last executing test programs: 9m2.973053751s ago: executing program 2 (id=753): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000340)='\v\f_U\xe0w\xbf\xe3\xb8\x92\xac.X_|\xc8R\x99!\xd2\xfb\xfe\xa7\xe4&#sn\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'a\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00<\xbc\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87\x18\xe6,\xad_\xfe~M\x80X\x1ak7g\xff\xc8', 0x52, 0x5231) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0xfffffffffffff25c, 0x3, 0x121, 0x16, r1, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value_ptr=&(0x7f0000000680)=0x4, "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x2, 0x100) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, 0x0, 0xff, 0x9) r3 = socket(0x1a, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x20c101, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x110) fcntl$auto(r5, 0x400, 0x1) fcntl$auto(r5, 0xb, 0x0) ioctl$auto_USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)={0x5, 0x6, &(0x7f00000006c0)="a01d9cf38a3b12807a14edaf30b1f0841b6b73bf6bb16cde85dd649e805695aba8d7fc4d77348fd537bd9ed125cadaab7371b8d41f5e00466966149219cb2b583228eb8b068cfbdd0a83f04e3c9355960f5da4ec214206da311cabf6105a6e99d7809d2dbb8d685c91b288ff8f04865d2d789854d7ddc5f23b73c5db85b5c83d22ab70c68b39b777a609c00c1bdb9ca20e4647fd690b91e38a96a69bee05ee4884f0dad353cff2ab3ce435"}) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, 0x0, 0x41) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x8800) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) ioctl$auto(0x3, 0xc038563c, r5) socket(0xa, 0x1, 0x100) 9m1.755467868s ago: executing program 2 (id=754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r1, 0x400, 0x70bd29, 0x25c7dbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x6c835) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000002c00010004000000000000000c00010040000000000000000a"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r3 = socket(0x10, 0x2, 0x6) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x5, 0x400a) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00') socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r6 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_percent\x00', 0x40, 0x0) read$auto(r6, &(0x7f0000000040)=',^{\'\x00', 0x7) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0xc8101, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) pread64$auto(r7, 0x0, 0x8, 0x5006) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 8m57.405360615s ago: executing program 2 (id=767): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = fsmount$auto(r0, 0x3b, 0x9) ioctl$auto_EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000040)=0x7) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r4, 0x80044dfe, &(0x7f0000000040)) unshare$auto(0x40000080) 8m54.887152436s ago: executing program 2 (id=775): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) (async) socket(0x10, 0x3, 0x6) (async) r0 = socket(0x10, 0x2, 0x4) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r0, @ANYBLOB="0800fb00", @ANYRES16], 0x2f0}}, 0x50) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (async) socket(0x11, 0x80003, 0x300) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) pread64$auto(r2, 0x0, 0x8, 0x8) socket(0xa, 0x801, 0x100) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4008010}, 0x48850) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 8m54.419756522s ago: executing program 2 (id=778): ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000100)="e66669de0e48566b4f6c36a0f7d91868938fd5ad1fb5fb24bff07077998375b7760ee8f878ff48b93d73e3e75266b35cd98857891130156901a7fa2902c73604319db9176aead51972ff2c262209b5e29debf7f0d7a79f014f4a1b5ebfc743456dff97ab51da39e04c6edb20fd66781922232d671b4cb33d2c71b1c0010851e1f232260e1cd6e4cd17", 0x8, &(0x7f00000001c0)="1aad20e1228dda738da9acc46534843c7931a0087f7c51861d58dac08698be1d96a93246accc7f1b8689a7ec59e7652350edb6d7680ea6411306", 0x280000, &(0x7f0000000200)="f2a96a80234b98e17f23fcf89157e74d1be4be3e9f8a0009db7d109d508360f47b5f7b55c51c95c50fb89798b3de6ae053c5c63abcf6ec105909a5814c8d289c2ed2f95247eed34556c227ac6b4c8521a146f9f7d82d2601ad328505e733d27367483735236b6661f7175dc2b30604c0a44d2397e9001173fee86056f380167824abc3a6861101a64a1324ab8a4f60beb53ed10f49dfcee974b6eb6b", &(0x7f0000000300)=0x6510}) r1 = bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000380)=@iter_create={r0, 0x7f}, 0x1000) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000480)='/proc/swaps\x00', 0x6800c1, 0x0) msgctl$auto_MSG_STAT_ANY(0x1, 0xd, &(0x7f0000000580)={{0x4ee25483, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffa, 0x8, 0x6, 0x1}, &(0x7f0000000500)=0x2, &(0x7f0000000540)=0x2, 0x1, 0x19a, 0x2, 0x3, 0x8000000000000, 0x9, 0x3, 0x9, @raw=0x2, @inferred=0xffffffffffffffff}) fstat$auto(r0, &(0x7f0000000600)={0xc00000000000000, 0x8, 0x7fff, 0x0, 0xee01, 0x0, 0x0, 0x80, 0x6, 0x5, 0x1, 0x80000001, 0x1800000000000, 0x6a, 0x8, 0x10000, 0xffff}) newfstatat$auto(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f00000006c0)={0x3, 0x654b9a73, 0x7, 0x0, r4, r6, 0x0, 0x55f2af7, 0xfffffffffffffff9, 0x4563, 0x7, 0x3000000000, 0x9, 0x200, 0xfffffffffffeffff, 0x3ff, 0x2}, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'ip6gretap0\x00', 0x0}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0xc0, 0x0) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000880), r7) sendmsg$auto_NL80211_CMD_SET_CQM(r2, &(0x7f0000002e00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002dc0)={&(0x7f00000008c0)={0x24f8, r10, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_MBSSID_CONFIG={0x30, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x7}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x40}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0xf}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0xfa}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r8}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3460b2c0}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x90}, @NL80211_ATTR_FILS_KEK={0x3c, 0xf2, "082139add2adf43e9257df6d30171f76c53c80a5beff16270897881909182ade10a4100058a85f16c1933ca38ea89bbb09e1f11fcf117963"}, @NL80211_ATTR_STA_FLAGS={0x10e0, 0x11, 0x0, 0x1, [@nested={0x10, 0x82, 0x0, 0x1, [@typed={0x8, 0x49, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0xd3}]}, @nested={0x20, 0xdb, 0x0, 0x1, [@typed={0x4, 0x11b}, @nested={0x4, 0x47}, @nested={0x4, 0x13a}, @typed={0x8, 0xcb, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0xe9, 0x0, 0x0, @fd=r0}]}, @nested={0x10ac, 0x25, 0x0, 0x1, [@generic="9789f519c1576738563ee3baf918ee85cf88b086eb20a4a99051975e094b416e4ad7154dee97a8c829c61ce27959019c3e525508f54e9b1af068b27d14b9267f0f6871eb256cb656010b7041d6c9acc7", @typed={0xc, 0x16, 0x0, 0x0, @u64=0x79}, @generic="16df489370c03728e0ed14aab2bcf67b963653eab5d8e83c4901cf87d9f850ffdc398a0927acfdbb223f2e686ce570b3098896b92dcfd8f69aa70ff28b5874dd", @typed={0x4, 0xbe}, @nested={0x4, 0x1}, @generic="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", @nested={0x4, 0x14f}]}]}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x90}, @NL80211_ATTR_CSA_IES={0x136e, 0xb9, 0x0, 0x1, [@typed={0x8, 0x12, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="52765c13c922c7fa0fd2fdf923f1854127a3dec14a4081c3f8bae9d1668180aebe03f6806624cd0b34cf0451f5fcfded7c3fdc85e72a27aefb24caf070a3a3ace3cff2741af2c74c1c6d5915b8be1da5bd37eea5bf1ce6f544ea0adac97d8dbbfb4a74ea7d6d5345f29adecf925bd40f9d57087db3cff508783ddb34cd4f32a4aecb5fd8d6a7ef31a06469d0efae2ed7ff802d10edcd0b474027ebb7cf2529790c1d7ff4d7dcd1d9adeda1e63ad66c930d8c6ec977677566", @typed={0x4, 0x89}, @generic="8e10991df1fd7028bfe70196fe52cbb546bb9bc28bccc30b638c5ee70fd777fde48b0492f3f0", @nested={0x1e, 0xa2, 0x0, 0x1, [@nested={0x4, 0x7a}, @typed={0xc, 0xec, 0x0, 0x0, @u64=0x5}, @generic="b909e843c0aa119d5bf4"]}, @generic="96162cad66bb308e3378255118749055c8323c178a9020991475f7b80b038ef63e782f668e0650ff89f9ce6b3f9fd8892f078454d24d04b0d908053d1068f880ff74bd95c100f6467da1ee4092f17b9748e1d63eff31f5d93702dceb1b716b868646f0b94e45c33b2fdf0f9e23baedc30708738106ea52162a2d0bbee05cd6d60e1cea83cd9450ea1dbf6a999acefb1d11b460e92317947765ea23577ac41fcaf50a373c5aedf60799c3374923c55c0fc6d224c9afe9003dd101c0b09ea338dcac65e13a0d99f56fd586d796812940cfd92725", @generic="45d422009e53599dac7f5f182734a4c28e85ab86cd91bfd6b7fc8d7e1aa5ee5a7594c60b8819abf10a9404632fb5ab14e569453aa16b9a45bdbd17f857b4f606ba3a7f6de50f06be3f0d9eb7d84d0428f4491c30587a96db2cbf45b7dcccac49cdad4e424c45c75368fb5129165752cb70f5351b2fa91bd2b23902c36d777f926777c72b5ff2371258a0655415a5435127f1d6247e1bc8", @nested={0x100c, 0x46, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @pid=r5}, @generic="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"]}, @typed={0x33, 0xb3, 0x0, 0x0, @binary="5eceae473773cf8cae2ee53cde487102e68b46da10b06bcbda99bbd39d14214e9df6c2e77de3a0ef298532afffaeb6"}, @generic="71f46d87963f3cf3e7b5e45da6a39887f5f8cd0ae0e905c6891c09b903be92817efccbe9dcecb8ef72f2a8f44ee501739036fb5aa46091368d6d0a899768007521c0680e20872ffafcb739b8a7042bcc312bbfefa9e71da5f3db48871dc96975a6bd7a2dd048c0647f1047856ccce59558f9c296fadc53fb03516371747d95c09d125021e8ef33ec7a9f1c9f3daf955454e9d84ccf805844951c9c120ee04f42a60b80c1d60711d3b0d7c7ccdd4af0fa0ead9598831e"]}]}, 0x24f8}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) sendmsg$auto_NL80211_CMD_SET_PMKSA(r1, &(0x7f0000002f80)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e80)={0xb0, r10, 0x300, 0x70bd2d, 0x3000000, {}, [@NL80211_ATTR_S1G_CAPABILITY={0x91, 0x128, "6223062805228be12b562ff59f8aab57655fcc787c2f0a337cc53030eda5cacc3cfe3fe577a47c0497d745487af4c0d89ed9b46f2f29d646c6fff129bf473ff7a53d6249588c08f59ea0cf71dcf59a9e596f2785ea938cc5292bd53ad5de2ea6925d065dd996f19680e9f9d3078d89f1a69ee84549e8f354d4f4c044b326172832325648c0729339e6aaa334e9"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44}, 0x40000) r11 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000003000), r2) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x99080}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x34, r11, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x1800}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004080}, 0x1) r12 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000003100)='/sys/devices/virtual/bluetooth/hci2/hci2:200/power/autosuspend_delay_ms\x00', 0x1d1b00, 0x0) ioctl$auto(r3, 0xe3, r12) sendmsg$auto_NL80211_CMD_COLOR_CHANGE_REQUEST(r1, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003280)={&(0x7f0000003200)={0x7c, r10, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6}, @NL80211_ATTR_FILS_ERP_REALM={0x48, 0xfa, "89a8f94f73fb03da3187c76dbc030fcebe9a9326467f7e5d7f0b9902e7d9b39ac6afa452e45e1a34525c84528f96a0ea4eeb34a5307066f976c22e7a281de37a30f26b8e"}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x7}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20000004) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000003300)='/dev/sequencer2\x00', 0xa0840, 0x0) fcntl$auto_F_SETFD(r9, 0x2, 0x7) 8m54.347283655s ago: executing program 2 (id=779): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r1, 0x84, 0x6, 0x0, &(0x7f0000000000)=0x98) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001380)=""/134, 0x86) 8m39.181713131s ago: executing program 32 (id=779): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r1, 0x84, 0x6, 0x0, &(0x7f0000000000)=0x98) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001380)=""/134, 0x86) 2m41.811825972s ago: executing program 4 (id=1943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) ioctl$auto(r2, 0x6f2d, 0xffffffffffffffff) 2m41.602630826s ago: executing program 4 (id=1944): openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) ioctl$auto(0x3, 0x89ed, 0x74) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) r1 = socket(0x10, 0x80002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x7, 0x0) timerfd_settime$auto(r1, 0x3, &(0x7f0000000000)={{0x6, 0x59}, {0x0, 0xa2b}}, 0x0) timerfd_settime$auto(r1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) get_robust_list$auto(0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40}, 0x4}}, 0x6a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="42bf", 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) times$auto(0xfffffffffffffffc) getdents$auto(r4, 0x0, 0xfff) r5 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, 0x0) syz_clone3(&(0x7f0000000300)={0x10000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x2}, &(0x7f0000000180)=""/228, 0xe4, &(0x7f0000000280)=""/39, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/nfsd.fh/channel\x00', 0x8f3b7a51b80ebd01, 0x0) 2m41.296847549s ago: executing program 4 (id=1947): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28102, 0x0) r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000440)={0x18, r0, 0x301, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000874}, 0x8c0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1007fff, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x10000, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r3, 0x5453, r3) getrandom$auto(0x0, 0x8, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8880) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/ptyab/power/autosuspend_delay_ms\x00', 0xc2082, 0x0) write$auto(r4, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80840, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf, 0x2, 0x8000, 0x3000}, 0x4) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 2m40.34889775s ago: executing program 4 (id=1949): mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x7, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(r0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x21, 0x309, 0x6, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BLKTRACESETUP32(r3, 0xc0401273, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2m39.288937257s ago: executing program 4 (id=1951): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x5, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) write$auto_ppp_device_fops_ppp_generic(r0, &(0x7f0000000200)="c021", 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x8, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socket(0x10, 0x2, 0x6) r2 = socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fcdbdf25110000001c001e8018002213000046800400f7800a00108000006e79a1002a4f"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x3) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) close_range$auto(0x2, 0x8, 0x0) 2m38.223850549s ago: executing program 4 (id=1954): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(0x0, 0xc9, 0xfffffffa) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x80) fcntl$auto(0x3, 0x4, 0xa553) open(0x0, 0x22240, 0x154) mmap$auto(0xfffffffffffffffd, 0x4, 0x1, 0xeb2, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) r0 = open(0x0, 0x5db443, 0x180) fcntl$auto(r0, 0x5, 0x40003f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8182, 0x0) mmap$auto(0xc024, 0xe983, 0x7, 0xeb1, r1, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0xdcf01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) setsockopt$auto(0xffffffffffffffff, 0x7, 0xc, 0x0, 0x567) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap$auto(0x0, 0x2000a, 0x20004000000000df, 0xeb0, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) landlock_restrict_self$auto(0xffffffffffffffff, 0x2) r3 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) ioctl$auto(r3, 0x1, r3) 2m22.701853327s ago: executing program 33 (id=1954): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(0x0, 0xc9, 0xfffffffa) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x80) fcntl$auto(0x3, 0x4, 0xa553) open(0x0, 0x22240, 0x154) mmap$auto(0xfffffffffffffffd, 0x4, 0x1, 0xeb2, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) r0 = open(0x0, 0x5db443, 0x180) fcntl$auto(r0, 0x5, 0x40003f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8182, 0x0) mmap$auto(0xc024, 0xe983, 0x7, 0xeb1, r1, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0xdcf01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) setsockopt$auto(0xffffffffffffffff, 0x7, 0xc, 0x0, 0x567) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap$auto(0x0, 0x2000a, 0x20004000000000df, 0xeb0, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) landlock_restrict_self$auto(0xffffffffffffffff, 0x2) r3 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) ioctl$auto(r3, 0x1, r3) 6.233076665s ago: executing program 5 (id=2379): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0x40047438, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x2fd, 0x1, 0x101, 0x0, &(0x7f0000000040)}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000003) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) read$auto(r2, 0x0, 0xcefbce6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, &(0x7f0000000000)=""/156, 0x9c) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) kill$auto(0x0, 0x11) syz_clone3(&(0x7f0000000500)={0x400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x8, 0xd4, 0x7, 0x9, 0x0, 0x10001, 0x1, 0x2, {0x8, 0x10000}, 0x1, 0x6, 0xfffffffffffffff9, 0x1007ffe, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0x6, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) setsockopt$auto(r3, 0x8001, 0x9, &(0x7f0000000300)='\x00\x90\x01\x17O\xa3\x93X[\xe9L\xa2\f\x9c\x7f\xe8 \x85\xe5\xc4$K\xaa\xe7\x83\x04X[\xa43P\x1e~\x1c\x92\x9a\xd2\x99M/\x94\x94\xc33\xaa\x8b\xd1\x97U9\xee\xd8\x0f\xf2\x85%\xc7\xc6\v`\x8e\x18\x92hGD@\x1c\xf4\x15\x8f\x11{p\xac\xfe\xff\'m\x05\xec\xa1\xbfD#\x00\x1e\xb1N]\xe8\xcd\x8av\x17\x80\x8a|*\xf0\xae7~\xa8!\xcc<\x9b\xa28\xcem\vL\x05\xa1v\x8c\\0xffffffffffffffff, &(0x7f0000000100)="e66669de0e48566b4f6c36a0f7d91868938fd5ad1fb5fb24bff07077998375b7760ee8f878ff48b93d73e3e75266b35cd98857891130156901a7fa2902c73604319db9176aead51972ff2c262209b5e29debf7f0d7a79f014f4a1b5ebfc743456dff97ab51da39e04c6edb20fd66781922232d671b4cb33d2c71b1c0010851e1f232260e1cd6e4cd17", 0x8, &(0x7f00000001c0)="1aad20e1228dda738da9acc46534843c7931a0087f7c51861d58dac08698be1d96a93246accc7f1b8689a7ec59e7652350edb6d7680ea6411306", 0x280000, &(0x7f0000000200)="f2a96a80234b98e17f23fcf89157e74d1be4be3e9f8a0009db7d109d508360f47b5f7b55c51c95c50fb89798b3de6ae053c5c63abcf6ec105909a5814c8d289c2ed2f95247eed34556c227ac6b4c8521a146f9f7d82d2601ad328505e733d27367483735236b6661f7175dc2b30604c0a44d2397e9001173fee86056f380167824abc3a6861101a64a1324ab8a4f60beb53ed10f49dfcee974b6eb6b8c48fa41ae9b11aefb9952a13b8603e8a0a0bc6fa48137fd46298ccb65d3f8fab9f31c5d73c87a6f8bed49b2f7c74c9c08392dbf", &(0x7f0000000300)=0x6510}) r1 = bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000380)=@iter_create={r0, 0x7f}, 0x1000) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000480)='/proc/swaps\x00', 0x6800c1, 0x0) msgctl$auto_MSG_STAT_ANY(0x1, 0xd, &(0x7f0000000580)={{0x4ee25483, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffa, 0x8, 0x6, 0x1}, &(0x7f0000000500)=0x2, &(0x7f0000000540)=0x2, 0x1, 0x19a, 0x2, 0x3, 0x8000000000000, 0x9, 0x3, 0x9, @raw=0x2, @inferred=0xffffffffffffffff}) fstat$auto(r0, &(0x7f0000000600)={0xc00000000000000, 0x8, 0x7fff, 0x0, 0xee01, 0x0, 0x0, 0x80, 0x6, 0x5, 0x1, 0x80000001, 0x1800000000000, 0x6a, 0x8, 0x10000, 0xffff}) newfstatat$auto(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f00000006c0)={0x3, 0x654b9a73, 0x7, 0x0, r4, r6, 0x0, 0x55f2af7, 0xfffffffffffffff9, 0x4563, 0x7, 0x3000000000, 0x9, 0x200, 0xfffffffffffeffff, 0x3ff, 0x2}, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'ip6gretap0\x00', 0x0}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0xc0, 0x0) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000880), r7) sendmsg$auto_NL80211_CMD_SET_CQM(r2, &(0x7f0000002e00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002dc0)={&(0x7f00000008c0)={0x24ac, r10, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_MBSSID_CONFIG={0x30, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x7}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x40}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0xf}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0xfa}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r8}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3460b2c0}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x90}, @NL80211_ATTR_FILS_KEK={0x3c, 0xf2, "082139add2adf43e9257df6d30171f76c53c80a5beff16270897881909182ade10a4100058a85f16c1933ca38ea89bbb09e1f11fcf117963"}, @NL80211_ATTR_STA_FLAGS={0x10e0, 0x11, 0x0, 0x1, [@nested={0x10, 0x82, 0x0, 0x1, [@typed={0x8, 0x49, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0xd3}]}, @nested={0x20, 0xdb, 0x0, 0x1, [@typed={0x4, 0x11b}, @nested={0x4, 0x47}, @nested={0x4, 0x13a}, @typed={0x8, 0xcb, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0xe9, 0x0, 0x0, @fd=r0}]}, @nested={0x10ac, 0x25, 0x0, 0x1, [@generic="9789f519c1576738563ee3baf918ee85cf88b086eb20a4a99051975e094b416e4ad7154dee97a8c829c61ce27959019c3e525508f54e9b1af068b27d14b9267f0f6871eb256cb656010b7041d6c9acc7", @typed={0xc, 0x16, 0x0, 0x0, @u64=0x79}, @generic="16df489370c03728e0ed14aab2bcf67b963653eab5d8e83c4901cf87d9f850ffdc398a0927acfdbb223f2e686ce570b3098896b92dcfd8f69aa70ff28b5874dd", @typed={0x4, 0xbe}, @nested={0x4, 0x1}, @generic="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", @nested={0x4, 0x14f}]}]}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x90}, @NL80211_ATTR_CSA_IES={0x1323, 0xb9, 0x0, 0x1, [@typed={0x8, 0x12, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="52765c13c922c7fa0fd2fdf923f1854127a3dec14a4081c3f8bae9d1668180aebe03f6806624cd0b34cf0451f5fcfded7c3fdc85e72a27aefb24caf070a3a3ace3cff2741af2c74c1c6d5915b8be1da5bd37eea5bf1ce6f544ea0adac97d8dbbfb4a74ea7d6d5345f29adecf925bd40f9d57087db3cff508783ddb34cd4f32a4aecb5fd8d6a7ef31a06469d0efae2ed7ff802d10edcd0b474027ebb7cf2529790c1d7ff4d7dcd1d9adeda1e63ad66c930d8c6ec977677566", @typed={0x4, 0x89}, @generic="8e10991df1fd7028bfe70196fe52cbb546bb9bc28bccc30b638c5ee70fd777fde48b0492f3f0", @nested={0x1e, 0xa2, 0x0, 0x1, [@nested={0x4, 0x7a}, @typed={0xc, 0xec, 0x0, 0x0, @u64=0x5}, @generic="b909e843c0aa119d5bf4"]}, @generic="96162cad66bb308e3378255118749055c8323c178a9020991475f7b80b038ef63e782f668e0650ff89f9ce6b3f9fd8892f078454d24d04b0d908053d1068f880ff74bd95c100f6467da1ee4092f17b9748e1d63eff31f5d93702dceb1b716b868646f0b94e45c33b2fdf0f9e23baedc30708738106ea52162a2d0bbee05cd6d60e1cea83cd9450ea1dbf6a999acefb1d11b460e92317947765ea23577ac41fcaf50a373c5aedf60799c3374923c55c0fc6d224c9afe9003dd101c0b09ea338dcac65e13a0d99f56fd586d796812940cfd92725", @generic="45d422009e53599dac7f5f182734a4c28e85ab86cd91bfd6b7fc8d7e1aa5ee5a7594c60b8819abf10a9404632fb5ab14e569453aa16b9a45bdbd17f857b4f606ba3a7f6de50f06be3f0d9eb7", @nested={0x100c, 0x46, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @pid=r5}, @generic="f2bd0360d48ea75ecd77d8bab50e844c697057a6fac8f2a9f04b75877a60f778eec0fe8374178fba45393d7202a8fc9b04fef872883280d8af6ba90141deaf9006e7f4a50925c5691a984e93f41675011da1b2d4129402d11b41b60d2ac1221414f4c63d26e375b24489236067302ca88a6d9e1899cb7c6b0fb1b708f8426bd80c2b02b6fb6bf1d0802bd1076576fed21ca527d0ceb1da91becc735e5f9e493ed6c055463db256b66208d3dc2243719b7041cab9f7576ae8a375442a824b675d2205396dd7026368ccea0ebe6634aea5494f2e71d332af219af0ec7d7766c76720d2a16b9f3663ea3b66cddd8a1f5697970edd9bd01bd43e3e61ae48027e682204e710a8f72edecc7c19390cfbaca5061b667a9922d584eedb6e65184da78a1b944a4695a62bbdcbe0f22760a2eccb7dfe35b1b8d1badacaea2448db96bd96bfa30c717a7973859702dd7767e19eb4869e22d177729e75af86da03e82dc2129312d1019cf72a29793706640e87efe1ed0a1e2c029713d97c4b08c16c842d8c3b6f5c9168c782ccba3c117268a79c7b4785710c3dc3956060a6070268888eb7cdac43cb1aec65f7afb4bf6bc6b7fc4ac99eeee789eaff40dc62e8d5649bf8fb6d29ee5b6fa752ccffafaefe5ed67355fc628634ee18ece7ccae078c7a58abf16cbc41a6e267daeceaa108d6fc8336a5d405d8aaee70c82bac066bbf4873664b16dc4feaaa4719e8818d80adf41055e764732efe68fbc39fd4029749e328cd5fdf08ded4f219b43cfcb507cd574f5fff2a80e860ebd9f753aea2057143284245622b3377c63c106f42aac7e6276c2f93764bf7325254951696cbd2c8bb1467baa644a283a6051afc43275f94b9f6b20e7b036977fb64ead419c4ac8ddf6e7f68d0ad09a1a01926ce1eb6897ac41480c9903968cf1a9a475b7b26e612b446572c812e7916156388fe7bf9f49af67efe90d46e5e17ddaeee3712f06acc9688da115ebd642b0e6d60b2856585493d94c7a185dac806f53b24bddcb167b6f7a1414c6127643c2f590abd68f77f0ef1f0567e0d11e4127594416cabb71466359acd757c945b1ee8a0c67e8db5da48e28ce402bc57a708e201b2028bf7d2ab2f3f77b30a69ac9cd66a5e2c6bbf1155af17d672a82f364fa824c8d6d7eca28445be17c720fc2254ff223ce28e1570e2fc637fd9dd7008ce47e2104faea3590fe8a6d551985d5ca02981336292af05dfc367b96ed50dbe3ca57c8908d8b18d77e16081cda2c64aff1e2722b6b40ceb0c2fcb3afc66055ec2735af4f1b843ff651181ab406c9dabe2498d20de5d599d4df452fbddcaa300f089b4d9388555fcdcc8b89091a2a56ffb0f08d8676e195478548569c71c7dea66c32146dcfd8d26f1ce6a210211e26c30cd7707defaed24cf5d931c88d1d334a200c4ba6b636ffae79780a8242a50dcfefedb8bf0206a22da1e32e596146a7ce509e7e1a3e1768a3fe3da87522caab317b034ceb1b23af53082a2957315909d9bb5c3512ada724b8bae5b08422fead519b68310b277dfc29e087c64ebccf9a710c4c84de9e9fad4b85662ae95b62c5ab21661ca92dc2f504d1f3e8e39c4c65cc49bed20086429f8e80791c69876b4e2b0555ab986bedf7fe5c74160ab4e8b2635d8167ad158ba7d2f3571119c279a7c25fe84ca369c802927d14014218c64cffe37dfa3b6aa302259615c0da2216d26a7f6a4b01c5fe5eab5d37ac70c950b1d6b5ffadcf12c1aa633e7d3ed3974261f8a80eaf065938608ea064f34b23c79b286cb15d28304e000d916b4bf9db74aea490588c336645809f16595107c938968baaded139ee08b37b862f844435478968a526999660866c0c8d4ab7c0c2cf4b1a852d4f2aa6319f0ecd1c3eef79b7acccdf5bf80b9225a813d7c05d9165313fc4baef7f0bc698c45f839d6f2e08028178fb08b46db9ec342b6443b656aed5d343db4c8645689aedb808c97f298a27163322efa198bc8767fa8ffdd036fc8ad048ad51d3090726064c5a4de0881a871df265814f809e6c99d7992b54bef0d3068c4070fd379daf59012cda692ad7fe805f97f6a413666af0fe6c01bcae3afe0a9cb2380ad89ceec5dcc1655486ad3df0b3c9282b091fd1827d5ff22d0543ed3e892e574dca9a892ec196cb18fa150e75bfb14ebf430dda22ef52b12928a40b73b74fedec0498c6135d1a9f627b322028478c2855481b734048b3ecbbf60c03edf5aac984697f32f578e33f5ae8eef99247f205ab2ec9887e94e7fee4bc0cacf1ccd91af2be4281d4118be242904673012fb2639e811268c67632a1f6d064bfd0d2177922e275129032691cc8d9115a074e471827a16917fdf5d22220b0828400c18f67f25f4fe14012e03082033599dc7bb0ee6d0a86f35ff6c4208cad57a4f81a4eea5fee203bb82f3dc414a011b68e37e25d2a1afa82a43af515bdf5774dcada1e69f73a6605f97167787b441979191fe25dc066b684dd2240e760097f5f915e3520d53094b7b475d4711bef8eebbf8e717b0ab7829d2babd5a81d31c051fe592dab8a29e60fffb8f5139b4b3f7675e3118aefa202e7717084c7102bdbf3f6ee4729e76819c5d68eb5f2b053487e0c960449cfdda1efc1a5edd67a8ea07a120f094f2ddb6cc986000033f8b020bb419215554e6903c320ea7aecea1bd8dcfeabfe83ad7c89c5d44c95c6f62c17fe1885f8b11f8368e12f1d7d10ed9ba85c648c6b9632cde30816bb0201119a682f50d01d87739474e7f517e33dc1f734656e975b2fea23934b52d384334e94bfd92df322f35809da54572c62e42ac385e50a5974789282b5e84aad04743f482c8d70edb9b002b3b1ce00797f47af67cef9b1c661c566c78cbcd13760317f7a908d5206df84b1639d2e8f5da129201cc28577ffff6ea29856eb9e58863ec2e53050b1965fd1cee094e6fe5bcab1c1c6394a13282b2c538c80d8b442d5d94dbd59cca7b016622307499c433680e2f8043086f72afd52146a66d0a1686106d08f8d2639c34db8923ba59fb8d8c1395c9ccba462817ff169e73f17104b89dd682c3c01147ac453dbb8ffda1e982951cd023005f3c34f8d2a8ec65e6a024cd809cc853aa4568206b50c46519d0eb9f6cd2e3759fc29fb1045b61658f9710a25de086a3585110ae9b0fc8c59b195857b03b34480bb356c45d5dd2c6a96c0493bcd3c1d8d335161ac1a0b9aa3de1cdf2524b1cc2d4ef055bc0f4294f1e0e0b9f14ad501ab6562a4cecfedcadca3a557fcdec72f989790f13f62d1af554dcd11b5d941d340cd5a5d2989ad2b0b16936e44343a22fb2ad000570c24e69e5865c435f5eb3f525a0585fb830a016dfb052a45e2bd1cfb1adce0eb92c7befe0217a7acc286fff0156896080996f7827c87008e38a0e18b8f676ec7e2883ba548adfc5c749c133197841c5fa37ccea097a5029a09341022ef5b94bbcbe58ed658d49ae9a515703cabf80d1f6adc7e880447e8c756ba469739ada5bfe221d5dc61ad32a2a6fdd988ec018f397949794733745df441a6e558e183a4a8663ac260a6575c7ba71bb16d06b3f67bd94ebe4b8803e126c765988219aef7a479fd03b15ee02df0bf9ce12d0d6c87c940842a9a19c42e7bf88f4a6032b0929ee263392db027d8a6818ea04d8bca9459493d360671b0b13c795f36ed9a41c2efbc3f9565b82b17ad8c60c793d8d480130acdf2f717d7ad73adc4d4f128cbdafcb30fb6e2956b3699c0833a7f01fa61925f3fe64e4ba340d7b9950c67f014d748a0608295eb02c5d36368f1a311df392db8776f39f1136fbe12bdd62669b2a06fdc244582e36d8e405762f0b7e2f5cdc7b30571d20ce9b792fde59c7767a94a1189c1ad1fe0654ec946e3d0806a876637eb97b18eb532d68f4f72923c0a5c02e910a8609982bd51c6107da7f9d3a5d770615614d108dfb9297de721a520563120faafad285dd4ebeaf35ca04cd8abb5aca0c05ea0b018d6fb1ee6f6dd56f87ccd7f66dd240b13fa0c8452c4df714d9a538b7eccfab335a2dc69d61f6b82e8107a3665a7ccc6caec7e7896dc6a3f0bedeceb56d3638287404c6f589e06943e809f55afbfe3d7c1d8e858af603a63dd8aaaea8dec5a87fd581560e01bd20ff329d463fe85340b6d691a198cd5d9b24d3e50f5cb6ba9294946fa1d96541c7322264552af15c79fc54955995210303befae2379ed8240981da370fd645e1b94c3e1509f61f383f9a4868a19edd5b1e00da153b8715429a6f0e3876a386f5fe7d95f58c0273d0a2ca19f5b1b52a439c026bba665ef58f83e95575afa20a0975578519365e02c7da593c96e3eee23ddad3d759bfd6927a160469c429549f3d9fa8e6b97ce769cc04df2bb8de8e86fd2eed631f616f8ae109869083bb379bba65325e6008e4def73521fa159e81b43261f7953e9b8f4b12fd0a7e1b3d41118f61926a057e9ff083243a087ffd940759b632bf7d1138039c9a7f64dc167930fa2eb066c7d0e13abac825093e9a4112da79ca45c631199f506e4bca9d269506a601b853cea908b3123c440f6c35ad53a3ce0f335310355962d9f3d38e71a7e5338fc06ec613320d027abceb773f437d35015f656309075b04f373a7c401f2645d5c6b75641b44b173f2c6cc456e06bdb813f20f707c02f613e1d8c6fb208f1890dec608697daab724c55ccd5aebdfad8838d134004a8e7c239575d36b743db559b76e75eff6daa891806bf1fe32675ca5e6150b6473f8ff542032471faf08b247a3ef1cf529e778230cdfa2f18b95b638f4c3aa64766932ef8430b392f3119c0637c50aa5e89561d1f04bc92e510845df191ced35128389fc84b2a9b96e6c01ddc93eff96737f0a444eda1f2d2142c7280e08559f7fbdb1e6ed2352cfdcfb37ca08fad1e82d8b966cbc1d13b227945baa97bf972183163eeb3bb148d562bf8ebde6b71929ad0c3397def681591968aa8c70686a1c6ff2f8b581503e428541009e3533fcaca3f25b9cbbca04495cce4f00812f5184c0d2fe440887366d1ed44784eb3556659b6d5e6f0f366e209141931b4fd9a93f0856cfc0a5a093dd3131c067d576e73df769c7bbbddede740a5298d3599183b1770b1c42018fa368a1b95d5a227b0a9767e7c8a21f3927f9d5d94b4e490faa82531f76fc0c62555294959f2c907adce0c379310c49c0c69780d64e76da0f1fc97c7b1078d65910f382f046e487ffd66a1d7b508ddbb06a8847f56a30ca2c5d6005fd6014cbde5eda64bcfc2c5a6c685e835eb4e608e839f150902d99c29e396c77799e93773b3951f33823bc3d01c515c0749a6326433145696a1845efa5352b61b1a9ce1642d298d34962d93cd7303bfeaaacc1da8a8ed883971b7a697afa2dc64243c9e885672ade637550b9d4fdfa8d74e43b8817f46c1b717716941e89679bf4d03763e3c5e0c7767522dcbda0bd721559497d9117d320af67c2c63bdaf045536ebb2e65a2df666eaff43fcff59ff5287f0f09ced5126e5f72704c32eb879a5dfaaa7be5354789ed6a2a145279272d0b433c58dabd4031411ed7fec47b266f3f9cc6821c2c3bd5362f05e44ffe15a3250d91e3c758435ade952cf9936449621cd070c023cf1990f93d0e1fe72186477e206df36ed0e9701af5f1ef04d1dec8b54d3916bc7a2d02ed97655ecc442102d84b8edf406a8a5938173dd92b37d8984a701f15d0fc9fb26b47e183ee3ca8aa6cf6f7a9366ff3da9a7270e19276b0f8af909ae52d5a6ad3bb6224743a6328b85cae00e7fb378ebe3a0d0c"]}, @typed={0x33, 0xb3, 0x0, 0x0, @binary="5eceae473773cf8cae2ee53cde487102e68b46da10b06bcbda99bbd39d14214e9df6c2e77de3a0ef298532afffaeb6"}, @generic="71f46d87963f3cf3e7b5e45da6a39887f5f8cd0ae0e905c6891c09b903be92817efccbe9dcecb8ef72f2a8f44ee501739036fb5aa46091368d6d0a899768007521c0680e20872ffafcb739b8a7042bcc312bbfefa9e71da5f3db48871dc96975a6bd7a2dd048c0647f1047856ccce59558f9c296fadc53fb03516371747d95c09d125021e8ef33ec7a9f1c9f3daf955454e9d84ccf805844951c9c120ee04f42a60b80c1d60711d3b0d7c7ccdd4af0fa0ead9598831e"]}]}, 0x24ac}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) sendmsg$auto_NL80211_CMD_SET_PMKSA(r1, &(0x7f0000002f80)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e80)={0xb0, r10, 0x300, 0x70bd2d, 0x3000000, {}, [@NL80211_ATTR_S1G_CAPABILITY={0x91, 0x128, "6223062805228be12b562ff59f8aab57655fcc787c2f0a337cc53030eda5cacc3cfe3fe577a47c0497d745487af4c0d89ed9b46f2f29d646c6fff129bf473ff7a53d6249588c08f59ea0cf71dcf59a9e596f2785ea938cc5292bd53ad5de2ea6925d065dd996f19680e9f9d3078d89f1a69ee84549e8f354d4f4c044b326172832325648c0729339e6aaa334e9"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44}, 0x40000) r11 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000003000), r2) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x99080}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x34, r11, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x1800}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004080}, 0x1) r12 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000003100)='/sys/devices/virtual/bluetooth/hci2/hci2:200/power/autosuspend_delay_ms\x00', 0x1d1b00, 0x0) ioctl$auto(r3, 0xe3, r12) sendmsg$auto_NL80211_CMD_COLOR_CHANGE_REQUEST(r1, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003280)={&(0x7f0000003200)={0x7c, r10, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6}, @NL80211_ATTR_FILS_ERP_REALM={0x48, 0xfa, "89a8f94f73fb03da3187c76dbc030fcebe9a9326467f7e5d7f0b9902e7d9b39ac6afa452e45e1a34525c84528f96a0ea4eeb34a5307066f976c22e7a281de37a30f26b8e"}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x7}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20000004) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000003300)='/dev/sequencer2\x00', 0xa0840, 0x0) fcntl$auto_F_SETFD(r9, 0x2, 0x7) 4.567277224s ago: executing program 3 (id=2392): socketpair$auto(0x1e, 0x7, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(r0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x21, 0x309, 0x6, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BLKTRACESETUP32(r3, 0xc0401273, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.940097095s ago: executing program 0 (id=2393): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x1ff, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) 3.911301835s ago: executing program 3 (id=2394): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bpf$auto(0x0, 0x0, 0x6f3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) madvise$auto(0x0, 0x20000a, 0x4) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x10000000000000a) prctl$auto(0x1, 0x400000001, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) 3.746620912s ago: executing program 5 (id=2395): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x0, 0x6, 0xc19, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) io_uring_setup$auto(0x2, &(0x7f0000000180)={0xfff, 0x5, 0x4e, 0xa85, 0xbc, 0x0, r1, [0x7, 0x10, 0xa], {0x10001, 0x8, 0x3ff, 0x770, 0x8, 0x5, 0x9, 0xfffffffe, 0x6}, {0x2, 0x800, 0x3, 0x633b, 0x6, 0xfd, 0x9, 0xd5de, 0x7f}}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x7, 0x9, 0x1, 0x9487, 0x3, 0x15f4da0a, 0x3, 0xc, 0x62, 0x8000001f, 0x7, 0x4006d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/batadv_slave_0/arp_announce\x00', 0x141241, 0x0) pwrite64$auto(r3, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x88a2) readahead$auto(r3, 0x4, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) read$auto_dfs_cpu_ops_debugfs(0xffffffffffffffff, &(0x7f00000003c0)=""/213, 0xd5) r4 = io_uring_setup$auto(0x6, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(r5, 0xc1205531, r4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/memory.stat\x00', 0x80200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000240)=""/118, 0x76) sysfs$auto(0x5, 0x100000074e, 0x0) 3.745803471s ago: executing program 0 (id=2396): r0 = ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000000)={0x7, 0x0, 0xffffffffffffffff}) sendmmsg$auto(r0, &(0x7f00000002c0)={{&(0x7f0000000040)="64875539c28dbc0230cbfd54313dccc1753776519cebca7a72f0efe44e464a9e024c01f60796d0295f3cad9ca674e8a53b077248824ce7467a877d1fcba4c9743edbe33b19498ade8fa9aa4fce3ed75da20eca1d085319cbf52be8156a9d2c117a9705a9ae000b11a9bff915367252f2e691806404c5af57afa952096668b3617e5b64239ff63fab634fb42a03a5083ad9352ef8b9e7dff39496070e27d9abf49827db9f5e5c569a480ae95639e2c81b6eccde2fcf60cea2d64bcb8211b427a941757646ddd673b5ad377fc0c2b70d03af21639d713ece80aa4838d3426c8a7337db084c48f05a01ff74fe3ee3de79e18699cbfda85f749c", 0x1, &(0x7f00000001c0)={&(0x7f0000000140)="441e1813e8036fc84c99b7d0081314fdb978b5997e232771be72ba9e78136ed426ea41f132439031fdc52f515077873dd7adf398f147db036705035abad34e72a6d5a3f5f8113dc8f2", 0x7}, 0xfee, &(0x7f0000000200)="1af646890311dbcc829fbc7109278030c2a1228b9bd39fb0342e4ea890859975fd8554bfc905542f9c3723e466a51e1a77b156f756ae67d554550394d9ee3c3e668f322d5dfcdeb596538a4079fccc41587abde62632a6af7bd82f38ae1c7535af2ed2128611da0b6630932bcf661a6250335cae38ba36966c2bbd9b8a5323394cd96d78b9ba6054622b2d7290f553aae27546afbd299c847acfa3213f6138cb3de3896221bea0dc89d6e0eee79c950f8dd623882cf6e47d", 0xfffffffeffffffff, 0x8}, 0xb4b}, 0x9, 0x56b1fd3f) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000340), r1) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff5c0f}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x8}, @BATADV_ATTR_TQ={0x5, 0x19, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0x5}, @BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0x430}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x115}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x20000000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), r0) r4 = waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000500)={@siginfo_0_0={0xfff, 0x3, 0x22f, @_rt={0x0, 0xee01, @sival_int=0x6}}}, 0x3, &(0x7f0000000580)={{0x2, 0xf}, {0x8, 0x8001}, 0x5, 0x9, 0x100000001, 0x1, 0xe, 0x2, 0x7, 0x10, 0xf1d, 0x400, 0x2, 0x9, 0x6, 0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_SET_COALESCE(r1, &(0x7f0000001080)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000640)={0x9d8, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_BEACON_HEAD={0x36e, 0xe, "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"}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x41b, 0x25, 0x0, 0x1, [@generic="2977df82b7e52361737513547f034c250af4eadbca260778f9061627876bee13c25a2ae88a7354a2ed9cfc2da1318229925c10c00cfabc2168f953766b3d3bbcb79b7069154c052d65b0ed3f61a325d6627417fbb3bcea5ff2cc2e37ddc124fd2cd77947ce7af86d65b0ad8a8b5bc25c077f044bdd33c349e65ab4006edd1ce07f02d522a1c7eb237dd05eb8854b08fb4ebd64c035ca1d428819279f68f0b9824fd02d966602aa4079e19fe8df299c9c90da81c9a8dbf0", @nested={0x67, 0xf4, 0x0, 0x1, [@generic="f65454149bd264a03b51f2b1419b97acac033acf029131a88c483883270cca0b954a97db07f7f898037f9cae0ea9c0025ba549727b857ffeb63d75553dde87fbc9a27a79c0ac453ac242459b2d81dc", @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@private2}]}, @nested={0xf4, 0x29, 0x0, 0x1, [@typed={0xeb, 0x151, 0x0, 0x0, @binary="ed08310dbc560ee25114541c84ee530bd519626954f7b1d50f3c0e74a1e85a391e2584c7bf6d4dc82d163fd770f2a47cef6a8541f74eb4907512b8ec85f84a909f6f160a148b36de0bd98ad6d7928e15049c6ef05348eab1172cc07b927a8ee1f18c91a2c500b4a1507ab81af6f8f8864fcab53c72e2e943f37730791a0171a6c3e835d808391b52a8ee23f2ed128a518fe2eecb487045121982774e70e05c01b1f3d86f4b084665e94c5a14891a119cf0de47f0fda998dc6106d313dae3487fbf391cb59128b2e8b50c1ba754c3407341a452fadd815cdf68933bed40c2796bafe356667843ff"}, @nested={0x4, 0x13a}]}, @generic="ca42b2f8d03f4d49d32910964a4ba7539d76a99edd1fb8bf701fc4a6c18cf6248f601512e91993cbd7338df55f6fe717fcafb92172aad1b3582993541db7d17708cb045b58990451799c1ae8675ad921f47731d1f13f9c719bf7eb0696ab3ed1e5048141d82ba7eeb853c76432ede14267cd4395b267053917b0550c64180cc2262f6311efb368495c31116d709ddecaaffc321fab92e0873e672fdbb16dd847c68ac06cffce4a4b4667b3e1", @nested={0x144, 0x34, 0x0, 0x1, [@generic="b3699d9ca342b005e197c93fcdd62f4363b1138dbc82305ee9d5b8466caa7c9091fd870ff029889e22cea8a72d78b1337d2e0d51e1fdcb5e6124f1fd24ef03aa98277638e933a452f971954fa5b9b62db7b27b50dab049df610679ff50a578728211d0cba609daebfedbbca7b48913993e666ed131e7d2a6b03f6af68df21e9d794ce7177e4e188bb5d594f9ab4c8f59a27d09cda02d3880d684", @typed={0x8, 0xa6, 0x0, 0x0, @u32=0x6}, @generic="aa53ec0b3f231a9a92ddbb1de3ab2c2359c4c790d5d8d4d63c7c86f3c75d71d5530245c694e4d50ab03f169ae952e6021dd9d144c959f596295b4f6b4829bf1d17664a40bab28900665dcb272f5d531734fc5d94735c00155b2230a1189fc0d372aabd8152cd60959429927bba1d09ac2910caa673dccb15fe63461994c2def261be526ab484ea9a9942b86b8ded1619ec3f9233aacb", @nested={0x4, 0x55}, @nested={0x4, 0x120}]}, @nested={0x14, 0x81, 0x0, 0x1, [@typed={0x8, 0xb1, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}]}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0xfa}, @NL80211_ATTR_KEY={0x226, 0x50, 0x0, 0x1, [@typed={0x8, 0x11c, 0x0, 0x0, @fd=r1}, @nested={0x6c, 0x50, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@remote}, @generic="f373a24597e02dc26aacb9098f79664b248bb9a14854d4fa8b041a64293b1517c57e6d145749e1c9b75958b35d044c2fc9ec82153956bd94b86e4de6a0e7b6b5c66ed5e27c882e16fbf8daee15dd9df9a75369f9"]}, @generic="d3aa8a15711b6ee0ed584a9965e0c24137ca1521ebe90cdbc77026376abe85b05c1a294bf61a6356f93b9d4b27fc99a30d71f4cbea192acb09d75c3d3aea77eb7df96bda72bdd63717ed1957794afd19f6ef21c6809b0f03a3ba6a571f6d21eeff0b1e6f84a51a9173f1008338a189c2b82c7e5e069718989a9b387abf031c2d23c555f8fc30e994afbb758a62d25f77f65270a22dd9a0eb910ca8e5f11466dd8e8444b9cc7a09a7e0a622c38f2c4b3282be726d5ebce967d0a35af2025e", @typed={0xb, 0x82, 0x0, 0x0, @str='batadv\x00'}, @nested={0xe3, 0x52, 0x0, 0x1, [@generic="be395b392956ac27e24c1b36a6bec29e9a7d706cafd3997500455b64ff8c2748e8713a74d12a6aded431ca4ae759667549abff1a8a03fee69a86a841e972978cd86eaa7bb6e4f2d563bd58d06dc75a466e99062d043250b63dc3a916582ddee8c03881a06ce8e9beb296bac51feac8a65bad4c9766cfd6fe4c8d26edb1d01b9bf8b332d6a2b03a597b4e2fc735925fd950af5e341b4ef2d1ee7f71967825399c38e75d8d302a762b6e90c0f72378eb585408dd59870a66f5ab819e52eb837592cacde165078807a54452f94c8aec5d21934c10c52333857d35c46454b5fdc8"]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x9d8}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) sendmmsg$auto(r0, &(0x7f0000001240)={{&(0x7f00000010c0)="cfee51418ca773be9cd787b0ccb69fcd9e10f79b9b6b", 0x7, &(0x7f00000011c0)={&(0x7f0000001100)="b6d255feecd48a8e3b59c34ea48b01024d486e5efd8aebb4ead27dff8a5d0a468202c497ada92fbc71b5d5baf72332f0af3f84c1c708248ba949fd0fe2a557961bfd299bffe4b78c84cfa2bde470f9c5a6050f29e7c2bd2037b10322eb897be60b7d6f0891fc9ab31944e9207c6bb4181f846b860c77824b999ae16f3f9cf33223fad957260fce7b02b4c3", 0xe}, 0x4, &(0x7f0000001200)="7a0a2c5d404bcae2bafabc80d304bf3a411b130a876c2536077a1d43a1a66c34cf83c439a3e2ae3f", 0x3, 0x8}, 0x8}, 0x90b0, 0x8000) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001280)='/dev/admmidi2\x00', 0x8800, 0x0) r7 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r1, 0x8004b709, &(0x7f00000012c0)=0x6) rt_sigqueueinfo$auto(r7, 0xfa, &(0x7f0000001300)={@siginfo_0_0={0x785, 0x8, 0x59452338, @_kill={r4, r5}}}) r9 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000001380), 0x2846de5913586277, 0x0) ioctl$auto_VHOST_SET_LOG_FD(r9, 0x4004af07, &(0x7f00000013c0)=r6) r11 = ioctl$auto_UDMABUF_CREATE_LIST(r10, 0x40087543, &(0x7f0000001400)={0x1, 0x1000, [{r1, 0x0, 0x8000, 0x8}, {r6, 0x0, 0xcf, 0x80000001}, {0xffffffffffffffff, 0x0, 0x8, 0x6}, {r0, 0x0, 0xdb, 0xc56}, {r0, 0x0, 0x1000, 0x4}, {r1, 0x0, 0x2, 0x3}]}) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r13, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4100001}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)={0xb4, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x8000}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xaa}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_LEVEL={0x6f, 0x2d, 0x0, 0x1, [@typed={0x8, 0xd2, 0x0, 0x0, @u32=0x9}, @generic="22e58e5875c8f9d05585b54f13d538f61ee27c4e9baab24b3769088feffb4826474171fc6f0ab9d233ee15b507b63f1457cd645feb1568046252db9abacc95343068414f900798fb353338de20aef8b90a7b2826590e0b0db12ba95940036699dcb5fa"]}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x9}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400}, 0x4048002) sendmsg$auto_NFSD_CMD_THREADS_SET(r11, &(0x7f00000016c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001680)={0x0}, 0x1, 0x0, 0x0, 0x8050}, 0x100) ioctl$auto(r11, 0x3, r0) r15 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000001700)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x129000, 0x0) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY_EX2(r15, 0xc0096616, &(0x7f0000001740)="22355c4072d3987379") ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000001780)={'gre0\x00'}) io_uring_setup$auto(0x2, &(0x7f00000017c0)={0x4c, 0xffffff80, 0x7d, 0x3, 0x0, 0x401, r9, [0x6, 0x7f, 0x5], {0x800, 0x0, 0x33, 0x5, 0xd, 0x1, 0x80000000, 0x4, 0x4}, {0x0, 0x6175, 0x4, 0x9, 0x0, 0xfffffeff, 0x5, 0x4f80, 0x8}}) ioctl$auto_VHOST_SET_VRING_CALL(r16, 0x4008af21, &(0x7f0000001840)={0x6, r14}) r17 = prctl$auto(0x7, 0x9, r8, 0x6, 0x88) r18 = ioctl$auto_NS_GET_PID_FROM_PIDNS(r13, 0x8004b706, &(0x7f00000018c0)=0x240000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001880), r18) r19 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0xfffffff7) ioctl$auto_TIOCSETD2(r19, 0x5423, &(0x7f0000001900)="269a5714574ad28b65ed8d0ef0a16b5e07041d123d421ef91e47bba8b989c1fd0e04fefa4dd7df55d743d6c07e5ffc045203cdc3c822dce29586580e1fbdfb0c3b9bc80b78ca6d1aa2e74eb88d91607c1da562303526d0efbe5c4134e0f515729bd8c22c4a64d66b6133331939bfdc48ae358318a1f07b01f67a9501c46ecd4ba401c8b0f9aa190f2ad6514e8245e080e9e32d86ad7ba7") close_range$auto(r17, r13, 0x5) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000019c0), 0x80000, 0x0) sendmsg$auto_SMC_NETLINK_DUMP_SEID(r16, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0x84, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, "8322f4350e01e64b97ccbb42db48d09b0979331e0c65004b02440fed1668303058e4d3f906ca2db3a9b7be4801f3c8fad0dc4185b4917e1053bca44565e29a4cc722f8442b5c0b5e2ee3b4bc3c77259c403d968ce24920b689151f71c1595f568c24ce94f2cd52d52b485294f0b96a9d"}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4) 3.365617177s ago: executing program 0 (id=2397): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) (async) close_range$auto(r0, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) unshare$auto(0x20000080) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20000, 0x0) (async) mmap$auto(0x0, 0x1, 0x37eb, 0x40eb2, 0x4, 0x300000000000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) symlinkat$auto(0x0, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r3) (async) ioctl$auto_KVM_GET_MSRS(r2, 0x4090ae82, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/over_current_count\x00', 0x60000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000001080)=""/98, 0x62) (async) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r5, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x57}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.890772089s ago: executing program 1 (id=2398): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) socket(0xa, 0x1, 0x84) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008008}, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$auto_I2C_RDWR(r1, 0x707, &(0x7f0000000580)="7404f8") 2.720344538s ago: executing program 0 (id=2399): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0x40047438, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x2fd, 0x1, 0x101, 0x0, &(0x7f0000000040)}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000003) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) read$auto(r2, 0x0, 0xcefbce6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, &(0x7f0000000000)=""/156, 0x9c) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) kill$auto(0x0, 0x11) syz_clone3(&(0x7f0000000500)={0x400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x8, 0xd4, 0x7, 0x9, 0x0, 0x10001, 0x1, 0x2, {0x8, 0x10000}, 0x1, 0x6, 0xfffffffffffffff9, 0x1007ffe, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0x6, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) setsockopt$auto(r3, 0x8001, 0x9, &(0x7f0000000300)='\x00\x90\x01\x17O\xa3\x93X[\xe9L\xa2\f\x9c\x7f\xe8 \x85\xe5\xc4$K\xaa\xe7\x83\x04X[\xa43P\x1e~\x1c\x92\x9a\xd2\x99M/\x94\x94\xc33\xaa\x8b\xd1\x97U9\xee\xd8\x0f\xf2\x85%\xc7\xc6\v`\x8e\x18\x92hGD@\x1c\xf4\x15\x8f\x11{p\xac\xfe\xff\'m\x05\xec\xa1\xbfD#\x00\x1e\xb1N]\xe8\xcd\x8av\x17\x80\x8a|*\xf0\xae7~\xa8!\xcc<\x9b\xa28\xcem\vL\x05\xa1v\x8c\\0x0, 0xee01, 0x479f0c7c, 0x9, 0x40c, 0x3}, &(0x7f0000003e80)=0x3, &(0x7f0000003ec0)=0x5, 0x5, 0x8, 0x5, 0x10000, 0x5, 0x4, 0x7, 0x6, @raw=0x7, @inferred=r3}) msgctl$auto_IPC_STAT(0x92, 0x2, &(0x7f0000004000)={{0x44b80d98, 0xee01, 0x0, 0x2, 0x9, 0x7ff}, &(0x7f0000003f80)=0x8, &(0x7f0000003fc0)=0x9, 0x77, 0xe7, 0x8, 0x9, 0x7fff, 0xa, 0xa837, 0x7fff, @raw=0x2, @raw=0x5}) keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0x64eb, 0x2, r8, r11, 0x9) socketpair$auto(0x3, 0x7, 0x4a, &(0x7f0000004080)=0x3985) r12 = epoll_create$auto(0x4) ioctl$auto_EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000040c0)=0x744e064f) ioctl$auto_XFS_IOC_FSGETXATTRA(r12, 0x801c582d, &(0x7f0000004100)={0x200, 0x7, 0xa, @raw=0x104, 0x6}) lseek$auto(r0, 0x1, 0x8) getdents$auto(r1, &(0x7f0000004140)={0x200, 0x6, 0x4, "f258464d35dbbe05d53354b57822ecc838c914be920ee06954401d9b2d71fd7cf118d86322e988365543c05d38af906f1c526fcbe257269c843e5f4e9a93e6851422689afdd4cf0c61af076f2f5bd04d6895782a5d92b7c9a6033c93a0baeb6062e08c49c0edcf680313c14c2c82c7b448d807af086c36edfa502278bd1c2fed32"}, 0x7) read$auto_tracing_buffers_fops_trace(r12, &(0x7f0000004200)=""/89, 0x59) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000004280)='/proc/self/ns/cgroup\x00', 0x60c0, 0x0) epoll_ctl$auto(r12, 0x4, r5, &(0x7f00000042c0)={0x6, 0x3}) select$auto(0x80000000, &(0x7f0000004300)={[0x2, 0x81, 0xfffffffffffffff8, 0x3, 0x46cd, 0x9, 0xb83, 0x9, 0x7, 0x1, 0x200, 0x81, 0x80, 0x1, 0x2, 0xf]}, &(0x7f0000004380)={[0x9, 0xc, 0x9, 0x4, 0x9, 0x8001, 0x8, 0x1, 0x43, 0xff, 0xe, 0x5, 0xceb, 0x0, 0x1000, 0x7]}, &(0x7f0000004400)={[0x4, 0x17, 0x200, 0x9, 0x3, 0x2, 0x1, 0x9, 0x0, 0x5, 0x2, 0x7, 0x2, 0x5, 0xfffffffffffffffc, 0xa]}, &(0x7f0000004480)={0xffffffffffffffff, 0x4}) r13 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f00000044c0)=@raw_tracepoint={0xffffffff, r1, 0x0, 0x8}, 0x9228) write$auto(r13, &(0x7f0000004580)='nl80211\x00', 0x5) waitid$auto_P_ALL(0x0, 0x9, &(0x7f0000004680)={@siginfo_0_0={0x1, 0x1, 0x8001, @_rt={r9, r10, @sival_ptr=&(0x7f00000045c0)="5171c2ca17050f2e2a05f332579de578508542ae9d2311ad0808c610b02cf78b3f7b29b77880e0df04eaadd0299204c45edd1331d17ce603377669a3ad2b20ede1810d9f01219528064a4bc4b72142923b94d3e8b31be78ef221f1e58e885f3ad4b0a895205ddfd639a81bd9d261e307085e878e9cafc45de4234ac795e6d3a65ebb3ed1f902b43948bbcb18d5e71b421f7299f9455ef204b8552b6af8ae464c175e0629"}}}, 0xffff, &(0x7f0000004700)={{0x3, 0xc2c8}, {0x9, 0x100000001}, 0x2, 0xd, 0x9, 0x1, 0x4, 0x6, 0x3782, 0x1, 0x2b, 0x7, 0x3, 0x5, 0x7, 0x969}) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    [ 830.610812][T15089] RBP: 00007ff2a1610b39 R08: 0000000000000000 R09: 0000000000000000 [ 830.610831][T15089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.610849][T15089] R13: 0000000000000000 R14: 00007ff2a17b5fa0 R15: 00007ffce2fc20d8 [ 830.610889][T15089] [ 830.796419][ C0] vkms_vblank_simulate: vblank timer overrun syzkaller syzkaller login: [ 830.998396][T15089] Mem-Info: [ 831.005646][T15089] active_anon:9021 inactive_anon:44044 isolated_anon:0 [ 831.005646][T15089] active_file:23302 inactive_file:42926 isolated_file:0 [ 831.005646][T15089] unevictable:774 dirty:716 writeback:0 [ 831.005646][T15089] slab_reclaimable:11469 slab_unreclaimable:95881 [ 831.005646][T15089] mapped:34046 shmem:41933 pagetables:1292 [ 831.005646][T15089] sec_pagetables:0 bounce:0 [ 831.005646][T15089] kernel_misc_reclaimable:0 [ 831.005646][T15089] free:1254625 free_pcp:23449 free_cma:0 [ 831.117143][T15089] Node 0 active_anon:33720kB inactive_anon:175084kB active_file:93192kB inactive_file:171472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137404kB dirty:2916kB writeback:0kB shmem:167056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12288kB pagetables:4960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 831.164741][T15089] Node 1 active_anon:0kB inactive_anon:260kB active_file:64kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 831.225543][T15089] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 831.394339][T15089] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 831.428848][T15089] Node 0 DMA32 free:1088404kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33676kB inactive_anon:183284kB active_file:92216kB inactive_file:171132kB unevictable:1536kB writepending:2916kB present:3129332kB managed:2540356kB mlocked:0kB bounce:0kB free_pcp:81044kB local_pcp:50168kB free_cma:0kB [ 831.511140][T15089] lowmem_reserve[]: 0 0 1 1 1 [ 831.528521][T15089] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:976kB inactive_file:340kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 831.664772][T15089] lowmem_reserve[]: 0 0 0 0 0 [ 831.671194][T15089] Node 1 Normal free:3900620kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:60kB active_file:64kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22684kB local_pcp:7356kB free_cma:0kB [ 831.703741][T15089] lowmem_reserve[]: 0 0 0 0 0 [ 831.708947][T15089] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 831.722401][T15089] Node 0 DMA32: 392*4kB (UME) 387*8kB (UME) 199*16kB (UE) 4680*32kB (ME) 2739*64kB (ME) 1041*128kB (UME) 256*256kB (UME) 74*512kB (UME) 34*1024kB (UME) 8*2048kB (UME) 114*4096kB (UM) = 1087720kB [ 831.794037][T15089] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 831.922979][T15089] Node 1 Normal: 1250*4kB (UME) 46*8kB (UME) 38*16kB (UME) 190*32kB (UM) 56*64kB (UME) 15*128kB (UME) 8*256kB (UME) 4*512kB (UM) 4*1024kB (UME) 4*2048kB (UME) 944*4096kB (M) = 3900568kB [ 832.033048][T15089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 832.042803][T15089] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 832.052309][T15089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 832.061922][T15089] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 832.079513][T15089] 109494 total pagecache pages [ 832.084484][T15089] 3 pages in swap cache [ 832.088685][T15089] Free swap = 124620kB [ 832.258740][T15089] Total swap = 124996kB [ 832.375827][T15089] 2097051 pages RAM [ 832.379717][T15089] 0 pages HighMem/MovableOnly [ 832.481621][T15089] 429984 pages reserved [ 832.571961][T15089] 0 pages cma reserved [ 832.934667][T15121] random: crng reseeded on system resumption [ 834.592673][T15139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1853'. [ 835.967067][T15138] netlink: 'syz.4.1854': attribute type 11 has an invalid length. [ 835.981902][T15138] netlink: 'syz.4.1854': attribute type 11 has an invalid length. [ 835.989805][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1854'. [ 836.012102][T15138] netlink: 'syz.4.1854': attribute type 11 has an invalid length. [ 836.020121][T15138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1854'. [ 836.031560][T15138] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1854'. [ 836.371075][T15158] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 836.581254][T15163] input: = as /devices/virtual/input/input41 [ 836.834195][T15170] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 838.202617][T15189] blktrace: Concurrent blktraces are not allowed on loop2 [ 838.389840][T15174] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 838.500602][T15191] ptrace attach of "./syz-executor exec"[15193] was attempted by "./syz-executor exec"[15191] [ 841.106702][T10016] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 841.366639][T15237] random: crng reseeded on system resumption [ 844.670160][T15289] random: crng reseeded on system resumption [ 847.762727][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1893'. [ 847.784118][T15340] netlink: 'syz.3.1893': attribute type 1 has an invalid length. [ 847.879258][T15340] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1893'. [ 848.241148][T10016] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 848.991733][T15361] vivid-007: ================= START STATUS ================= [ 848.999778][T15361] vivid-007: Generate PTS: true [ 849.063584][T15361] vivid-007: Generate SCR: true [ 849.070094][T15361] tpg source WxH: 320x240 (Y'CbCr) [ 849.076180][T15361] tpg field: 1 [ 849.159897][T15361] tpg crop: (0,0)/320x240 [ 849.173962][T15361] tpg compose: (0,0)/320x240 [ 849.354770][T15361] tpg colorspace: 8 [ 849.379175][T15361] tpg transfer function: 0/0 [ 849.387284][T15361] tpg Y'CbCr encoding: 0/0 [ 849.391796][T15361] tpg quantization: 0/0 [ 849.399749][T15361] tpg RGB range: 0/2 [ 849.405873][T15361] vivid-007: ================== END STATUS ================== [ 849.756917][T15366] can: request_module (can-proto-3) failed. [ 850.862781][T15399] FAULT_INJECTION: forcing a failure. [ 850.862781][T15399] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 850.904432][T15399] CPU: 1 UID: 0 PID: 15399 Comm: syz.4.1905 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 850.904463][T15399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 850.904474][T15399] Call Trace: [ 850.904481][T15399] [ 850.904489][T15399] dump_stack_lvl+0x16c/0x1f0 [ 850.904522][T15399] should_fail_ex+0x512/0x640 [ 850.904551][T15399] should_fail_alloc_page+0xe7/0x130 [ 850.904572][T15399] prepare_alloc_pages+0x3c2/0x610 [ 850.904595][T15399] ? rcu_is_watching+0x12/0xc0 [ 850.904617][T15399] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 850.904653][T15399] ? __lock_acquire+0x622/0x1c90 [ 850.904689][T15399] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 850.904717][T15399] ? __lock_acquire+0x622/0x1c90 [ 850.904750][T15399] ? __lock_acquire+0x622/0x1c90 [ 850.904776][T15399] ? __lock_acquire+0x622/0x1c90 [ 850.904800][T15399] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 850.904831][T15399] ? policy_nodemask+0xea/0x4e0 [ 850.904851][T15399] alloc_pages_mpol+0x1fb/0x550 [ 850.904870][T15399] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 850.904895][T15399] folio_alloc_mpol_noprof+0x36/0x2f0 [ 850.904919][T15399] vma_alloc_folio_noprof+0xed/0x1e0 [ 850.904941][T15399] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 850.904961][T15399] ? find_held_lock+0x2b/0x80 [ 850.904981][T15399] ? __handle_mm_fault+0x1092/0x5490 [ 850.905009][T15399] __handle_mm_fault+0x2f21/0x5490 [ 850.905040][T15399] ? __pfx___handle_mm_fault+0x10/0x10 [ 850.905065][T15399] ? __pte_offset_map_lock+0x174/0x310 [ 850.905084][T15399] ? find_held_lock+0x2b/0x80 [ 850.905102][T15399] ? find_held_lock+0x2b/0x80 [ 850.905126][T15399] ? follow_page_pte+0x3af/0x14c0 [ 850.905151][T15399] handle_mm_fault+0x589/0xd10 [ 850.905180][T15399] __get_user_pages+0x589/0x3b80 [ 850.905207][T15399] ? __pfx_mt_find+0x10/0x10 [ 850.905236][T15399] ? __pfx___get_user_pages+0x10/0x10 [ 850.905265][T15399] populate_vma_page_range+0x278/0x3a0 [ 850.905290][T15399] ? __pfx_populate_vma_page_range+0x10/0x10 [ 850.905311][T15399] ? __pfx_find_vma_intersection+0x10/0x10 [ 850.905334][T15399] ? do_mmap+0x69c/0x1210 [ 850.905356][T15399] __mm_populate+0x1d8/0x380 [ 850.905379][T15399] ? __pfx___mm_populate+0x10/0x10 [ 850.905406][T15399] ? up_write+0x1b2/0x520 [ 850.905438][T15399] vm_mmap_pgoff+0x362/0x450 [ 850.905462][T15399] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 850.905486][T15399] ? __x64_sys_futex+0x1e0/0x4c0 [ 850.905507][T15399] ? __x64_sys_futex+0x1e9/0x4c0 [ 850.905532][T15399] ksys_mmap_pgoff+0x7d/0x5c0 [ 850.905551][T15399] ? xfd_validate_state+0x61/0x180 [ 850.905575][T15399] ? __pfx___do_sys_close_range+0x10/0x10 [ 850.905606][T15399] __x64_sys_mmap+0x125/0x190 [ 850.905636][T15399] do_syscall_64+0xcd/0x490 [ 850.905665][T15399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.905691][T15399] RIP: 0033:0x7f918f18e929 [ 850.905707][T15399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.905726][T15399] RSP: 002b:00007f918ff2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 850.905745][T15399] RAX: ffffffffffffffda RBX: 00007f918f3b5fa0 RCX: 00007f918f18e929 [ 850.905758][T15399] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 850.905769][T15399] RBP: 00007f918f210b39 R08: 0000000000000002 R09: 0000000000008000 [ 850.905780][T15399] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 850.905792][T15399] R13: 0000000000000000 R14: 00007f918f3b5fa0 R15: 00007fffe4cf99c8 [ 850.905815][T15399] [ 851.343585][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1906'. [ 851.521259][T15403] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 851.537741][T15403] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1906'. [ 851.604548][T15409] [ 853.102076][T15440] syz.1.1914: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 853.172751][T15440] CPU: 0 UID: 0 PID: 15440 Comm: syz.1.1914 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 853.172797][T15440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 853.172810][T15440] Call Trace: [ 853.172817][T15440] [ 853.172825][T15440] dump_stack_lvl+0x16c/0x1f0 [ 853.172856][T15440] warn_alloc+0x248/0x3a0 [ 853.172886][T15440] ? __pfx_warn_alloc+0x10/0x10 [ 853.172918][T15440] ? __lock_acquire+0xb8a/0x1c90 [ 853.172953][T15440] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 853.172971][T15440] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 853.172995][T15440] ? __pfx___mutex_trylock_common+0x10/0x10 [ 853.173023][T15440] ? __pfx___might_resched+0x10/0x10 [ 853.173045][T15440] ? rcu_is_watching+0x12/0xc0 [ 853.173066][T15440] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 853.173082][T15440] ? __mutex_lock+0x1ca/0xb90 [ 853.173108][T15440] ? tomoyo_path_number_perm+0x295/0x580 [ 853.173132][T15440] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 853.173149][T15440] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 853.173172][T15440] ? __pfx___mutex_lock+0x10/0x10 [ 853.173199][T15440] ? do_raw_spin_unlock+0xc4/0x230 [ 853.173229][T15440] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 853.173255][T15440] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 853.173271][T15440] __vmalloc_node_noprof+0xad/0xf0 [ 853.173294][T15440] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 853.173313][T15440] dvb_dvr_do_ioctl+0x15d/0x290 [ 853.173337][T15440] dvb_usercopy+0x167/0x340 [ 853.173366][T15440] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 853.173384][T15440] ? __pfx_dvb_usercopy+0x10/0x10 [ 853.173421][T15440] ? __fget_files+0x20e/0x3c0 [ 853.173451][T15440] dvb_dvr_ioctl+0x29/0x40 [ 853.173466][T15440] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 853.173483][T15440] __x64_sys_ioctl+0x18e/0x210 [ 853.173506][T15440] do_syscall_64+0xcd/0x490 [ 853.173536][T15440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.173555][T15440] RIP: 0033:0x7f7cad58e929 [ 853.173570][T15440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.173597][T15440] RSP: 002b:00007f7cae3c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 853.173616][T15440] RAX: ffffffffffffffda RBX: 00007f7cad7b6080 RCX: 00007f7cad58e929 [ 853.173630][T15440] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 000000000000000f [ 853.173641][T15440] RBP: 00007f7cad610b39 R08: 0000000000000000 R09: 0000000000000000 [ 853.173652][T15440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.173664][T15440] R13: 0000000000000000 R14: 00007f7cad7b6080 R15: 00007fff92d75d08 [ 853.173687][T15440] [ 853.173694][T15440] Mem-Info: [ 853.501085][T15440] active_anon:8162 inactive_anon:3191 isolated_anon:0 [ 853.501085][T15440] active_file:21364 inactive_file:42891 isolated_file:0 [ 853.501085][T15440] unevictable:768 dirty:644 writeback:0 [ 853.501085][T15440] slab_reclaimable:11672 slab_unreclaimable:96157 [ 853.501085][T15440] mapped:25399 shmem:1410 pagetables:1193 [ 853.501085][T15440] sec_pagetables:0 bounce:0 [ 853.501085][T15440] kernel_misc_reclaimable:0 [ 853.501085][T15440] free:1307337 free_pcp:16250 free_cma:0 [ 853.570779][T15440] Node 0 active_anon:32648kB inactive_anon:12764kB active_file:85452kB inactive_file:171360kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101596kB dirty:2576kB writeback:0kB shmem:4104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12008kB pagetables:4612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 853.621836][T15440] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 853.720195][T15440] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 853.779955][T15440] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 853.859086][T15440] Node 0 DMA32 free:1309876kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32604kB inactive_anon:16964kB active_file:84528kB inactive_file:170968kB unevictable:1536kB writepending:2668kB present:3129332kB managed:2540356kB mlocked:0kB bounce:0kB free_pcp:41044kB local_pcp:18048kB free_cma:0kB [ 854.028925][T15440] lowmem_reserve[]: 0 0 1 1 1 [ 854.052306][T15440] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:980kB inactive_file:336kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 854.127798][T15440] lowmem_reserve[]: 0 0 0 0 0 [ 854.132561][T15440] Node 1 Normal free:3902584kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20732kB local_pcp:13832kB free_cma:0kB [ 854.184373][T15440] lowmem_reserve[]: 0 0 0 0 0 [ 854.197150][T15440] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 854.238609][T15440] Node 0 DMA32: 10379*4kB (UME) 8018*8kB (UME) 6393*16kB (UME) 4974*32kB (UME) 2811*64kB (UME) 1067*128kB (UME) 256*256kB (UME) 74*512kB (UME) 34*1024kB (UME) 9*2048kB (UME) 115*4096kB (UM) = 1311308kB [ 854.267638][T15440] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 854.280321][T15440] Node 1 Normal: 1008*4kB (UME) 47*8kB (UME) 36*16kB (UME) 188*32kB (UM) 56*64kB (UME) 17*128kB (UME) 9*256kB (UME) 7*512kB (UM) 5*1024kB (UME) 4*2048kB (UME) 944*4096kB (M) = 3902584kB [ 854.342197][T15440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 854.353065][T15440] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 854.365905][T15440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 854.381756][T15440] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 854.396513][T15440] 65630 total pagecache pages [ 854.401342][T15440] 3 pages in swap cache [ 854.405617][T15440] Free swap = 124620kB [ 854.410711][T15440] Total swap = 124996kB [ 854.414989][T15440] 2097051 pages RAM [ 854.422472][T15440] 0 pages HighMem/MovableOnly [ 854.429144][T15440] 429984 pages reserved [ 854.433356][T15440] 0 pages cma reserved [ 854.679020][T10016] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 854.688852][T10016] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 857.487114][T15529] random: crng reseeded on system resumption [ 857.740102][T15536] FAULT_INJECTION: forcing a failure. [ 857.740102][T15536] name failslab, interval 1, probability 0, space 0, times 0 [ 857.753412][T15536] CPU: 1 UID: 0 PID: 15536 Comm: syz.4.1932 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 857.753443][T15536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 857.753454][T15536] Call Trace: [ 857.753461][T15536] [ 857.753469][T15536] dump_stack_lvl+0x16c/0x1f0 [ 857.753510][T15536] should_fail_ex+0x512/0x640 [ 857.753538][T15536] ? __kmalloc_noprof+0xbf/0x510 [ 857.753568][T15536] ? xfrm_hash_alloc+0xd1/0x100 [ 857.753592][T15536] should_failslab+0xc2/0x120 [ 857.753610][T15536] __kmalloc_noprof+0xd2/0x510 [ 857.753637][T15536] ? xfrm_state_init+0x377/0x630 [ 857.753660][T15536] ? xfrm_state_init+0x341/0x630 [ 857.753686][T15536] xfrm_hash_alloc+0xd1/0x100 [ 857.753711][T15536] xfrm_net_init+0x35f/0xcc0 [ 857.753740][T15536] ? __pfx_xfrm_net_init+0x10/0x10 [ 857.753765][T15536] ops_init+0x1df/0x5f0 [ 857.753796][T15536] setup_net+0x1ff/0x510 [ 857.753823][T15536] ? lockdep_init_map_type+0x5c/0x280 [ 857.753851][T15536] ? __pfx_setup_net+0x10/0x10 [ 857.753881][T15536] ? debug_mutex_init+0x37/0x70 [ 857.753902][T15536] copy_net_ns+0x2a6/0x5f0 [ 857.753922][T15536] create_new_namespaces+0x3ea/0xa90 [ 857.753950][T15536] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 857.753973][T15536] ksys_unshare+0x45b/0xa40 [ 857.753999][T15536] ? __pfx_ksys_unshare+0x10/0x10 [ 857.754025][T15536] ? xfd_validate_state+0x61/0x180 [ 857.754057][T15536] __x64_sys_unshare+0x31/0x40 [ 857.754082][T15536] do_syscall_64+0xcd/0x490 [ 857.754111][T15536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.754129][T15536] RIP: 0033:0x7f918f18e929 [ 857.754145][T15536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.754164][T15536] RSP: 002b:00007f918ff2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 857.754183][T15536] RAX: ffffffffffffffda RBX: 00007f918f3b5fa0 RCX: 00007f918f18e929 [ 857.754195][T15536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 857.754206][T15536] RBP: 00007f918f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 857.754217][T15536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.754228][T15536] R13: 0000000000000000 R14: 00007f918f3b5fa0 R15: 00007fffe4cf99c8 [ 857.754250][T15536] [ 860.011834][T15574] FAULT_INJECTION: forcing a failure. [ 860.011834][T15574] name failslab, interval 1, probability 0, space 0, times 0 [ 860.053915][T15574] CPU: 0 UID: 0 PID: 15574 Comm: syz.4.1940 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 860.053956][T15574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 860.053974][T15574] Call Trace: [ 860.053985][T15574] [ 860.053997][T15574] dump_stack_lvl+0x16c/0x1f0 [ 860.054046][T15574] should_fail_ex+0x512/0x640 [ 860.054085][T15574] ? __kmalloc_noprof+0xbf/0x510 [ 860.054129][T15574] ? ops_init+0x77/0x5f0 [ 860.054169][T15574] should_failslab+0xc2/0x120 [ 860.054194][T15574] __kmalloc_noprof+0xd2/0x510 [ 860.054244][T15574] ops_init+0x77/0x5f0 [ 860.054294][T15574] setup_net+0x1ff/0x510 [ 860.054337][T15574] ? lockdep_init_map_type+0x5c/0x280 [ 860.054381][T15574] ? __pfx_setup_net+0x10/0x10 [ 860.054429][T15574] ? debug_mutex_init+0x37/0x70 [ 860.054475][T15574] copy_net_ns+0x2a6/0x5f0 [ 860.054510][T15574] create_new_namespaces+0x3ea/0xa90 [ 860.054556][T15574] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 860.054595][T15574] ksys_unshare+0x45b/0xa40 [ 860.054636][T15574] ? __pfx_ksys_unshare+0x10/0x10 [ 860.054679][T15574] ? xfd_validate_state+0x61/0x180 [ 860.054732][T15574] __x64_sys_unshare+0x31/0x40 [ 860.054771][T15574] do_syscall_64+0xcd/0x490 [ 860.054818][T15574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.054848][T15574] RIP: 0033:0x7f918f18e929 [ 860.054874][T15574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.054903][T15574] RSP: 002b:00007f918ff2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 860.054933][T15574] RAX: ffffffffffffffda RBX: 00007f918f3b5fa0 RCX: 00007f918f18e929 [ 860.054954][T15574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 860.054972][T15574] RBP: 00007f918f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 860.054991][T15574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.055009][T15574] R13: 0000000000000000 R14: 00007f918f3b5fa0 R15: 00007fffe4cf99c8 [ 860.055052][T15574] [ 860.804124][ T30] audit: type=1804 audit(4294967725.876:40): pid=15591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1945" name="/newroot/471/file0" dev="tmpfs" ino=2532 res=1 errno=0 [ 862.905393][T15610] block2mtd: Using custom MTD label '' for dev [ 862.927188][T15610] block2mtd: error: cannot open device [ 866.391422][T10016] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 866.588153][T15666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1960'. [ 866.813404][T15665] hub 8-0:1.0: USB hub found [ 867.034707][T15665] hub 8-0:1.0: 1 port detected [ 871.468175][T10016] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 873.902613][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.910399][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.164082][T15757] block2mtd: Using custom MTD label '' for dev [ 874.181842][T15757] block2mtd: error: cannot open device [ 874.274756][T15660] ALSA: mixer_oss: invalid OSS volume '0' [ 874.283203][T15660] ALSA: mixer_oss: invalid OSS volume '' [ 874.871434][T15773] queue_state_write: operation too long [ 874.877385][T15773] queue_state_write: use 'run', 'start' or 'kick' [ 876.765628][T15797] block2mtd: Using custom MTD label '' for dev [ 876.780071][T15797] block2mtd: error: cannot open device [ 877.000847][T15807] binder_alloc: binder_alloc_mmap_handler: 15806 0-1000 already mapped failed -16 [ 877.416483][T15818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1995'. [ 877.609832][T15816] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1996'. [ 878.029053][T15824] sp0: Synchronizing with TNC [ 878.054742][T15824] sp0: Found TNC [ 880.938851][ T9533] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 880.958346][ T9533] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 880.977857][ T9533] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 880.986675][ T9533] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 881.008158][ T9533] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 881.118098][T15869] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2010'. [ 881.945823][ T9602] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.111677][ T9602] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.438614][ T9602] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.494536][T15862] chnl_net:caif_netlink_parms(): no params data found [ 882.878782][ T9602] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.047202][T10016] Bluetooth: hci3: command tx timeout [ 884.493735][T15903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2015'. [ 884.654522][T15795] ALSA: mixer_oss: invalid OSS volume '0' [ 884.675680][T15795] ALSA: mixer_oss: invalid OSS volume '' [ 884.850385][T15862] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.865515][T15862] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.019462][T15862] bridge_slave_0: entered allmulticast mode [ 885.037954][T15862] bridge_slave_0: entered promiscuous mode [ 885.122347][T10016] Bluetooth: hci3: command tx timeout [ 885.127971][T15862] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.128179][T15862] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.173475][T15862] bridge_slave_1: entered allmulticast mode [ 885.224674][T15862] bridge_slave_1: entered promiscuous mode [ 885.347580][ T9602] bridge_slave_1: left allmulticast mode [ 885.353375][ T9602] bridge_slave_1: left promiscuous mode [ 885.365297][ T9602] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.387292][ T9602] bridge_slave_0: left allmulticast mode [ 885.393012][ T9602] bridge_slave_0: left promiscuous mode [ 885.405692][ T9602] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.540811][ T9602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.575341][ T9602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.597990][ T9602] bond0 (unregistering): Released all slaves [ 886.714524][T15862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.850146][T15862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.185717][T10016] Bluetooth: hci3: command tx timeout [ 887.567583][T15862] team0: Port device team_slave_0 added [ 887.666010][T15862] team0: Port device team_slave_1 added [ 887.797234][T15848] ALSA: mixer_oss: invalid OSS volume '' [ 887.812329][T15848] ALSA: mixer_oss: invalid OSS volume '' [ 887.896535][T15862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.911860][T15862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.968978][T15862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.133629][T15862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.155852][T15862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.227496][T15862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.493452][T15862] hsr_slave_0: entered promiscuous mode [ 888.500875][T15862] hsr_slave_1: entered promiscuous mode [ 888.513988][T15862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 888.528624][T15862] Cannot create hsr debugfs directory [ 888.796447][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 888.854751][ T9602] hsr_slave_0: left promiscuous mode [ 888.882117][ T9602] hsr_slave_1: left promiscuous mode [ 888.954824][ T9602] veth1_macvtap: left promiscuous mode [ 888.996638][ T9602] veth0_macvtap: left promiscuous mode [ 889.008021][ T9602] veth1_vlan: left promiscuous mode [ 889.033813][ T9602] veth0_vlan: left promiscuous mode [ 889.254920][T10016] Bluetooth: hci3: command tx timeout [ 890.614161][ T9602] team0 (unregistering): Port device team_slave_1 removed [ 890.703995][ T9602] team0 (unregistering): Port device team_slave_0 removed [ 891.477285][T15974] FAULT_INJECTION: forcing a failure. [ 891.477285][T15974] name failslab, interval 1, probability 0, space 0, times 0 [ 891.501361][T15974] CPU: 1 UID: 0 PID: 15974 Comm: syz.1.2026 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 891.501409][T15974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 891.501430][T15974] Call Trace: [ 891.501442][T15974] [ 891.501455][T15974] dump_stack_lvl+0x16c/0x1f0 [ 891.501510][T15974] should_fail_ex+0x512/0x640 [ 891.501555][T15974] ? __kmalloc_noprof+0xbf/0x510 [ 891.501604][T15974] ? mpi_alloc_limb_space+0x31/0x60 [ 891.501640][T15974] should_failslab+0xc2/0x120 [ 891.501671][T15974] __kmalloc_noprof+0xd2/0x510 [ 891.501726][T15974] mpi_alloc_limb_space+0x31/0x60 [ 891.501764][T15974] mpi_alloc+0x199/0x230 [ 891.501798][T15974] ? mpi_free+0x14/0x160 [ 891.501833][T15974] mpi_read_raw_data+0x133/0x4a0 [ 891.501874][T15974] ? rsa_free_mpi_key+0x15a/0x3a0 [ 891.501929][T15974] rsa_set_pub_key+0x110/0x270 [ 891.501979][T15974] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 891.502048][T15974] ? __asan_memcpy+0x3c/0x60 [ 891.502098][T15974] rsassa_pkcs1_set_pub_key+0xcb/0x1f0 [ 891.502138][T15974] public_key_verify_signature+0x776/0x970 [ 891.502184][T15974] ? __pfx_public_key_verify_signature+0x10/0x10 [ 891.502260][T15974] x509_check_for_self_signed+0x31a/0x500 [ 891.502306][T15974] x509_cert_parse+0x5f8/0x900 [ 891.502339][T15974] ? kasan_save_stack+0x42/0x60 [ 891.502379][T15974] ? kasan_save_stack+0x33/0x60 [ 891.502422][T15974] ? kasan_save_track+0x14/0x30 [ 891.502471][T15974] pkcs7_extract_cert+0xa4/0x320 [ 891.502522][T15974] asn1_ber_decoder+0xc5f/0x1df0 [ 891.502591][T15974] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 891.502674][T15974] pkcs7_parse_message+0x288/0x720 [ 891.502724][T15974] verify_pkcs7_signature+0x30/0xa0 [ 891.502763][T15974] valid_regdb+0x215/0x590 [ 891.502797][T15974] ? __pfx___mutex_lock+0x10/0x10 [ 891.502845][T15974] ? __pfx_valid_regdb+0x10/0x10 [ 891.502895][T15974] reg_reload_regdb+0x11e/0x460 [ 891.502933][T15974] ? __pfx_reg_reload_regdb+0x10/0x10 [ 891.502972][T15974] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 891.503017][T15974] ? nl80211_pre_doit+0x1b0/0xb10 [ 891.503069][T15974] genl_family_rcv_msg_doit+0x206/0x2f0 [ 891.503111][T15974] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 891.503145][T15974] ? rcu_is_watching+0x12/0xc0 [ 891.503194][T15974] ? bpf_lsm_capable+0x9/0x10 [ 891.503232][T15974] ? security_capable+0x7e/0x260 [ 891.503273][T15974] genl_rcv_msg+0x55c/0x800 [ 891.503315][T15974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 891.503352][T15974] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 891.503393][T15974] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 891.503424][T15974] ? __pfx_nl80211_post_doit+0x10/0x10 [ 891.503481][T15974] netlink_rcv_skb+0x155/0x420 [ 891.503513][T15974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 891.503551][T15974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 891.503602][T15974] ? netlink_deliver_tap+0x1ae/0xd30 [ 891.503656][T15974] genl_rcv+0x28/0x40 [ 891.503688][T15974] netlink_unicast+0x53a/0x7f0 [ 891.503725][T15974] ? __pfx_netlink_unicast+0x10/0x10 [ 891.503770][T15974] netlink_sendmsg+0x8d1/0xdd0 [ 891.503810][T15974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.503859][T15974] ____sys_sendmsg+0xa98/0xc70 [ 891.503902][T15974] ? copy_msghdr_from_user+0x10a/0x160 [ 891.503945][T15974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 891.503990][T15974] ? __pfx_futex_wake_mark+0x10/0x10 [ 891.504040][T15974] ___sys_sendmsg+0x134/0x1d0 [ 891.504086][T15974] ? __pfx____sys_sendmsg+0x10/0x10 [ 891.504125][T15974] ? __lock_acquire+0x622/0x1c90 [ 891.504220][T15974] __sys_sendmsg+0x16d/0x220 [ 891.504264][T15974] ? __pfx___sys_sendmsg+0x10/0x10 [ 891.504308][T15974] ? __x64_sys_futex+0x1e0/0x4c0 [ 891.504371][T15974] do_syscall_64+0xcd/0x490 [ 891.504420][T15974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.504452][T15974] RIP: 0033:0x7f7cad58e929 [ 891.504478][T15974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.504509][T15974] RSP: 002b:00007f7cae3e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.504540][T15974] RAX: ffffffffffffffda RBX: 00007f7cad7b5fa0 RCX: 00007f7cad58e929 [ 891.504560][T15974] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 891.504579][T15974] RBP: 00007f7cad610b39 R08: 0000000000000000 R09: 0000000000000000 [ 891.504597][T15974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.504615][T15974] R13: 0000000000000000 R14: 00007f7cad7b5fa0 R15: 00007fff92d75d08 [ 891.504656][T15974] [ 892.685913][T15862] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 892.788434][T15862] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 893.136372][T15862] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 893.302651][T15862] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 893.310764][T16000] nvme_fabrics: missing parameter 'transport=%s' [ 893.327677][T16000] nvme_fabrics: missing parameter 'nqn=%s' [ 893.938821][T15862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.017760][T15862] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.056547][T10460] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.064638][T10460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.133194][T10460] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.140514][T10460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.362557][T15862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.015573][T15862] veth0_vlan: entered promiscuous mode [ 896.074790][T15862] veth1_vlan: entered promiscuous mode [ 896.099883][T15862] veth0_macvtap: entered promiscuous mode [ 896.115381][T15862] veth1_macvtap: entered promiscuous mode [ 896.134584][T15862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.165375][T15862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.216588][T15862] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.295103][T15862] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.304290][T15862] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.317012][T15862] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.690049][T10460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.718110][T10460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.802569][ T9602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.840365][ T9602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.976540][T16093] nvme_fabrics: missing parameter 'transport=%s' [ 897.993536][T16093] nvme_fabrics: missing parameter 'nqn=%s' [ 900.041517][T16137] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2046'. [ 900.094148][T16137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.129148][T16137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.159423][T16137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.199975][T16137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.676277][T16140] kexec: Could not allocate control_code_buffer [ 902.268258][T16175] random: crng reseeded on system resumption [ 903.853888][T16200] [U] ՑM O [ 904.199339][T16223] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2059'. [ 905.488862][T10016] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 905.577595][T16224] kexec: Could not allocate control_code_buffer [ 907.961342][T10016] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 911.221082][T16384] snd_aloop snd_aloop.0: control 16781581:65533:6:'x?F/zF˷fC:0 is already present [ 912.691829][T16412] busy [ 913.531765][T16410] kexec: Could not allocate control_code_buffer [ 913.723960][ T9533] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 913.985801][ T9533] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 914.892640][T16454] net_ratelimit: 76 callbacks suppressed [ 914.892667][T16454] netlink: zone id is out of range [ 915.209043][T16454] netlink: zone id is out of range [ 915.557209][T16454] netlink: set zone limit has 8 unknown bytes [ 915.738295][T16479] synth uevent: /module/bfusb: unknown uevent action string [ 915.757918][T16480] synth uevent: /module/bfusb: unknown uevent action string [ 915.773178][T16479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2099'. [ 916.039295][T16479] team0: Port device team_slave_0 removed [ 916.296055][T16500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2102'. [ 916.970387][ T9533] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 917.313983][T16482] openvswitch: netlink: IP tunnel dst address not specified [ 917.526779][T16517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2106'. [ 917.881830][T16526] block2mtd: device name too long [ 918.029344][T16529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2109'. [ 918.222899][T16543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2111'. [ 918.269689][T16529] team0: Port device team_slave_1 removed [ 919.928275][T16569] sd 0:0:1:0: PR command failed: 1026 [ 919.933786][T16569] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 920.032860][T16569] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 920.254383][T16568] netlink: 'syz.5.2117': attribute type 2 has an invalid length. [ 920.882737][ T9533] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 924.983002][T16653] random: crng reseeded on system resumption [ 926.343572][T16680] netlink: 'syz.1.2127': attribute type 2 has an invalid length. [ 927.920541][T16690] kexec: Could not allocate control_code_buffer [ 928.437060][T16713] netlink: 'syz.1.2132': attribute type 33 has an invalid length. [ 928.491066][T16713] netlink: 322 bytes leftover after parsing attributes in process `syz.1.2132'. [ 928.571707][T16715] netlink: 'syz.1.2132': attribute type 33 has an invalid length. [ 928.579889][T16715] netlink: 322 bytes leftover after parsing attributes in process `syz.1.2132'. [ 929.331706][T16729] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2133'. [ 929.852766][ T30] audit: type=1804 audit(4294967851.267:41): pid=16732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2134" name="/newroot/575/file0" dev="tmpfs" ino=3073 res=1 errno=0 [ 929.953211][ T30] audit: type=1800 audit(4294967851.267:42): pid=16732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2134" name="file0" dev="tmpfs" ino=3073 res=0 errno=0 [ 935.026835][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 935.033238][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 939.576695][ T9533] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 940.549356][ T9533] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 941.396446][T16879] netlink: 'syz.0.2156': attribute type 33 has an invalid length. [ 941.413682][T16879] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2156'. [ 941.444359][T16879] netlink: 'syz.0.2156': attribute type 33 has an invalid length. [ 941.463393][T16879] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2156'. [ 942.453136][T16893] Invalid ELF header magic: != ELF [ 945.025764][ T9533] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 945.685980][T16553] syz.3.2112 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 945.696270][T16553] CPU: 1 UID: 0 PID: 16553 Comm: syz.3.2112 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 945.696306][T16553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 945.696318][T16553] Call Trace: [ 945.696325][T16553] [ 945.696332][T16553] dump_stack_lvl+0x16c/0x1f0 [ 945.696366][T16553] dump_header+0x101/0x930 [ 945.696398][T16553] oom_kill_process+0x270/0xa60 [ 945.696429][T16553] out_of_memory+0x350/0x1700 [ 945.696463][T16553] ? __pfx_out_of_memory+0x10/0x10 [ 945.696498][T16553] mem_cgroup_out_of_memory+0x118/0x130 [ 945.696523][T16553] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 945.696551][T16553] ? do_raw_spin_unlock+0x172/0x230 [ 945.696585][T16553] try_charge_memcg+0x72b/0xd50 [ 945.696607][T16553] ? __pfx_try_charge_memcg+0x10/0x10 [ 945.696625][T16553] ? __print_lock_name+0x91/0xe0 [ 945.696645][T16553] ? rcu_read_unlock+0x17/0x60 [ 945.696670][T16553] charge_memcg+0x8a/0x230 [ 945.696688][T16553] __mem_cgroup_charge+0x2b/0x1e0 [ 945.696710][T16553] shmem_alloc_and_add_folio+0x514/0xc20 [ 945.696742][T16553] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 945.696772][T16553] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 945.696803][T16553] shmem_get_folio_gfp+0x67f/0x1600 [ 945.696835][T16553] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 945.696864][T16553] ? __pte_offset_map_lock+0x174/0x310 [ 945.696886][T16553] shmem_write_begin+0x160/0x300 [ 945.696914][T16553] ? find_held_lock+0x2b/0x80 [ 945.696932][T16553] ? __pfx_shmem_write_begin+0x10/0x10 [ 945.696961][T16553] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 945.696983][T16553] ? __pfx_timestamp_truncate+0x10/0x10 [ 945.697014][T16553] generic_perform_write+0x3cd/0x930 [ 945.697054][T16553] ? __pfx_generic_perform_write+0x10/0x10 [ 945.697082][T16553] ? inode_needs_update_time.part.0+0x191/0x270 [ 945.697123][T16553] shmem_file_write_iter+0x10e/0x140 [ 945.697144][T16553] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 945.697161][T16553] __kernel_write_iter+0x31a/0xa90 [ 945.697189][T16553] ? __pfx___kernel_write_iter+0x10/0x10 [ 945.697215][T16553] ? __up_read+0x1f8/0x750 [ 945.697246][T16553] ? dump_user_range+0x745/0xb60 [ 945.697272][T16553] dump_user_range+0x41f/0xb60 [ 945.697298][T16553] ? __pfx_dump_user_range+0x10/0x10 [ 945.697320][T16553] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 945.697355][T16553] ? __pfx_writenote+0x10/0x10 [ 945.697383][T16553] elf_core_dump+0x288a/0x3a90 [ 945.697419][T16553] ? __pfx_elf_core_dump+0x10/0x10 [ 945.697440][T16553] ? kasan_save_stack+0x42/0x60 [ 945.697466][T16553] ? kasan_save_stack+0x33/0x60 [ 945.697491][T16553] ? kasan_save_track+0x14/0x30 [ 945.697516][T16553] ? __kasan_kmalloc+0xaa/0xb0 [ 945.697542][T16553] ? do_coredump+0x1c9a/0x4f10 [ 945.697560][T16553] ? get_signal+0x22e3/0x26d0 [ 945.697580][T16553] ? arch_do_signal_or_restart+0x8f/0x790 [ 945.697606][T16553] ? 0xffffffffff600000 [ 945.697660][T16553] ? do_coredump+0x399f/0x4f10 [ 945.697679][T16553] do_coredump+0x399f/0x4f10 [ 945.697708][T16553] ? __pfx_do_coredump+0x10/0x10 [ 945.697728][T16553] ? find_held_lock+0x2b/0x80 [ 945.697748][T16553] ? is_bpf_text_address+0x8a/0x1a0 [ 945.697776][T16553] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 945.697800][T16553] ? is_bpf_text_address+0x94/0x1a0 [ 945.697825][T16553] ? kernel_text_address+0x8d/0x100 [ 945.697855][T16553] ? __kernel_text_address+0xd/0x40 [ 945.697884][T16553] ? unwind_get_return_address+0x59/0xa0 [ 945.697927][T16553] ? stack_depot_save_flags+0x28/0xa40 [ 945.697956][T16553] ? __lock_acquire+0xb8a/0x1c90 [ 945.697983][T16553] ? kasan_save_stack+0x42/0x60 [ 945.698020][T16553] ? kasan_save_stack+0x33/0x60 [ 945.698045][T16553] ? kasan_save_track+0x14/0x30 [ 945.698070][T16553] ? kasan_save_free_info+0x3b/0x60 [ 945.698091][T16553] ? __kasan_slab_free+0x51/0x70 [ 945.698138][T16553] ? kmem_cache_free+0x2d1/0x4d0 [ 945.698163][T16553] ? __sigqueue_free+0xba/0x2a0 [ 945.698188][T16553] ? get_signal+0xcba/0x26d0 [ 945.698207][T16553] ? arch_do_signal_or_restart+0x8f/0x790 [ 945.698260][T16553] ? proc_coredump_connector+0x2d1/0x4f0 [ 945.698283][T16553] ? __pfx_proc_coredump_connector+0x10/0x10 [ 945.698312][T16553] ? rcu_is_watching+0x12/0xc0 [ 945.698335][T16553] get_signal+0x22e3/0x26d0 [ 945.698365][T16553] ? __pfx_get_signal+0x10/0x10 [ 945.698393][T16553] arch_do_signal_or_restart+0x8f/0x790 [ 945.698416][T16553] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 945.698444][T16553] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 945.698473][T16553] ? do_error_trap+0x214/0x240 [ 945.698500][T16553] irqentry_exit_to_user_mode+0x12a/0x270 [ 945.698529][T16553] asm_exc_invalid_op+0x1a/0x20 [ 945.698547][T16553] RIP: 0033:0x4 [ 945.698559][T16553] Code: Unable to access opcode bytes at 0xffffffffffffffda. [ 945.698568][T16553] RSP: 002b:0000000000000208 EFLAGS: 00010206 [ 945.698583][T16553] RAX: 0000000000000003 RBX: 00007f9d6afb5fa0 RCX: 00007f9d6ad8e929 [ 945.698595][T16553] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000007fff [ 945.698606][T16553] RBP: 00007f9d6ae10b39 R08: 000000000000000f R09: 0000000000000000 [ 945.698617][T16553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.698628][T16553] R13: 0000000000000000 R14: 00007f9d6afb5fa0 R15: 00007ffccf471bf8 [ 945.698651][T16553] [ 945.698735][T16553] memory: usage 307200kB, limit 307200kB, failcnt 147213 [ 946.565659][T16553] memory+swap: usage 431384kB, limit 9007199254740988kB, failcnt 0 [ 946.731498][T16553] kmem: usage 3308kB, limit 9007199254740988kB, failcnt 0 [ 946.744965][T16553] Memory cgroup stats for /syz3: [ 946.745172][T16553] cache 310026240 [ 946.754327][T16553] rss 712704 [ 946.757860][T16553] rss_huge 0 [ 946.761093][T16553] shmem 310026240 [ 946.764757][T16553] mapped_file 40402944 [ 946.769529][T16553] dirty 0 [ 946.772509][T16553] writeback 0 [ 946.864081][T16553] workingset_refault_anon 1990 [ 946.882552][T16553] workingset_refault_file 1596 [ 946.900634][T16553] swap 127164416 [ 946.904253][T16553] swapcached 446464 [ 946.908267][T16553] pgpgin 1313775 [ 946.922361][T16553] pgpgout 1242494 [ 946.946898][T16553] pgfault 985591 [ 946.950503][T16553] pgmajfault 555 [ 947.010199][T16553] inactive_anon 310022144 [ 947.032344][T16553] active_anon 1163264 [ 947.049022][T16553] inactive_file 0 [ 947.091656][T16553] active_file 0 [ 947.122674][T16553] unevictable 0 [ 947.143803][T16553] hierarchical_memory_limit 314572800 [ 947.151761][T16553] hierarchical_memsw_limit 9223372036854771712 [ 947.253329][T16553] total_cache 310026240 [ 947.292219][T16553] total_rss 712704 [ 947.298178][T16553] total_rss_huge 0 [ 947.301931][T16553] total_shmem 310026240 [ 947.473874][T16553] total_mapped_file 40402944 [ 947.479971][T16553] total_dirty 0 [ 947.488307][T16553] total_writeback 0 [ 947.496304][T16553] total_workingset_refault_anon 1990 [ 947.508650][T16553] total_workingset_refault_file 1596 [ 947.520878][T16553] total_swap 127164416 [ 947.527726][T16553] total_swapcached 446464 [ 947.536356][T16553] total_pgpgin 1313775 [ 947.540489][T16553] total_pgpgout 1242494 [ 947.581223][T16553] total_pgfault 985591 [ 947.595397][T16553] total_pgmajfault 555 [ 947.599536][T16553] total_inactive_anon 310022144 [ 947.619110][T16553] total_active_anon 1163264 [ 947.627722][T16553] total_inactive_file 0 [ 947.644390][T16553] total_active_file 0 [ 947.654400][T16553] total_unevictable 0 [ 947.658448][T16553] anon_cost 13570 [ 947.681021][T16553] file_cost 143 [ 947.687724][T16553] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2116,pid=16589,uid=0 [ 947.718595][T16553] Memory cgroup out of memory: Killed process 16589 (syz.3.2116) total-vm:164704kB, anon-rss:1048kB, file-rss:21668kB, shmem-rss:39296kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 947.766467][T16951] FAULT_INJECTION: forcing a failure. [ 947.766467][T16951] name fail_futex, interval 1, probability 0, space 0, times 0 [ 947.879980][T16951] CPU: 0 UID: 0 PID: 16951 Comm: syz.5.2172 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 947.880032][T16951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 947.880053][T16951] Call Trace: [ 947.880064][T16951] [ 947.880078][T16951] dump_stack_lvl+0x16c/0x1f0 [ 947.880139][T16951] should_fail_ex+0x512/0x640 [ 947.880191][T16951] get_futex_key+0x1d0/0x1540 [ 947.880241][T16951] ? __pfx_get_futex_key+0x10/0x10 [ 947.880283][T16951] ? stack_trace_save+0x8e/0xc0 [ 947.880326][T16951] futex_wait_setup+0x84/0x510 [ 947.880381][T16951] __futex_wait+0x194/0x2f0 [ 947.880429][T16951] ? __pfx___futex_wait+0x10/0x10 [ 947.880482][T16951] ? __pfx_futex_wake_mark+0x10/0x10 [ 947.880544][T16951] ? __futex_hash.constprop.0+0x1e9/0x440 [ 947.880586][T16951] futex_wait+0xe8/0x380 [ 947.880632][T16951] ? __pfx_futex_wait+0x10/0x10 [ 947.880701][T16951] do_futex+0x229/0x350 [ 947.880740][T16951] ? __pfx_do_futex+0x10/0x10 [ 947.880782][T16951] ? __pfx___might_resched+0x10/0x10 [ 947.880822][T16951] __x64_sys_futex+0x1e0/0x4c0 [ 947.880864][T16951] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 947.880906][T16951] ? __pfx___x64_sys_futex+0x10/0x10 [ 947.880946][T16951] ? __pfx___do_sys_close_range+0x10/0x10 [ 947.881007][T16951] do_syscall_64+0xcd/0x490 [ 947.881058][T16951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.881120][T16951] RIP: 0033:0x7f91a9b8e929 [ 947.881148][T16951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.881182][T16951] RSP: 002b:00007f91aaaa90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 947.881215][T16951] RAX: ffffffffffffffda RBX: 00007f91a9db5fa8 RCX: 00007f91a9b8e929 [ 947.881238][T16951] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f91a9db5fa8 [ 947.881257][T16951] RBP: 00007f91a9db5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 947.881277][T16951] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f91a9db5fac [ 947.881296][T16951] R13: 0000000000000000 R14: 00007ffc5d2165d0 R15: 00007ffc5d2166b8 [ 947.881339][T16951] [ 949.902919][ T32] oom_reaper: reaped process 16589 (syz.3.2116), now anon-rss:0kB, file-rss:10540kB, shmem-rss:0kB [ 950.689602][T16992] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x246 pfn:0x78800 [ 950.755465][T16992] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 950.764822][T16992] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 950.806206][T16992] raw: 0000000000000246 0000000000000000 00000001ffffffff 0000000000000000 [ 950.824897][T16983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2178'. [ 950.825187][T16992] page dumped because: unmovable page [ 950.864570][T16992] page_owner tracks the page as allocated [ 950.910589][T16992] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 15853, tgid 15853 (syz-executor), ts 880493423103, free_ts 850766838815 [ 950.992813][T16992] post_alloc_hook+0x1c0/0x230 [ 951.023204][T16992] get_page_from_freelist+0x1321/0x3890 [ 951.033638][T16992] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 951.061224][T16992] alloc_pages_mpol+0x1fb/0x550 [ 951.071688][T16992] alloc_pages_noprof+0x131/0x390 [ 951.091504][T16992] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 951.111719][T16992] vmalloc_user_noprof+0x9e/0xe0 [ 951.121813][T16992] kcov_ioctl+0x4c/0x730 [ 951.147831][T16992] __x64_sys_ioctl+0x18e/0x210 [ 951.157708][T16992] do_syscall_64+0xcd/0x490 [ 951.163076][T16992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.175098][T16992] page last free pid 15386 tgid 15381 stack trace: [ 951.181671][T16992] __free_frozen_pages+0x7fe/0x1180 [ 951.227542][T16992] mon_bin_release+0x15a/0x240 [ 951.232406][T16992] __fput+0x402/0xb70 [ 951.262478][T16992] task_work_run+0x14d/0x240 [ 951.273858][T16992] do_exit+0x86c/0x2bd0 [ 951.281975][T16992] do_group_exit+0xd3/0x2a0 [ 951.287479][T16992] get_signal+0x2673/0x26d0 [ 951.294051][T16992] arch_do_signal_or_restart+0x8f/0x790 [ 951.301731][T16992] exit_to_user_mode_loop+0x84/0x110 [ 951.314786][T16992] do_syscall_64+0x3f6/0x490 [ 951.320416][T16992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.660974][T17030] snd_aloop snd_aloop.0: control 16781581:65533:1073741830:'x?F/zF˷fC:45170 is already present [ 957.076554][T17063] FAULT_INJECTION: forcing a failure. [ 957.076554][T17063] name failslab, interval 1, probability 0, space 0, times 0 [ 957.089515][T17063] CPU: 0 UID: 0 PID: 17063 Comm: syz.0.2199 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 957.089544][T17063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 957.089556][T17063] Call Trace: [ 957.089563][T17063] [ 957.089571][T17063] dump_stack_lvl+0x16c/0x1f0 [ 957.089603][T17063] should_fail_ex+0x512/0x640 [ 957.089631][T17063] ? __kmalloc_node_noprof+0xc5/0x500 [ 957.089662][T17063] should_failslab+0xc2/0x120 [ 957.089680][T17063] __kmalloc_node_noprof+0xd8/0x500 [ 957.089707][T17063] ? lockdep_init_map_type+0x5c/0x280 [ 957.089734][T17063] ? mempool_init_node+0x13c/0x760 [ 957.089756][T17063] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 957.089777][T17063] mempool_init_node+0x13c/0x760 [ 957.089797][T17063] ? __pfx_xa_load+0x10/0x10 [ 957.089816][T17063] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 957.089836][T17063] ? __pfx_mempool_free_slab+0x10/0x10 [ 957.089855][T17063] mempool_init_noprof+0x3a/0x50 [ 957.089878][T17063] bioset_init+0x37a/0x880 [ 957.089898][T17063] ? __pfx_bioset_init+0x10/0x10 [ 957.089924][T17063] __alloc_disk_node+0x83/0x630 [ 957.089954][T17063] __blk_mq_alloc_disk+0x89/0x120 [ 957.089982][T17063] loop_add+0x49e/0xb70 [ 957.090002][T17063] ? do_vfs_ioctl+0x523/0x1a60 [ 957.090024][T17063] ? __pfx_loop_add+0x10/0x10 [ 957.090043][T17063] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 957.090078][T17063] ? find_held_lock+0x2b/0x80 [ 957.090101][T17063] loop_control_ioctl+0x13e/0x630 [ 957.090134][T17063] ? __pfx_loop_control_ioctl+0x10/0x10 [ 957.090159][T17063] ? __pfx_loop_control_ioctl+0x10/0x10 [ 957.090183][T17063] __x64_sys_ioctl+0x18e/0x210 [ 957.090206][T17063] do_syscall_64+0xcd/0x490 [ 957.090237][T17063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.090256][T17063] RIP: 0033:0x7ff2a158e929 [ 957.090271][T17063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.090291][T17063] RSP: 002b:00007ff2a2455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 957.090309][T17063] RAX: ffffffffffffffda RBX: 00007ff2a17b5fa0 RCX: 00007ff2a158e929 [ 957.090321][T17063] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 957.090333][T17063] RBP: 00007ff2a1610b39 R08: 0000000000000000 R09: 0000000000000000 [ 957.090344][T17063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.090355][T17063] R13: 0000000000000000 R14: 00007ff2a17b5fa0 R15: 00007ffce2fc20d8 [ 957.090377][T17063] [ 961.071155][T17123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2213'. [ 966.659312][ T9533] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 967.130137][T10016] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 967.150106][T10016] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 967.172320][T10016] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 967.182844][T10016] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 967.198648][T10016] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 967.320311][T10451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.385189][T17222] warning: `syz.0.2235' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 967.486637][T17224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2236'. [ 967.531405][T10451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.729882][T10451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.893044][T10451] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.754526][T10451] gretap0: left allmulticast mode [ 968.783161][T10451] gretap0: left promiscuous mode [ 968.840596][T10451] bridge0: port 2(gretap0) entered disabled state [ 968.972239][T10451] bridge_slave_0: left allmulticast mode [ 968.977965][T10451] bridge_slave_0: left promiscuous mode [ 968.993802][T10451] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.175733][T17245] ptrace attach of "./syz-executor exec"[17246] was attempted by "./syz-executor exec"[17245] [ 969.244416][ T9533] Bluetooth: hci1: command tx timeout [ 969.484426][T17254] WARNING! power/level is deprecated; use power/control instead [ 970.095147][ T9533] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 970.536729][T10451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.576241][T10451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.640106][T10451] bond0 (unregistering): Released all slaves [ 970.757042][T17219] chnl_net:caif_netlink_parms(): no params data found [ 971.308363][ T9533] Bluetooth: hci1: command tx timeout [ 971.882316][T17219] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.907672][T17219] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.922695][T17219] bridge_slave_0: entered allmulticast mode [ 971.972988][T17219] bridge_slave_0: entered promiscuous mode [ 972.016484][T17219] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.046084][T17219] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.053590][T17219] bridge_slave_1: entered allmulticast mode [ 972.076398][T17219] bridge_slave_1: entered promiscuous mode [ 972.511468][T17219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.641526][T17219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.940595][T10451] hsr_slave_0: left promiscuous mode [ 972.947748][T10451] hsr_slave_1: left promiscuous mode [ 972.969326][T10451] veth1_macvtap: left promiscuous mode [ 972.975369][T10451] veth0_macvtap: left promiscuous mode [ 972.983041][T10451] veth1_vlan: left promiscuous mode [ 972.988628][T10451] veth0_vlan: left promiscuous mode [ 973.382326][ T9533] Bluetooth: hci1: command tx timeout [ 973.582301][T10451] team0 (unregistering): Port device team_slave_1 removed [ 973.908089][T17219] team0: Port device team_slave_0 added [ 973.975496][T17219] team0: Port device team_slave_1 added [ 974.055729][T17219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.062730][T17219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.089504][T17219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.103238][T17219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.110397][T17219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.138750][T17219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.275615][T17219] hsr_slave_0: entered promiscuous mode [ 974.283749][T17219] hsr_slave_1: entered promiscuous mode [ 974.290360][T17219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.299418][T17219] Cannot create hsr debugfs directory [ 974.702376][T17315] FAULT_INJECTION: forcing a failure. [ 974.702376][T17315] name failslab, interval 1, probability 0, space 0, times 0 [ 974.740435][T17315] CPU: 1 UID: 0 PID: 17315 Comm: syz.3.2250 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 974.740482][T17315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 974.740501][T17315] Call Trace: [ 974.740513][T17315] [ 974.740525][T17315] dump_stack_lvl+0x16c/0x1f0 [ 974.740574][T17315] should_fail_ex+0x512/0x640 [ 974.740616][T17315] ? __kmalloc_noprof+0xbf/0x510 [ 974.740680][T17315] ? snd_pcm_plugin_build+0x64/0x650 [ 974.740715][T17315] should_failslab+0xc2/0x120 [ 974.740746][T17315] __kmalloc_noprof+0xd2/0x510 [ 974.740789][T17315] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 974.740840][T17315] snd_pcm_plugin_build+0x64/0x650 [ 974.740879][T17315] snd_pcm_plugin_build_linear+0x29d/0x850 [ 974.740917][T17315] ? wake_up_all_idle_cpus+0x165/0x1e0 [ 974.740967][T17315] ? __pfx_snd_pcm_plugin_build_linear+0x10/0x10 [ 974.741012][T17315] ? snd_pcm_hw_params+0xcd/0x1b40 [ 974.741052][T17315] snd_pcm_plug_format_plugins+0x7f8/0x1430 [ 974.741093][T17315] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 974.741134][T17315] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 974.741181][T17315] snd_pcm_oss_change_params_locked+0x2dec/0x3a30 [ 974.741233][T17315] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 974.741300][T17315] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 974.741341][T17315] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 974.741377][T17315] ? hook_file_ioctl_common+0x145/0x410 [ 974.741412][T17315] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 974.741450][T17315] ? __fget_files+0x20e/0x3c0 [ 974.741494][T17315] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 974.741528][T17315] __x64_sys_ioctl+0x18e/0x210 [ 974.741567][T17315] do_syscall_64+0xcd/0x490 [ 974.741613][T17315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.741652][T17315] RIP: 0033:0x7f9d6ad8e929 [ 974.741678][T17315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.741707][T17315] RSP: 002b:00007f9d6bbb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 974.741738][T17315] RAX: ffffffffffffffda RBX: 00007f9d6afb6080 RCX: 00007f9d6ad8e929 [ 974.741759][T17315] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000005 [ 974.741777][T17315] RBP: 00007f9d6ae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 974.741797][T17315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.741815][T17315] R13: 0000000000000000 R14: 00007f9d6afb6080 R15: 00007ffccf471bf8 [ 974.741857][T17315] [ 975.446937][ T9533] Bluetooth: hci1: command tx timeout [ 975.853192][T17332] zswap: compressor 000 not available [ 976.597569][T17219] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 976.716174][T17219] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 976.737952][T17219] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 976.850752][T17219] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 976.937652][T17350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2254'. [ 977.165193][T17219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.554584][T17219] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.620678][T10451] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.627977][T10451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.770666][T10452] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.777952][T10452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.363706][T17219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.649920][ T9533] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 979.716672][T17219] veth0_vlan: entered promiscuous mode [ 979.783200][T17219] veth1_vlan: entered promiscuous mode [ 980.131860][T17219] veth0_macvtap: entered promiscuous mode [ 980.173615][T17219] veth1_macvtap: entered promiscuous mode [ 980.508008][T17219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.559792][T17219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.657919][T17219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.666979][T17219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.677768][T17219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.687097][T17219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.703643][T10451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.736198][T10451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.740294][T17437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2264'. [ 981.945748][T10452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.983459][T10452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.769825][T17465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2266'. [ 983.083293][T17471] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2268'. [ 983.774405][T17465] bond0: (slave bond_slave_1): Releasing backup interface [ 986.746332][T17503] FAULT_INJECTION: forcing a failure. [ 986.746332][T17503] name failslab, interval 1, probability 0, space 0, times 0 [ 986.802840][ T9533] Bluetooth: hci2: unexpected event 0x1d length: 10 > 5 [ 986.827600][T17503] CPU: 0 UID: 0 PID: 17503 Comm: syz.5.2276 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 986.827646][T17503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 986.827663][T17503] Call Trace: [ 986.827672][T17503] [ 986.827683][T17503] dump_stack_lvl+0x16c/0x1f0 [ 986.827731][T17503] should_fail_ex+0x512/0x640 [ 986.827782][T17503] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 986.827830][T17503] should_failslab+0xc2/0x120 [ 986.827856][T17503] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 986.827900][T17503] ? __alloc_skb+0x2b2/0x380 [ 986.827945][T17503] __alloc_skb+0x2b2/0x380 [ 986.827983][T17503] ? __pfx___alloc_skb+0x10/0x10 [ 986.828040][T17503] alloc_skb_with_frags+0xe0/0x860 [ 986.828098][T17503] sock_alloc_send_pskb+0x7fb/0x990 [ 986.828152][T17503] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 986.828193][T17503] ? find_held_lock+0x2b/0x80 [ 986.828229][T17503] ? __lock_acquire+0x622/0x1c90 [ 986.828274][T17503] __ip_append_data+0x21c6/0x4240 [ 986.828314][T17503] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 986.828358][T17503] ? ip_dst_mtu_maybe_forward.constprop.0+0x311/0x6e0 [ 986.828415][T17503] ? __pfx___ip_append_data+0x10/0x10 [ 986.828460][T17503] ip_append_data+0x10f/0x1a0 [ 986.828494][T17503] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 986.828529][T17503] udp_sendmsg+0x120a/0x29f0 [ 986.828562][T17503] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 986.828596][T17503] ? __pfx_udp_sendmsg+0x10/0x10 [ 986.828645][T17503] ? __pfx___might_resched+0x10/0x10 [ 986.828673][T17503] ? trace_kmalloc+0x2b/0xd0 [ 986.828699][T17503] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 986.828764][T17503] ? aa_sk_perm+0x2f4/0xb10 [ 986.828809][T17503] ? __pfx_udp_sendmsg+0x10/0x10 [ 986.828840][T17503] inet_sendmsg+0x105/0x140 [ 986.828879][T17503] ____sys_sendmsg+0x973/0xc70 [ 986.828915][T17503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 986.828953][T17503] ? __pfx__kstrtoull+0x10/0x10 [ 986.828993][T17503] ___sys_sendmsg+0x134/0x1d0 [ 986.829032][T17503] ? __pfx____sys_sendmsg+0x10/0x10 [ 986.829087][T17503] ? find_held_lock+0x2b/0x80 [ 986.829138][T17503] __sys_sendmmsg+0x200/0x420 [ 986.829181][T17503] ? __pfx___sys_sendmmsg+0x10/0x10 [ 986.829234][T17503] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 986.829292][T17503] ? fput+0x70/0xf0 [ 986.829318][T17503] ? ksys_write+0x1ac/0x250 [ 986.829352][T17503] ? __pfx_ksys_write+0x10/0x10 [ 986.829395][T17503] __x64_sys_sendmmsg+0x9c/0x100 [ 986.829433][T17503] ? lockdep_hardirqs_on+0x7c/0x110 [ 986.829470][T17503] do_syscall_64+0xcd/0x490 [ 986.829512][T17503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.829540][T17503] RIP: 0033:0x7f91a9b8e929 [ 986.829563][T17503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.829590][T17503] RSP: 002b:00007f91aaaa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 986.829618][T17503] RAX: ffffffffffffffda RBX: 00007f91a9db5fa0 RCX: 00007f91a9b8e929 [ 986.829637][T17503] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003 [ 986.829656][T17503] RBP: 00007f91aaaa9090 R08: 0000000000000000 R09: 0000000000000000 [ 986.829674][T17503] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 986.829694][T17503] R13: 0000000000000000 R14: 00007f91a9db5fa0 R15: 00007ffc5d2166b8 [ 986.829826][T17503] [ 987.565074][T17507] FAULT_INJECTION: forcing a failure. [ 987.565074][T17507] name failslab, interval 1, probability 0, space 0, times 0 [ 987.578289][T17507] CPU: 0 UID: 0 PID: 17507 Comm: syz.0.2278 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 987.578327][T17507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 987.578342][T17507] Call Trace: [ 987.578351][T17507] [ 987.578361][T17507] dump_stack_lvl+0x16c/0x1f0 [ 987.578404][T17507] should_fail_ex+0x512/0x640 [ 987.578453][T17507] should_failslab+0xc2/0x120 [ 987.578478][T17507] __kmalloc_cache_noprof+0x6a/0x3e0 [ 987.578514][T17507] ? __lock_acquire+0x622/0x1c90 [ 987.578549][T17507] ? nsim_fib_event_nb+0x1c4/0x10d0 [ 987.578595][T17507] nsim_fib_event_nb+0x1c4/0x10d0 [ 987.578638][T17507] ? lock_acquire+0x179/0x350 [ 987.578675][T17507] notifier_call_chain+0xb9/0x410 [ 987.578705][T17507] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 987.578751][T17507] atomic_notifier_call_chain+0x71/0x1c0 [ 987.578785][T17507] call_fib_notifiers+0x33/0x70 [ 987.578822][T17507] fib6_del+0xeb8/0x1770 [ 987.578860][T17507] ? __pfx_fib6_del+0x10/0x10 [ 987.578888][T17507] ? fib6_ifdown+0xcd/0x8f0 [ 987.578919][T17507] fib6_clean_node+0x424/0x5b0 [ 987.578946][T17507] ? __pfx_fib6_clean_node+0x10/0x10 [ 987.578987][T17507] fib6_walk_continue+0x44f/0x8d0 [ 987.579031][T17507] fib6_walk+0x182/0x370 [ 987.579067][T17507] ? __pfx_fib6_ifdown+0x10/0x10 [ 987.579088][T17507] fib6_clean_tree+0xd4/0x110 [ 987.579123][T17507] ? __pfx_fib6_clean_tree+0x10/0x10 [ 987.579166][T17507] ? __pfx_fib6_clean_node+0x10/0x10 [ 987.579190][T17507] ? __pfx_fib6_ifdown+0x10/0x10 [ 987.579224][T17507] ? __pfx_fib6_ifdown+0x10/0x10 [ 987.579246][T17507] __fib6_clean_all+0x107/0x2d0 [ 987.579292][T17507] rt6_disable_ip+0x2ec/0x990 [ 987.579323][T17507] ? __mutex_trylock_common+0xe9/0x250 [ 987.579359][T17507] ? __pfx___mutex_trylock_common+0x10/0x10 [ 987.579395][T17507] ? __pfx_rt6_disable_ip+0x10/0x10 [ 987.579439][T17507] ? rcu_is_watching+0x12/0xc0 [ 987.579473][T17507] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 987.579505][T17507] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 987.579549][T17507] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 987.579592][T17507] addrconf_notify+0x220/0x19e0 [ 987.579621][T17507] ? ip6mr_device_event+0x1bc/0x230 [ 987.579660][T17507] notifier_call_chain+0xb9/0x410 [ 987.579688][T17507] ? __pfx_addrconf_notify+0x10/0x10 [ 987.579725][T17507] call_netdevice_notifiers_info+0xbe/0x140 [ 987.579756][T17507] __dev_notify_flags+0x1f7/0x2e0 [ 987.579792][T17507] ? __pfx___dev_notify_flags+0x10/0x10 [ 987.579833][T17507] ? __pfx___dev_change_flags+0x10/0x10 [ 987.579881][T17507] netif_change_flags+0x108/0x160 [ 987.579921][T17507] dev_change_flags+0xba/0x250 [ 987.579949][T17507] flags_store+0x187/0x1e0 [ 987.579981][T17507] ? __pfx_flags_store+0x10/0x10 [ 987.580013][T17507] ? find_held_lock+0x2b/0x80 [ 987.580044][T17507] ? __pfx_flags_store+0x10/0x10 [ 987.580074][T17507] dev_attr_store+0x58/0x80 [ 987.580097][T17507] ? __pfx_dev_attr_store+0x10/0x10 [ 987.580120][T17507] sysfs_kf_write+0xef/0x150 [ 987.580153][T17507] kernfs_fop_write_iter+0x351/0x510 [ 987.580178][T17507] ? __pfx_sysfs_kf_write+0x10/0x10 [ 987.580212][T17507] iter_file_splice_write+0x91f/0x1150 [ 987.580270][T17507] ? __pfx_iter_file_splice_write+0x10/0x10 [ 987.580310][T17507] ? __pfx_copy_splice_read+0x10/0x10 [ 987.580364][T17507] ? __pfx_iter_file_splice_write+0x10/0x10 [ 987.580399][T17507] direct_splice_actor+0x192/0x6c0 [ 987.580445][T17507] splice_direct_to_actor+0x342/0xa30 [ 987.580479][T17507] ? __pfx_direct_splice_actor+0x10/0x10 [ 987.580519][T17507] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 987.580565][T17507] do_splice_direct+0x174/0x240 [ 987.580597][T17507] ? __pfx_do_splice_direct+0x10/0x10 [ 987.580630][T17507] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 987.580670][T17507] ? rw_verify_area+0xcf/0x680 [ 987.580706][T17507] do_sendfile+0xb06/0xe50 [ 987.580747][T17507] ? __pfx_do_sendfile+0x10/0x10 [ 987.580786][T17507] ? __x64_sys_futex+0x1e0/0x4c0 [ 987.580813][T17507] ? __x64_sys_futex+0x1e9/0x4c0 [ 987.580847][T17507] __x64_sys_sendfile64+0x1d8/0x220 [ 987.580873][T17507] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 987.580910][T17507] do_syscall_64+0xcd/0x490 [ 987.580949][T17507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.580974][T17507] RIP: 0033:0x7ff2a158e929 [ 987.580995][T17507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.581019][T17507] RSP: 002b:00007ff2a2455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 987.581043][T17507] RAX: ffffffffffffffda RBX: 00007ff2a17b5fa0 RCX: 00007ff2a158e929 [ 987.581060][T17507] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 987.581074][T17507] RBP: 00007ff2a1610b39 R08: 0000000000000000 R09: 0000000000000000 [ 987.581089][T17507] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 987.581104][T17507] R13: 0000000000000000 R14: 00007ff2a17b5fa0 R15: 00007ffce2fc20d8 [ 987.581138][T17507] [ 988.488876][ T9533] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 988.657642][T17536] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2279'. [ 989.108021][T17536] bond0: (slave bond_slave_1): Releasing backup interface [ 990.312799][ T9533] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 992.247145][ T9533] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 995.186228][ T9533] Bluetooth: hci3: unexpected event 0x1d length: 10 > 5 [ 995.189662][T17665] FAULT_INJECTION: forcing a failure. [ 995.189662][T17665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 995.222381][T17665] CPU: 1 UID: 0 PID: 17665 Comm: syz.5.2300 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 995.222431][T17665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 995.222451][T17665] Call Trace: [ 995.222462][T17665] [ 995.222475][T17665] dump_stack_lvl+0x16c/0x1f0 [ 995.222528][T17665] should_fail_ex+0x512/0x640 [ 995.222589][T17665] strncpy_from_user+0x3b/0x2e0 [ 995.222636][T17665] getname_flags.part.0+0x8f/0x550 [ 995.222681][T17665] getname_flags+0x93/0xf0 [ 995.222723][T17665] do_sys_openat2+0xb8/0x1d0 [ 995.222759][T17665] ? __pfx_do_sys_openat2+0x10/0x10 [ 995.222811][T17665] __x64_sys_openat+0x174/0x210 [ 995.222848][T17665] ? __pfx___x64_sys_openat+0x10/0x10 [ 995.222901][T17665] do_syscall_64+0xcd/0x490 [ 995.222951][T17665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.222983][T17665] RIP: 0033:0x7f91a9b8e929 [ 995.223009][T17665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 995.223039][T17665] RSP: 002b:00007f91aaaa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 995.223071][T17665] RAX: ffffffffffffffda RBX: 00007f91a9db5fa0 RCX: 00007f91a9b8e929 [ 995.223092][T17665] RDX: 00000000001a1842 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 995.223112][T17665] RBP: 00007f91a9c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 995.223132][T17665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 995.223152][T17665] R13: 0000000000000000 R14: 00007f91a9db5fa0 R15: 00007ffc5d2166b8 [ 995.223193][T17665] [ 995.388436][T17664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2298'. [ 995.469957][T17666] FAULT_INJECTION: forcing a failure. [ 995.469957][T17666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 995.483826][T17666] CPU: 1 UID: 0 PID: 17666 Comm: syz.0.2299 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 995.483867][T17666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 995.483885][T17666] Call Trace: [ 995.483895][T17666] [ 995.483907][T17666] dump_stack_lvl+0x16c/0x1f0 [ 995.483954][T17666] should_fail_ex+0x512/0x640 [ 995.484001][T17666] _copy_from_user+0x2e/0xd0 [ 995.484046][T17666] copy_msghdr_from_user+0x98/0x160 [ 995.484090][T17666] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 995.484131][T17666] ? lockdep_hardirqs_on+0x7c/0x110 [ 995.484176][T17666] ? kfree+0x2b4/0x4d0 [ 995.484209][T17666] ? __pfx__kstrtoull+0x10/0x10 [ 995.484240][T17666] ? ___sys_sendmsg+0x141/0x1d0 [ 995.484289][T17666] ___sys_sendmsg+0xfe/0x1d0 [ 995.484333][T17666] ? __pfx____sys_sendmsg+0x10/0x10 [ 995.484427][T17666] ? __pfx___might_resched+0x10/0x10 [ 995.484473][T17666] __sys_sendmmsg+0x200/0x420 [ 995.484521][T17666] ? __pfx___sys_sendmmsg+0x10/0x10 [ 995.484579][T17666] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 995.484622][T17666] ? fput+0x70/0xf0 [ 995.484639][T17666] ? ksys_write+0x1ac/0x250 [ 995.484665][T17666] ? __pfx_ksys_write+0x10/0x10 [ 995.484695][T17666] __x64_sys_sendmmsg+0x9c/0x100 [ 995.484722][T17666] ? lockdep_hardirqs_on+0x7c/0x110 [ 995.484747][T17666] do_syscall_64+0xcd/0x490 [ 995.484776][T17666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.484795][T17666] RIP: 0033:0x7ff2a158e929 [ 995.484811][T17666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 995.484829][T17666] RSP: 002b:00007ff2a2455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 995.484847][T17666] RAX: ffffffffffffffda RBX: 00007ff2a17b5fa0 RCX: 00007ff2a158e929 [ 995.484859][T17666] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003 [ 995.484870][T17666] RBP: 00007ff2a2455090 R08: 0000000000000000 R09: 0000000000000000 [ 995.484881][T17666] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 995.484892][T17666] R13: 0000000000000000 R14: 00007ff2a17b5fa0 R15: 00007ffce2fc20d8 [ 995.484913][T17666] [ 996.006144][T17684] vivid-003: ================= START STATUS ================= [ 996.035513][T17684] vivid-003: Radio HW Seek Mode: Bounded [ 996.118898][T17684] vivid-003: Radio Programmable HW Seek: false [ 996.149464][T17684] vivid-003: RDS Rx I/O Mode: Block I/O [ 996.159447][T17684] vivid-003: Generate RBDS Instead of RDS: false [ 996.160794][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 996.173630][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.241280][T17684] vivid-003: RDS Reception: true [ 996.258768][T17684] vivid-003: RDS Program Type: 0 inactive [ 996.266715][T17684] vivid-003: RDS PS Name: inactive [ 996.311747][T17684] vivid-003: RDS Radio Text: inactive [ 996.317414][T17684] vivid-003: RDS Traffic Announcement: false inactive [ 996.324847][T17684] vivid-003: RDS Traffic Program: false inactive [ 996.331719][T17684] vivid-003: RDS Music: false inactive [ 996.337284][T17684] vivid-003: ================== END STATUS ================== [ 996.944155][T17704] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 998.409233][T17732] FAULT_INJECTION: forcing a failure. [ 998.409233][T17732] name failslab, interval 1, probability 0, space 0, times 0 [ 998.466946][T17732] CPU: 1 UID: 0 PID: 17732 Comm: syz.1.2312 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 998.466992][T17732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 998.467010][T17732] Call Trace: [ 998.467021][T17732] [ 998.467033][T17732] dump_stack_lvl+0x16c/0x1f0 [ 998.467082][T17732] should_fail_ex+0x512/0x640 [ 998.467123][T17732] ? __kmalloc_noprof+0xbf/0x510 [ 998.467168][T17732] ? iovec_from_user+0x108/0x140 [ 998.467212][T17732] should_failslab+0xc2/0x120 [ 998.467240][T17732] __kmalloc_noprof+0xd2/0x510 [ 998.467293][T17732] iovec_from_user+0x108/0x140 [ 998.467354][T17732] __import_iovec+0x88/0x650 [ 998.467381][T17732] ? __might_fault+0xe3/0x190 [ 998.467420][T17732] ? __might_fault+0x13b/0x190 [ 998.467471][T17732] import_iovec+0x86/0xb0 [ 998.467504][T17732] copy_msghdr_from_user+0xf9/0x160 [ 998.467549][T17732] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 998.467588][T17732] ? lockdep_hardirqs_on+0x7c/0x110 [ 998.467636][T17732] ? kfree+0x2b4/0x4d0 [ 998.467669][T17732] ? __pfx__kstrtoull+0x10/0x10 [ 998.467701][T17732] ? ___sys_sendmsg+0x141/0x1d0 [ 998.467750][T17732] ___sys_sendmsg+0xfe/0x1d0 [ 998.467794][T17732] ? __pfx____sys_sendmsg+0x10/0x10 [ 998.467876][T17732] ? __pfx___might_resched+0x10/0x10 [ 998.467919][T17732] __sys_sendmmsg+0x200/0x420 [ 998.467972][T17732] ? __pfx___sys_sendmmsg+0x10/0x10 [ 998.468029][T17732] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 998.468092][T17732] ? fput+0x70/0xf0 [ 998.468122][T17732] ? ksys_write+0x1ac/0x250 [ 998.468164][T17732] ? __pfx_ksys_write+0x10/0x10 [ 998.468211][T17732] __x64_sys_sendmmsg+0x9c/0x100 [ 998.468253][T17732] ? lockdep_hardirqs_on+0x7c/0x110 [ 998.468293][T17732] do_syscall_64+0xcd/0x490 [ 998.468347][T17732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.468377][T17732] RIP: 0033:0x7f293c38e929 [ 998.468401][T17732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.468430][T17732] RSP: 002b:00007f293d259038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 998.468459][T17732] RAX: ffffffffffffffda RBX: 00007f293c5b6080 RCX: 00007f293c38e929 [ 998.468479][T17732] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003 [ 998.468498][T17732] RBP: 00007f293d259090 R08: 0000000000000000 R09: 0000000000000000 [ 998.468517][T17732] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 998.468536][T17732] R13: 0000000000000000 R14: 00007f293c5b6080 R15: 00007ffcf7e99a48 [ 998.468575][T17732] [ 999.261980][T17743] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 999.268972][T17743] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 999.275917][T17743] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 999.383644][T17743] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 999.417455][T17743] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 999.482984][T17743] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 999.582851][T17743] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 999.589006][T17743] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 999.645786][T17743] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 999.875712][T17743] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 1000.579923][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2324'. [ 1000.940019][T17791] FAULT_INJECTION: forcing a failure. [ 1000.940019][T17791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.963992][T17791] CPU: 1 UID: 0 PID: 17791 Comm: syz.3.2325 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 1000.964036][T17791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1000.964053][T17791] Call Trace: [ 1000.964063][T17791] [ 1000.964074][T17791] dump_stack_lvl+0x16c/0x1f0 [ 1000.964122][T17791] should_fail_ex+0x512/0x640 [ 1000.964168][T17791] _copy_from_user+0x2e/0xd0 [ 1000.964212][T17791] ____sys_sendmsg+0x607/0xc70 [ 1000.964253][T17791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1000.964290][T17791] ? lockdep_hardirqs_on+0x7c/0x110 [ 1000.964335][T17791] ? kfree+0x2b4/0x4d0 [ 1000.964367][T17791] ? __pfx__kstrtoull+0x10/0x10 [ 1000.964397][T17791] ? ___sys_sendmsg+0x141/0x1d0 [ 1000.964444][T17791] ___sys_sendmsg+0x134/0x1d0 [ 1000.964487][T17791] ? __pfx____sys_sendmsg+0x10/0x10 [ 1000.964568][T17791] ? __pfx___might_resched+0x10/0x10 [ 1000.964609][T17791] __sys_sendmmsg+0x200/0x420 [ 1000.964656][T17791] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1000.964711][T17791] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1000.964772][T17791] ? fput+0x70/0xf0 [ 1000.964799][T17791] ? ksys_write+0x1ac/0x250 [ 1000.964838][T17791] ? __pfx_ksys_write+0x10/0x10 [ 1000.964884][T17791] __x64_sys_sendmmsg+0x9c/0x100 [ 1000.964924][T17791] ? lockdep_hardirqs_on+0x7c/0x110 [ 1000.964962][T17791] do_syscall_64+0xcd/0x490 [ 1000.965007][T17791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.965034][T17791] RIP: 0033:0x7f9d6ad8e929 [ 1000.965057][T17791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.965084][T17791] RSP: 002b:00007f9d6bbd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1000.965111][T17791] RAX: ffffffffffffffda RBX: 00007f9d6afb5fa0 RCX: 00007f9d6ad8e929 [ 1000.965130][T17791] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003 [ 1000.965147][T17791] RBP: 00007f9d6bbd9090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.965165][T17791] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.965182][T17791] R13: 0000000000000000 R14: 00007f9d6afb5fa0 R15: 00007ffccf471bf8 [ 1000.965218][T17791] [ 1001.315440][ T9533] Bluetooth: hci2: command 0x0c1a tx timeout [ 1001.321553][ T9533] Bluetooth: hci0: command 0x0c1a tx timeout [ 1001.391830][ T9533] Bluetooth: hci3: command 0x0c1a tx timeout [ 1001.630686][T17795] Bluetooth: hci1: command 0x0c1a tx timeout [ 1001.748824][T10016] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1001.762218][T10016] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1001.779973][T10016] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1001.792572][T10016] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1001.801241][T10016] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1003.175842][T17800] chnl_net:caif_netlink_parms(): no params data found [ 1003.460953][T10016] Bluetooth: hci3: command 0x0c1a tx timeout [ 1003.682865][T17800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.694423][T17800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.701536][T10016] Bluetooth: hci1: command 0x0c1a tx timeout [ 1003.708189][T17800] bridge_slave_0: entered allmulticast mode [ 1003.716486][T17800] bridge_slave_0: entered promiscuous mode [ 1003.726484][T17800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.741096][T17800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.748560][T17800] bridge_slave_1: entered allmulticast mode [ 1003.758328][T17800] bridge_slave_1: entered promiscuous mode [ 1003.881652][T10016] Bluetooth: hci4: command tx timeout [ 1003.932581][T17800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.990851][T17800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.144973][T17800] team0: Port device team_slave_0 added [ 1004.192272][T17800] team0: Port device team_slave_1 added [ 1004.301527][T17800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.319968][T17800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.347441][T17800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.360926][T17800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.369208][T17800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.397412][T17800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.531698][T17800] hsr_slave_0: entered promiscuous mode [ 1004.538387][T17800] hsr_slave_1: entered promiscuous mode [ 1004.544495][T17800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1004.553021][T17800] Cannot create hsr debugfs directory [ 1004.628162][T17869] vivid-003: ================= START STATUS ================= [ 1004.672482][T17869] vivid-003: Radio HW Seek Mode: Bounded [ 1004.777779][T17869] vivid-003: Radio Programmable HW Seek: false [ 1004.798151][T17869] vivid-003: RDS Rx I/O Mode: Block I/O [ 1004.806358][T17869] vivid-003: Generate RBDS Instead of RDS: false [ 1004.813437][T17869] vivid-003: RDS Reception: true [ 1004.819285][T17869] vivid-003: RDS Program Type: 0 inactive [ 1004.854298][T17869] vivid-003: RDS PS Name: inactive [ 1004.869655][T17869] vivid-003: RDS Radio Text: inactive [ 1004.883611][T17869] vivid-003: RDS Traffic Announcement: false inactive [ 1005.056748][T17869] vivid-003: RDS Traffic Program: false inactive [ 1005.142402][T17869] vivid-003: RDS Music: false inactive [ 1005.251747][T17869] vivid-003: ================== END STATUS ================== [ 1005.530195][T10016] Bluetooth: hci3: command 0x0c1a tx timeout [ 1005.770426][T10016] Bluetooth: hci1: command 0x0c1a tx timeout [ 1005.929908][T10016] Bluetooth: hci4: command tx timeout [ 1006.142527][T17800] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.352538][T17800] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.388606][T17881] ptp: physical clock is free running [ 1006.502651][T17800] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.781435][T17889] [U] [ 1006.784182][T17889] [U] [ 1006.786884][T17889] [U] [ 1006.789581][T17889] [U] [ 1006.795301][T17889] [U] [ 1006.798043][T17889] [U] [ 1006.800777][T17889] [U] [ 1006.803529][T17889] [U] [ 1006.859480][T17889] [U] [ 1006.862258][T17889] [U] [ 1006.864962][T17889] [U] [ 1006.867676][T17889] [U] [ 1006.903531][T17889] [U] [ 1006.906329][T17889] [U] [ 1006.909083][T17889] [U] [ 1006.911835][T17889] [U] [ 1006.921703][T17889] [U] [ 1006.924508][T17889] [U] [ 1006.927233][T17889] [U] [ 1006.929932][T17889] [U] [ 1006.960843][T17889] [U] [ 1006.963581][T17889] [U] [ 1006.966278][T17889] [U] [ 1006.969011][T17889] [U] [ 1007.001885][T17889] [U] [ 1007.004660][T17889] [U] [ 1007.007395][T17889] [U] [ 1007.010140][T17889] [U] [ 1007.051859][T17889] [U] [ 1007.054667][T17889] [U] [ 1007.057449][T17889] [U] [ 1007.060224][T17889] [U] [ 1007.140417][T17800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1007.161986][T17889] [U] [ 1007.164760][T17889] [U] [ 1007.167487][T17889] [U] [ 1007.170212][T17889] [U] [ 1007.174705][T17889] [U] [ 1007.177427][T17889] [U] [ 1007.180125][T17889] [U] [ 1007.182861][T17889] [U] [ 1007.186672][T17889] [U] [ 1007.189421][T17889] [U] [ 1007.192160][T17889] [U] [ 1007.194913][T17889] [U] [ 1007.198322][T17889] [U] [ 1007.201063][T17889] [U] [ 1007.203801][T17889] [U] [ 1007.206551][T17889] [U] [ 1007.209697][T17889] [U] [ 1007.210004][T17800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1007.212431][T17889] [U] [ 1007.212496][T17889] [U] [ 1007.212542][T17889] [U] [ 1007.228472][T17889] [U] [ 1007.231252][T17889] [U] [ 1007.233995][T17889] [U] [ 1007.236728][T17889] [U] [ 1007.239795][T17889] [U] [ 1007.242559][T17889] [U] [ 1007.245312][T17889] [U] [ 1007.248033][T17889] [U] [ 1007.260945][T17800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1007.285475][T17889] [U] [ 1007.288216][T17889] [U] [ 1007.290949][T17889] [U] [ 1007.293671][T17889] [U] [ 1007.297983][T17889] [U] [ 1007.300752][T17889] [U] [ 1007.303504][T17889] [U] [ 1007.306261][T17889] [U] [ 1007.347475][T17889] [U] [ 1007.350280][T17889] [U] [ 1007.353039][T17889] [U] [ 1007.355760][T17889] [U] [ 1007.393259][T17800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1007.438341][T17898] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2350'. [ 1007.448751][T17885] [U] [ 1008.007785][T10016] Bluetooth: hci4: command tx timeout [ 1008.092391][T17800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.168358][T17800] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.202996][ T9602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.210276][ T9602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.246488][T10016] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 1008.250000][T14458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.261025][T14458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.782060][T17800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.991542][T17800] veth0_vlan: entered promiscuous mode [ 1009.235877][T17800] veth1_vlan: entered promiscuous mode [ 1009.799676][T17800] veth0_macvtap: entered promiscuous mode [ 1009.861636][T17800] veth1_macvtap: entered promiscuous mode [ 1009.892841][T17800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1009.920607][T17800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.067121][T10016] Bluetooth: hci4: command tx timeout [ 1010.561529][T17800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.650685][T17800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.730203][T17800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.766119][T17800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.837487][T14455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.861240][T14455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.096094][T14458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.117540][T14458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.813575][T17987] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 1016.611886][T10016] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 1016.681578][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2383'. [ 1018.246814][T18095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2392'. [ 1019.972255][T10016] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 1020.103758][T10016] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 1021.750885][T14458] bridge_slave_0: left allmulticast mode [ 1021.778183][T14458] bridge_slave_0: left promiscuous mode [ 1021.813288][T14458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.460596][T17795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1022.477571][T17795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1022.486057][T17795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1022.531430][T17795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1022.560367][T17795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1022.568525][T13360] ------------[ cut here ]------------ [ 1022.574192][T13360] ODEBUG: free active (active state 0) object: ffff888049501318 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 1022.648119][T13360] WARNING: CPU: 1 PID: 13360 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 1022.657946][T13360] Modules linked in: [ 1022.661968][T13360] CPU: 1 UID: 0 PID: 13360 Comm: syz.3.1512 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 1022.674128][T13360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1022.684738][T13360] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1022.690603][T13360] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 00 82 15 8c 4c 89 e6 48 c7 c7 80 76 15 8c e8 5f 68 9c fc 90 <0f> 0b 90 90 58 83 05 f6 88 cb 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1022.710961][T13360] RSP: 0018:ffffc90013fe7768 EFLAGS: 00010286 [ 1022.717593][T13360] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817aa128 [ 1022.725866][T13360] RDX: ffff8880a955bc00 RSI: ffffffff817aa135 RDI: 0000000000000001 [ 1022.733942][T13360] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1022.742577][T13360] R10: 0000000000000001 R11: fffffffffffe9db0 R12: ffffffff8c157d20 [ 1022.751105][T13360] R13: ffffffff8bafe880 R14: ffffffff8a8f9ff0 R15: ffffc90013fe7868 [ 1022.759127][T13360] FS: 0000000000000000(0000) GS:ffff888124823000(0000) knlGS:0000000000000000 [ 1022.768184][T13360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1022.774851][T13360] CR2: 00007f39066e5000 CR3: 000000006bb6a000 CR4: 00000000003526f0 [ 1022.783465][T13360] Call Trace: [ 1022.786798][T13360] [ 1022.789776][T13360] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1022.795454][T13360] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1022.801395][T13360] debug_check_no_obj_freed+0x4b7/0x600 [ 1022.807698][T13360] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1022.814362][T13360] ? rcu_is_watching+0x12/0xc0 [ 1022.819203][T13360] ? kmem_cache_free+0x2d1/0x4d0 [ 1022.824266][T13360] kfree+0x28f/0x4d0 [ 1022.828251][T13360] ? hci_release_dev+0x4d8/0x600 [ 1022.833358][T13360] hci_release_dev+0x4d8/0x600 [ 1022.838195][T13360] ? __pfx_hci_release_dev+0x10/0x10 [ 1022.844136][T13360] ? rcu_is_watching+0x12/0xc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1022.848964][T13360] ? kfree+0x24f/0x4d0 [ 1022.853600][T13360] bt_host_release+0x6a/0xb0 [ 1022.858268][T13360] ? __pfx_bt_host_release+0x10/0x10 [ 1022.863679][T13360] device_release+0xa4/0x240 [ 1022.868340][T13360] kobject_put+0x1e7/0x5a0 [ 1022.872869][T13360] ? __pfx_vhci_release+0x10/0x10 [ 1022.877964][T13360] put_device+0x1f/0x30 [ 1022.884488][T13360] vhci_release+0x81/0xf0 [ 1022.888852][T13360] __fput+0x402/0xb70 [ 1022.894484][T13360] task_work_run+0x14d/0x240 [ 1022.899161][T13360] ? __pfx_task_work_run+0x10/0x10 [ 1022.904902][T13360] do_exit+0x86c/0x2bd0 [ 1022.910130][T13360] ? __pfx_do_exit+0x10/0x10 [ 1022.915577][T13360] ? cgroup_update_frozen_flag+0x107/0x210 [ 1022.922014][T13360] ? find_held_lock+0x2b/0x80 [ 1022.926772][T13360] do_group_exit+0xd3/0x2a0 [ 1022.931398][T13360] get_signal+0x2673/0x26d0 [ 1022.935978][T13360] ? hrtimer_nanosleep+0x187/0x380 [ 1022.941217][T13360] ? __pfx_get_signal+0x10/0x10 [ 1022.946681][T13360] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1022.952443][T13360] arch_do_signal_or_restart+0x8f/0x790 [ 1022.958070][T13360] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1022.964564][T13360] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1022.970855][T13360] exit_to_user_mode_loop+0x84/0x110 [ 1022.976222][T13360] do_syscall_64+0x3f6/0x490 [ 1022.980945][T13360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.987294][T13360] RIP: 0033:0x7f9d6adc11e5 [ 1022.991857][T13360] Code: Unable to access opcode bytes at 0x7f9d6adc11bb. [ 1022.998944][T13360] RSP: 002b:00007f9d6bbb7f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1023.007496][T13360] RAX: fffffffffffffdfc RBX: 00007f9d6afb6080 RCX: 00007f9d6adc11e5 [ 1023.016120][T13360] RDX: 00007f9d6bbb7fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1023.024750][T13360] RBP: 00007f9d6ae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1023.032866][T13360] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1023.041177][T13360] R13: 0000000000000000 R14: 00007f9d6afb6080 R15: 00007ffccf471bf8 [ 1023.049816][T13360] [ 1023.052895][T13360] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1023.060254][T13360] CPU: 1 UID: 0 PID: 13360 Comm: syz.3.1512 Not tainted 6.16.0-rc4-syzkaller-00348-g772b78c2abd8 #0 PREEMPT(full) [ 1023.072447][T13360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1023.082538][T13360] Call Trace: [ 1023.085845][T13360] [ 1023.088803][T13360] dump_stack_lvl+0x3d/0x1f0 [ 1023.093435][T13360] panic+0x71c/0x800 [ 1023.097366][T13360] ? __pfx_panic+0x10/0x10 [ 1023.101842][T13360] ? show_trace_log_lvl+0x29b/0x3e0 [ 1023.107892][T13360] ? check_panic_on_warn+0x1f/0xb0 [ 1023.113059][T13360] ? debug_print_object+0x1a2/0x2b0 [ 1023.118292][T13360] check_panic_on_warn+0xab/0xb0 [ 1023.123275][T13360] __warn+0xf6/0x3c0 [ 1023.127210][T13360] ? debug_print_object+0x1a2/0x2b0 [ 1023.132434][T13360] report_bug+0x3c3/0x580 [ 1023.136797][T13360] ? debug_print_object+0x1a2/0x2b0 [ 1023.142023][T13360] handle_bug+0x184/0x210 [ 1023.146377][T13360] exc_invalid_op+0x17/0x50 [ 1023.150906][T13360] asm_exc_invalid_op+0x1a/0x20 [ 1023.155779][T13360] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1023.161610][T13360] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 00 82 15 8c 4c 89 e6 48 c7 c7 80 76 15 8c e8 5f 68 9c fc 90 <0f> 0b 90 90 58 83 05 f6 88 cb 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1023.181263][T13360] RSP: 0018:ffffc90013fe7768 EFLAGS: 00010286 [ 1023.187387][T13360] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817aa128 [ 1023.195393][T13360] RDX: ffff8880a955bc00 RSI: ffffffff817aa135 RDI: 0000000000000001 [ 1023.203407][T13360] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1023.211401][T13360] R10: 0000000000000001 R11: fffffffffffe9db0 R12: ffffffff8c157d20 [ 1023.219400][T13360] R13: ffffffff8bafe880 R14: ffffffff8a8f9ff0 R15: ffffc90013fe7868 [ 1023.227393][T13360] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1023.232908][T13360] ? __warn_printk+0x198/0x350 [ 1023.237728][T13360] ? __warn_printk+0x1a5/0x350 [ 1023.242551][T13360] ? debug_print_object+0x1a1/0x2b0 [ 1023.247780][T13360] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1023.253276][T13360] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1023.259124][T13360] debug_check_no_obj_freed+0x4b7/0x600 [ 1023.264708][T13360] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1023.270815][T13360] ? rcu_is_watching+0x12/0xc0 [ 1023.275620][T13360] ? kmem_cache_free+0x2d1/0x4d0 [ 1023.280598][T13360] kfree+0x28f/0x4d0 [ 1023.284525][T13360] ? hci_release_dev+0x4d8/0x600 [ 1023.289500][T13360] hci_release_dev+0x4d8/0x600 [ 1023.294309][T13360] ? __pfx_hci_release_dev+0x10/0x10 [ 1023.299655][T13360] ? rcu_is_watching+0x12/0xc0 [ 1023.304447][T13360] ? kfree+0x24f/0x4d0 [ 1023.308552][T13360] bt_host_release+0x6a/0xb0 [ 1023.313182][T13360] ? __pfx_bt_host_release+0x10/0x10 [ 1023.318533][T13360] device_release+0xa4/0x240 [ 1023.323159][T13360] kobject_put+0x1e7/0x5a0 [ 1023.327620][T13360] ? __pfx_vhci_release+0x10/0x10 [ 1023.332679][T13360] put_device+0x1f/0x30 [ 1023.336886][T13360] vhci_release+0x81/0xf0 [ 1023.341269][T13360] __fput+0x402/0xb70 [ 1023.345288][T13360] task_work_run+0x14d/0x240 [ 1023.349920][T13360] ? __pfx_task_work_run+0x10/0x10 [ 1023.355087][T13360] do_exit+0x86c/0x2bd0 [ 1023.359286][T13360] ? __pfx_do_exit+0x10/0x10 [ 1023.363907][T13360] ? cgroup_update_frozen_flag+0x107/0x210 [ 1023.369751][T13360] ? find_held_lock+0x2b/0x80 [ 1023.374459][T13360] do_group_exit+0xd3/0x2a0 [ 1023.378999][T13360] get_signal+0x2673/0x26d0 [ 1023.383537][T13360] ? hrtimer_nanosleep+0x187/0x380 [ 1023.388678][T13360] ? __pfx_get_signal+0x10/0x10 [ 1023.393557][T13360] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1023.398802][T13360] arch_do_signal_or_restart+0x8f/0x790 [ 1023.404377][T13360] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1023.410571][T13360] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1023.416757][T13360] exit_to_user_mode_loop+0x84/0x110 [ 1023.422084][T13360] do_syscall_64+0x3f6/0x490 [ 1023.426714][T13360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.432636][T13360] RIP: 0033:0x7f9d6adc11e5 [ 1023.437172][T13360] Code: Unable to access opcode bytes at 0x7f9d6adc11bb. [ 1023.444236][T13360] RSP: 002b:00007f9d6bbb7f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1023.452687][T13360] RAX: fffffffffffffdfc RBX: 00007f9d6afb6080 RCX: 00007f9d6adc11e5 [ 1023.460682][T13360] RDX: 00007f9d6bbb7fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1023.468706][T13360] RBP: 00007f9d6ae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1023.476698][T13360] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1023.484693][T13360] R13: 0000000000000000 R14: 00007f9d6afb6080 R15: 00007ffccf471bf8 [ 1023.492706][T13360] [ 1023.496054][T13360] Kernel Offset: disabled [ 1023.500410][T13360] Rebooting in 86400 seconds..