last executing test programs: 8.129858723s ago: executing program 1 (id=43): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) socket(0x2, 0x1, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x80000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/19, 0x13) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x2000000000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) sched_get_priority_min$auto(0x40) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory0/state\x00', 0x1e1842, 0x0) sendfile$auto(r1, r1, 0x0, 0xe00000000) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x101002, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) 7.011556212s ago: executing program 3 (id=47): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/gro_flush_timeout\x00', 0x88282, 0x0) write$auto(r0, &(0x7f0000000000)='\x00', 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000000c0), 0x389803, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(r2, 0x550c, 0x5f) rt_sigaction$auto(0x7, 0x0, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) ioperm$auto(0x4000000000080, 0xfffffffffffffffb, 0x5) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x90) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xa00c0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) eventfd$auto(0x5d5d) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) mq_getsetattr$auto(r4, 0x0, 0x0) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) 6.960977796s ago: executing program 1 (id=48): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@sco, 0x8) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, 0x0, 0x841, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) socket(0x2, 0x2, 0x88) madvise$auto(0x8, 0xb, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) syslog$auto(0x3, 0x0, 0x5) r1 = mq_open$auto(0x0, 0x7e, 0x9, 0x0) read$auto_fake_panic_fops_(r1, 0x0, 0x0) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x1580, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/194, 0x70800) execve$auto(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000380)=&(0x7f00000002c0)='team_slave_1\x00k\xf5>\xe6c\xfa\xa8\xc4\xbf\x1b|\xed\xc8\xc1\xffI\xfd\xa2\xc6\xa4rb\x1fh\xd7\x9a\x8d\xba.W\x94\xcb\x15T\xe4\x87\xfbsDd`\x8c,\x01\xdc\xa5\xf6\xf8?~^VC\x03\x92\xe9>\x91\xdf\x81\xc5\xb5\xee\xd1\x06Oa\x95\xdc\x12Q\xa08\x85\x9e[k\xa8\xa5\f\xfcBD\xb0\xc1\x02\x1b\x17\xec86\x19\\\xf9\xbc\xb9\a\xf3\xe0\xbc\xffY\nV\xf8k,\xfd\xa2\xd8\xc7r\x90\xebdw\xe0\xae\bt\xf8gB\xe1\x89fuQ+{\x94\x05@]T2\x927?\rf\xfe\x9d\xa1\xb3|\x81\xcd\x12&\xed\xef-\x90\xebpz\x0f\xc8\xb4\x03\xa5$^G', 0x0) 5.94216634s ago: executing program 1 (id=50): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ioperm$auto(0x800, 0x5, 0xd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010) writev$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1}, 0x8) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) rt_sigqueueinfo$auto(r1, 0x355c75e2, &(0x7f0000000080)={@_si_pad}) prctl$auto(0x38, 0x5, 0xffffffffffffffff, 0x7, 0x10000000000d) iopl$auto(0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x2b2, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) iopl$auto(0x7) umask$auto(0x7) ioctl$auto(0x3, 0xc018aa3f, 0xc) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) 5.518490362s ago: executing program 3 (id=51): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x2000021, 0x5, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_overcommit_hugepages\x00', 0x1c9282, 0x0) write$auto_tracing_iter_fops_trace(r1, &(0x7f0000000240)="0e45f988c97b", 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r5 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r5, 0x0, 0xe) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xfffffffffffffe7e, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x200}]}, 0x28}, 0x1, 0x0, 0x0, 0x4089c}, 0x4004010) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) socket(0x1e, 0x1, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x58a, &(0x7f0000000100)={0x0, 0x2}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x100000001, 0x63, 0x0, 0x0, 0x0, 0x8c0f, 0x6, 0x7, 0x400, 0x7ffffff9, 0x5, 0xffffffff80000000, 0x9, 0x61, 0x105}) fadvise64$auto(0x0, 0x9, 0x9, 0xb28) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYBLOB="2f91ce18dd6a8549fa1b69be58434542c7ed15f668524161ee789c4690a3f41d56ffbe35bb1dba943f0e2785547e2de9de05000000fbf7f1d3255a6d9a23affa56"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0xe, 0x4008) 4.469382874s ago: executing program 2 (id=54): mmap$auto(0x0, 0x400008, 0x6fffc9b3, 0x9b72, 0xffffffffffffffff, 0x8) r0 = socket(0x2, 0x2, 0x88) sysfs$auto(0xffff, 0x6, 0x1f0000000000000) setsockopt$auto(r0, 0x88, 0xa, &(0x7f0000000000)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', 0x80000e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00'}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r3, 0x4008af00, 0x0) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), r2) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000f7dbdf250100003f060002000100000005d707726ab929ef67b230845e0007005800000008000900080000000800e2c4298c10a8fa2a1f0000000000000000000000000000000001140020000cddd63482bec65b0000ffffffffffffc3192c7c1e3f743ff48b0ad3273cd1494fb951fdd282c1f2dc1b98"], 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x26, 0x800, 0x52bd) socket(0x2, 0x1, 0x84) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x11, 0x80003, 0x307) write$auto_console_fops_tty_io(r5, &(0x7f0000000080)="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", 0xb4b) ioctl$auto_TIOCSSERIAL(r5, 0x541e, &(0x7f0000000040)="a668d1ef3670532498292bc2ad9f5241aa3dae6fe6431c4a2134") openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/quirks\x00', 0x80000, 0x0) socket(0x2, 0x3, 0x2) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000000c0)=""/19, 0x13) select$auto(0xe, 0x0, 0x0, &(0x7f0000000e00)={[0x1ff, 0x7, 0xd, 0xfffffffffffffffe, 0x9489, 0x3, 0x6, 0x3, 0x2, 0x62, 0x80000001, 0x8, 0x4, 0xc, 0x2, 0xb31600000000]}, 0x0) r7 = prctl$auto_PR_SET_MM(0x23, 0x3, 0x0, 0x4, 0xdf) getsockopt$auto_SO_PEERCRED(r7, 0xfff, 0x11, &(0x7f0000000c00)='-:{\x95/:\x00', &(0x7f0000000c40)=0xf232) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 4.064260099s ago: executing program 0 (id=56): openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/loginuid\x00', 0x82081, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/trace_printk_dest\x00', 0x121082, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xd570, 0xc24) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto(0x9, 0x8, &(0x7f0000000340)={{0xfffffff9, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x40, 0xb, 0x5}, &(0x7f0000000140)=0x5, &(0x7f0000000300)=0x79, 0x4, 0x2, 0x6, 0xff, 0x4, 0x0, 0x7bab, 0x5, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=r0, @ANYBLOB="010025bd700002dcdf25030000000400080024000180200010801c000f8008002c00", @ANYRES32=r2, @ANYBLOB="1a327b07757bb36f5c3608656cec1929"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c071}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x1) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000080), 0x0) connect$auto(0x3, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x3) write$auto(0x3, 0x0, 0xffd8) r3 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$auto(r3, 0x8004b707, 0x1) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x8101, 0x0, 0xd0, 0x3, 0x6, 0x0, 0x7, 0x3691, 0x0, {0x100000000, 0x10000}, 0x8000000000000001, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x4bbf, 0xffffffffffff628e, 0xa747, 0xdeae, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/hugetlb.1GB.usage_in_bytes\x00', 0x10b142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x806, 0x0) io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) 3.926959431s ago: executing program 3 (id=57): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002580)='/sys/devices/platform/vhci_hcd.3/usb16/power/wakeup_abort_count\x00', 0x20001, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/state\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) preadv2$auto(r0, &(0x7f0000000040)={&(0x7f00000004c0)="ec40fc7e297ce25cbb85755131b07ee94229e50fb76cad7c9b2ef534d469f3d20d1e4fffb7232203423b1ccfeb2cdaa70db84e4ef7b15b5d53c02126866cc35f71e4374ed2e48e24f76f2d1602f20523c53f3ded676b81bdf29ebb2bd768664d3e4370eeca5c1f6f3f9aa4b91b5b3af8ac68506b005e8fd8b29e742641158778ef7cd886b8fa631ef1", 0x6}, 0x10, 0x8000000000000000, 0x7fffffffffffffff, 0x4) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x2a2102, 0x0) r1 = socket(0x28, 0x1, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20940, 0x0) r2 = fanotify_init$auto(0x82, 0x3) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x82001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r4, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000280)=ANY=[@ANYBLOB="2ca4bdadd9", @ANYRES16=r5, @ANYBLOB="79a329bd7000fedbdf2520000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48800) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000eb43edbc64d27f6541048151e04762717f9d", @ANYRESDEC=r3, @ANYBLOB="080026bd7000fcdbdf25020000000400b9800400ff000400430005002001040000000400170004005f0004002101"], 0x34}}, 0x4000840) ioctl$auto_TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000025c0)="6cfb92113b6f309d12a56e74ef3576100fff2e963c06a0b88319b752dff97006c3cf99109570750413318bc29d22665151b4f377439ac7e1adf90a25ed3738552adb895058e1c4f0b9a303b6e57c050ae6231bb3487e5274476cc42efd4e9ea2aaba3decb2158332b4be70bdf23fbbe6c25970679382b551363d3f6ff4bc11ff1356a787ad532d6004240509b5c822b3dc7ebd3fb955acad4cdba2779b4a892957890f389cd4a3f498bc7b89b019144a54") write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r2, 0x4018bc13, &(0x7f00000000c0)={0x3ff, 0x6, 0x1, [0x9]}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x8, 0xfffffffffffffffb, 0x11, 0x42000000001ff, 0x4464, 0x15f4da0a, 0x1, 0x3, 0x300000000800000, 0x80000001, 0xa, 0x0, 0x5, 0x2]}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r6 = memfd_create$auto(0x0, 0x4) r7 = socket(0xa, 0x2, 0x3a) statx$auto(r6, 0x0, 0x1000, 0xbdfc, 0x0) setsockopt$auto(r7, 0x29, 0x14, 0x0, 0x56b) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0) mmap$auto(0x0, 0x810003, 0xffb, 0x8000000008015, 0x3, 0x6) mlockall$auto(0x7) 3.476175161s ago: executing program 0 (id=58): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0xd79, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r3 = socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.type\x00', 0x103042, 0x0) sendfile$auto(r5, r5, 0x0, 0x200) listmount$auto(&(0x7f00000001c0)={0x200, @inferred=r1, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) socket(0x11, 0x3, 0x1803) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) epoll_create$auto(0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) socket(0xa, 0x1, 0x84) socket(0xf, 0x3, 0x2) io_uring_setup$auto(0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/video57\x00', 0x428481, 0x0) ioctl$auto(r7, 0xc038563c, r6) 3.472451911s ago: executing program 2 (id=59): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) stat$auto(0x0, &(0x7f0000000380)={0x7, 0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0xf66, 0xa}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/config.gz\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'pimreg0\x00', 0x0}) bind$auto(r0, &(0x7f0000000300)=@xdp={0x2c, 0xf, r2, 0x38}, 0x3) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r3 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_clock\x00', 0x22500, 0x0) read$auto_trace_clock_fops_trace(r3, &(0x7f00000000c0)=""/226, 0xe2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/split_deferred\x00', 0x80404, 0x0) read$auto(r4, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/descriptors\x00', 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x0) r5 = socket(0x10, 0x80002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r6 = socket(0x15, 0x5, 0x0) bind$auto(r6, &(0x7f0000000040)=@generic={0xa, "986d17a55d9b07bcc94c4e3770c4"}, 0x1b) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x8, 0x800) timerfd_settime$auto(r5, 0x2, 0x0, 0x0) 2.449452159s ago: executing program 2 (id=60): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/ip6gre0/ignore_routes_with_linkdown\x00', 0x202, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="11000000126584", 0x7) socket(0x2, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) futex$auto(0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x28000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x40002]}, 0x0) futex$auto(&(0x7f0000000080)=0x1000003, 0x3, 0x1, 0x0, 0x0, 0xfbfffffa) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/mountinfo\x00', 0x200840, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffffff, &(0x7f0000002c40)=""/4085, 0xff5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebe, 0x401, 0x7ffd) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x40000, 0xffec) read$auto_usbdev_file_operations_usb(r3, 0x0, 0x0) socketpair$auto(0x1, 0xfffffbf7, 0xffffffb, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000ffb, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0xffffffffffffff2a}, 0xb56, 0x3, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000005, 0x81, 0x0, 0xa747, 0xdeb1, 0x806}) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) setsockopt$auto(r1, 0x11, 0x67, 0x0, 0x8) 2.390640623s ago: executing program 0 (id=61): madvise$auto_MADV_NORMAL(0x7ff, 0x7fffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x88) madvise$auto_MADV_NORMAL(0x3, 0x6, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x0, 0x4, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1000005, 0x7) getrusage$auto(0x0, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r0) 2.313647713s ago: executing program 1 (id=62): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socket(0x2, 0x1, 0x0) madvise$auto(0x2000000, 0x2000040080000004, 0xb) bind$auto(0x3, 0x0, 0x6a) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket(0x2, 0x1, 0x106) fcntl$auto(0x3, 0x4, 0xa553) shutdown$auto(0x200000003, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.292900921s ago: executing program 3 (id=63): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0xe0) mmap$auto(0x9, 0x4020009, 0xdf, 0xeb1, r0, 0xb) setns(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b1613007984cb"], 0x14}}, 0x4000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) fadvise64$auto_POSIX_FADV_RANDOM(r1, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x1) ioctl$auto_FIOQSIZE(0xffffffffffffffff, 0x5460, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000140), 0xffffffffffffffff) r4 = semctl$auto_SEM_STAT(0x5, 0x9, 0x12, 0x9) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim1/ports/0/udp_ports_reset\x00', 0x400000, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250300000017020180ac4ef4057fc1e86e4943361180ebd0adca39c0cb729d21e4c8deca6761e4ece02b6666567e48", @ANYBLOB="9efb056c9886", @ANYBLOB, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="08000400ffffffff36638f1dc2853e729acd846ad7c566d297d7e0fa9f9797516ed4d292f8e72f3c006185d94123c0546e14b439b70b3ee6c65824d3aab340ab8a8427c0d1fac6a5599c28f34850d536c0737558d3907ee4ca39c9769ee7c200c6800400438058df4d73a9becd04bf18dd0dfef2cfa4bb3639ef222c8a18b57cfe257e1f9cccee81fbe5f369b583d9c8093b01d56369c60ce24503352d2e4099dc9bdc7d09888f2850e89373afef7d3e43aca0e1d8893c8461e896fb50581c1969f6cc6e93c4c7d9c50f82ca636065db0bde5c6a7508bc1cc3503547b3f0c66888fab40744c8133bacad9155305ec63625a21f53"], 0x238}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000840) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x400000000004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000004) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r2) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000226bd7000fcdbdf250700fcff07000a000004000006001d000100f70006001d0008000000050007000100000008000a0002000000050004000600000005000d0008000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040045}, 0x40004) close_range$auto(0x2, 0x8, 0x0) 2.27649207s ago: executing program 0 (id=64): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) ioctl$auto_FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000000)) prctl$auto_PR_SYS_DISPATCH_OFF(0xff, 0x0, 0x0, 0x3, 0x2) r3 = setfsuid$auto(0xee00) setreuid$auto(r3, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x2d0, r1, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2b5, 0x1, 0x0, 0x1, [@typed={0x8, 0xfd, 0x0, 0x0, @uid=r3}, @nested={0x208, 0xba, 0x0, 0x1, [@generic="b16306654bb6b8d7152cc0621955eb41593b7cbda6e21503220cf42590122f91dd5808c3fabcd65313abb9736f28b8c394786b042abd10b08131056865fd58312761c7829007c6cd4ba1d18404423d18a8ac989d23939ff4d7d86e58", @nested={0x194, 0x13, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @u32=0x3}, @generic="7a3ac76c07f7498140ae40ab93bbc200a2e2d4232b6364ab27cefc680d076a39649b702252eef60a11377528194e0bdcd7de81ffa941b5e53c5f50f28aa0acb3b82a9951e7520599ec416136a35a3a37ec3a8e342d9feda37938509752cdb71014287b057d78d6a28d465745f6fb2de1ffb065ad3482d7966b70384c92f199ced6fc8ca9011b4db01b1e09e82837dd71db97a86e2f9e834baac37de543b3e31e86e11dc9d1b1d82e2284fb71793019b991d1ed12a8d39ed6644d53c8172554b0ddb08345831ea43d88d71ac8859cea726bd6e55514157cb451107318fad74798d881a24911bfd6f6a7321aa1", @typed={0x8, 0x146, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x56}, @typed={0x8e, 0x27, 0x0, 0x0, @binary="1565f9a46eb0540961a029b5cd309507d7f08b676d73aa73723f581e6be808b94daa8c76fb4ea488c23d2abb78c4c747e5bbfc171b12da75e40ac566615c38d6c622ccbd24c47f4a51bfa1b0f5bb8f425c5e5644b15c1533c9d5bbcb4800232bb7477ac278e7e3aded22a7efe3fa0315583fdd01051625a82d7f3454c7ceafde40b0e34d36257333ab06"}]}, @typed={0x14, 0xb5, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @typed={0x8, 0xd2, 0x0, 0x0, @ipv4=@remote}, @generic="f3c1881feb99fe432d5fa89114591690f2efcbe9a7f87a8774637face20e7a821c481a653778aaf92185e8bfb092c2900920cca139540fd90efab653551552721f2b2889999ce801e47cfad8f735f702c852bd40e1ef6f259c36d7d8bc31748c903b1ceadd56ead8730d0e727f333855c6b3b286c779abbfff5f47e390", @typed={0x8, 0x148, 0x0, 0x0, @fd}, @generic="4e91c8088c719ee0a730ab37814773dc0c15132e"]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x40}, 0x4) 1.789904055s ago: executing program 1 (id=65): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000080)="f5c94556d7b994ee4c7d6b000087cfce41d8b86d8574badcc9a0191d856056") mmap$auto(0x0, 0x4020007, 0xdf, 0xeb1, r0, 0x8400) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x8004) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0xa, 0x1) socket(0xa, 0x2, 0x88) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x4, 0x9) mmap$auto(0x8000000, 0x400008, 0x800df, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nbd5\x00', 0x72d42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) getresgid$auto(0x0, &(0x7f0000000a40), 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x40, 0x0) setsockopt$auto(r2, 0x1, 0x10, &(0x7f0000000280)='\x00\x15\x8d\xca`\xbcgY\xd2w\xf6\xaedN\x00\x00\x00\x00\x04\x00\x00\x00*\xaaL\'\xab>q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xc3\xa2\x1a\xf1\xdf\x12\b?Q\xec*\b`\'\xfe\xcb\xe9\xc0\xf4\x119\xf6f\v\xf7\x13\xe6\xd8\xa2\xd3\xfd\xa7', 0xba) mmap$auto(0x0, 0x5, 0x4000000000df, 0x40eb1, 0x401, 0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x200080, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/security/tomoyo/query\x00', 0x40802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r4, 0x0, 0x1, 0x0, 0x1e) read$auto(r3, 0x0, 0xb4d3) 1.773508358s ago: executing program 0 (id=66): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) mremap$auto(0x4000, 0x8, 0x8f, 0xb, 0x2f) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)={0x14, r2, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyv3\x00', 0x200000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, ',)'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto(r4, 0x80045430, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x27, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) unshare$auto(0x40000080) close_range$auto(0x2, r6, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0x2003f0, 0x15) ioctl$auto_TCFLSH2(r4, 0x540b, &(0x7f0000000080)="e67aee8345ea55acb0ef0f5e31ade2990e910c4983821831afe9077681b4ac57f2a6042c9f59b6c68cec64f1314928e7123e82359054ba69") socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) read$auto(r1, &(0x7f0000000000)='*`@\\!#.\\\x00', 0x3) 1.704089791s ago: executing program 3 (id=67): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0)) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) setsockopt$auto_SO_MAX_PACING_RATE(r0, 0x1, 0x2f, 0x0, 0x4) move_pages$auto(0xffffffffffffffff, 0xf54, 0x0, 0x0, 0x0, 0x2) r3 = getpgid(0x0) socket(0x2, 0x1, 0x0) getsockopt$auto(r1, 0x1, 0x102, 0xfffffffffffffffc, 0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r3, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r3, 0x0, 0x401, 0x5, 0x3}}}) open(0x0, 0x2a4c0, 0x40) execve$auto(0x0, &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) ptrace$auto(0x4206, r2, 0x0, 0x5) capget$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) symlink$auto(0x0, 0x0) socket(0x10, 0x2, 0x4000006) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x402, 0x8000) r4 = socket(0xa, 0x3, 0x4) getsockopt$auto(r4, 0xff, 0x7, 0x0, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.682706623s ago: executing program 2 (id=68): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xfffffffd, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = getpgid(0x0) pidfd_open$auto(r0, 0x0) socket(0x28, 0x1, 0x0) setsockopt$auto(0x1, 0x1, 0x12, &(0x7f0000000040)='\x00\x89e\xad\x97\xc5\xe8\x91g\xc1\xceE\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5oB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4\x05>ry\xa1\xf1)#\xc0\x8d(', 0xbb) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setreuid$auto(0x0, 0x5) nanosleep$auto(&(0x7f0000000080)={0xfffffffffffffff7, 0x5ea}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000003b00)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x600, 0x0) 1.503044019s ago: executing program 2 (id=69): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0xcb3f, 0x0, 0x4, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/net/rt_cache\x00', 0x430800, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xc1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r3, 0x0, 0x81) acct$auto(&(0x7f0000000000)='/dev/fb0\x00') recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setgroups$auto(0x9, &(0x7f0000000040)=0x1) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) 721.517281ms ago: executing program 1 (id=70): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x9d, 0x720, [0x0]}) mmap$auto(0x0, 0x4020005, 0xdf, 0x1f, r0, 0x8000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040)="11ce06d2b8", 0x40000100000001}, 0x6, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x89f0, r2) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) madvise$auto(0x7ff, 0xfffffffffffefffd, 0x15) socket(0x15, 0x80000, 0x8) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000680)=""/227, 0xe3) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="00c4ac00", @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf251100fffc180001801400020073797a5f74756e000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20080000) ioctl$auto(0xffffffffffffffff, 0x5608, r5) 607.488662ms ago: executing program 3 (id=71): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) settimeofday$auto(0xfffffffffffffffe, 0x0) r0 = socket(0x10, 0x2, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r1 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto_full_fops_mem(r1, 0x0, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) recvmmsg$auto(r0, 0x0, 0x7, 0x6, 0x0) listen$auto(r0, 0x5) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) mmap$auto(0x2000000000, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) ioperm$auto(0x5f0, 0x80, 0x2) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4611, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) mmap$auto(0xfffffffffffffffc, 0x8, 0xdf, 0x9b72, 0x2, 0x100000000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/platform/i8042/serio0/id/id\x00', 0x101400, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/cpu/vulnerabilities/l1tf\x00', 0x0, 0x0) read$auto(r3, &(0x7f0000000200)='\x00', 0xb) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x60282, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(0x80000000000001, 0x7) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x5607, 0xffffffffffffffff) 575.809373ms ago: executing program 0 (id=72): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/pcm0p/sub1/hw_params\x00', 0x22280, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bdi/7:11/read_ahead_kb\x00', 0x1a1942, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0xa, 0x801, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0x93fe}) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x14, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x6, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x80000c}, 0x5, 0x2000fdff) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd14/queue/atomic_write_unit_max_bytes\x00', 0x103400, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8301, 0x0) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto(0xca, &(0x7f0000000000)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe6q\xf9\xa6u\x8eZ\x00\xf8*C]\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5\xec\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8) \x15\xce\xd8\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xba\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4', 0x9) setsockopt$auto(r0, 0x1, 0x3f, 0x0, 0xb) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) 0s ago: executing program 2 (id=73): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x8080, 0x0) r1 = accept$auto(0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, r3, 0xb01, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x74c, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_LINKS={0x728, 0x138, 0x0, 0x1, [{0x284, 0x0, 0x0, 0x1, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_HE_CAPABILITY={0x3a, 0x10d, "029afe6127f3305c177f94e1dbab44fbe80eb539e7b1fbcc5bac01d1c25dabbed075433fa6a7c3f72a47f903b1f92693b70465664a65"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_MAC_ADDRS={0x214, 0xa6, 0x0, 0x1, [@typed={0x14, 0xe6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x76, 0x0, 0x0, @fd=r0}, @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@loopback}, @typed={0xdc, 0xee, 0x0, 0x0, @binary="7dd8ad5a5193335ebd8aa0f07b62301024df0899fb1ed3f649bd6ed5a2dd803b0590d094b5b808bb6634dc12d0310b151e801acf22597ecf556a3c844a86228b8cc675a8f5c275ce9616e62510cd63e0561ce967b3a452408e1f21a6fd39419174e9ece39b6544b5f62e65b982d751e423168d3eff3d12e06e4883319841152b59abcf3e426e0e97110afa0641e814c17f89a7376bb6bac33faf9a1b2dab37b72e83d201853220047f34a226e05c16d5d58e7b4e0ddafb38bdecf413e7aea51a17f220475b1b50de4481591b0d6aba48c50cec26f7535081"}, @typed={0xc, 0x66, 0x0, 0x0, @u64=0x7}, @nested={0xf5, 0xa9, 0x0, 0x1, [@nested={0x4, 0x78}, @typed={0x55, 0x142, 0x0, 0x0, @binary="95f6ea6e266e1fbd2caf6989cfcfe3e5474bf7c93bbe5e3e36f82ffb18d7c8616d38b92e0801c90cc5d7edfc6845b7343a02343d2fde857a8f9b98cfa292e803d91c600abc1a6da5a27fba4ef76ba100b3"}, @nested={0x4, 0x76}, @nested={0x4, 0xff}, @generic="468cc027a234e662295d20f35699c4b011e9c4e7251b490abaa2821470ceefa2af7a1cc7f86fda67f122931ece89767b93a84c18bd0319af49a4efb7a4cb8b63c61fa111aa2823db56415dcb349086df3057ff015f261bf1c749f61ab10637b1b5338cff9c247051e70e06098a6821536551e21192ad8a0d32fd09", @generic="037d026afafb52aa6b6b3c9e80b45193cb8a"]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0xdd}, @NL80211_ATTR_PMKR0_NAME={0x5, 0x102, "b7"}]}, {0x420, 0x0, 0x0, 0x1, [@NL80211_ATTR_PROBE_RESP={0x41a, 0x91, "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"}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x1b, 0xe8, "331cc491d66d7df138753d1f408a48a54820c613ec4ad1"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "3b89323eb2033e0c5f593a"}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xa}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xf, 0xba, "1e5f2550217c1231caec8d"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xe3f}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x304}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "b7151d2ea9c6fa4524935a"}]}]}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0xf}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}]}, 0x74c}, 0x1, 0x0, 0x0, 0x4041}, 0x1) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x12, 0x3, 0x180000000) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card1\x00', 0x6082, 0x0) r5 = socket(0xa, 0x2, 0x0) r6 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$auto_LOOP_CTL_ADD(r6, 0x4c80, &(0x7f00000001c0)) setsockopt$auto(r5, 0x29, 0xb, 0x0, 0xca6) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r7, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820) readv$auto(0x3, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) close_range$auto(0x2, 0x8, 0x0) r10 = bpf$auto(0x20, &(0x7f0000000140)=@bpf_attr_11={0xffff, 0x6, 0x7, 0x800, 0x4000ffff, 0x3c09, 0xffffffff, 0xffffffffffffffff}, 0x81) madvise$auto(0x0, 0x20000a, 0x4) pread64$auto(r4, 0x0, 0x594c, 0x7) ioctl$auto_FS_IOC_FSSETXATTR(r11, 0x401c5820, r10) unshare$auto(0x40000080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. [ 74.597200][ T5821] cgroup: Unknown subsys name 'net' [ 74.725286][ T5821] cgroup: Unknown subsys name 'cpuset' [ 74.733098][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.260227][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.454290][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.460753][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.104260][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.125568][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.133151][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.141089][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.148432][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.156980][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.164846][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.187430][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.202571][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.202832][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.217806][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.223037][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.225336][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.240712][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.248111][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.255549][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.256167][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.270408][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.279498][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.287655][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.462727][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 78.633544][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.640704][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.649307][ T5830] bridge_slave_0: entered allmulticast mode [ 78.656754][ T5830] bridge_slave_0: entered promiscuous mode [ 78.675781][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 78.686266][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.693903][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.701046][ T5830] bridge_slave_1: entered allmulticast mode [ 78.707877][ T5830] bridge_slave_1: entered promiscuous mode [ 78.752911][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 78.787709][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.806251][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 78.825872][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.902890][ T5830] team0: Port device team_slave_0 added [ 78.912620][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.919784][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.927171][ T5837] bridge_slave_0: entered allmulticast mode [ 78.933901][ T5837] bridge_slave_0: entered promiscuous mode [ 78.941059][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.948560][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.955916][ T5837] bridge_slave_1: entered allmulticast mode [ 78.963210][ T5837] bridge_slave_1: entered promiscuous mode [ 78.977227][ T5830] team0: Port device team_slave_1 added [ 79.005270][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.012591][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.019678][ T5836] bridge_slave_0: entered allmulticast mode [ 79.026889][ T5836] bridge_slave_0: entered promiscuous mode [ 79.041006][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.048239][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.074200][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.098301][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.105702][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.113024][ T5836] bridge_slave_1: entered allmulticast mode [ 79.119598][ T5836] bridge_slave_1: entered promiscuous mode [ 79.126461][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.133821][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.159792][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.181441][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.204309][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.211420][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.218682][ T5831] bridge_slave_0: entered allmulticast mode [ 79.225392][ T5831] bridge_slave_0: entered promiscuous mode [ 79.235051][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.244235][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.251403][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.260913][ T5831] bridge_slave_1: entered allmulticast mode [ 79.267621][ T5831] bridge_slave_1: entered promiscuous mode [ 79.283400][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.316701][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.335771][ T5837] team0: Port device team_slave_0 added [ 79.349291][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.368175][ T5837] team0: Port device team_slave_1 added [ 79.382633][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.422737][ T5830] hsr_slave_0: entered promiscuous mode [ 79.429094][ T5830] hsr_slave_1: entered promiscuous mode [ 79.454803][ T5836] team0: Port device team_slave_0 added [ 79.481446][ T5831] team0: Port device team_slave_0 added [ 79.488620][ T5836] team0: Port device team_slave_1 added [ 79.495576][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.502742][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.528911][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.550008][ T5831] team0: Port device team_slave_1 added [ 79.569517][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.578412][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.604402][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.626814][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.634035][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.660699][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.672931][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.679896][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.705871][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.734480][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.741453][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.767979][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.780231][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.787347][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.813883][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.886737][ T5837] hsr_slave_0: entered promiscuous mode [ 79.893292][ T5837] hsr_slave_1: entered promiscuous mode [ 79.899200][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.907585][ T5837] Cannot create hsr debugfs directory [ 79.931115][ T5831] hsr_slave_0: entered promiscuous mode [ 79.937286][ T5831] hsr_slave_1: entered promiscuous mode [ 79.943507][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.951077][ T5831] Cannot create hsr debugfs directory [ 79.982105][ T5836] hsr_slave_0: entered promiscuous mode [ 79.988189][ T5836] hsr_slave_1: entered promiscuous mode [ 79.995283][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.002980][ T5836] Cannot create hsr debugfs directory [ 80.148848][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.182210][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.202951][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.212201][ T5846] Bluetooth: hci0: command tx timeout [ 80.227019][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.281783][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.291969][ T5846] Bluetooth: hci3: command tx timeout [ 80.314135][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.328596][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.351957][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.371341][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.371914][ T5846] Bluetooth: hci1: command tx timeout [ 80.378415][ T5835] Bluetooth: hci2: command tx timeout [ 80.395474][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.407571][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.417777][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.489162][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.508601][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.519108][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.528811][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.567420][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.619865][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.647949][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.655181][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.683029][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.690123][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.716429][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.731483][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.775992][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.788509][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.805589][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.812715][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.828978][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.848317][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.855448][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.868513][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.889763][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.896881][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.920412][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.943610][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.950732][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.995309][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.002448][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.047804][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.054965][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.146782][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.180523][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.259965][ T5830] veth0_vlan: entered promiscuous mode [ 81.316816][ T5830] veth1_vlan: entered promiscuous mode [ 81.367534][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.406587][ T5830] veth0_macvtap: entered promiscuous mode [ 81.424482][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.437349][ T5830] veth1_macvtap: entered promiscuous mode [ 81.487400][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.507036][ T5837] veth0_vlan: entered promiscuous mode [ 81.530745][ T5836] veth0_vlan: entered promiscuous mode [ 81.541315][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.553878][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.563842][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.573303][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.582332][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.591049][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.605011][ T5836] veth1_vlan: entered promiscuous mode [ 81.614915][ T5837] veth1_vlan: entered promiscuous mode [ 81.700808][ T5837] veth0_macvtap: entered promiscuous mode [ 81.713342][ T5836] veth0_macvtap: entered promiscuous mode [ 81.736344][ T5837] veth1_macvtap: entered promiscuous mode [ 81.745891][ T5836] veth1_macvtap: entered promiscuous mode [ 81.776225][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.783997][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.796130][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.805354][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.808328][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.835136][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.846630][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.857239][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.868055][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.881159][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.889840][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.901163][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.913054][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.931067][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.942333][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.952593][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.963496][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.975865][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.991584][ T5831] veth0_vlan: entered promiscuous mode [ 82.000191][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.009254][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.018229][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.027225][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.044455][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.054114][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.065329][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.074372][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.093173][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.101073][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.117338][ T5831] veth1_vlan: entered promiscuous mode [ 82.217398][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.239110][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.248285][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.255208][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.273717][ T5831] veth0_macvtap: entered promiscuous mode [ 82.281392][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.299049][ T5835] Bluetooth: hci0: command tx timeout [ 82.308409][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.326374][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.335368][ T5831] veth1_macvtap: entered promiscuous mode [ 82.372862][ T5835] Bluetooth: hci3: command tx timeout [ 82.409433][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.419859][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.442320][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.450044][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.460557][ T5835] Bluetooth: hci1: command tx timeout [ 82.466037][ T5846] Bluetooth: hci2: command tx timeout [ 82.473922][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.484575][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.494791][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.506202][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.518066][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.550867][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.563577][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.573645][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.584298][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.597473][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.608150][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.628141][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.664282][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.675427][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.686529][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.702948][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.892327][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.900181][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.037668][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.060555][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.292158][ T5905] Zero length message leads to an empty skb [ 83.398499][ T5916] Invalid ELF header magic: != ELF [ 83.895628][ T5903] zswap: compressor not available [ 84.371935][ T5835] Bluetooth: hci0: command tx timeout [ 84.412288][ T5918] mmap: syz.1.2 (5918) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.451810][ T5835] Bluetooth: hci3: command tx timeout [ 84.532035][ T5835] Bluetooth: hci1: command tx timeout [ 84.537467][ T5846] Bluetooth: hci2: command tx timeout [ 84.830198][ T5933] netlink: 544 bytes leftover after parsing attributes in process `syz.2.7'. [ 85.358689][ T5939] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.630327][ T5944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10'. [ 85.717645][ T5947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11'. [ 85.747929][ T5944] team0: Port device team_slave_0 removed [ 86.181365][ T5960] tipc: Started in network mode [ 86.186593][ T5960] tipc: Node identity ee00, cluster identity 4711 [ 86.196173][ T5960] tipc: Node number set to 60928 [ 86.463305][ T5835] Bluetooth: hci0: command tx timeout [ 86.531787][ T5835] Bluetooth: hci3: command tx timeout [ 86.612573][ T5835] Bluetooth: hci1: command tx timeout [ 86.613121][ T5846] Bluetooth: hci2: command tx timeout [ 87.289507][ T5977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16'. [ 87.633882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.890822][ T5994] FAULT_INJECTION: forcing a failure. [ 87.890822][ T5994] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 88.319439][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.2.17 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) [ 88.319485][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.319508][ T5994] Call Trace: [ 88.319517][ T5994] [ 88.319533][ T5994] dump_stack_lvl+0x16c/0x1f0 [ 88.319592][ T5994] should_fail_ex+0x512/0x640 [ 88.319632][ T5994] should_fail_alloc_page+0xe7/0x130 [ 88.319670][ T5994] prepare_alloc_pages.constprop.0+0x172/0x570 [ 88.319733][ T5994] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 88.319780][ T5994] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 88.319812][ T5994] ? __pfx_stack_trace_save+0x10/0x10 [ 88.319856][ T5994] ? check_path.constprop.0+0x24/0x50 [ 88.319905][ T5994] ? add_lock_to_list+0x9d/0x130 [ 88.319949][ T5994] ? __lock_acquire+0xaa4/0x1ba0 [ 88.319994][ T5994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.320047][ T5994] ? policy_nodemask+0xea/0x4e0 [ 88.320083][ T5994] alloc_pages_mpol+0x1fb/0x540 [ 88.320118][ T5994] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 88.320150][ T5994] ? __page_table_check_ptes_set+0x16a/0x3e0 [ 88.320183][ T5994] ? do_raw_spin_lock+0x12c/0x2b0 [ 88.320215][ T5994] ? find_held_lock+0x2b/0x80 [ 88.320256][ T5994] alloc_pages_noprof+0x131/0x390 [ 88.320290][ T5994] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 88.320339][ T5994] get_free_pages_noprof+0xc/0x40 [ 88.320377][ T5994] kasan_populate_vmalloc_pte+0x2d/0x160 [ 88.320427][ T5994] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 88.320476][ T5994] __apply_to_page_range+0x5f9/0xd30 [ 88.320544][ T5994] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 88.320596][ T5994] ? __pfx___apply_to_page_range+0x10/0x10 [ 88.320641][ T5994] ? alloc_vmap_area+0x872/0x2970 [ 88.320684][ T5994] alloc_vmap_area+0x919/0x2970 [ 88.320739][ T5994] ? __pfx_alloc_vmap_area+0x10/0x10 [ 88.320802][ T5994] __get_vm_area_node+0x1a7/0x300 [ 88.320851][ T5994] vmap+0x159/0x350 [ 88.320893][ T5994] ? relay_open_buf.part.0+0x445/0xb90 [ 88.320941][ T5994] ? __pfx_vmap+0x10/0x10 [ 88.320980][ T5994] ? trace_kmalloc+0x2b/0xd0 [ 88.321016][ T5994] ? relay_open_buf.part.0+0x194/0xb90 [ 88.321067][ T5994] relay_open_buf.part.0+0x445/0xb90 [ 88.321121][ T5994] relay_open+0x653/0xad0 [ 88.321166][ T5994] ? debugfs_create_file_full+0x41/0x60 [ 88.321212][ T5994] do_blk_trace_setup+0x503/0xb50 [ 88.321253][ T5994] blk_trace_setup+0xed/0x1b0 [ 88.321290][ T5994] ? __pfx_blk_trace_setup+0x10/0x10 [ 88.321326][ T5994] ? __pfx_snprintf+0x10/0x10 [ 88.321386][ T5994] blk_trace_ioctl+0x146/0x280 [ 88.321425][ T5994] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 88.321468][ T5994] ? find_held_lock+0x2b/0x80 [ 88.321504][ T5994] ? hook_file_ioctl_common+0x145/0x410 [ 88.321538][ T5994] blkdev_ioctl+0x108/0x6d0 [ 88.321586][ T5994] ? __pfx_blkdev_ioctl+0x10/0x10 [ 88.321641][ T5994] ? __pfx_blkdev_ioctl+0x10/0x10 [ 88.321689][ T5994] __x64_sys_ioctl+0x190/0x200 [ 88.321743][ T5994] do_syscall_64+0xcd/0x260 [ 88.321794][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.321827][ T5994] RIP: 0033:0x7f671758d169 [ 88.321851][ T5994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.321881][ T5994] RSP: 002b:00007f6718379038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.321911][ T5994] RAX: ffffffffffffffda RBX: 00007f67177a6160 RCX: 00007f671758d169 [ 88.321932][ T5994] RDX: 0000200000000180 RSI: 00000000c0481273 RDI: 0000000000000009 [ 88.321952][ T5994] RBP: 00007f671760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 88.321971][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.321990][ T5994] R13: 0000000000000000 R14: 00007f67177a6160 R15: 00007fffedcf6978 [ 88.322024][ T5994] [ 89.856315][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 91.866737][ T47] cfg80211: failed to load regulatory.db [ 92.755600][ T6039] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 93.282511][ T6056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30'. [ 93.385652][ T6056] bridge_slave_1: left allmulticast mode [ 93.427981][ T6056] bridge_slave_1: left promiscuous mode [ 93.459276][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.528587][ T6056] bridge_slave_0: left allmulticast mode [ 93.542779][ T6056] bridge_slave_0: left promiscuous mode [ 93.592884][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.776682][ T6065] synth uevent: /module/ipv6: unknown uevent action string [ 93.834339][ T6061] process 'syz.2.31' launched './file0' with NULL argv: empty string added [ 94.209233][ T6074] Invalid ELF header magic: != ELF [ 95.146616][ T6085] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.403562][ T6076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.35'. [ 95.447043][ T6076] geneve1: entered allmulticast mode [ 96.793384][ T6110] bond0: no command found in slaves file - use +ifname or -ifname [ 98.262250][ T6135] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.491879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.426744][ T6158] aoe: invalid device specification v Ém ¡wà [ 99.436380][ T6155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.51'. [ 99.472270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.527832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.536409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.663636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.671318][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 99.681990][ T6158] svc: failed to register nfsdv3 RPC service (errno 111). [ 99.724069][ T6158] svc: failed to register nfsaclv3 RPC service (errno 111). [ 100.024469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.231891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.401859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.411044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.436893][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 100.499823][ T6181] netlink: 64 bytes leftover after parsing attributes in process `syz.2.54'. [ 101.561396][ T6210] FAULT_INJECTION: forcing a failure. [ 101.561396][ T6210] name failslab, interval 1, probability 0, space 0, times 1 [ 101.633379][ T6210] CPU: 0 UID: 0 PID: 6210 Comm: syz.2.59 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) [ 101.633425][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.633443][ T6210] Call Trace: [ 101.633454][ T6210] [ 101.633466][ T6210] dump_stack_lvl+0x16c/0x1f0 [ 101.633520][ T6210] should_fail_ex+0x512/0x640 [ 101.633566][ T6210] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 101.633619][ T6210] should_failslab+0xc2/0x120 [ 101.633667][ T6210] __kmalloc_cache_noprof+0x6a/0x3e0 [ 101.633713][ T6210] ? do_raw_spin_lock+0x12c/0x2b0 [ 101.633757][ T6210] ? single_open+0x4d/0x1f0 [ 101.633799][ T6210] ? __pfx_tracing_clock_show+0x10/0x10 [ 101.633831][ T6210] single_open+0x4d/0x1f0 [ 101.633870][ T6210] tracing_clock_open+0xa7/0x100 [ 101.633916][ T6210] do_dentry_open+0x741/0x1c10 [ 101.633964][ T6210] ? __pfx_tracing_clock_open+0x10/0x10 [ 101.634009][ T6210] ? inode_permission+0xdd/0x5f0 [ 101.634049][ T6210] vfs_open+0x82/0x3f0 [ 101.634080][ T6210] ? may_open+0x1f2/0x400 [ 101.634120][ T6210] path_openat+0x1e5e/0x2d40 [ 101.634156][ T6210] ? __pfx_path_openat+0x10/0x10 [ 101.634191][ T6210] do_filp_open+0x20b/0x470 [ 101.634223][ T6210] ? __pfx_do_filp_open+0x10/0x10 [ 101.634250][ T6210] ? find_held_lock+0x2b/0x80 [ 101.634301][ T6210] ? alloc_fd+0x420/0x760 [ 101.634334][ T6210] do_sys_openat2+0x11b/0x1d0 [ 101.634369][ T6210] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.634437][ T6210] __x64_sys_openat+0x174/0x210 [ 101.634477][ T6210] ? __pfx___x64_sys_openat+0x10/0x10 [ 101.634520][ T6210] ? rcu_is_watching+0x12/0xc0 [ 101.634575][ T6210] do_syscall_64+0xcd/0x260 [ 101.634629][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.634662][ T6210] RIP: 0033:0x7f671758d169 [ 101.634687][ T6210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.634718][ T6210] RSP: 002b:00007f67183bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.634749][ T6210] RAX: ffffffffffffffda RBX: 00007f67177a5fa0 RCX: 00007f671758d169 [ 101.634770][ T6210] RDX: 0000000000022500 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 101.634792][ T6210] RBP: 00007f671760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.634811][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.634831][ T6210] R13: 0000000000000000 R14: 00007f67177a5fa0 R15: 00007fffedcf6978 [ 101.634865][ T6210] [ 102.661359][ T6230] netlink: zone id is out of range [ 102.696572][ T6230] netlink: zone id is out of range [ 102.756748][ T6230] netlink: zone id is out of range [ 102.786411][ T6230] netlink: zone id is out of range [ 102.791595][ T6230] netlink: zone id is out of range [ 102.812657][ T6230] netlink: zone id is out of range [ 102.819207][ T6230] netlink: zone id is out of range [ 102.827772][ T6230] netlink: zone id is out of range [ 102.832999][ T6230] netlink: zone id is out of range [ 102.838199][ T6230] netlink: zone id is out of range [ 102.900351][ T6225] netlink: 544 bytes leftover after parsing attributes in process `syz.3.63'. [ 103.115275][ T6241] syz.1.65 uses obsolete (PF_INET,SOCK_PACKET) [ 103.484862][ T6251] FAULT_INJECTION: forcing a failure. [ 103.484862][ T6251] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.533359][ T6251] CPU: 1 UID: 0 PID: 6251 Comm: syz.2.69 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) [ 103.533406][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.533425][ T6251] Call Trace: [ 103.533435][ T6251] [ 103.533447][ T6251] dump_stack_lvl+0x16c/0x1f0 [ 103.533517][ T6251] should_fail_ex+0x512/0x640 [ 103.533554][ T6251] should_fail_alloc_page+0xe7/0x130 [ 103.533591][ T6251] prepare_alloc_pages.constprop.0+0x172/0x570 [ 103.533637][ T6251] ? stack_trace_save+0x8e/0xc0 [ 103.533678][ T6251] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 103.533718][ T6251] ? __lock_acquire+0xaa4/0x1ba0 [ 103.533767][ T6251] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 103.533809][ T6251] ? __lock_acquire+0xaa4/0x1ba0 [ 103.533859][ T6251] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.533910][ T6251] ? policy_nodemask+0xea/0x4e0 [ 103.533944][ T6251] alloc_pages_mpol+0x1fb/0x540 [ 103.533978][ T6251] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 103.534013][ T6251] ? __anon_vma_prepare+0x2db/0x5e0 [ 103.534046][ T6251] folio_alloc_mpol_noprof+0x36/0x2f0 [ 103.534087][ T6251] vma_alloc_folio_noprof+0xed/0x1e0 [ 103.534126][ T6251] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 103.534161][ T6251] ? __anon_vma_prepare+0x2e2/0x5e0 [ 103.534191][ T6251] do_pte_missing+0x2049/0x3ea0 [ 103.534239][ T6251] __handle_mm_fault+0x1043/0x2a50 [ 103.534287][ T6251] ? __pfx___handle_mm_fault+0x10/0x10 [ 103.534337][ T6251] ? __pte_offset_map_lock+0x155/0x2f0 [ 103.534390][ T6251] ? find_held_lock+0x2b/0x80 [ 103.534420][ T6251] ? find_held_lock+0x2b/0x80 [ 103.534465][ T6251] handle_mm_fault+0x404/0xae0 [ 103.534511][ T6251] __get_user_pages+0x771/0x36f0 [ 103.534559][ T6251] ? __pfx_mt_find+0x10/0x10 [ 103.534587][ T6251] ? __pfx___get_user_pages+0x10/0x10 [ 103.534638][ T6251] populate_vma_page_range+0x278/0x3a0 [ 103.534664][ T6251] ? __pfx_populate_vma_page_range+0x10/0x10 [ 103.534689][ T6251] ? __pfx_find_vma_intersection+0x10/0x10 [ 103.534728][ T6251] ? do_mmap+0x69c/0x11b0 [ 103.534766][ T6251] __mm_populate+0x1d8/0x380 [ 103.534791][ T6251] ? __pfx___mm_populate+0x10/0x10 [ 103.534817][ T6251] ? up_write+0x1b2/0x520 [ 103.534843][ T6251] vm_mmap_pgoff+0x362/0x450 [ 103.534887][ T6251] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 103.534934][ T6251] ? __x64_sys_futex+0x1e0/0x4c0 [ 103.534969][ T6251] ? __x64_sys_futex+0x1e9/0x4c0 [ 103.535007][ T6251] ksys_mmap_pgoff+0x7d/0x5c0 [ 103.535044][ T6251] ? rcu_is_watching+0x12/0xc0 [ 103.535076][ T6251] __x64_sys_mmap+0x125/0x190 [ 103.535109][ T6251] do_syscall_64+0xcd/0x260 [ 103.535152][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.535179][ T6251] RIP: 0033:0x7f671758d169 [ 103.535200][ T6251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.535226][ T6251] RSP: 002b:00007f671839a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 103.535251][ T6251] RAX: ffffffffffffffda RBX: 00007f67177a6080 RCX: 00007f671758d169 [ 103.535269][ T6251] RDX: 00000000000000df RSI: 0000000000000008 RDI: 0000000000000000 [ 103.535285][ T6251] RBP: 00007f671760e2a0 R08: 0000000000000002 R09: 0000000000008000 [ 103.535302][ T6251] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 103.535318][ T6251] R13: 0000000000000000 R14: 00007f67177a6080 R15: 00007fffedcf6978 [ 103.535355][ T6251] [ 105.087631][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 105.237241][ T6266] ------------[ cut here ]------------ [ 105.243229][ T6266] ODEBUG: free active (active state 0) object: ffff88802d4cd248 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 105.343006][ T6266] WARNING: CPU: 0 PID: 6266 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 105.352742][ T6266] Modules linked in: [ 105.356698][ T6266] CPU: 0 UID: 0 PID: 6266 Comm: syz.3.71 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) [ 105.368272][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.378888][ T6266] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 105.385130][ T6266] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd e0 f7 f3 8b 4c 89 e6 48 c7 c7 60 ec f3 8b e8 8f 65 ab fc 90 <0f> 0b 90 90 58 83 05 26 c3 b4 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 105.404949][ T6266] RSP: 0018:ffffc90003f67768 EFLAGS: 00010286 [ 105.411086][ T6266] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817aee18 [ 105.419404][ T6266] RDX: ffff88802620da00 RSI: ffffffff817aee25 RDI: 0000000000000001 [ 105.427691][ T6266] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 105.435840][ T6266] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bf3f300 [ 105.443944][ T6266] R13: ffffffff8b8fbfc0 R14: ffffffff8a6f0840 R15: ffffc90003f67868 [ 105.451990][ T6266] FS: 0000000000000000(0000) GS:ffff888124a1a000(0000) knlGS:0000000000000000 [ 105.460985][ T6266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.467687][ T6266] CR2: 0000200000005000 CR3: 000000005f15a000 CR4: 00000000003526f0 [ 105.475764][ T6266] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.484237][ T6266] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 105.492634][ T6266] Call Trace: [ 105.495961][ T6266] [ 105.498985][ T6266] ? __warn+0xea/0x3c0 [ 105.503199][ T6266] ? debug_print_object+0x1a2/0x2b0 [ 105.508498][ T6266] ? report_bug+0x3c3/0x580 [ 105.513135][ T6266] ? debug_print_object+0x1a2/0x2b0 [ 105.518396][ T6266] ? handle_bug+0x184/0x210 [ 105.523017][ T6266] ? exc_invalid_op+0x17/0x50 [ 105.527766][ T6266] ? asm_exc_invalid_op+0x1a/0x20 [ 105.532895][ T6266] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 105.538425][ T6266] ? __warn_printk+0x198/0x350 [ 105.543323][ T6266] ? __warn_printk+0x1a5/0x350 [ 105.548152][ T6266] ? debug_print_object+0x1a2/0x2b0 [ 105.553443][ T6266] ? debug_print_object+0x1a1/0x2b0 [ 105.558713][ T6266] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 105.564286][ T6266] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 105.570170][ T6266] debug_check_no_obj_freed+0x4b7/0x600 [ 105.575936][ T6266] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 105.582547][ T6266] ? rcu_is_watching+0x12/0xc0 [ 105.587363][ T6266] ? kmem_cache_free+0x2d4/0x4d0 [ 105.592768][ T6266] kfree+0x291/0x4d0 [ 105.596717][ T6266] ? hci_release_dev+0x4d8/0x600 [ 105.601750][ T6266] hci_release_dev+0x4d8/0x600 [ 105.606620][ T6266] ? __pfx_hci_release_dev+0x10/0x10 [ 105.612011][ T6266] ? rcu_is_watching+0x12/0xc0 [ 105.616826][ T6266] ? kfree+0x252/0x4d0 [ 105.620940][ T6266] bt_host_release+0x6a/0xb0 [ 105.625627][ T6266] ? __pfx_bt_host_release+0x10/0x10 [ 105.630948][ T6266] device_release+0xa1/0x240 [ 105.635627][ T6266] kobject_put+0x1e4/0x5a0 [ 105.640097][ T6266] ? __pfx_vhci_release+0x10/0x10 [ 105.645270][ T6266] put_device+0x1f/0x30 [ 105.649477][ T6266] vhci_release+0x81/0xf0 [ 105.653909][ T6266] __fput+0x3ff/0xb70 [ 105.657973][ T6266] task_work_run+0x14d/0x240 [ 105.662660][ T6266] ? __pfx_task_work_run+0x10/0x10 [ 105.667823][ T6266] do_exit+0xafe/0x2d90 [ 105.672164][ T6266] ? __pfx___might_resched+0x10/0x10 [ 105.677542][ T6266] ? __pfx_do_exit+0x10/0x10 [ 105.682254][ T6266] ? do_raw_spin_lock+0x12c/0x2b0 [ 105.687777][ T6266] ? find_held_lock+0x2b/0x80 [ 105.693079][ T6266] do_group_exit+0xd3/0x2a0 [ 105.697658][ T6266] get_signal+0x2673/0x26d0 [ 105.702322][ T6266] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.707617][ T6266] ? kmem_cache_free+0x2d4/0x4d0 [ 105.712667][ T6266] ? __pfx_get_signal+0x10/0x10 [ 105.717577][ T6266] ? create_new_namespaces+0x59f/0xad0 [ 105.723186][ T6266] arch_do_signal_or_restart+0x8f/0x7d0 [ 105.728796][ T6266] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 105.735167][ T6266] ? rcu_is_watching+0x12/0xc0 [ 105.740104][ T6266] syscall_exit_to_user_mode+0x150/0x2a0 [ 105.745843][ T6266] do_syscall_64+0xda/0x260 [ 105.750417][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.756482][ T6266] RIP: 0033:0x7f705b98d169 [ 105.760941][ T6266] Code: Unable to access opcode bytes at 0x7f705b98d13f. [ 105.768472][ T6266] RSP: 002b:00007f70597f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 105.777027][ T6266] RAX: fffffffffffffffc RBX: 00007f705bba5fa0 RCX: 00007f705b98d169 [ 105.785093][ T6266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 105.793635][ T6266] RBP: 00007f705ba0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.802066][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.810289][ T6266] R13: 0000000000000000 R14: 00007f705bba5fa0 R15: 00007ffdaa122ce8 [ 105.818416][ T6266] [ 105.821489][ T6266] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.828797][ T6266] CPU: 0 UID: 0 PID: 6266 Comm: syz.3.71 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(full) [ 105.840279][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.850443][ T6266] Call Trace: [ 105.853738][ T6266] [ 105.856699][ T6266] dump_stack_lvl+0x3d/0x1f0 [ 105.861350][ T6266] panic+0x71c/0x800 [ 105.865352][ T6266] ? __pfx_panic+0x10/0x10 [ 105.869807][ T6266] ? show_trace_log_lvl+0x29c/0x3c0 [ 105.875037][ T6266] ? check_panic_on_warn+0x1f/0xb0 [ 105.880863][ T6266] ? debug_print_object+0x1a2/0x2b0 [ 105.886087][ T6266] check_panic_on_warn+0xab/0xb0 [ 105.891043][ T6266] __warn+0xf6/0x3c0 [ 105.894961][ T6266] ? debug_print_object+0x1a2/0x2b0 [ 105.900194][ T6266] report_bug+0x3c3/0x580 [ 105.904554][ T6266] ? debug_print_object+0x1a2/0x2b0 [ 105.909784][ T6266] handle_bug+0x184/0x210 [ 105.914129][ T6266] exc_invalid_op+0x17/0x50 [ 105.918648][ T6266] asm_exc_invalid_op+0x1a/0x20 [ 105.923548][ T6266] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 105.929394][ T6266] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd e0 f7 f3 8b 4c 89 e6 48 c7 c7 60 ec f3 8b e8 8f 65 ab fc 90 <0f> 0b 90 90 58 83 05 26 c3 b4 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 105.949041][ T6266] RSP: 0018:ffffc90003f67768 EFLAGS: 00010286 [ 105.955141][ T6266] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817aee18 [ 105.963128][ T6266] RDX: ffff88802620da00 RSI: ffffffff817aee25 RDI: 0000000000000001 [ 105.971116][ T6266] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 105.979104][ T6266] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bf3f300 [ 105.987165][ T6266] R13: ffffffff8b8fbfc0 R14: ffffffff8a6f0840 R15: ffffc90003f67868 [ 105.995185][ T6266] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 106.000689][ T6266] ? __warn_printk+0x198/0x350 [ 106.005492][ T6266] ? __warn_printk+0x1a5/0x350 [ 106.010306][ T6266] ? debug_print_object+0x1a1/0x2b0 [ 106.015542][ T6266] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 106.021048][ T6266] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 106.026896][ T6266] debug_check_no_obj_freed+0x4b7/0x600 [ 106.032484][ T6266] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 106.038610][ T6266] ? rcu_is_watching+0x12/0xc0 [ 106.043403][ T6266] ? kmem_cache_free+0x2d4/0x4d0 [ 106.048462][ T6266] kfree+0x291/0x4d0 [ 106.052398][ T6266] ? hci_release_dev+0x4d8/0x600 [ 106.057383][ T6266] hci_release_dev+0x4d8/0x600 [ 106.062184][ T6266] ? __pfx_hci_release_dev+0x10/0x10 [ 106.067508][ T6266] ? rcu_is_watching+0x12/0xc0 [ 106.072301][ T6266] ? kfree+0x252/0x4d0 [ 106.076411][ T6266] bt_host_release+0x6a/0xb0 [ 106.081030][ T6266] ? __pfx_bt_host_release+0x10/0x10 [ 106.086354][ T6266] device_release+0xa1/0x240 [ 106.090968][ T6266] kobject_put+0x1e4/0x5a0 [ 106.095407][ T6266] ? __pfx_vhci_release+0x10/0x10 [ 106.100450][ T6266] put_device+0x1f/0x30 [ 106.104629][ T6266] vhci_release+0x81/0xf0 [ 106.108981][ T6266] __fput+0x3ff/0xb70 [ 106.112995][ T6266] task_work_run+0x14d/0x240 [ 106.117612][ T6266] ? __pfx_task_work_run+0x10/0x10 [ 106.122769][ T6266] do_exit+0xafe/0x2d90 [ 106.126961][ T6266] ? __pfx___might_resched+0x10/0x10 [ 106.132281][ T6266] ? __pfx_do_exit+0x10/0x10 [ 106.136906][ T6266] ? do_raw_spin_lock+0x12c/0x2b0 [ 106.141952][ T6266] ? find_held_lock+0x2b/0x80 [ 106.146655][ T6266] do_group_exit+0xd3/0x2a0 [ 106.151216][ T6266] get_signal+0x2673/0x26d0 [ 106.155748][ T6266] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.160995][ T6266] ? kmem_cache_free+0x2d4/0x4d0 [ 106.165966][ T6266] ? __pfx_get_signal+0x10/0x10 [ 106.170870][ T6266] ? create_new_namespaces+0x59f/0xad0 [ 106.176363][ T6266] arch_do_signal_or_restart+0x8f/0x7d0 [ 106.181956][ T6266] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 106.188160][ T6266] ? rcu_is_watching+0x12/0xc0 [ 106.192955][ T6266] syscall_exit_to_user_mode+0x150/0x2a0 [ 106.198626][ T6266] do_syscall_64+0xda/0x260 [ 106.203176][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.209093][ T6266] RIP: 0033:0x7f705b98d169 [ 106.213528][ T6266] Code: Unable to access opcode bytes at 0x7f705b98d13f. [ 106.220567][ T6266] RSP: 002b:00007f70597f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 106.229011][ T6266] RAX: fffffffffffffffc RBX: 00007f705bba5fa0 RCX: 00007f705b98d169 [ 106.237004][ T6266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 106.244994][ T6266] RBP: 00007f705ba0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 106.252983][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.260971][ T6266] R13: 0000000000000000 R14: 00007f705bba5fa0 R15: 00007ffdaa122ce8 [ 106.268968][ T6266] [ 106.272344][ T6266] Kernel Offset: disabled [ 106.276695][ T6266] Rebooting in 86400 seconds..