last executing test programs: 27.587688668s ago: executing program 0 (id=158): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto(0x3, 0x0, 0x7) (async) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000003b00), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf258800000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x180c0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x14040000) 27.342603451s ago: executing program 0 (id=159): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) mmap$auto(0x0, 0x400005, 0xe3, 0x9b72, r0, 0x7) madvise$auto(0x0, 0xffffffffffff0004, 0x19) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv6/conf/wlan1/ioam6_enabled\x00', 0x2102, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) sendfile$auto(r1, r2, 0x0, 0x1) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x5, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) sendmsg$auto_NFC_CMD_STOP_POLL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="00022abd7000fcdbdf250700000008000e000a00000007000200283a2d000800010004000000060014007d290000040014002b0014002f70726f632f7379732f6e65742f7d7005000000195f6c6f63616c5f706f72745f72616e676500001400020076657468305f766972745f7769666900080003000600000008000e0006000000"], 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$auto(r4, 0x8004b707, 0xffffffffffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0x400000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) 25.348307398s ago: executing program 0 (id=166): mmap$auto(0x2, 0x4, 0x6, 0x9b7f, 0xffffffffffffffff, 0x31) r0 = socket(0x2, 0x5, 0x0) readv$auto(r0, &(0x7f0000001140)={&(0x7f00000010c0)="583e79288462bfa7ac8300c9ed786944fc42e4c9607535a6343e8ca7aee5d541c4350401ba7bcb6adf298c87813a7f153b92c0eb76f4a86eb129e4ff6b04e9ab61d953de616915d7b000692015801dd6e5b16c0380ffc9ce46126c721ba26b6abf8d5ccf021ccbcdb9b9a500", 0x7}, 0xb5f) (async) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) connect$auto(r1, &(0x7f0000001080)=@llc={0x1a, 0x320, 0x4, 0x7, 0x2, 0x40, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x2) (async) read$auto_tomoyo_operations_securityfs_if(r1, &(0x7f0000000040)=""/4099, 0xfd98) 25.050804687s ago: executing program 0 (id=167): r0 = socket(0x1, 0x5, 0x0) socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101800, 0x0) syz_clone3(&(0x7f0000001180)={0x8a200080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto(r1, 0x5424, 0x1) socket(0x2, 0x4, 0x100) socket(0x28, 0x1, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60300, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xffffffffffffb7f1, 0x948b, 0x2, 0x15f4da0d, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) mmap$auto(0x0, 0x80000000, 0x1, 0x9b72, 0x2, 0x8000) madvise$auto(0xfffffffffffffffe, 0xffffffffffff0001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) socket(0x2, 0x6, 0x0) epoll_ctl$auto(0x5, 0x1, r0, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/uprobe_events\x00', 0x4c0900, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES32, @ANYRESOCT=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop1/integrity/device_is_integrity_capable\x00', 0x109080, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000040), 0x200}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) lseek$auto(0xffffffffffffffff, 0x1, 0x2) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) r3 = socket(0x15, 0x5, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 24.549142431s ago: executing program 0 (id=170): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xffffffffffffffff, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = io_uring_setup$auto(0xfffffffd, 0x0) getsockopt$auto(r1, 0x84, 0x5, 0x0, &(0x7f0000000040)=0xb2) ioctl$auto_BCH_IOCTL_DISK_RESIZE_JOURNAL(r2, 0x4018bc0f, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffffe, 0x5}) write$auto_proc_clear_refs_operations_internal(r2, &(0x7f00000005c0)="b135b2047ba56f8fb9871e92ed5dfa962e81944c3ce61ba3e75d6db7c3d4fd1e95883f2d27a46b6cdd47f2d73567609195f27b41715a7b77b0bc5487f49c963a9f470b0ae9df9c5c61588cc18937f1afdf0fb935783cec167317363d67f22e4581575ccd5c5d69af3e34eeedb9fd4736e3c7d15fe4631e20a488ecd2af7b5071572aa39ff8d53b79a1c15d8b171b050ef2abfcb71375d757f63074840c594eeb01542d6172457a49ef1deba6f9081af33d5b9c27164d71885ecda714f2474f18a7b24932fb8668ae4367bf9c440872b45c2883dba3c2529b88ca29990f146eade6d6023f", 0xe4) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x8, 0xa, 0x8800) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.type\x00', 0x0, 0x0) sendfile$auto(r5, r5, 0x0, 0x200) listmount$auto(&(0x7f00000001c0)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x6) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) socket(0x11, 0x3, 0x1803) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r6, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, 0x0, 0x400c8d4) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) 23.18193239s ago: executing program 0 (id=172): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) sysfs$auto(0x2, 0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) fsconfig$auto(0xffffffffffffffff, 0x1, &(0x7f0000000080)='\xa9rO\xe5\xebF*\x15\"@\x81\x15\a\xd8\xc6\xe3\x82< \xb90x0}) connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r5}, 0x18) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000012c0)=ANY=[@ANYBLOB='h\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x768}, 0x1, 0x0, 0x0, 0x90}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x80000) mmap$auto(0x0, 0x100000001, 0xc5a, 0xeb6, 0xffffffffffffffff, 0x7fff) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) (async) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) (async) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/options/blk_classic\x00', 0x942, 0x0) (async) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) 3.910820596s ago: executing program 1 (id=224): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0x7, 0x6, 0x1) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x500, 0x0) mmap$auto(0x0, 0xb, 0x72, 0x8b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x6, 0x40000000029, 0x1e, 0xfffffffffffffffe, 0x0) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="080027bd7000fbdbdf257900ce00"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x804) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) acct$auto(&(0x7f0000000080)='/proc/sys/kernel/sched_deadline\xdcBH\xc7H\xe2\x1d\b\x00ax_us\x00\xae\xb5\x86\xe9\xf6\xfe\x9b6\x91\x8f\x158\xe7qwI\t0\xc3\xd1\xcd\xf5\x04\xe0B\xe0U<\xb1\x1d\xda\xd2') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x111142, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) read$auto_tracing_pipe_fops_trace(0xffffffffffffffff, &(0x7f0000000100)=""/70, 0x46) setresuid$auto(0x2, 0x7, 0x8080) ioctl$auto(r2, 0x4b3a, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) write$auto(0xffffffffffffffff, 0x0, 0x0) set_mempolicy$auto(0x4005, &(0x7f0000000000)=0x1, 0x4) io_uring_register$auto(r0, 0x80, &(0x7f0000000240)="89cb92b4015e75fcfb76862efb1f38685d5d0906c31f6a23a61374f4071c09b4bfb0bee1c83bb920dc13b470b60b60d664b688eff561ae914e32da4779e0d6c6f1300e158bfcc179fa82dbdfdefebef014217443721b51426045f8405f25f581fdaa2bb52dc0ca73860d6393a74d1a0bb2ff3f6d6f404150f190b22c6000fffbfce06d7bcaf068af5bfba809446e81bd88de11eca4807a7689e9a9", 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) 3.629083296s ago: executing program 2 (id=226): r0 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/o2hb/quorum_regions\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x8) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) fcntl$auto_F_ADD_SEALS(r2, 0x409, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x10c9c8) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) write$auto(r2, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0x23, 0x0, 0x2f, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x3, 0x1, 0x2, {0x2100000000, 0x10000}, 0xfffffffffffffffc, 0x6, 0x3, 0x1008001, 0x0, 0x80000007, 0x21b, 0xffffffff, 0xa747, 0x7, 0xf}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000001200)='\x00\x00\x00U\x01\xfa(=\x9d\x9e\xe4\x00\x11\x11\x13\x05\x1c\xdbL\xe0\xfc\xab\xc9\x9f\x9f\xbd4TB&\xd0\x14[\xdd\x0f\"W\x85\xfc\xba3\a8u\xb6[R3\xcc\xc75c\xe7\x8c\x8c}v\xc2\xda[\xae\xe7\xde\x9f\xe0\x91{U\x17\x9c\xec\x18|\x8f\x14\xdeJ\xda\xdfm\xdf\xb9\x02\x0e_\xed\xdeA\x82_`\xb4&\xbc\xfa\xa2\x8c\xa6J\xba\xbc\xc5:\x1e\x94U\xe0\xe1+[A9^(\xf5\x96\xbc\xa3\xb3\xa2\xb2\x0e$\x9f~\xefMY\xb1\xb2 m\xd6\xfb\xe8s\x0e\xb9\x83I{\xe3o\x9c\x9c\"\xf8\x96\xddU\xcb\xac\'\x12l\xc0\xf9tw\xf6\xd8\xe0G\xecKZ\xeb\x19\xbf\x82\x06\xc6H\xe4m\xd1\xe4p=d\x86\xb4\x11\x8aFY\x1f\x1f\xd2\xd1O%D\x11\xfb\x941J6\xd0\x90\x92:\x11\x87\x8f\x03\xe9\xc7^\x9a)\xe8\xeb\xb5\xb2\xea\x809#I\x19\xef&\xce\x9dI}\x88\xf6\x9e\xe5\xee<\x8bi\x03\xf7\xa9.\x93\xd4\f\xd84\xc9\xed\xbe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) mmap$auto(0x9000000, 0x1, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r4, 0x0, 0xfffffdef) close_range$auto(0xffffffffffffffff, r2, 0x9) listen$auto(0x3, 0x81) socket(0x28, 0x2, 0xb) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r5, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 3.512817306s ago: executing program 3 (id=227): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7ff9) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0xffe, 0x7143, 0x8000000008011, 0x3, 0xfffffffffffffffe) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_OOBINLINE(r0, 0x3, 0xa, &(0x7f00000003c0)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000080)=0x6654242a) fdatasync$auto(r1) socket(0x1e, 0x805, 0x0) sysfs$auto(0x2, 0x15, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) read$auto(0x3, 0x0, 0x7) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1, 0x0) memfd_secret$auto(0x6) socket(0x2c, 0x800, 0xfffffffd) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x400003) getsockopt$auto(0x6, 0x11b, 0x7, 0xfffffffffffffffe, 0x0) 3.158622454s ago: executing program 3 (id=228): openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x371382, 0x0) mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x80102, 0x0) socket(0x28, 0x1, 0x0) socket(0x3b, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x24, r1, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) 2.765097272s ago: executing program 3 (id=229): r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) r1 = open_by_handle_at$auto(r0, &(0x7f0000000040)={0x1, 0x4, "89"}, 0x7) r2 = fcntl$auto_F_GETSIG(r1, 0xb, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000300)={r2, &(0x7f0000000080)="0324c9dc3d89358d62cec7459f80013128481763ace2c48cbab05a00be76c076ac7ca54fdb2017e283556530b82ae988e4bb01c084d806ed3d3324335efc63b1b98f440fc9d2b7aab8e16e468a31b7321c390d054ae7a0b75e9a7cd913c2317a69b537dea0eec5", 0x200, &(0x7f0000000100)="a67afbaf5c6b967bb69d6b26f8c2e204199431715fd3a328322d49042be051ec3a8af67bdfb57a72d0c52cb50ee8d6ef7c1e6814cc334931e9a4c52276cab0d1d808176592af42b9ffc1fdb240cc8d1c309a26a544fef0ebe5ac5a8a05417a0882680f3e9a949d7607ceeed49a9c9f4fce4e5afbd7e06dac505eec59868283a00b7655e3fd60c70b83d47522f9f3a04dac89fc3e6b3a978e669a9167246a3ba55254bc0ebdd424f21bfda4", 0x1, &(0x7f00000001c0)="7dd3c18ffe0e5d723b8d59d44ca6e9e1b711eb47cb54535503bdc50ea4b35badbe8412651b4b4ef0350f9381ad9cf92d34397705656b35775e79300f35d85e4fa88cd26db8db6c0ac0a460b2254d50ec43371abcd9baa9c741ef11db035e6d917f163c278c1553b801851dce49aea4dc6cdea4dcc9163a34ad8d71791771410567e3e09e214be4ee896a20c844b1425506bb8efdcde93738be185418d3f91eb0f0afdb507b5820fb264da59edee19bf78e0ad5959ef6ec4f32ca2ee74c7c0ce367704665120a74e10ed29706e1212f3ebf704a6156004952a98d336f65a5f83293c6", &(0x7f00000002c0)=0xffffffff}) socket(0xa, 0x80000, 0x3) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event2\x00', 0x420140, 0x0) r3 = socket(0xf, 0x5, 0x80000000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, r4, 0x201, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0x63, 0x1a, "82817f023ee8ec36b15c8681f7a87a37be29ab33aa4e0ab2cb815580e560c89c2c5143ae677a34a7a9548b614a41ebfbe1d2c47973195f4c1b71cc32f58b221f0f88a3f776cc69eddd79bed12336545eab80d38606035f4726c1d7e2d0a097"}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async, rerun: 32) r5 = prctl$auto_PR_SET_FP_MODE(0x2d, 0x80, 0xffffffffffffffff, 0xfffffffffffffff7, 0x0) (rerun: 32) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r5, 0x7cb, 0x0) (async) r6 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/ns/cgroup\x00', 0x0, 0x0) ioctl$auto_NS_GET_NSTYPE(r6, 0xb703, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x412080, 0x0) (async) shmctl$auto_IPC_RMID(0x5, 0x0, &(0x7f0000000680)={{0x0, 0xffffffffffffffff, 0xee00, 0x6, 0x0, 0x3, 0x9}, 0x2, 0x3, 0xc, 0xfffffffffffffffe, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x1000, 0x0, &(0x7f00000005c0)="637b95d46d608749ce", &(0x7f0000000600)="6bc88d18faa122ec905fa0050e66f1f59654f69acdd095170bc3066c61915fd8486c59036ceaf0333f85033c04cc998db307fbce1b3e34e9486511d95fe2a630ee856e17b784908ef33b362ea988798b80594d878c5500ebf63a777c9db8381f5739791f79265283a5b26ecb71b7f18e149a4fbe88bf"}) (async) r9 = gettid() (async) msgctl$auto_MSG_STAT(0x9, 0xb, &(0x7f0000000780)={{0x6, 0xee01, 0xee01, 0x4, 0x1, 0x5, 0xfffe}, &(0x7f0000000700)=0xb2, &(0x7f0000000740)=0x3, 0x7, 0x8, 0x2, 0x2, 0xffffffffffff7fff, 0xb93, 0x3, 0x7fff, @raw, @raw}) sendmsg$auto_NL80211_CMD_GET_KEY(r3, &(0x7f0000000ec0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000800)={0x648, r4, 0x60c429d4346175e3, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x441, 0x7d, 0x0, 0x1, [@typed={0xc, 0x69, 0x0, 0x0, @u64=0x4}, @generic="810727662386f1b313ccbe09beaebf95d9f263690a8e64ba7f8780e12f1e79307222633b17c7bcf95621ab46f3010a8253dbdd1f845cc28ba605284e519f939baab24f63830e34298b31fdd6e531310af3309c74a8871feaf61140ed583647d4e3ab0ecaa790f906d1c3c6d7c2f1158c6de73fe5480cbbd1590ab7e6002039b34653e289717dcb786427c9382bdd5fee9ebf7276f1be059c4dbffca916a85fe87f57e6e3f73e0fdd54fe9313d91f45752f6d88", @nested={0x9e, 0x11c, 0x0, 0x1, [@generic, @generic="50da2c7ba5d38e466b65f72c4444c662c37ad9207ee3e8c78ac4b13ad72ed01974c9767898b458131ee714e10fae3f17101735c924a857dea4268116c9803f34e38151d0ac9630e70b700fdcc16f8463a0588c254d2f5bc49aac77c145cdf368707fb0805dd1bb7ae6fb9bcae0df3c3ae4e50fcedf02b9b7541bdc8751228035a84a7419f6e88a9626204976236989d7c90a8101e11e4322864a"]}, @typed={0x8, 0x136, 0x0, 0x0, @pid}, @generic="0881f083f69c649720b3c13bc8f11c99f5360929ae87b3e8edfd3614d3c70d645f099cfda551794eebdbe44223b391bf6cce854c0e1e2c526d3460a1c8614531b2a914e7602548d4779349e81cbff802378583b0a17ae0e025f56ec0bb4ae20366c349386af2545d883ae0bec2a5553fd1c28b742bc97be167cc119905bae8bd", @nested={0xc, 0x89, 0x0, 0x1, [@typed={0x4, 0x23}, @nested={0x4, 0x140}]}, @nested={0x87, 0xf, 0x0, 0x1, [@generic="2657e766a741a38bfe49a57b5eb9aa5b06e65e0d022accaf7da5e1656eeb57d83192c0caa98db71971dbafdffb7a881088d7ea90ff2f2e07f2943210e08f08a7fa632493bf60296eee2d4f1f5737c3e0e68ce752235673320d22dec32b4f75f28e79ef3f7440371dfd549721c14388a8bc4932653750814448fd533e6136ee", @nested={0x4, 0x63}]}, @generic="d760", @nested={0x1bf, 0x46, 0x0, 0x1, [@typed={0x14, 0x143, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @nested={0x4, 0x57}, @generic="5ef2143c7bd933d41349d2c84ac34fa8e20ee6515385a993e8071809d471ea72be4a69e84a4a7be2f23eb2aa2b85ccaf998fdfc767ff54a035f32f56e93fefde5212d9ac7f4f05adf6715b2f1db93c40565dc462739bba0a45fd6e2437f4f157d483868cef02215971c6a44cfa5e64afa2c2bb4f0b56497f0d3a8be88b557b374e59ccbc58504e74eecc94126fe1863faaa7361bf302a3c022c6cc3733255335c6d932de08d6c7140faf9789e95a2d0688eabe420bbaab124520fc70b85262638c1fda89", @nested={0x4, 0x48}, @nested={0x4, 0x13e}, @nested={0x4, 0xd3}, @nested={0x4, 0x8b}, @nested={0x4, 0xe9}, @generic="3ab498980e14699c937811a77cefb4414e51561e5fe3c1c7e8520065b70628ec8cb1ee14c08f663ae5cfdcbc7eac53bd8daa6bc181ef6bfaecf6c3d363a718eb4117929df5a211a06946f4937c6a36a801943492e49c37f47ace28d8d82841b6bef628149d6fedc00e92b4c6c1a620514721f7a8148dcc8967c5ba40c5ae72d669ad2404328e5f67c5daebe84baa5986bfc6863527e1e9d877a65b5473d5b6fbdfd0e52506f0c64f08891e30c9f704e2a2f8162c481d36e00859d5d958254102cb09b6", @typed={0x8, 0x115, 0x0, 0x0, @ipv4=@multicast1}]}, @generic]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x113, 0x0, 0x0, @uid=r7}]}, @NL80211_ATTR_BSSID={0xbf, 0xf5, "e0755aecd1753a7e797783cbc335313a9d61d2d6e54ef997fa325c008ade8361c7efaa8b2929e14e48f81de39d25540c6d7f489e5a732d5115a29858e35f54b5bf4f9b4ff9845cc66a5c9d42fd30df828eae1f6e710c9079e692c3a91f82f5585f0e975516f0a5722cf12303d2a73fe5a93a817f672990d549ba0e0ed4b1d53224b14a6b54f918bce426c37ee72c8f265ebdc9f3cf01ca0e79424eb4c59ecc2bda6630b219792353a5b62ec7ed51fc59c53e2f2d671403db755617"}, @NL80211_ATTR_MESH_CONFIG={0x110, 0x23, 0x0, 0x1, [@typed={0x14, 0x5d, 0x0, 0x0, @ipv6=@loopback}, @nested={0xc, 0x10a, 0x0, 0x1, [@nested={0x4, 0xf5}, @nested={0x4, 0x106}]}, @nested={0xbe, 0x11b, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @pid=r9}, @nested={0x4, 0x128}, @nested={0x4, 0x119}, @typed={0xc, 0xed, 0x0, 0x0, @u64=0x80000000}, @nested={0x4, 0xdb}, @generic="12ed960c3834584df15521df8cfd1a9677949f8ee9b780352a80319ec73634e3b48e0f0ce9c324aa82cff33ca0364d0a0a980825d1064c2569ace8279784f466dccee181c3e50818b50cfd676e06fd306d395f4122bd9ca1370d822912a1b9bfe2e395d32645c1109b3962acc83d83f400cdb5217a9c438cc60b3d07f626c379220952eb1cb4", @typed={0x8, 0xda, 0x0, 0x0, @uid=r10}, @typed={0xc, 0x17, 0x0, 0x0, @u64=0x6}]}, @nested={0x2c, 0x14a, 0x0, 0x1, [@typed={0x20, 0x5f, 0x0, 0x0, @str='/proc/thread-self/ns/cgroup\x00'}, @typed={0x8, 0x11e, 0x0, 0x0, @ipv4=@loopback}]}]}, @NL80211_ATTR_PBSS={0x4}]}, 0x648}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) (async) write$auto_fops_u32_(r2, &(0x7f0000000f00)="b668fa48fa01df2d29672dbed8244c4483717045be865d50544f6cc360f9f066e1fa5cc7bc2625fe0b82ff6f0dca4c0f0243d1422c2ca5a9b1204698f4a3b4127fe9e872bf43c6540731f038440072e4ad4ac80b5d0e8774a7b0d12ec692c1811cd185c45cde0826ec19073e30f777dac4b71fed64e68d68f8378309d6e0441fa784d990e8a4f63fcdf2f96147d00011c6434f88919b2466435fc0626efa19215413b9f390d7b737f69a4b0d62f2d4decfe23a589c2a2b059f8b743b68cc2b60e932b3ef620614", 0xc7) (async, rerun: 64) r11 = socket(0x5, 0x4, 0xcbfc) (async, rerun: 64) r12 = epoll_create$auto(0x1) open(&(0x7f0000001000)='./file0\x00', 0x2000, 0x18) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001040)='/dev/snd/controlC2\x00', 0x8107b056ec9b1c0, 0x0) r13 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000010c0), r1) sendmsg$auto_TIPC_NL_SOCK_GET(r11, &(0x7f0000002980)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002940)={&(0x7f0000001100)={0x1818, r13, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NAME_TABLE={0x2d0, 0x8, 0x0, 0x1, [@nested={0x1a2, 0xaa, 0x0, 0x1, [@generic="55d5e611b2e143feabb987cf0284d20197b002bc4a7b9f89b93243409661d1ce41356352a41269944c491b57c20dce9f354fde71f84992022eb313693ec488d48a4f0832e6db81f015937230a8f240f8c21b0eb2f14939b1ae1f7309b0324ef55357319ec7409cf1530098daf6245d1b3bbefd09b46efe759f670d449d6e5db450201f6612ef36d7e423a957a9c2cee3ebdaaafac061e88eaa201c2075ad2def8236f4795b443ce3fc087e6c20460a2615f3fab9bf2ba2b7c6e0df", @typed={0xc2, 0x16, 0x0, 0x0, @binary="4afc9345fbffb1917e428a54955bff0b12a4845c8a5ed03a9c7d1e94aac72d8a5ed89149907a9e4d7e4c43dadfc6b1b8e2110dcb6792d77c309e550b0f9705021a2da80046961a2aef228293bf36ff26c7701bff465660d42650037463b53ae1818315f90066bc5fdc5141a5701df0226cd81d8b478468b780c07ce8d214ac5b11eb1626d2ac05188f057b874c3258bf2f3add9fcf3e3067e8a99449d445b3cb558234e3d0e7b8583b0f5a9661953f1a60a972edfdc1848c5653bfc7d3e9"}, @nested={0x4, 0x22}, @generic="33ab3bf3cd281242ac3c18f4da823da26314acf82de4238acd4456"]}, @nested={0x11d, 0xeb, 0x0, 0x1, [@typed={0x14, 0x6d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}, @generic="1eabc95b91b42e95402f442823264c04dae34944accd1c3d59f920c111c8e531284c9d4f6ce3a85994cb06d0df66734f3f5f3ede09e62b6b2b3af74ca089dfe877e60462b291d5249ea771d4f7cab2dd89d125004981f1fba9b744fd6e7bd92fc38b12cb213483363b84de697c9e18e0166acd44167696a70d797109ca36ac61cf72c06e64ec8d392e76576ae8c2ada2541131fe99ab51944fe43c8487c5747a31b9879a7072ad3a74ffd367aac4cab00a9023c2a53130bf1d7bfbbc590de236b97069397aaf7b68", @nested={0x4}, @generic="515f2d612d8b315c166cc4de4622377bbb6c0b970821760c5e11573ef4678768af92e2d184602bf3f7bd6db0bc", @nested={0x4, 0x70}, @typed={0x7, 0xab, 0x0, 0x0, @str=')!\x00'}]}, @typed={0x8, 0xba, 0x0, 0x0, @fd=r1}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@nested={0x8, 0x85, 0x0, 0x1, [@nested={0x4, 0x4b}]}]}, @TIPC_NLA_LINK={0x1ba, 0x4, 0x0, 0x1, [@generic="b91659545511adc46ea21edd2cb82834151c8eb80c54ce11095e0efb1349e7f367ef774705abb7929a6b9921852ead0f939eb1ca7d437bf962e3f1f8abc339543dc886e8090302283781010d0e06ce3165c09a81c6db369195d8db15e3ca2b966bab85350c4e19c211e33f8e04456c798de6d37fdf8e3bd2006fb501fcaec102e73ef42f5da285951b6f807725a4e12c820d6640e6547d37823292111c024ab169cbe8fa5bd3dccb4aba", @nested={0x10b, 0x100, 0x0, 0x1, [@typed={0x14, 0x113, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @nested={0x4, 0x138}, @generic, @generic="962b5c99bff7b1a6a5a2a2542aaacb51c4dc233c71c9235311c26d4680001d3c38ce5eb8a44445483060db65ddafa3896363f6fb1b9b676068d2dd3ca55930f4f7091a6f3b1b85b249f527e474ea34a06b617642b755a815eec34655ea97450af671a352c58cb168a45b342890b3f429805b1475c61c4a6aaa28359238c592d428298103f208b8be122ed43b74b08a67485cb70c5f4c1e4f09ffe7499d1522b8e6062759d53611bfdd82571d7fe0af01fc40655c423b2a24186dd000a1d2b1b4b693b41ad10b74881db10ad3daba180d04d2f2a4404c91011e181390b2ab6664ff8ef0ec77efa0f7d61c82688622a6"]}]}, @TIPC_NLA_NODE={0x12ee, 0x6, 0x0, 0x1, [@typed={0xc, 0x7e, 0x0, 0x0, @u64=0x7fffffffffffffff}, @generic="76bf21cb8612cea61806cb8eb9c81baf016582e8c0b94b44d2ce539ba7b33cb56404edb1d9df412282b56ad6265905f9dc2e833a9018199932aa0a92901e571c1d83670b37c7c384bbb6b29d1c9066bfb6197a6267131fa3dddf1fdade98bb7405133717e064176145eed4cc9bed993b1aac6e4dfc8dc7481b9cf840f524c18189e84a725743cb485e2fab31ecd42ebd8d48c97e9b71a76ab220a83412b6f8772f4f49cdb55352a048df03e321537c33229ac25ca864df315d0805757e62e1f3b809", @generic="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", @typed={0x8, 0x116, 0x0, 0x0, @uid=r10}, @typed={0xc, 0xb9, 0x0, 0x0, @u64=0x1c00}, @nested={0x208, 0x3a, 0x0, 0x1, [@nested={0x4, 0x118}, @generic="e5797b13db296b1d37a6b393682e8a4eb01c7f4d8961726671ae0954753320cb9c366fc900393789db0daa37685f0905740cd648f0cbdc5c2f0cde6f14148d3acf6f3916710c219d4d8d2b2b89499573d249ee8a70edd4c5e6fd9ee4bf1f851affc3189499ccf286c88d39784074ceae0985a496927bc02b1b1a7671d1bb7a844c25979d562c987a57c9818a0e73e2817f7b65d88f3868cfb4f697cf8dcef44c00fa443a72955cd39825dc40432618d350f1349836c6c2031c87098df2e814cde72f88e2274c9941266ef366c35496917bed915b0356e633c18353ce90", @typed={0x8, 0x55, 0x0, 0x0, @fd=r1}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0xda, 0x0, 0x0, @ipv4=@local}, @typed={0x14, 0x79, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x112, 0x0, 0x0, @uid=r10}, @generic="ab0f6137a18bac249936aefec3c36a666e7e26ea0542f651787e721ded250502f37c341ebc5e802e630b6a82867a91cd9c55dae874ab4bffa0a34c0e7fc5e54633f2d4108a26be023b592ea3d364c5bad5bfea154ece62ae94d67481f41e5e7cc181467df9906b9e531a9a13e8b1bb5b663daa5df8cb66b94c5f53182b4ade4ce2d391c83a65fec01c6f975346f66f21d2aa201295748fc9c89e52fb154d99673d78309dcacf316cb6665d1aae5ca605d142ceb04a33ee4c29c42536aded906dacaa39872bc612d6919386e288f905", @typed={0x14, 0x10e, 0x0, 0x0, @ipv6=@empty}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@nested={0x14, 0x1d, 0x0, 0x1, [@typed={0x8, 0xe6, 0x0, 0x0, @u32=0xc}, @nested={0x4, 0x106}, @nested={0x4, 0x71}]}, @generic="a23911685679397f890dd49fcb0a7e7d07575d8ad99526e2f774990dd42bad4de9df3b5ada1df908f419802e4b621bb5fcf30d471302cbac73c28eacd8d8d1911dafb6f2aafd6f8c03eb890e2eeecdb5d8f3529f96ddf8c97fa4e4a85b84054af0ae9832"]}]}, 0x1818}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/sequencer2\x00', 0x2, 0x0) (async) prctl$auto_PR_RISCV_V_GET_CONTROL(0x46, 0x7fb8, r9, 0xff, 0x0) r14 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000002a40), r3) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r12, &(0x7f0000002d00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002a80)={0x208, r14, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x8, 0x187}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xc, 0x7}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x13, 'veth1_vlan\x00'}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x12, 0x10001}, @THERMAL_GENL_ATTR_TZ_GOV={0x1c5, 0xd, 0x0, 0x1, [@nested={0x10, 0xc3, 0x0, 0x1, [@typed={0xc, 0x11d, 0x0, 0x0, @u64=0x4}]}, @generic="1480c4454c36d9cff79d1b0e2b16349598f4389c025b718551173e4750b707b4f9e8fc75edff21d8ae1430e249e9f6afb11fc4410433022a5f3a29205b24d922447dbd5207a43f9e38828b7d953887f78479c369e528388370e7afd4b4b07e8a6a356f2480b5bb632dd4165c414558c8eda0e37a1588545c82b78b425f1507cad37fd3354537127c3e0845d15e43b05634e2bf7ba7", @typed={0x8, 0xde, 0x0, 0x0, @pid=r8}, @generic="a2fc822c1dd948761b5622fd9fb669f318b9b26ec55a79baea9a7553ff4dbb804f68907bc75c18fdd46e1cd6aafbb81f4e48eae66f3f8a28a08baf149f7ac54e028d157d6b5f1ed2340c00df81fac46da6c86fa4a6c76895393ed4fb26beda66a9773332c2f0e7801d55ea43b73d541302fcfb0a22b1e474a3e989c8700b72217bfffad4c1a3b893aee9a1", @generic="4746a63978cc0fff8ae8760a3a6034fc6277c54720246dea9b9e407a8946ce0b864570dca7b6e55c48b940f26367703568a5fc286c3ec9911ba1cb343498f75ecb99acfab96cfdb806bdd6330dad398885e32b6764aab0c189abaa48cba06b17616eba1057554612a35f4283dd0b28ff07e048f057c9d6521e84d00fe8d8868f464278e37053284db4"]}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) sendmsg$auto_GTP_CMD_GETPDP(r5, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c8c4}, 0x40000) 2.277044519s ago: executing program 3 (id=230): r0 = memfd_create$auto(&(0x7f0000000000)='@:\x00', 0xe6a) mmap$auto(0x8, 0x8000000000000000, 0x5, 0x21bb, r0, 0x7) unshare$auto(0x40000080) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) 2.071106184s ago: executing program 2 (id=231): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) capset$auto(0x0, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) socket(0x2a, 0x1, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0x4004e502, 0x0) ioprio_set$auto(0x6, 0x0, 0x8) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x1, 0x1000009, 0x3, 0x22, 0x940, 0x9ffde, 0x5, 0x6, 0x3ff, 0x9, 0x400005, 0xfff, 0x4, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x6, 0xffffffff, 0x0, 0x3, 0x80, 0x0, [0x3, 0x5, 0x200000000, 0x3ff, 0x0, 0x500, 0xfffffffffffffffd, 0x8, 0x3, 0x0, 0xc72, 0x7ffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x40000000004, 0x5, 0x1000000800, 0x0, 0x0, 0x0, 0x9, 0x10000040000000, 0xcea, 0x0, 0xfffffffffffffffc, 0x800000, 0xfffffffffffffffa, 0x4, 0xffffffffffffffff, 0x2, 0x4001, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffff9, 0x0, 0x6c1a, 0x1, 0x0, 0x9f, 0x0, 0x3]}, 0x200, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1a, 0x10000001, 0x9, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x1ff, &(0x7f0000000040)={0x0, 0xd}, 0x9, 0x0, 0x80000001, 0x2}, 0x1}, 0x80000000, 0x7956, 0x0) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) writev$auto(r2, &(0x7f0000000280)={0x0}, 0x8) read$auto(r1, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) capget$auto(0x0, 0xfffffffffffffffe) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) socket(0x28, 0x1, 0x0) socket(0x1, 0x1, 0x1) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x42100, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.808286379s ago: executing program 3 (id=232): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x20009, 0x10001, 0xeb1, 0x3fd, 0x8000) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000280)=""/65, 0x41) bpf$auto(0x15, 0x0, 0x0) mmap$auto(0x0, 0x4020005, 0x2, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x2841100, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/pagemap\x00', 0x1e203, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) madvise$auto(0x0, 0x200007, 0x19) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x2020007, 0x1, 0x10eb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x3) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) 1.72305309s ago: executing program 1 (id=233): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0xc005) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) madvise$auto(0x1, 0x7, 0x4) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto(r1, 0x89f3, r1) 906.41546ms ago: executing program 1 (id=234): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff) unshare$auto(0x40000080) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x7fffffff) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket(0x28, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0c/sub4/xrun_injection\x00', 0x240400, 0x0) fanotify_mark$auto(0xffffffffffffffff, 0x205, 0xa, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x400e8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xaa642, 0x0) writev$auto(r3, &(0x7f0000000000)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x4000040008, 0xb3, 0x9b72, r2, 0x28000) r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r4, 0x0, 0x40) r5 = prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x40802, 0x0) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, &(0x7f0000000040)=0xf74) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="24140000", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf25000000000800010081000000080002000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/6/spurious\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 697.8276ms ago: executing program 3 (id=235): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x200001e, 0x5, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_overcommit_hugepages\x00', 0x1c9282, 0x0) write$auto_tracing_iter_fops_trace(r0, &(0x7f0000000240)="0e45f988c97b", 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r4 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r4, 0x0, 0xe) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf25140000000c00018008000100", @ANYRES32=r3, @ANYBLOB="6b38d1ded8ba68d7a072f24d16455e6194b6b41827"], 0x28}, 0x1, 0x0, 0x0, 0x4089c}, 0x4004010) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) socket(0x1e, 0x1, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x58a, &(0x7f0000000100)={0x0, 0x2}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x100000001, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x400, 0x7ffffff9, 0x5, 0xffffffff80000000, 0x9, 0x61, 0x105}) fadvise64$auto(0x0, 0x9, 0x9, 0xb28) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x4}, 0x7, 0x4008) 517.173054ms ago: executing program 2 (id=236): openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x371382, 0x0) mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x80102, 0x0) socket(0x28, 0x1, 0x0) socket(0x3b, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x24, r1, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) 262.400376ms ago: executing program 2 (id=237): r0 = socket(0x1d, 0x2, 0x6) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) socket(0x1, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x80000541b, r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x5, 0x810004, 0x3, 0x800000000801f, 0x3, 0x7fffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x800000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r1, 0x8, 0x0) 0s ago: executing program 1 (id=238): write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) unshare$auto(0x40000080) r0 = socket(0x2b, 0x1, 0x0) r1 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) r2 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x2ab00, 0x0) readv$auto(r2, &(0x7f0000003ac0)={&(0x7f00000039c0), 0x52d}, 0x6) write$auto_split_huge_pages_fops_huge_memory(r1, &(0x7f0000000100)='1', 0x1) socketcall$auto_SYS_CONNECT(0x3, &(0x7f0000000000)=0x5) bind$auto(0x3, 0x0, 0x6a) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) socket(0x26, 0x80805, 0xffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) socket(0x10, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001780)='/dev/input/event2\x00', 0x0, 0x0) ioctl$auto_EVIOCSREP(r4, 0x40084503, 0x0) sendmmsg$auto(r0, &(0x7f0000001300)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0xfffd}, 0x5, 0x20000000) socketpair$auto(0x400, 0x6, 0x1000800, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 81.050164][ T5834] cgroup: Unknown subsys name 'net' [ 81.158837][ T5834] cgroup: Unknown subsys name 'cpuset' [ 81.167167][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.766691][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.574871][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.585575][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.593337][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.607273][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.625548][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.678774][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.690922][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.698701][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.706781][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.714428][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.736084][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.752780][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.762681][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.771271][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.779452][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.799670][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.808578][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.818480][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.834274][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.848017][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.982388][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 85.086250][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.093410][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.101271][ T5843] bridge_slave_0: entered allmulticast mode [ 85.108869][ T5843] bridge_slave_0: entered promiscuous mode [ 85.129164][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.136605][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.143830][ T5843] bridge_slave_1: entered allmulticast mode [ 85.151380][ T5843] bridge_slave_1: entered promiscuous mode [ 85.250156][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.264298][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.306899][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 85.322220][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 85.363144][ T5843] team0: Port device team_slave_0 added [ 85.373906][ T5843] team0: Port device team_slave_1 added [ 85.398796][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 85.463920][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.471087][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.497088][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.527967][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.534967][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.561286][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.573143][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.580354][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.587639][ T5849] bridge_slave_0: entered allmulticast mode [ 85.594376][ T5849] bridge_slave_0: entered promiscuous mode [ 85.624123][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.632341][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.639814][ T5849] bridge_slave_1: entered allmulticast mode [ 85.646915][ T5849] bridge_slave_1: entered promiscuous mode [ 85.677064][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.684325][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.691811][ T5847] bridge_slave_0: entered allmulticast mode [ 85.699005][ T5847] bridge_slave_0: entered promiscuous mode [ 85.706992][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.714143][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.721532][ T5847] bridge_slave_1: entered allmulticast mode [ 85.728557][ T5847] bridge_slave_1: entered promiscuous mode [ 85.751194][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.759164][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.766593][ T5851] bridge_slave_0: entered allmulticast mode [ 85.773360][ T5851] bridge_slave_0: entered promiscuous mode [ 85.808388][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.817900][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.825134][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.832900][ T5851] bridge_slave_1: entered allmulticast mode [ 85.840014][ T5851] bridge_slave_1: entered promiscuous mode [ 85.865987][ T5843] hsr_slave_0: entered promiscuous mode [ 85.872308][ T5843] hsr_slave_1: entered promiscuous mode [ 85.881881][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.901396][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.912919][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.942638][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.983451][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.024125][ T5849] team0: Port device team_slave_0 added [ 86.040929][ T5851] team0: Port device team_slave_0 added [ 86.049209][ T5847] team0: Port device team_slave_0 added [ 86.060577][ T5847] team0: Port device team_slave_1 added [ 86.068318][ T5849] team0: Port device team_slave_1 added [ 86.084476][ T5851] team0: Port device team_slave_1 added [ 86.141304][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.148466][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.175181][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.186927][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.193919][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.221175][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.237738][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.244755][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.270854][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.283526][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.290742][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.316946][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.328600][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.335847][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.362013][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.377580][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.384598][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.410763][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.479636][ T5851] hsr_slave_0: entered promiscuous mode [ 86.486954][ T5851] hsr_slave_1: entered promiscuous mode [ 86.493034][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.501250][ T5851] Cannot create hsr debugfs directory [ 86.521899][ T5849] hsr_slave_0: entered promiscuous mode [ 86.528592][ T5849] hsr_slave_1: entered promiscuous mode [ 86.534713][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.542523][ T5849] Cannot create hsr debugfs directory [ 86.582475][ T5847] hsr_slave_0: entered promiscuous mode [ 86.589327][ T5847] hsr_slave_1: entered promiscuous mode [ 86.595288][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.603665][ T5847] Cannot create hsr debugfs directory [ 86.646476][ T5846] Bluetooth: hci0: command tx timeout [ 86.762635][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.786459][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.803637][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.810546][ T5846] Bluetooth: hci2: command tx timeout [ 86.810899][ T5846] Bluetooth: hci1: command tx timeout [ 86.851373][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.886233][ T5846] Bluetooth: hci3: command tx timeout [ 86.948347][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.959585][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.972445][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.000098][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.041732][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.052601][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.063151][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.089425][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.122848][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.147593][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.158625][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.173980][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.239309][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.265678][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.301069][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.308502][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.337607][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.345264][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.421445][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.433473][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.457145][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.474990][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.491166][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.507841][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.515030][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.541279][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.548429][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.560414][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.567546][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.583127][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.590314][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.606556][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.663594][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.670788][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.711757][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.718955][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.857477][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.908541][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.031840][ T5843] veth0_vlan: entered promiscuous mode [ 88.049964][ T5843] veth1_vlan: entered promiscuous mode [ 88.113502][ T5843] veth0_macvtap: entered promiscuous mode [ 88.130991][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.143449][ T5843] veth1_macvtap: entered promiscuous mode [ 88.174932][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.201330][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.226461][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.260984][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.272520][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.282335][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.291590][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.300420][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.318061][ T5847] veth0_vlan: entered promiscuous mode [ 88.346874][ T5849] veth0_vlan: entered promiscuous mode [ 88.357537][ T5847] veth1_vlan: entered promiscuous mode [ 88.384474][ T5849] veth1_vlan: entered promiscuous mode [ 88.451354][ T5851] veth0_vlan: entered promiscuous mode [ 88.481030][ T5849] veth0_macvtap: entered promiscuous mode [ 88.492105][ T5847] veth0_macvtap: entered promiscuous mode [ 88.502494][ T5847] veth1_macvtap: entered promiscuous mode [ 88.524708][ T5849] veth1_macvtap: entered promiscuous mode [ 88.536694][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.543722][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.544691][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.556800][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.583237][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.600195][ T5851] veth1_vlan: entered promiscuous mode [ 88.618176][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.628908][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.640248][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.652226][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.662269][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.671864][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.681571][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.711083][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.726775][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.728600][ T5846] Bluetooth: hci0: command tx timeout [ 88.751107][ T5851] veth0_macvtap: entered promiscuous mode [ 88.772695][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.783840][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.794666][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.806568][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.818764][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.839754][ T5851] veth1_macvtap: entered promiscuous mode [ 88.858159][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.870325][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.883395][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.890808][ T5846] Bluetooth: hci2: command tx timeout [ 88.896492][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.899711][ T5153] Bluetooth: hci1: command tx timeout [ 88.911773][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.940523][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.960790][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.971586][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.972762][ T5846] Bluetooth: hci3: command tx timeout [ 88.984434][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.994950][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.043404][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.061285][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.072133][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.084530][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.095076][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.108259][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.119417][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.134616][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.134646][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.211958][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.227616][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.237837][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.251709][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.264251][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.283504][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.302386][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.333092][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.358513][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.462865][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.480834][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.490920][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.506816][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.637656][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.685015][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.842870][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.905442][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.145173][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.209088][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.343081][ T5919] Invalid ELF header magic: != ELF [ 90.363275][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.375866][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 90.385213][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.405153][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.571657][ T5924] netlink: zone id is out of range [ 90.578112][ T5924] netlink: zone id is out of range [ 90.584317][ T5924] netlink: zone id is out of range [ 90.606304][ T5924] netlink: zone id is out of range [ 90.611500][ T5924] netlink: zone id is out of range [ 90.638971][ T5924] netlink: zone id is out of range [ 90.644257][ T5924] netlink: zone id is out of range [ 90.698149][ T5924] netlink: zone id is out of range [ 90.707199][ T5924] netlink: zone id is out of range [ 90.747999][ T5924] netlink: zone id is out of range [ 90.806064][ T5846] Bluetooth: hci0: command tx timeout [ 90.847530][ T5935] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.965599][ T5846] Bluetooth: hci2: command tx timeout [ 90.965980][ T5153] Bluetooth: hci1: command tx timeout [ 91.030664][ T5940] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 91.045748][ T5153] Bluetooth: hci3: command tx timeout [ 91.332242][ T5949] process 'syz.3.10' launched '/dev/fd/4' with NULL argv: empty string added [ 91.364455][ T5947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9'. [ 91.454253][ T5947] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 91.646043][ T5957] bond0: option lp_interval: invalid value (/sys/devices/platform/vkms/graphics/fb0/rotate) [ 91.705538][ T5957] bond0: option lp_interval: allowed values 1 - 2147483647 [ 92.016626][ T976] cfg80211: failed to load regulatory.db [ 92.080930][ T5962] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET) [ 92.886006][ T5153] Bluetooth: hci0: command tx timeout [ 93.020735][ T5989] ubi0: attaching mtd0 [ 93.025037][ T5989] ubi0 error: ubi_attach_mtd_dev: bad VID header (65536) or data offsets (65600) [ 93.060127][ T5153] Bluetooth: hci2: command tx timeout [ 93.066635][ T5153] Bluetooth: hci1: command tx timeout [ 93.125649][ T5846] Bluetooth: hci3: command tx timeout [ 93.364534][ T5997] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.383458][ T5989] can: request_module (can-proto-0) failed. [ 94.049784][ T6011] CIFS: VFS: Unsupported security flags: 0x200 [ 94.493574][ T6009] FAULT_INJECTION: forcing a failure. [ 94.493574][ T6009] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.542374][ T6009] CPU: 0 UID: 0 PID: 6009 Comm: syz.0.22 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 94.542423][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.542446][ T6009] Call Trace: [ 94.542455][ T6009] [ 94.542470][ T6009] dump_stack_lvl+0x16c/0x1f0 [ 94.542536][ T6009] should_fail_ex+0x512/0x640 [ 94.542573][ T6009] _copy_to_user+0x32/0xd0 [ 94.542609][ T6009] snd_pcm_oss_read2+0x294/0x410 [ 94.542661][ T6009] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 94.542709][ T6009] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 94.542742][ T6009] ? snd_pcm_oss_prepare+0x11e/0x220 [ 94.542791][ T6009] snd_pcm_oss_read+0x5d3/0x760 [ 94.542843][ T6009] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 94.542893][ T6009] vfs_read+0x1de/0xc70 [ 94.542943][ T6009] ? __pfx_vfs_read+0x10/0x10 [ 94.542987][ T6009] ? find_held_lock+0x2b/0x80 [ 94.543025][ T6009] ? __fget_files+0x204/0x3c0 [ 94.543057][ T6009] ? __fget_files+0x20e/0x3c0 [ 94.543091][ T6009] ksys_read+0x12a/0x240 [ 94.543135][ T6009] ? __pfx_ksys_read+0x10/0x10 [ 94.543179][ T6009] ? rcu_is_watching+0x12/0xc0 [ 94.543224][ T6009] do_syscall_64+0xcd/0x260 [ 94.543265][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.543296][ T6009] RIP: 0033:0x7f74b698d169 [ 94.543326][ T6009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.543360][ T6009] RSP: 002b:00007f74b7784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.543390][ T6009] RAX: ffffffffffffffda RBX: 00007f74b6ba5fa0 RCX: 00007f74b698d169 [ 94.543410][ T6009] RDX: 000000000cefbce6 RSI: 0000000000000000 RDI: 0000000000000005 [ 94.543427][ T6009] RBP: 00007f74b6a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 94.543445][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.543462][ T6009] R13: 0000000000000000 R14: 00007f74b6ba5fa0 R15: 00007ffe2dc40c38 [ 94.543501][ T6009] [ 95.639182][ T6020] could not allocate digest TFM handle [ 95.711068][ T6026] FAULT_INJECTION: forcing a failure. [ 95.711068][ T6026] name failslab, interval 1, probability 0, space 0, times 1 [ 95.756809][ T6026] CPU: 1 UID: 0 PID: 6026 Comm: syz.1.27 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 95.756851][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.756867][ T6026] Call Trace: [ 95.756876][ T6026] [ 95.756887][ T6026] dump_stack_lvl+0x16c/0x1f0 [ 95.756927][ T6026] should_fail_ex+0x512/0x640 [ 95.756955][ T6026] ? fs_reclaim_acquire+0xae/0x150 [ 95.756997][ T6026] should_failslab+0xc2/0x120 [ 95.757026][ T6026] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 95.757053][ T6026] ? ima_inode_get+0x120/0x580 [ 95.757092][ T6026] ima_inode_get+0x120/0x580 [ 95.757136][ T6026] process_measurement+0x708/0x2360 [ 95.757181][ T6026] ? __pfx_process_measurement+0x10/0x10 [ 95.757216][ T6026] ? __lock_acquire+0x5ca/0x1ba0 [ 95.757260][ T6026] ? init_file+0x93/0x4c0 [ 95.757288][ T6026] ? alloc_empty_file+0x73/0x1e0 [ 95.757318][ T6026] ? hugetlb_file_setup+0x4cd/0x620 [ 95.757359][ T6026] ? ksys_mmap_pgoff+0x189/0x5c0 [ 95.757398][ T6026] ? __x64_sys_mmap+0x125/0x190 [ 95.757466][ T6026] ima_file_mmap+0x1b1/0x1d0 [ 95.757502][ T6026] ? __pfx_ima_file_mmap+0x10/0x10 [ 95.757550][ T6026] security_mmap_file+0x88c/0x990 [ 95.757588][ T6026] vm_mmap_pgoff+0xec/0x450 [ 95.757640][ T6026] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 95.757690][ T6026] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 95.757732][ T6026] ? hugetlbfs_get_inode+0x31f/0x730 [ 95.757782][ T6026] ksys_mmap_pgoff+0x1c8/0x5c0 [ 95.757830][ T6026] ? rcu_is_watching+0x12/0xc0 [ 95.757873][ T6026] __x64_sys_mmap+0x125/0x190 [ 95.757914][ T6026] do_syscall_64+0xcd/0x260 [ 95.757960][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.757994][ T6026] RIP: 0033:0x7f0a3358d169 [ 95.758020][ T6026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.758051][ T6026] RSP: 002b:00007f0a34330038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 95.758081][ T6026] RAX: ffffffffffffffda RBX: 00007f0a337a5fa0 RCX: 00007f0a3358d169 [ 95.758101][ T6026] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 95.758121][ T6026] RBP: 00007f0a3360e2a0 R08: 0000000000000401 R09: 0000300000000000 [ 95.758140][ T6026] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 95.758157][ T6026] R13: 0000000000000000 R14: 00007f0a337a5fa0 R15: 00007ffede084448 [ 95.758187][ T6026] [ 96.002627][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.766883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.975714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.985596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.994166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.002820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.011687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.021614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.034263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.043443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.052186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.325616][ T6059] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.363853][ T6059] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.395172][ T6059] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.427098][ T6059] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.443407][ T6059] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.461659][ T6059] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.484051][ T6059] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.497890][ T6059] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.521756][ T6059] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.556219][ T6059] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.573659][ T6059] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.612942][ T6059] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.735378][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.298399][ T6093] mmap: syz.0.42 (6093) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.597347][ T6100] input: f as /devices/virtual/input/input6 [ 100.485522][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.491691][ T5153] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.566976][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.583862][ T6115] FAULT_INJECTION: forcing a failure. [ 100.583862][ T6115] name failslab, interval 1, probability 0, space 0, times 0 [ 100.599739][ T6115] CPU: 0 UID: 0 PID: 6115 Comm: syz.0.48 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 100.599777][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.599793][ T6115] Call Trace: [ 100.599801][ T6115] [ 100.599811][ T6115] dump_stack_lvl+0x16c/0x1f0 [ 100.599849][ T6115] should_fail_ex+0x512/0x640 [ 100.599876][ T6115] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 100.599915][ T6115] should_failslab+0xc2/0x120 [ 100.599945][ T6115] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 100.599972][ T6115] ? mas_alloc_nodes+0x18b/0x8b0 [ 100.600004][ T6115] mas_alloc_nodes+0x18b/0x8b0 [ 100.600037][ T6115] mas_node_count_gfp+0x105/0x130 [ 100.600067][ T6115] mas_preallocate+0x53e/0xcd0 [ 100.600108][ T6115] ? __pfx_mas_preallocate+0x10/0x10 [ 100.600153][ T6115] ? anon_vma_name+0x75/0x100 [ 100.600186][ T6115] __split_vma+0x33b/0x11a0 [ 100.600214][ T6115] ? __pfx___split_vma+0x10/0x10 [ 100.600249][ T6115] vms_gather_munmap_vmas+0x393/0x1780 [ 100.600283][ T6115] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 100.600311][ T6115] ? mas_walk+0x6a6/0x910 [ 100.600347][ T6115] __mmap_region+0x320/0x27c0 [ 100.600376][ T6115] ? __pfx___mmap_region+0x10/0x10 [ 100.600403][ T6115] ? trace_sched_exit_tp+0xde/0x130 [ 100.600450][ T6115] ? __lock_acquire+0x5ca/0x1ba0 [ 100.600495][ T6115] ? __pfx___schedule+0x10/0x10 [ 100.600548][ T6115] ? trace_cap_capable+0x18d/0x200 [ 100.600589][ T6115] ? cap_capable+0xb3/0x250 [ 100.600631][ T6115] mmap_region+0x1ab/0x3f0 [ 100.600664][ T6115] do_mmap+0xd8e/0x11b0 [ 100.600717][ T6115] ? __pfx_do_mmap+0x10/0x10 [ 100.600762][ T6115] ? __pfx_down_write_killable+0x10/0x10 [ 100.600811][ T6115] vm_mmap_pgoff+0x281/0x450 [ 100.600865][ T6115] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 100.600933][ T6115] ? __x64_sys_futex+0x1e0/0x4c0 [ 100.600977][ T6115] ? __x64_sys_futex+0x1e9/0x4c0 [ 100.601026][ T6115] ksys_mmap_pgoff+0x7d/0x5c0 [ 100.601071][ T6115] ? rcu_is_watching+0x12/0xc0 [ 100.601112][ T6115] __x64_sys_mmap+0x125/0x190 [ 100.601151][ T6115] do_syscall_64+0xcd/0x260 [ 100.601194][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.601226][ T6115] RIP: 0033:0x7f74b698d169 [ 100.601250][ T6115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.601280][ T6115] RSP: 002b:00007f74b7784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 100.601308][ T6115] RAX: ffffffffffffffda RBX: 00007f74b6ba5fa0 RCX: 00007f74b698d169 [ 100.601328][ T6115] RDX: 00000000000000df RSI: 0000000000128009 RDI: 0000000000000000 [ 100.601346][ T6115] RBP: 00007f74b6a0e2a0 R08: 0000000000000401 R09: 0000000000008000 [ 100.601364][ T6115] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 100.601381][ T6115] R13: 0000000000000000 R14: 00007f74b6ba5fa0 R15: 00007ffe2dc40c38 [ 100.601414][ T6115] [ 100.901121][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.928156][ T6115] input: f as /devices/virtual/input/input7 [ 101.411056][ T6129] Invalid ELF header magic: != ELF [ 101.539850][ T6139] Zero length message leads to an empty skb [ 102.127324][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 102.566565][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.566648][ T5153] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.648694][ T5153] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.966078][ T5153] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.897990][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 104.211249][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 104.607096][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 104.645683][ T5153] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.651750][ T5153] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.725647][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.747598][ T6206] netlink: 338 bytes leftover after parsing attributes in process `syz.3.67'. [ 106.018699][ T6229] netlink: 330 bytes leftover after parsing attributes in process `syz.1.73'. [ 106.041800][ T6229] mac80211_hwsim hwsim6 : renamed from wlan0 (while UP) [ 106.741884][ T6240] svc: failed to register nfsdv3 RPC service (errno 111). [ 106.779678][ T6240] svc: failed to register nfsaclv3 RPC service (errno 111). [ 107.413582][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 107.439312][ T6262] netlink: 354 bytes leftover after parsing attributes in process `syz.3.83'. [ 107.701614][ T6276] ptrace attach of "./syz-executor exec"[5849] was attempted by ""[6276] [ 107.807353][ T6282] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r-y–L̓ [ 108.669773][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'. [ 108.798992][ T6300] syz.2.91 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 109.894842][ T6323] MTRR 1 not used [ 110.086546][ T6328] snd_aloop snd_aloop.0: Parsing timer source 'ecryptfs' failed with -22 [ 111.461017][ T6376] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 111.923568][ T6376] nbd: socks must be embedded in a SOCK_ITEM attr [ 111.956312][ T6376] block nbd1: shutting down sockets [ 112.912663][ T6441] usbip-vudc usbip-vudc.0: gadget not bound [ 113.201250][ T6448] Invalid ELF header magic: != ELF [ 115.635949][ T6468] [U] ^@ [ 116.663521][ T6491] random: crng reseeded on system resumption [ 117.390693][ T6501] ubi0: attaching mtd0 [ 117.414919][ T6501] ubi0: scanning is finished [ 117.442484][ T6501] ubi0: empty MTD device detected [ 117.538229][ T6515] capability: warning: `syz.2.134' uses deprecated v2 capabilities in a way that may be insecure [ 117.643912][ T6501] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 117.708332][ T6501] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 117.718118][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'. [ 117.728304][ T6501] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 117.736008][ T6515] veth0_macvtap: left promiscuous mode [ 117.742020][ T6515] macvtap0: entered promiscuous mode [ 117.775633][ T6515] macvtap0: entered allmulticast mode [ 117.784467][ T6501] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 117.811710][ T6501] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 117.968638][ T6501] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 117.998777][ T6501] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3519219075 [ 118.061138][ T6501] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 118.129327][ T6518] ubi0: background thread "ubi_bgt0d" started, PID 6518 [ 119.439151][ T6538] Invalid ELF header magic: != ELF [ 120.011949][ T6546] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 121.078244][ T6581] snd_aloop snd_aloop.0: Parsing timer source 'ecryptfs' failed with -22 [ 121.168794][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 122.205578][ T6603] netlink: 342 bytes leftover after parsing attributes in process `syz.2.143'. [ 122.417836][ T6607] sctp: [Deprecated]: syz.2.145 (pid 6607) Use of int in max_burst socket option. [ 122.417836][ T6607] Use struct sctp_assoc_value instead [ 122.447561][ T6607] ubi: mtd0 is already attached to ubi0 [ 123.151727][ T6619] net_ratelimit: 4 callbacks suppressed [ 123.151754][ T6619] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 126.214891][ T5846] Bluetooth: hci1: unexpected event 0x23 length: 127 > 13 [ 126.230972][ T6690] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.161' sets config #5 [ 126.307109][ T6692] FAULT_INJECTION: forcing a failure. [ 126.307109][ T6692] name failslab, interval 1, probability 0, space 0, times 0 [ 126.411162][ T6692] CPU: 0 UID: 0 PID: 6692 Comm: syz.3.162 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 126.411211][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.411230][ T6692] Call Trace: [ 126.411240][ T6692] [ 126.411267][ T6692] dump_stack_lvl+0x16c/0x1f0 [ 126.411328][ T6692] should_fail_ex+0x512/0x640 [ 126.411361][ T6692] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 126.411403][ T6692] should_failslab+0xc2/0x120 [ 126.411441][ T6692] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 126.411480][ T6692] ? xfrm_sysctl_init+0x10a/0x2d0 [ 126.411516][ T6692] kmemdup_noprof+0x29/0x60 [ 126.411563][ T6692] xfrm_sysctl_init+0x10a/0x2d0 [ 126.411596][ T6692] xfrm_net_init+0x842/0xcc0 [ 126.411631][ T6692] ? __pfx_xfrm_net_init+0x10/0x10 [ 126.411660][ T6692] ops_init+0x1df/0x5f0 [ 126.411703][ T6692] setup_net+0x21e/0x850 [ 126.411746][ T6692] ? __pfx_setup_net+0x10/0x10 [ 126.411784][ T6692] ? lockdep_init_map_type+0x5c/0x280 [ 126.411816][ T6692] ? __pfx_down_read_killable+0x10/0x10 [ 126.411866][ T6692] ? debug_mutex_init+0x37/0x70 [ 126.411909][ T6692] copy_net_ns+0x2a6/0x5f0 [ 126.411957][ T6692] create_new_namespaces+0x3ea/0xad0 [ 126.412011][ T6692] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 126.412061][ T6692] ksys_unshare+0x45b/0xa40 [ 126.412111][ T6692] ? __pfx_ksys_unshare+0x10/0x10 [ 126.412164][ T6692] ? xfd_validate_state+0x5d/0x180 [ 126.412202][ T6692] ? rcu_is_watching+0x12/0xc0 [ 126.412249][ T6692] __x64_sys_unshare+0x31/0x40 [ 126.412305][ T6692] do_syscall_64+0xcd/0x260 [ 126.412349][ T6692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.412383][ T6692] RIP: 0033:0x7ff3e5b8d169 [ 126.412408][ T6692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.412448][ T6692] RSP: 002b:00007ff3e6a1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 126.412478][ T6692] RAX: ffffffffffffffda RBX: 00007ff3e5da5fa0 RCX: 00007ff3e5b8d169 [ 126.412499][ T6692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 126.412518][ T6692] RBP: 00007ff3e5c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 126.412536][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.412554][ T6692] R13: 0000000000000000 R14: 00007ff3e5da5fa0 R15: 00007fff84ed0718 [ 126.412588][ T6692] [ 126.704038][ T6653] vivid-003: ================= START STATUS ================= [ 126.920319][ T6653] vivid-003: Radio HW Seek Mode: Bounded [ 126.927642][ T6653] vivid-003: Radio Programmable HW Seek: false [ 126.933897][ T6653] vivid-003: RDS Rx I/O Mode: Block I/O [ 126.939682][ T6653] vivid-003: Generate RBDS Instead of RDS: false [ 126.946167][ T6653] vivid-003: RDS Reception: true [ 126.951192][ T6653] vivid-003: RDS Program Type: 0 inactive [ 126.958561][ T6653] vivid-003: RDS PS Name: inactive [ 126.963856][ T6653] vivid-003: RDS Radio Text: inactive [ 126.969585][ T6653] vivid-003: RDS Traffic Announcement: false inactive [ 126.976506][ T6653] vivid-003: RDS Traffic Program: false inactive [ 126.982928][ T6653] vivid-003: RDS Music: false inactive [ 126.995361][ T6653] vivid-003: ================== END STATUS ================== [ 127.026454][ T6691] rtc_cmos 00:00: Alarms can be up to one day in the future [ 127.407739][ T5884] rtc_cmos 00:00: Alarms can be up to one day in the future [ 127.451416][ T5884] rtc_cmos 00:00: Alarms can be up to one day in the future [ 127.469294][ T5884] rtc_cmos 00:00: Alarms can be up to one day in the future [ 127.496146][ T5884] rtc_cmos 00:00: Alarms can be up to one day in the future [ 127.512673][ T5884] rtc rtc0: __rtc_set_alarm: err=-22 [ 129.094055][ T5846] Bluetooth: hci2: Malformed Event: 0x02 [ 130.446573][ T6777] capability: warning: `syz.0.172' uses 32-bit capabilities (legacy support in use) [ 130.509889][ T5846] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 130.509958][ T5846] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 130.525980][ T5846] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 130.526051][ T5846] Bluetooth: hci0: Unknown advertising packet type: 0x3c [ 130.533563][ T5846] Bluetooth: hci0: adv larger than maximum supported [ 130.543587][ T5846] Bluetooth: hci0: Malformed LE Event: 0x0d [ 132.772398][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 132.805866][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 133.944697][ T6796] bond0: no command found in slaves file - use +ifname or -ifname [ 134.434792][ T6791] Invalid ELF header magic: != ELF [ 135.248471][ T6800] netlink: 334 bytes leftover after parsing attributes in process `syz.3.180'. [ 135.585815][ T6804] netlink: 346 bytes leftover after parsing attributes in process `syz.2.182'. [ 136.648605][ T6815] FAULT_INJECTION: forcing a failure. [ 136.648605][ T6815] name failslab, interval 1, probability 0, space 0, times 0 [ 136.669718][ T6815] CPU: 0 UID: 0 PID: 6815 Comm: syz.2.183 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 136.669760][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.669779][ T6815] Call Trace: [ 136.669789][ T6815] [ 136.669800][ T6815] dump_stack_lvl+0x16c/0x1f0 [ 136.669845][ T6815] should_fail_ex+0x512/0x640 [ 136.669877][ T6815] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 136.669912][ T6815] should_failslab+0xc2/0x120 [ 136.669949][ T6815] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 136.669980][ T6815] ? vma_merge_new_range+0x40a/0xbb0 [ 136.670011][ T6815] ? vm_area_alloc+0x134/0x230 [ 136.670058][ T6815] vm_area_alloc+0x134/0x230 [ 136.670099][ T6815] __mmap_region+0x10e3/0x27c0 [ 136.670136][ T6815] ? __pfx___mmap_region+0x10/0x10 [ 136.670169][ T6815] ? trace_sched_exit_tp+0xde/0x130 [ 136.670237][ T6815] ? __pfx___schedule+0x10/0x10 [ 136.670302][ T6815] ? trace_cap_capable+0x18d/0x200 [ 136.670383][ T6815] ? cap_capable+0xb3/0x250 [ 136.670435][ T6815] mmap_region+0x1ab/0x3f0 [ 136.670475][ T6815] do_mmap+0xd8e/0x11b0 [ 136.670527][ T6815] ? __pfx_do_mmap+0x10/0x10 [ 136.670574][ T6815] ? __pfx_down_write_killable+0x10/0x10 [ 136.670625][ T6815] vm_mmap_pgoff+0x281/0x450 [ 136.670681][ T6815] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 136.670739][ T6815] ? __x64_sys_futex+0x1e0/0x4c0 [ 136.670782][ T6815] ? __x64_sys_futex+0x1e9/0x4c0 [ 136.670833][ T6815] ksys_mmap_pgoff+0x7d/0x5c0 [ 136.670878][ T6815] ? rcu_is_watching+0x12/0xc0 [ 136.670920][ T6815] __x64_sys_mmap+0x125/0x190 [ 136.670960][ T6815] do_syscall_64+0xcd/0x260 [ 136.671003][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.671034][ T6815] RIP: 0033:0x7f7f7a18d169 [ 136.671059][ T6815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.671089][ T6815] RSP: 002b:00007f7f7b067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 136.671116][ T6815] RAX: ffffffffffffffda RBX: 00007f7f7a3a5fa0 RCX: 00007f7f7a18d169 [ 136.671137][ T6815] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 136.671154][ T6815] RBP: 00007f7f7a20e2a0 R08: 0000000000000007 R09: 0000000000028000 [ 136.671173][ T6815] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 136.671191][ T6815] R13: 0000000000000000 R14: 00007f7f7a3a5fa0 R15: 00007fff81a54478 [ 136.671225][ T6815] [ 137.573761][ T6830] netlink: 544 bytes leftover after parsing attributes in process `syz.2.188'. [ 138.099148][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.108716][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.517430][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 138.624417][ T6842] MTRR 1 not used [ 138.628686][ T6841] MTRR 1 not used [ 139.265907][ T6864] netlink: 342 bytes leftover after parsing attributes in process `syz.3.195'. [ 140.473738][ T6900] random: crng reseeded on system resumption [ 141.900681][ T5846] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 143.863335][ T30] audit: type=1800 audit(4294967301.200:2): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.209" name="version" dev="configfs" ino=12898 res=0 errno=0 [ 144.185251][ T6965] netlink: 'syz.3.212': attribute type 11 has an invalid length. [ 144.259927][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.212'. [ 144.376951][ T6969] netlink: 'syz.3.212': attribute type 11 has an invalid length. [ 144.400940][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.212'. [ 144.469576][ T6964] ima: policy update failed [ 144.509117][ T30] audit: type=1802 audit(4294967301.810:3): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.212" res=0 errno=0 [ 145.107355][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.117085][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.127155][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.135214][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.142888][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.263703][ T6978] FAULT_INJECTION: forcing a failure. [ 145.263703][ T6978] name failslab, interval 1, probability 0, space 0, times 0 [ 145.428987][ T6978] CPU: 1 UID: 0 PID: 6978 Comm: syz.3.214 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 145.429034][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.429053][ T6978] Call Trace: [ 145.429062][ T6978] [ 145.429073][ T6978] dump_stack_lvl+0x16c/0x1f0 [ 145.429121][ T6978] should_fail_ex+0x512/0x640 [ 145.429155][ T6978] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 145.429193][ T6978] should_failslab+0xc2/0x120 [ 145.429230][ T6978] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 145.429265][ T6978] ? __kernfs_new_node+0xd2/0x8a0 [ 145.429301][ T6978] __kernfs_new_node+0xd2/0x8a0 [ 145.429333][ T6978] ? kernfs_add_one+0x182/0x530 [ 145.429370][ T6978] ? __pfx___kernfs_new_node+0x10/0x10 [ 145.429407][ T6978] ? __lock_acquire+0xaa4/0x1ba0 [ 145.429463][ T6978] ? __pfx_vsnprintf+0x10/0x10 [ 145.429500][ T6978] ? sysfs_add_file_mode_ns+0x22f/0x3c0 [ 145.429583][ T6978] kernfs_new_node+0x186/0x240 [ 145.429625][ T6978] kernfs_create_link+0xcc/0x240 [ 145.429672][ T6978] sysfs_do_create_link_sd+0x90/0x140 [ 145.429725][ T6978] sysfs_create_link+0x61/0xc0 [ 145.429776][ T6978] device_add+0xb14/0x1a70 [ 145.429831][ T6978] ? __pfx_device_add+0x10/0x10 [ 145.429886][ T6978] ? do_raw_spin_lock+0x12c/0x2b0 [ 145.429928][ T6978] add_disk_fwnode+0x468/0x13a0 [ 145.429967][ T6978] zram_add+0x494/0x6c0 [ 145.429996][ T6978] ? __pfx_zram_add+0x10/0x10 [ 145.430024][ T6978] ? __pfx___might_resched+0x10/0x10 [ 145.430096][ T6978] ? __pfx_hot_add_show+0x10/0x10 [ 145.430132][ T6978] hot_add_show+0x21/0x80 [ 145.430161][ T6978] class_attr_show+0x6f/0xa0 [ 145.430210][ T6978] ? __pfx_class_attr_show+0x10/0x10 [ 145.430257][ T6978] sysfs_kf_seq_show+0x23e/0x410 [ 145.430311][ T6978] seq_read_iter+0x506/0x12c0 [ 145.430371][ T6978] kernfs_fop_read_iter+0x40f/0x5a0 [ 145.430412][ T6978] ? rw_verify_area+0xcf/0x680 [ 145.430458][ T6978] vfs_read+0x8c8/0xc70 [ 145.430510][ T6978] ? __pfx___mutex_lock+0x10/0x10 [ 145.430558][ T6978] ? __pfx_vfs_read+0x10/0x10 [ 145.430627][ T6978] ksys_read+0x12a/0x240 [ 145.430676][ T6978] ? __pfx_ksys_read+0x10/0x10 [ 145.430722][ T6978] ? rcu_is_watching+0x12/0xc0 [ 145.430772][ T6978] do_syscall_64+0xcd/0x260 [ 145.430816][ T6978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.430848][ T6978] RIP: 0033:0x7ff3e5b8d169 [ 145.430873][ T6978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.430904][ T6978] RSP: 002b:00007ff3e69fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.430934][ T6978] RAX: ffffffffffffffda RBX: 00007ff3e5da6080 RCX: 00007ff3e5b8d169 [ 145.430955][ T6978] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 145.430974][ T6978] RBP: 00007ff3e5c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 145.430992][ T6978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.431010][ T6978] R13: 0000000000000000 R14: 00007ff3e5da6080 R15: 00007fff84ed0718 [ 145.431046][ T6978] [ 146.113001][ T6980] chnl_net:caif_netlink_parms(): no params data found [ 146.508148][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.535419][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.542681][ T6980] bridge_slave_0: entered allmulticast mode [ 146.586590][ T6980] bridge_slave_0: entered promiscuous mode [ 146.606553][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.613691][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.645569][ T6980] bridge_slave_1: entered allmulticast mode [ 146.652699][ T6980] bridge_slave_1: entered promiscuous mode [ 146.774908][ T6980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.826520][ T6980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.016247][ T6980] team0: Port device team_slave_0 added [ 147.037394][ T6980] team0: Port device team_slave_1 added [ 147.141169][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.160618][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.205725][ T5846] Bluetooth: hci4: command tx timeout [ 147.231568][ T6980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.259677][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.279552][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.325367][ T6980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.411824][ T6980] hsr_slave_0: entered promiscuous mode [ 147.426277][ T6980] hsr_slave_1: entered promiscuous mode [ 147.432532][ T6980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.485473][ T6980] Cannot create hsr debugfs directory [ 148.016628][ T6980] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 148.055675][ T6980] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.185523][ T6980] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.265421][ T6980] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.605130][ T30] audit: type=1804 audit(4294967305.940:4): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.223" name="/newroot/sys/kernel/debug/tracing/options/blk_classic" dev="tracefs" ino=242 res=1 errno=0 [ 148.682043][ T6980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.739163][ T6980] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.761306][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.769348][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.804141][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.811371][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.841392][ T6980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.853139][ T6980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.222483][ T7033] netlink: 'syz.1.224': attribute type 13 has an invalid length. [ 149.286087][ T5846] Bluetooth: hci4: command tx timeout [ 149.659273][ T6980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.688130][ T6980] veth0_vlan: entered promiscuous mode [ 150.732147][ T6980] veth1_vlan: entered promiscuous mode [ 150.871248][ T6980] veth0_macvtap: entered promiscuous mode [ 151.000803][ T6980] veth1_macvtap: entered promiscuous mode [ 151.039731][ T7070] snd_aloop snd_aloop.0: Parsing timer source 'ecryptfs' failed with -22 [ 151.047480][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.096648][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.115459][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.156185][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.190240][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.230440][ T7067] FAULT_INJECTION: forcing a failure. [ 151.230440][ T7067] name failslab, interval 1, probability 0, space 0, times 0 [ 151.245151][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.245457][ T7067] CPU: 0 UID: 0 PID: 7067 Comm: syz.2.231 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 151.245504][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.245525][ T7067] Call Trace: [ 151.245540][ T7067] [ 151.245551][ T7067] dump_stack_lvl+0x16c/0x1f0 [ 151.245601][ T7067] should_fail_ex+0x512/0x640 [ 151.245635][ T7067] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 151.245674][ T7067] should_failslab+0xc2/0x120 [ 151.245712][ T7067] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 151.245744][ T7067] ? __proc_create+0xc3/0x8c0 [ 151.245786][ T7067] ? __proc_create+0x2ce/0x8c0 [ 151.245828][ T7067] __proc_create+0x2ce/0x8c0 [ 151.245870][ T7067] ? __pfx___proc_create+0x10/0x10 [ 151.245915][ T7067] ? _raw_write_unlock+0x28/0x50 [ 151.245952][ T7067] ? proc_register+0x314/0x5f0 [ 151.245995][ T7067] proc_create_reg+0x7d/0x180 [ 151.246040][ T7067] proc_create_net_data+0x8e/0x1b0 [ 151.246092][ T7067] ? __pfx_proc_create_net_data+0x10/0x10 [ 151.246136][ T7067] ? __pfx_ndisc_net_init+0x10/0x10 [ 151.246186][ T7067] ? __pfx_udplite6_proc_init_net+0x10/0x10 [ 151.246224][ T7067] udplite6_proc_init_net+0x57/0x80 [ 151.246260][ T7067] ops_init+0x1df/0x5f0 [ 151.246304][ T7067] setup_net+0x21e/0x850 [ 151.246349][ T7067] ? __pfx_setup_net+0x10/0x10 [ 151.246389][ T7067] ? lockdep_init_map_type+0x5c/0x280 [ 151.246422][ T7067] ? __pfx_down_read_killable+0x10/0x10 [ 151.246473][ T7067] ? debug_mutex_init+0x37/0x70 [ 151.246518][ T7067] copy_net_ns+0x2a6/0x5f0 [ 151.246568][ T7067] create_new_namespaces+0x3ea/0xad0 [ 151.246622][ T7067] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 151.246686][ T7067] ksys_unshare+0x45b/0xa40 [ 151.246743][ T7067] ? __pfx_ksys_unshare+0x10/0x10 [ 151.246794][ T7067] ? xfd_validate_state+0x5d/0x180 [ 151.246833][ T7067] ? rcu_is_watching+0x12/0xc0 [ 151.246881][ T7067] __x64_sys_unshare+0x31/0x40 [ 151.246932][ T7067] do_syscall_64+0xcd/0x260 [ 151.246977][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.247012][ T7067] RIP: 0033:0x7f7f7a18d169 [ 151.247037][ T7067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.247078][ T7067] RSP: 002b:00007f7f7b067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 151.247110][ T7067] RAX: ffffffffffffffda RBX: 00007f7f7a3a5fa0 RCX: 00007f7f7a18d169 [ 151.247132][ T7067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 151.247153][ T7067] RBP: 00007f7f7a20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 151.247172][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.247192][ T7067] R13: 0000000000000000 R14: 00007f7f7a3a5fa0 R15: 00007fff81a54478 [ 151.247229][ T7067] [ 151.375472][ T5846] Bluetooth: hci4: command tx timeout [ 151.388629][ T30] audit: type=1800 audit(4294967308.719:5): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.231" name="members" dev="configfs" ino=13634 res=0 errno=0 [ 151.445095][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.634534][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.657134][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.667884][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.682358][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.694429][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.705855][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.715807][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.739251][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.750218][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.776178][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.806539][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.916084][ T6980] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.924873][ T6980] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.948109][ T6980] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.958543][ T6980] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.115860][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 152.485716][ T7086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'. [ 152.700658][ T6751] ------------[ cut here ]------------ [ 152.706427][ T6751] ODEBUG: free active (active state 0) object: ffff888066fb9248 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 152.782972][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.796072][ T6751] WARNING: CPU: 0 PID: 6751 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 152.804266][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.807479][ T6751] Modules linked in: [ 152.818218][ T6751] CPU: 0 UID: 0 PID: 6751 Comm: syz.0.172 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 152.830003][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.840551][ T6751] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 152.847850][ T6751] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 40 f0 f3 8b 4c 89 e6 48 c7 c7 c0 e4 f3 8b e8 ef 6a ab fc 90 <0f> 0b 90 90 58 83 05 b6 6f b6 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 152.867815][ T6751] RSP: 0018:ffffc9000feb7768 EFLAGS: 00010286 [ 152.873951][ T6751] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817aabe8 [ 152.882922][ T6751] RDX: ffff888028203c00 RSI: ffffffff817aabf5 RDI: 0000000000000001 [ 152.892061][ T6751] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 152.900663][ T6751] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bf3eb60 [ 152.909144][ T6751] R13: ffffffff8b8fbfe0 R14: ffffffff8a737f90 R15: ffffc9000feb7868 [ 152.917487][ T6751] FS: 0000000000000000(0000) GS:ffff8881249e2000(0000) knlGS:0000000000000000 [ 152.926811][ T6751] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.933456][ T6751] CR2: 0000001b3139dff8 CR3: 000000006a54a000 CR4: 00000000003526f0 [ 152.941855][ T6751] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.950185][ T6751] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.958497][ T6751] Call Trace: [ 152.961834][ T6751] [ 152.965512][ T6751] ? __warn+0xea/0x3c0 [ 152.970432][ T6751] ? debug_print_object+0x1a2/0x2b0 [ 152.975879][ T6751] ? report_bug+0x3c3/0x580 [ 152.980457][ T6751] ? debug_print_object+0x1a2/0x2b0 [ 152.985807][ T6751] ? handle_bug+0x184/0x210 [ 152.990391][ T6751] ? exc_invalid_op+0x17/0x50 [ 152.995150][ T6751] ? asm_exc_invalid_op+0x1a/0x20 [ 153.000330][ T6751] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 153.005934][ T6751] ? __warn_printk+0x198/0x350 [ 153.010839][ T6751] ? __warn_printk+0x1a5/0x350 [ 153.015850][ T6751] ? debug_print_object+0x1a2/0x2b0 [ 153.021133][ T6751] ? debug_print_object+0x1a1/0x2b0 [ 153.026463][ T6751] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 153.031994][ T6751] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 153.038006][ T6751] debug_check_no_obj_freed+0x4b7/0x600 [ 153.043655][ T6751] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 153.050070][ T6751] ? rcu_is_watching+0x12/0xc0 [ 153.054927][ T6751] ? kmem_cache_free+0x2d4/0x4d0 [ 153.060027][ T6751] kfree+0x291/0x4d0 [ 153.064011][ T6751] ? hci_release_dev+0x4d8/0x600 [ 153.069532][ T6751] hci_release_dev+0x4d8/0x600 [ 153.074423][ T6751] ? __pfx_hci_release_dev+0x10/0x10 [ 153.080347][ T6751] ? rcu_is_watching+0x12/0xc0 [ 153.085196][ T6751] ? kfree+0x252/0x4d0 [ 153.089419][ T6751] bt_host_release+0x6a/0xb0 [ 153.094087][ T6751] ? __pfx_bt_host_release+0x10/0x10 [ 153.099557][ T6751] device_release+0xa1/0x240 [ 153.104230][ T6751] kobject_put+0x1e4/0x5a0 [ 153.108832][ T6751] ? __pfx_vhci_release+0x10/0x10 [ 153.113946][ T6751] put_device+0x1f/0x30 [ 153.118272][ T6751] vhci_release+0x81/0xf0 [ 153.122684][ T6751] __fput+0x3ff/0xb70 [ 153.126829][ T6751] task_work_run+0x14d/0x240 [ 153.131500][ T6751] ? __pfx_task_work_run+0x10/0x10 [ 153.136852][ T6751] do_exit+0xafe/0x2d90 [ 153.141088][ T6751] ? __pfx___might_resched+0x10/0x10 [ 153.146564][ T6751] ? __pfx_do_exit+0x10/0x10 [ 153.151226][ T6751] ? do_raw_spin_lock+0x12c/0x2b0 [ 153.156425][ T6751] ? find_held_lock+0x2b/0x80 [ 153.161209][ T6751] do_group_exit+0xd3/0x2a0 [ 153.165870][ T6751] get_signal+0x2673/0x26d0 [ 153.170897][ T6751] ? __mmput+0x36c/0x410 [ 153.175227][ T6751] ? mmput+0x62/0x70 [ 153.179712][ T6751] ? __pfx_get_signal+0x10/0x10 [ 153.184613][ T6751] arch_do_signal_or_restart+0x8f/0x7d0 [ 153.190390][ T6751] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 153.196713][ T6751] ? rcu_is_watching+0x12/0xc0 [ 153.201552][ T6751] syscall_exit_to_user_mode+0x150/0x2a0 [ 153.207607][ T6751] do_syscall_64+0xda/0x260 [ 153.212189][ T6751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.218243][ T6751] RIP: 0033:0x7f74b698d169 [ 153.222722][ T6751] Code: Unable to access opcode bytes at 0x7f74b698d13f. [ 153.229894][ T6751] RSP: 002b:00007f74b7784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 153.238475][ T6751] RAX: fffffffffffffff2 RBX: 00007f74b6ba5fa0 RCX: 00007f74b698d169 [ 153.246673][ T6751] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 153.250952][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.254669][ T6751] RBP: 00007f74b6a0e2a0 R08: 0000000000000000 R09: 8000400000000000 [ 153.254694][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.279287][ T6751] R13: 0000000000000000 R14: 00007f74b6ba5fa0 R15: 00007ffe2dc40c38 [ 153.280994][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.287757][ T6751] [ 153.298211][ T6751] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.305536][ T6751] CPU: 0 UID: 0 PID: 6751 Comm: syz.0.172 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 153.317116][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.327193][ T6751] Call Trace: [ 153.330487][ T6751] [ 153.333437][ T6751] dump_stack_lvl+0x3d/0x1f0 [ 153.338061][ T6751] panic+0x71c/0x800 [ 153.341987][ T6751] ? __pfx_panic+0x10/0x10 [ 153.346422][ T6751] ? show_trace_log_lvl+0x29c/0x3c0 [ 153.351656][ T6751] ? check_panic_on_warn+0x1f/0xb0 [ 153.356797][ T6751] ? debug_print_object+0x1a2/0x2b0 [ 153.362032][ T6751] check_panic_on_warn+0xab/0xb0 [ 153.367001][ T6751] __warn+0xf6/0x3c0 [ 153.370922][ T6751] ? debug_print_object+0x1a2/0x2b0 [ 153.376159][ T6751] report_bug+0x3c3/0x580 [ 153.380518][ T6751] ? debug_print_object+0x1a2/0x2b0 [ 153.385745][ T6751] handle_bug+0x184/0x210 [ 153.390112][ T6751] exc_invalid_op+0x17/0x50 [ 153.394654][ T6751] asm_exc_invalid_op+0x1a/0x20 [ 153.399528][ T6751] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 153.405369][ T6751] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 40 f0 f3 8b 4c 89 e6 48 c7 c7 c0 e4 f3 8b e8 ef 6a ab fc 90 <0f> 0b 90 90 58 83 05 b6 6f b6 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 153.425002][ T6751] RSP: 0018:ffffc9000feb7768 EFLAGS: 00010286 [ 153.431102][ T6751] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817aabe8 [ 153.439099][ T6751] RDX: ffff888028203c00 RSI: ffffffff817aabf5 RDI: 0000000000000001 [ 153.447095][ T6751] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 153.455092][ T6751] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bf3eb60 [ 153.463098][ T6751] R13: ffffffff8b8fbfe0 R14: ffffffff8a737f90 R15: ffffc9000feb7868 [ 153.471106][ T6751] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 153.476609][ T6751] ? __warn_printk+0x198/0x350 [ 153.481395][ T6751] ? __warn_printk+0x1a5/0x350 [ 153.486184][ T6751] ? debug_print_object+0x1a1/0x2b0 [ 153.491414][ T6751] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 153.496909][ T6751] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 153.502750][ T6751] debug_check_no_obj_freed+0x4b7/0x600 [ 153.508346][ T6751] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 153.514448][ T6751] ? rcu_is_watching+0x12/0xc0 [ 153.519250][ T6751] ? kmem_cache_free+0x2d4/0x4d0 [ 153.524223][ T6751] kfree+0x291/0x4d0 [ 153.528158][ T6751] ? hci_release_dev+0x4d8/0x600 [ 153.533132][ T6751] hci_release_dev+0x4d8/0x600 [ 153.537935][ T6751] ? __pfx_hci_release_dev+0x10/0x10 [ 153.543256][ T6751] ? rcu_is_watching+0x12/0xc0 [ 153.548097][ T6751] ? kfree+0x252/0x4d0 [ 153.552205][ T6751] bt_host_release+0x6a/0xb0 [ 153.556823][ T6751] ? __pfx_bt_host_release+0x10/0x10 [ 153.562133][ T6751] device_release+0xa1/0x240 [ 153.566795][ T6751] kobject_put+0x1e4/0x5a0 [ 153.571336][ T6751] ? __pfx_vhci_release+0x10/0x10 [ 153.576486][ T6751] put_device+0x1f/0x30 [ 153.580667][ T6751] vhci_release+0x81/0xf0 [ 153.585037][ T6751] __fput+0x3ff/0xb70 [ 153.589148][ T6751] task_work_run+0x14d/0x240 [ 153.593769][ T6751] ? __pfx_task_work_run+0x10/0x10 [ 153.598925][ T6751] do_exit+0xafe/0x2d90 [ 153.603107][ T6751] ? __pfx___might_resched+0x10/0x10 [ 153.608447][ T6751] ? __pfx_do_exit+0x10/0x10 [ 153.613151][ T6751] ? do_raw_spin_lock+0x12c/0x2b0 [ 153.618218][ T6751] ? find_held_lock+0x2b/0x80 [ 153.622931][ T6751] do_group_exit+0xd3/0x2a0 [ 153.627502][ T6751] get_signal+0x2673/0x26d0 [ 153.632042][ T6751] ? __mmput+0x36c/0x410 [ 153.636333][ T6751] ? mmput+0x62/0x70 [ 153.640259][ T6751] ? __pfx_get_signal+0x10/0x10 [ 153.645150][ T6751] arch_do_signal_or_restart+0x8f/0x7d0 [ 153.650739][ T6751] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 153.656939][ T6751] ? rcu_is_watching+0x12/0xc0 [ 153.661850][ T6751] syscall_exit_to_user_mode+0x150/0x2a0 [ 153.667519][ T6751] do_syscall_64+0xda/0x260 [ 153.672057][ T6751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.677983][ T6751] RIP: 0033:0x7f74b698d169 [ 153.682416][ T6751] Code: Unable to access opcode bytes at 0x7f74b698d13f. [ 153.689450][ T6751] RSP: 002b:00007f74b7784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 153.697890][ T6751] RAX: fffffffffffffff2 RBX: 00007f74b6ba5fa0 RCX: 00007f74b698d169 [ 153.705888][ T6751] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 153.713881][ T6751] RBP: 00007f74b6a0e2a0 R08: 0000000000000000 R09: 8000400000000000 [ 153.721877][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.729870][ T6751] R13: 0000000000000000 R14: 00007f74b6ba5fa0 R15: 00007ffe2dc40c38 [ 153.737873][ T6751] [ 153.741059][ T6751] Kernel Offset: disabled [ 153.745447][ T6751] Rebooting in 86400 seconds..