvtap: left promiscuous mode [ 225.416080][ T7579] veth1_vlan: left promiscuous mode [ 225.433190][ T7579] veth0_vlan: left promiscuous mode [ 225.851858][ T8445] netlink: 'syz.3.421': attribute type 2 has an invalid length. [ 226.449044][ T7579] team0 (unregistering): Port device team_slave_1 removed [ 226.528037][ T7579] team0 (unregistering): Port device team_slave_0 removed [ 228.604500][ T8503] block2mtd: illegal erase size [ 229.660503][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 233.027486][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.441'. [ 233.791350][ T8615] Invalid ELF header magic: != ELF [ 235.103544][ T29] audit: type=1800 audit(6034526708.965:5): pid=8641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.446" name="discovery_nqn" dev="configfs" ino=23449 res=0 errno=0 syzkaller syzkaller login: [ 236.569621][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 239.312077][ T8746] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 239.363760][ T8746] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 239.763272][ T8752] Invalid ELF header magic: != ELF [ 242.864715][ T8825] capability: warning: `syz.5.474' uses 32-bit capabilities (legacy support in use) [ 244.071699][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 244.870435][ T8857] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.893659][ T8857] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 244.939181][ T8857] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 245.017482][ T8857] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 245.075897][ T8857] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 245.105572][ T8857] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 246.126170][ T8935] ================================================================== [ 246.134289][ T8935] BUG: KASAN: slab-use-after-free in force_wakeup_write+0x14d/0x170 [ 246.142318][ T8935] Read of size 1 at addr ffff888028fa3231 by task syz.3.495/8935 [ 246.150071][ T8935] [ 246.152415][ T8935] CPU: 0 UID: 0 PID: 8935 Comm: syz.3.495 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 246.152447][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 246.152463][ T8935] Call Trace: [ 246.152471][ T8935] [ 246.152482][ T8935] dump_stack_lvl+0x116/0x1f0 [ 246.152518][ T8935] print_report+0xc3/0x620 [ 246.152555][ T8935] ? __virt_addr_valid+0x5e/0x590 [ 246.152581][ T8935] ? __phys_addr+0xc6/0x150 [ 246.152606][ T8935] kasan_report+0xd9/0x110 [ 246.152642][ T8935] ? force_wakeup_write+0x14d/0x170 [ 246.152672][ T8935] ? force_wakeup_write+0x14d/0x170 [ 246.152702][ T8935] force_wakeup_write+0x14d/0x170 [ 246.152731][ T8935] ? __pfx_force_wakeup_write+0x10/0x10 [ 246.152759][ T8935] ? rcu_watching_snap_stopped_since+0x51/0x110 [ 246.152788][ T8935] ? trace_lock_acquire+0x14e/0x1f0 [ 246.152817][ T8935] full_proxy_write+0x13c/0x200 [ 246.152848][ T8935] ? __pfx_full_proxy_write+0x10/0x10 [ 246.152878][ T8935] vfs_write+0x24c/0x1150 [ 246.152910][ T8935] ? __fget_files+0x1fc/0x3a0 [ 246.152940][ T8935] ? __pfx___mutex_lock+0x10/0x10 [ 246.152963][ T8935] ? __pfx_vfs_write+0x10/0x10 [ 246.153011][ T8935] ? __fget_files+0x206/0x3a0 [ 246.153041][ T8935] ksys_write+0x12b/0x250 [ 246.153069][ T8935] ? __pfx_ksys_write+0x10/0x10 [ 246.153098][ T8935] do_syscall_64+0xcd/0x250 [ 246.153124][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.153156][ T8935] RIP: 0033:0x7f355598cde9 [ 246.153175][ T8935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.153196][ T8935] RSP: 002b:00007f3556749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.153218][ T8935] RAX: ffffffffffffffda RBX: 00007f3555ba5fa0 RCX: 00007f355598cde9 [ 246.153233][ T8935] RDX: 0000000000000001 RSI: 0000400000001780 RDI: 0000000000000004 [ 246.153246][ T8935] RBP: 00007f3555a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 246.153259][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.153272][ T8935] R13: 0000000000000000 R14: 00007f3555ba5fa0 R15: 00007ffe8b0bfd48 [ 246.153294][ T8935] [ 246.153302][ T8935] [ 246.366108][ T8935] Allocated by task 7581: [ 246.370432][ T8935] kasan_save_stack+0x33/0x60 [ 246.375124][ T8935] kasan_save_track+0x14/0x30 [ 246.379812][ T8935] __kasan_kmalloc+0xaa/0xb0 [ 246.384406][ T8935] __kmalloc_noprof+0x21c/0x510 [ 246.389263][ T8935] ieee802_11_parse_elems_full+0xf2/0x18c0 [ 246.395082][ T8935] ieee80211_inform_bss+0xfd/0x1100 [ 246.400289][ T8935] cfg80211_inform_single_bss_data+0x8f9/0x1df0 [ 246.406539][ T8935] cfg80211_inform_bss_data+0x205/0x3ba0 [ 246.412174][ T8935] cfg80211_inform_bss_frame_data+0x272/0x7a0 [ 246.418246][ T8935] ieee80211_bss_info_update+0x311/0xab0 [ 246.423888][ T8935] ieee80211_ibss_rx_queued_mgmt+0x189c/0x2f50 [ 246.430051][ T8935] ieee80211_iface_work+0xc15/0xf50 [ 246.435257][ T8935] cfg80211_wiphy_work+0x3ed/0x570 [ 246.440373][ T8935] process_one_work+0x9c5/0x1ba0 [ 246.445323][ T8935] worker_thread+0x6c8/0xf00 [ 246.449919][ T8935] kthread+0x3af/0x750 [ 246.453990][ T8935] ret_from_fork+0x45/0x80 [ 246.458415][ T8935] ret_from_fork_asm+0x1a/0x30 [ 246.463179][ T8935] [ 246.465497][ T8935] Freed by task 7581: [ 246.469467][ T8935] kasan_save_stack+0x33/0x60 [ 246.474154][ T8935] kasan_save_track+0x14/0x30 [ 246.478837][ T8935] kasan_save_free_info+0x3b/0x60 [ 246.483865][ T8935] __kasan_slab_free+0x51/0x70 [ 246.488634][ T8935] kfree+0x2c4/0x4d0 [ 246.492535][ T8935] ieee80211_inform_bss+0x76e/0x1100 [ 246.497831][ T8935] cfg80211_inform_single_bss_data+0x8f9/0x1df0 [ 246.504072][ T8935] cfg80211_inform_bss_data+0x205/0x3ba0 [ 246.509705][ T8935] cfg80211_inform_bss_frame_data+0x272/0x7a0 [ 246.515772][ T8935] ieee80211_bss_info_update+0x311/0xab0 [ 246.521500][ T8935] ieee80211_ibss_rx_queued_mgmt+0x189c/0x2f50 [ 246.527661][ T8935] ieee80211_iface_work+0xc15/0xf50 [ 246.532865][ T8935] cfg80211_wiphy_work+0x3ed/0x570 [ 246.537979][ T8935] process_one_work+0x9c5/0x1ba0 [ 246.542925][ T8935] worker_thread+0x6c8/0xf00 [ 246.547523][ T8935] kthread+0x3af/0x750 [ 246.551599][ T8935] ret_from_fork+0x45/0x80 [ 246.556021][ T8935] ret_from_fork_asm+0x1a/0x30 [ 246.560787][ T8935] [ 246.563104][ T8935] The buggy address belongs to the object at ffff888028fa3000 [ 246.563104][ T8935] which belongs to the cache kmalloc-1k of size 1024 [ 246.577164][ T8935] The buggy address is located 561 bytes inside of [ 246.577164][ T8935] freed 1024-byte region [ffff888028fa3000, ffff888028fa3400) [ 246.591058][ T8935] [ 246.593380][ T8935] The buggy address belongs to the physical page: [ 246.599795][ T8935] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028fa1800 pfn:0x28fa0 [ 246.609858][ T8935] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 246.618353][ T8935] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 246.626870][ T8935] page_type: f5(slab) [ 246.630874][ T8935] raw: 00fff00000000240 ffff88801b041dc0 ffffea0000c1be10 ffffea0000c58810 [ 246.639457][ T8935] raw: ffff888028fa1800 0000000000100009 00000000f5000000 0000000000000000 [ 246.648047][ T8935] head: 00fff00000000240 ffff88801b041dc0 ffffea0000c1be10 ffffea0000c58810 [ 246.656724][ T8935] head: ffff888028fa1800 0000000000100009 00000000f5000000 0000000000000000 [ 246.665398][ T8935] head: 00fff00000000003 ffffea0000a3e801 ffffffffffffffff 0000000000000000 [ 246.674072][ T8935] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 246.682733][ T8935] page dumped because: kasan: bad access detected [ 246.689148][ T8935] page_owner tracks the page as allocated [ 246.694857][ T8935] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 317, tgid 317 (kworker/u8:5), ts 10632332651, free_ts 0 [ 246.713353][ T8935] post_alloc_hook+0x181/0x1b0 [ 246.718127][ T8935] get_page_from_freelist+0xfce/0x2f80 [ 246.723596][ T8935] __alloc_frozen_pages_noprof+0x221/0x2470 [ 246.729501][ T8935] new_slab+0x94/0x330 [ 246.733573][ T8935] ___slab_alloc+0xc5d/0x1720 [ 246.738255][ T8935] __slab_alloc.constprop.0+0x56/0xb0 [ 246.743636][ T8935] __kmalloc_node_noprof+0x2f0/0x510 [ 246.748929][ T8935] blk_alloc_flush_queue+0x108/0x2b0 [ 246.754225][ T8935] blk_mq_alloc_and_init_hctx+0xc6c/0x11b0 [ 246.760047][ T8935] blk_mq_realloc_hw_ctxs+0x8e0/0xbe0 [ 246.765426][ T8935] blk_mq_init_allocated_queue+0x39e/0x11f0 [ 246.771328][ T8935] blk_mq_alloc_queue+0x1c3/0x290 [ 246.776357][ T8935] scsi_alloc_sdev+0x890/0xd80 [ 246.781133][ T8935] scsi_probe_and_add_lun+0x789/0xda0 [ 246.786512][ T8935] __scsi_scan_target+0x1ea/0x580 [ 246.791716][ T8935] scsi_scan_channel+0x149/0x1e0 [ 246.796662][ T8935] page_owner free stack trace missing [ 246.802023][ T8935] [ 246.804338][ T8935] Memory state around the buggy address: [ 246.809970][ T8935] ffff888028fa3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.818029][ T8935] ffff888028fa3180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.826093][ T8935] >ffff888028fa3200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.834149][ T8935] ^ [ 246.839790][ T8935] ffff888028fa3280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.847846][ T8935] ffff888028fa3300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.855903][ T8935] ================================================================== [ 246.864051][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.884030][ T8935] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 246.891286][ T8935] CPU: 1 UID: 0 PID: 8935 Comm: syz.3.495 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 246.901900][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 246.911960][ T8935] Call Trace: [ 246.915240][ T8935] [ 246.918168][ T8935] dump_stack_lvl+0x3d/0x1f0 [ 246.922764][ T8935] panic+0x71d/0x800 [ 246.926660][ T8935] ? __pfx_panic+0x10/0x10 [ 246.931084][ T8935] ? preempt_schedule_thunk+0x1a/0x30 [ 246.936471][ T8935] ? preempt_schedule_common+0x44/0xc0 [ 246.941948][ T8935] check_panic_on_warn+0xab/0xb0 [ 246.946974][ T8935] end_report+0x117/0x180 [ 246.951325][ T8935] kasan_report+0xe9/0x110 [ 246.955756][ T8935] ? force_wakeup_write+0x14d/0x170 [ 246.960965][ T8935] ? force_wakeup_write+0x14d/0x170 [ 246.966224][ T8935] force_wakeup_write+0x14d/0x170 [ 246.971290][ T8935] ? __pfx_force_wakeup_write+0x10/0x10 [ 246.976854][ T8935] ? rcu_watching_snap_stopped_since+0x51/0x110 [ 246.983102][ T8935] ? trace_lock_acquire+0x14e/0x1f0 [ 246.988306][ T8935] full_proxy_write+0x13c/0x200 [ 246.993166][ T8935] ? __pfx_full_proxy_write+0x10/0x10 [ 246.998541][ T8935] vfs_write+0x24c/0x1150 [ 247.002877][ T8935] ? __fget_files+0x1fc/0x3a0 [ 247.007560][ T8935] ? __pfx___mutex_lock+0x10/0x10 [ 247.012586][ T8935] ? __pfx_vfs_write+0x10/0x10 [ 247.017360][ T8935] ? __fget_files+0x206/0x3a0 [ 247.022046][ T8935] ksys_write+0x12b/0x250 [ 247.026380][ T8935] ? __pfx_ksys_write+0x10/0x10 [ 247.031237][ T8935] do_syscall_64+0xcd/0x250 [ 247.035743][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.041644][ T8935] RIP: 0033:0x7f355598cde9 [ 247.046056][ T8935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.065669][ T8935] RSP: 002b:00007f3556749038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.074087][ T8935] RAX: ffffffffffffffda RBX: 00007f3555ba5fa0 RCX: 00007f355598cde9 [ 247.082056][ T8935] RDX: 0000000000000001 RSI: 0000400000001780 RDI: 0000000000000004 [ 247.090020][ T8935] RBP: 00007f3555a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 247.097987][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.105954][ T8935] R13: 0000000000000000 R14: 00007f3555ba5fa0 R15: 00007ffe8b0bfd48 [ 247.113934][ T8935] [ 247.117174][ T8935] Kernel Offset: disabled [ 247.121494][ T8935] Rebooting in 86400 seconds..