last executing test programs: 3m32.926150044s ago: executing program 1 (id=486): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={"fda25684", 0xffff, 0x6, 0x3, 0x3, 0x9, "c625aa3f222ce10e00", "430600", "0400e6ad", "4e1d00", ["22df00000200", "f8ffffffff473a6f08e10005", "b06f8ca10c66eebcbd6f17c8", "5f0700000000000000392a98"]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0xb9e, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x7fe, 0x1000c, 0x480, 0x1000049, 0xffffffffffffffff, 0x9, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m32.515718815s ago: executing program 1 (id=488): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev0\x00', 0x200, 0x0) clone3$auto(&(0x7f0000000000)={0x3ffffffff, 0x4, 0x63, 0x3, 0x6, 0x0, 0x7, 0x8, 0x8fa1, 0x1, 0x8000000003}, 0x294) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) 3m32.250234483s ago: executing program 1 (id=490): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) pread64$auto(r1, 0x0, 0x101, 0x81) readv$auto(r0, &(0x7f0000000140)={&(0x7f0000000080)="01b2908e456e9f5bb810bdd7528e7c3fa041046972daf8a72e624c8617877ba4bedeb35e2e660a34b47ec10003801703916026a053445b3b393cc2448459052b93b5118c003a9e7257a2a1dcab4dfe2452ef6af6beaa71d9e9a8ea7e2840fc85e0166a612ea61a1413957e6993baea7f86e9f10dd99a01fafdf39e7d0c8392bb71dea70090eed094b61db33faef1a606", 0x6}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x8082, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0x1) 3m32.034111021s ago: executing program 1 (id=493): r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000), 0x32) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/card0/pcm0p/oss\x00', 0x441, 0x0) write$auto(r1, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) 3m31.871506644s ago: executing program 1 (id=494): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) clone$auto(0x7fff, 0xff, &(0x7f0000000600)=0x8000, 0x0, 0x7) 3m31.614165131s ago: executing program 1 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2cd8aaa3839ff94f2cb085a9b04f86000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf2516000000050002000100000005000300a60000000500030001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40040) mmap$auto(0x400000, 0x6, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x2b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x18, 0x2, 0x7ffd) sysfs$auto(0x2, 0x10000000000002d, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) mmap$auto(0x0, 0x80000001, 0xdf, 0x8000000000009b72, 0x0, 0x100000000008000) write$auto(0x800000000000c8, 0x0, 0x1a) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0x0, 0x9b73, 0x7, 0x28000) mremap$auto(0x4000, 0x9, 0x3fd6, 0x3, 0xfffff000) set_mempolicy$auto(0x8003, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x1e, r2, 0x2) 3m31.20597181s ago: executing program 32 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2cd8aaa3839ff94f2cb085a9b04f86000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf2516000000050002000100000005000300a60000000500030001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40040) mmap$auto(0x400000, 0x6, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x2b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x18, 0x2, 0x7ffd) sysfs$auto(0x2, 0x10000000000002d, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) mmap$auto(0x0, 0x80000001, 0xdf, 0x8000000000009b72, 0x0, 0x100000000008000) write$auto(0x800000000000c8, 0x0, 0x1a) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0x0, 0x9b73, 0x7, 0x28000) mremap$auto(0x4000, 0x9, 0x3fd6, 0x3, 0xfffff000) set_mempolicy$auto(0x8003, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x1e, r2, 0x2) 2m48.204916767s ago: executing program 4 (id=701): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x301, 0x0) r0 = socket(0xa, 0x2, 0x88) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x9}, 0xed7138c}, 0x9a6, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) 2m46.93001535s ago: executing program 4 (id=706): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/authorized\x00', 0x3cb400, 0x0) (async) msgrcv$auto(0xc, &(0x7f00000001c0)={0x7ce6}, 0xffffffffffffffff, 0x8, 0x1) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) (rerun: 32) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec080000", @ANYRES16=r1, @ANYBLOB="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"], 0x8ec}, 0x1, 0x0, 0x0, 0x4094}, 0x4800) (async) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x60000, 0x0) poll$auto(&(0x7f0000000040)={r2, 0x7, 0x45}, 0x0, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="5d000000590104a1d988ab", @ANYRES16=r4, @ANYBLOB="00012dbd7000fedbdf252b0000003800188008007a00402b2b002c0019800c000b0003000000000000000400e48014002000200100000000000000000000000000000400d58005001000050000000500260005000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2c000000}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/ip6gre0/base_reachable_time\x00', 0x608541, 0x0) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0x2, 0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) (async, rerun: 64) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000000), 0x12, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x24}, 0x800009}, 0x8, 0x2) (async) recvfrom$auto(r2, 0x0, 0x40000d, 0x100, 0x0, 0xfffffffffffffffd) (async) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x800000000000, 0x12f, 0xdf, 0x9b72, 0x7, 0x1) socket(0x2, 0x1, 0x0) (async, rerun: 64) shutdown$auto(0x200000003, 0x2) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 2m46.182170521s ago: executing program 4 (id=712): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x141200, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) fanotify_init$auto(0x65, 0x2) sysfs$auto(0x2, 0x10000000000048, 0x0) r1 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, r1) close_range$auto(0x2, 0x8000, 0x0) 2m44.290199222s ago: executing program 4 (id=719): syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mlockall$auto(0x7) socket(0xf, 0x80000, 0xc9) (async) r2 = socket(0xf, 0x80000, 0xc9) accept$auto(r2, 0x0, 0x0) 2m43.150460655s ago: executing program 4 (id=725): openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/uid_map\x00', 0x80a01, 0x0) setreuid$auto(0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, 0x0, 0x1c) tkill$auto(0x1, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x3, 0xdb33, 0xe2, 0xfffffffffffff499, 0x405, 0x8000) r0 = memfd_secret$auto(0x5) read$auto_proc_uid_map_operations_base(r0, &(0x7f0000000040), 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0xfffffffd, 0x35, 0x0, 0x9) getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfs4.nametoid/flush\x00', 0x40002, 0x0) r2 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000000c0), r1) sendmsg$auto_VDPA_CMD_DEV_DEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022bbd7000fbdbdf250400000006000d0004f7ff001400040076657468315f6d616376746170000000140004007866726d3000000000000000000000001400020076657468305f746f5f7465616d000000"], 0x58}, 0x1, 0x0, 0x0, 0x400c050}, 0x4008000) 2m41.81015737s ago: executing program 4 (id=731): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f0000000000)=""/182, 0xb6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/ksm_zero_pages\x00', 0x181400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x80) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon40\x00', 0x303c00, 0x0) mmap$auto(0x0, 0x10001, 0x1000000008, 0x1f, 0x3, 0x8001) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mtd/mtd0ro/power/runtime_active_time\x00', 0x0, 0x0) mlockall$auto(0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgctl$auto(0x0, 0xd, 0x0) read$auto(0x3, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/156, 0x9c) mmap$auto(0x3, 0x1, 0xdc, 0x9b72, r1, 0x100000003) pwritev$auto(r1, &(0x7f0000000180)={&(0x7f0000000000)="58839b64ff7ffda88007f7fd843dd4f053b9bed35518bcbb968d3993b2341642d222a2c404269afabf70d9eeb7", 0x5}, 0x100000001, 0x100000000, 0x100000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRESHEX=r5, @ANYBLOB="01e721bd7000fbdbdf250200000c00030012000000000000000c000300000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="050008000600000008000400", @ANYRES8=r4, @ANYBLOB="05008700860a00000c3a4f00ff01000000000000", @ANYRES16=r5, @ANYRES64, @ANYRES64=r4, @ANYRESOCT=r4, @ANYRESOCT], 0x58}, 0x1, 0x0, 0x0, 0x4004004}, 0x200008d0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b4b, 0x8000000000000000, 0x0, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x122040, 0x61) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f0000000000), 0x55) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x28, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) 2m41.535360742s ago: executing program 33 (id=731): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f0000000000)=""/182, 0xb6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/ksm_zero_pages\x00', 0x181400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x80) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon40\x00', 0x303c00, 0x0) mmap$auto(0x0, 0x10001, 0x1000000008, 0x1f, 0x3, 0x8001) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mtd/mtd0ro/power/runtime_active_time\x00', 0x0, 0x0) mlockall$auto(0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgctl$auto(0x0, 0xd, 0x0) read$auto(0x3, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/156, 0x9c) mmap$auto(0x3, 0x1, 0xdc, 0x9b72, r1, 0x100000003) pwritev$auto(r1, &(0x7f0000000180)={&(0x7f0000000000)="58839b64ff7ffda88007f7fd843dd4f053b9bed35518bcbb968d3993b2341642d222a2c404269afabf70d9eeb7", 0x5}, 0x100000001, 0x100000000, 0x100000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRESHEX=r5, @ANYBLOB="01e721bd7000fbdbdf250200000c00030012000000000000000c000300000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="050008000600000008000400", @ANYRES8=r4, @ANYBLOB="05008700860a00000c3a4f00ff01000000000000", @ANYRES16=r5, @ANYRES64, @ANYRES64=r4, @ANYRESOCT=r4, @ANYRESOCT], 0x58}, 0x1, 0x0, 0x0, 0x4004004}, 0x200008d0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b4b, 0x8000000000000000, 0x0, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x122040, 0x61) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f0000000000), 0x55) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x28, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) 2m33.536755621s ago: executing program 0 (id=750): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r1 = open(0x0, 0xeee00, 0x31) (async) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) write$auto(r0, 0x0, 0x7fff) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async) writev$auto(0x1, 0x0, 0x1) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00', 0x80c01, 0x0) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000040)='\x00') (async) acct$auto(0x0) (async) r2 = socket(0xa, 0x2, 0x73) (async) write$auto_msr_fops_msr(r1, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x23, 0x3, 0x34) ioctl$auto_evdev_fops_evdev(0xffffffffffffffff, 0x8000450a, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) read$auto_ctl_device_fops_user(0xffffffffffffffff, &(0x7f00000001c0)=""/139, 0x8b) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x40080a5) (async) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async) readv$auto(0x3, 0x0, 0x7) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x460f, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 2m29.627232138s ago: executing program 0 (id=760): mmap$auto(0x0, 0x3d9d, 0x80000d, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x2, 0x88) getsockopt$auto(r0, 0x1, 0x40, &(0x7f00000000c0)='\x05/\xc3:\x00', &(0x7f0000000100)=0x7) unshare$auto(0x800) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) 2m28.400529569s ago: executing program 0 (id=763): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mlock$auto(0xfbe8, 0x4) personality$auto(0xfffffffc) openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, 0x0, 0x80800, 0x0) mmap$auto(0x100000000, 0x9, 0x70, 0x10, 0x2, 0xd) io_uring_setup$auto(0x6, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6b, 0x0, 0x7c, 0x0, 0x4, 0x4, 0x4, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x0, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x20, 0x81, 0x20000000000, 0xa747, 0x0, 0x804}) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) setsockopt$auto(0xffffffffffffffff, 0xfffffffd, 0x14, 0x0, 0x4) r3 = mq_open$auto(0x0, 0xde8, 0xf, 0x0) pread64$auto(r3, 0x0, 0x1, 0xfffffffffffffe01) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="810b25bd7000fbdbdf25010000040017010219e8cdf7587408d20000001000"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) mmap$auto(0xf000, 0x8, 0x1000000003, 0x19, r4, 0x7ffe) fcntl$auto(0xffffffffffffffff, 0xdc, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x9, 0x46b0, 0xffff, 0x10011, r1, 0x6) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x40000005, 0x0) mmap$auto(0x0, 0xbb0c, 0x329, 0x10011, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m26.206162149s ago: executing program 0 (id=773): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x434c00, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0x2, 0x6, 0x0) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) (async, rerun: 32) io_uring_setup$auto(0x3, 0x0) (async, rerun: 64) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048020}, 0x24000810) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) symlink$auto(&(0x7f0000001500)='./file0/file0\x00', &(0x7f0000001540)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x40102, 0x2) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) mlock$auto(0xfbe8, 0x1000000000000004) (async, rerun: 32) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) ioctl$auto_TIOCGPTPEER2(r1, 0x5441, 0x0) (async) setns(0xffffffffffffffff, 0x0) clone$auto(0x200, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) r2 = gettid() rt_sigtimedwait$auto(&(0x7f0000000140)={0x871}, 0x0, 0x0, 0x8) (async) tkill$auto(r2, 0x7) writev$auto(0x1, 0x0, 0x1) fcntl$auto(0x0, 0x407, 0x100000) (async) mlockall$auto(0x7) 2m24.138255787s ago: executing program 0 (id=777): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x301, 0x0) r1 = socket(0xa, 0x2, 0x88) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0x7a35) 2m18.829224002s ago: executing program 0 (id=787): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) mmap$auto(0x1, 0x800005, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="7d472dbd7000fc", @ANYRESOCT=r0, @ANYBLOB="7c42b9de4e22e159e5704c064e842055330a4d1858cd1bc0baef3f96991bf7ffb2e29feae35b327750c92aa45c03d7c0b2b2a2e4cfaf6b0d7e3ebeaeda1305cca2407bd14d3754c7e5a6a649259e45baccfef2968ab82739af3bdc068ec04a16a695"], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'macvlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003e00), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003e40)={'bridge_slave_0\x00', 0x0}) (rerun: 32) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r2, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003e80)={0x1c, r3, 0x309, 0x70bd2b, 0x25dfdbfe, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_MM_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r1, @ANYBLOB="000126bd7000fedbdf252a000000300001801400020065727370616e30", @ANYRES32=0x0, @ANYBLOB="300001801400020070696d3672656730000000000000000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000600000048000180080003000800000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="540002006970366772657461702804409c5ba203a2d83000200000e4f9070003004e000000080003000908000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300fbffffff08000300000000004800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003004e5b00001400020076657468305f6d6163767461700000003000018008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265673100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="600001801400020067656e65766530000000000000000000140002006970366772653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f30000008", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x1a8}, 0x1, 0x0, 0x0, 0x8800}, 0x803) (async) r5 = socket(0x10, 0x2, 0x0) read$auto(r5, 0x0, 0xfdef) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) (rerun: 32) readv$auto(r6, &(0x7f0000000080)={0x0, 0x14000000000}, 0x3) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x478d03, 0x0) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) socket(0x10, 0x2, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (rerun: 64) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) (async) mmap$auto(0x800000007, 0x4008, 0xd, 0x18, r6, 0x4) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8cc002, 0x0) (async, rerun: 64) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (rerun: 64) 2m3.80097162s ago: executing program 34 (id=787): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) mmap$auto(0x1, 0x800005, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="7d472dbd7000fc", @ANYRESOCT=r0, @ANYBLOB="7c42b9de4e22e159e5704c064e842055330a4d1858cd1bc0baef3f96991bf7ffb2e29feae35b327750c92aa45c03d7c0b2b2a2e4cfaf6b0d7e3ebeaeda1305cca2407bd14d3754c7e5a6a649259e45baccfef2968ab82739af3bdc068ec04a16a695"], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'macvlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003e00), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003e40)={'bridge_slave_0\x00', 0x0}) (rerun: 32) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r2, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003e80)={0x1c, r3, 0x309, 0x70bd2b, 0x25dfdbfe, {}, [@NETDEV_A_NAPI_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_MM_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r1, @ANYBLOB="000126bd7000fedbdf252a000000300001801400020065727370616e30", @ANYRES32=0x0, @ANYBLOB="300001801400020070696d3672656730000000000000000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000600000048000180080003000800000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="540002006970366772657461702804409c5ba203a2d83000200000e4f9070003004e000000080003000908000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300fbffffff08000300000000004800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003004e5b00001400020076657468305f6d6163767461700000003000018008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265673100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="600001801400020067656e65766530000000000000000000140002006970366772653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f30000008", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x1a8}, 0x1, 0x0, 0x0, 0x8800}, 0x803) (async) r5 = socket(0x10, 0x2, 0x0) read$auto(r5, 0x0, 0xfdef) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) (rerun: 32) readv$auto(r6, &(0x7f0000000080)={0x0, 0x14000000000}, 0x3) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x478d03, 0x0) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) socket(0x10, 0x2, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (rerun: 64) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) (async) mmap$auto(0x800000007, 0x4008, 0xd, 0x18, r6, 0x4) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x8cc002, 0x0) (async, rerun: 64) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (rerun: 64) 6.502217906s ago: executing program 3 (id=1320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto(r3, 0x0, 0x6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000000c0)={0xdc, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0xc6, 0x2, "73b3d54e2a914c629a2db2013070d7a99debfc41501cc58ee73dccbddb61c4bcea1c4dc3801fed22fd5fd7b3cd5139e5032227c16e4cc922e3a4df6d429f0d0dd7a1903a9a603c60ec2fdf578a74cca6c63503d05ee325a0494158a0d658bb9779b24e93b11355cbb1cce8df56d8166d6ed42b9a29cb2e08ed73a6848d679e3d78624edb9b4e80c471e9250f50425c51df2fcf4b484ffd49ae04d863c710cc12e38417cf7a349c404c3b490bde3217319e7091f674e22c0ceaf11e63a29b348cebc4"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) r4 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) ioctl$auto(0x3, 0x4008ae48, r4) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000001c0)={"398ca605", 0x9, 0x1, 0x10, 0x3, 0xfffffff9, "3a4e2550e7483003609e3e1c3eb256", "deb4a7cc", "b17d6b95", "3d602ec1", ["e22afcc9163b92f935f5caae", "537ae17ade01604cdc516e95", "99553710bd9d48a684a191f3", "940a1559f59f3971cc2cc88d"]}) read$auto(r0, &(0x7f0000000000)='*`@\\!#.\\\x00', 0x3) 5.862353022s ago: executing program 5 (id=1322): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(&(0x7f0000000240)=r0, 0x68) madvise$auto(0x0, 0x7ffffffffffffffe, 0x1) exit$auto(0x2000017) unshare$auto(0x40000080) r2 = io_uring_setup$auto(0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000340)={0x0, 0xffffffffffffff5a, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r1, @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4019}, 0xc080) settimeofday$auto(&(0x7f0000000180)={0x800, 0x9}, &(0x7f00000000c0)={0x3, 0x2}) close_range$auto(r3, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x40000000, 0x7, 0x7, 0x4c19, 0x61ab, 0x8000) io_uring_setup$auto(0x6, 0x0) mq_open$auto(0x0, 0xde8, 0xb, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) connect$auto(0x3, &(0x7f0000000140), 0x55) symlink$auto(&(0x7f0000000300)='\\\':.\x00', &(0x7f0000000280)='\\\':.\x00') readlink$auto(&(0x7f0000000200)='\\\':.\x00', 0x0, 0x7fd) unshare$auto(0x200) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r4, 0x0) umount2$auto(&(0x7f0000000080)='.\x00', 0x3) umount2$auto(&(0x7f0000000080)='.\x00', 0x1000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fstatfs$auto(0x3, 0x0) socket(0x11, 0x80003, 0x300) 5.786013068s ago: executing program 3 (id=1323): syz_open_procfs$namespace(0x0, &(0x7f0000002700)='ns/net\x00') openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x8080, 0x0) close_range$auto(0x2, 0x8, 0x0) mremap$auto(0x110c231000, 0x4, 0x4, 0x7, 0x100000000) openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/id\x00', 0x20000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/4118, 0x1016) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'erspan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x1, r3, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) r6 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x4ba6030e5ab3750e) ppoll$auto(&(0x7f0000000180)={r6, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$auto(r8, &(0x7f00000007c0)={&(0x7f00000006c0), 0x200, &(0x7f0000000740)={&(0x7f0000000700), 0xf}, 0x400, 0x0, 0xe, 0x466d}, 0x6) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008890}, 0x4000000) r9 = setfsuid$auto(0xffffffffffffffff) msgctl$auto(0xffff, 0x1, &(0x7f0000000240)={{0x2, 0x0, 0xffffffffffffffff, 0x9, 0x800, 0x4, 0xffff}, &(0x7f0000000100)=0x4, &(0x7f00000001c0)=0x2, 0x0, 0xe767, 0x1, 0x0, 0x8, 0x0, 0x2ed, 0xfb6, @inferred, @raw=0xe4bc}) lchown$auto(&(0x7f0000000080)='./file0\x00', r9, r10) 5.288595511s ago: executing program 3 (id=1326): setuid$auto(0xe) open_tree$auto(0x6, 0x0, 0x101) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x18, 0x0) fsopen$auto(0x0, 0x1) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}, 0x54) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8000, 0x0) 4.943336341s ago: executing program 6 (id=1327): socket(0x9, 0x4, 0x0) listen$auto(0x3, 0x81) shutdown$auto(0x200000003, 0x2) socket(0x11, 0xa, 0xe) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) utime$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0xfffffffd, 0x0, 0x8000007) mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0xa, 0x2, 0x0) capset$auto(0x0, &(0x7f00000000c0)={0xffffa3bc, 0x7fff, 0x1ff}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000140)={{0x0, 0xf, &(0x7f0000000180)={0x0, 0xc6}, 0x1, 0x0, 0xffffffffffffffff, 0x9}, 0x2000400a}, 0x3, 0x0) socket(0x2b, 0x2, 0x1) openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/fib/nexthop_bucket_activity\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0xa) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0xffffffffddbf407d, 0x2, 0x40eb2, 0x401, 0x300000000003) socket(0x2, 0x801, 0x106) 4.902392047s ago: executing program 3 (id=1328): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) lseek$auto(0xffffffffffffffff, 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x5, 0x25dfdbfb, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) ioctl$auto(0xffffffffffffffff, 0x9, 0x9) prctl$auto(0x7, 0x1, 0x800000004, 0xf7, 0x10004) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptys4\x00', 0x2, 0x0) write$auto(r2, &(0x7f0000000040)='\x00', 0xdb01) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x2, 0x3}, 0x2b3, &(0x7f0000000280)={0x7fffffffffffffff, 0x9}, &(0x7f0000000340)={0x7fff}, 0x8) poll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x9}, 0x1, 0x2) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000000)=""/223, 0xdf) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000140)=""/25, 0x19) pipe$auto(&(0x7f0000000000)) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) 4.477638649s ago: executing program 5 (id=1331): r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) r1 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000005840), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000006d40)={0x0, 0x0, &(0x7f0000006d00)={&(0x7f00000058c0)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x2e, 0x0, 0x0, @fd=r1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000005}, 0x4011) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) r4 = gettid() rt_sigqueueinfo$auto(r4, 0x10, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_rt={r4, 0x0, @sival_ptr=0x0}}}) clone3$auto(0x0, 0x5dc0) clone$auto(0x5, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x1200056) clone$auto(0x3, 0x0, &(0x7f0000000080)=0x100, 0x0, 0x0) socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) (async) socket(0x11, 0x80003, 0x300) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000005840), 0xffffffffffffffff) (async) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000006d40)={0x0, 0x0, &(0x7f0000006d00)={&(0x7f00000058c0)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) (async) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x2e, 0x0, 0x0, @fd=r1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000005}, 0x4011) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) (async) gettid() (async) rt_sigqueueinfo$auto(r4, 0x10, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_rt={r4, 0x0, @sival_ptr=0x0}}}) (async) clone3$auto(0x0, 0x5dc0) (async) clone$auto(0x5, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x1200056) (async) clone$auto(0x3, 0x0, &(0x7f0000000080)=0x100, 0x0, 0x0) (async) 4.134323433s ago: executing program 6 (id=1332): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x27, 0x1, 0x3ff) bind$auto(r0, 0x0, 0x83) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_CEC_ADAP_G_PHYS_ADDR(0xffffffffffffffff, 0x80026101, &(0x7f00000000c0)=0xc) (async, rerun: 64) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRESHEX, @ANYRESOCT=r0, @ANYBLOB="88a7a6aa586559f1ba3078f33abc2b2a05fafa65ca157d3c770a0733b99218f6dfe31186b42538fb8e37e4f87bee950ac44135210ebd3c7fb9d7ff84a04593e924fe45493db1c3ec6d084347482e270b00e28d547734cee927", @ANYRESHEX=r0, @ANYRES32=r0], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x6004000) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) socket(0x2b, 0x1, 0x1) (async) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x2, 0x0) socket(0x2, 0x1, 0x8) (async) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_0={0x1a, 0x506, 0x1, 0xffff, 0x7, 0x1, 0x4, "f17f8d54c5616da65442268478dd7c70", 0x0, 0x5, 0x0, 0x56, 0x2, 0x2, 0xffffffffffffffff, 0x6}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xebd, r1, 0x8004) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x40000, 0x6) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) mmap$auto(0x0, 0x9, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, 0x0) (async) socket(0xa, 0x801, 0x84) (async) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1a, 0x5, 0x8000000000000000, 0x0) (async, rerun: 32) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) (async, rerun: 32) io_uring_enter$auto(0x3, 0x5, 0x82400004, 0xe, 0x0, 0xd) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 3.619761082s ago: executing program 2 (id=1333): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) r1 = wait4$auto(0x0, &(0x7f0000000000)=0xb, 0xf5, &(0x7f0000000040)={{0xe62, 0x7f}, {0x100, 0xe}, 0x5, 0x4, 0x0, 0x2, 0xecf, 0x0, 0xffea, 0x6, 0x4, 0x1ff, 0x2, 0x2, 0x100, 0x4}) fcntl$auto(r0, 0x1, r1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) (async) wait4$auto(0x0, &(0x7f0000000000)=0xb, 0xf5, &(0x7f0000000040)={{0xe62, 0x7f}, {0x100, 0xe}, 0x5, 0x4, 0x0, 0x2, 0xecf, 0x0, 0xffea, 0x6, 0x4, 0x1ff, 0x2, 0x2, 0x100, 0x4}) (async) fcntl$auto(r0, 0x1, r1) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) 3.334152383s ago: executing program 2 (id=1334): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/keyspan_pda/uevent\x00', 0x4000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) open(0x0, 0xeee00, 0x31) write$auto(0x3, 0x0, 0x100082) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x1800000000000}, 0x0, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) getpid() ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) r4 = getpid() openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/dirty_ratio\x00', 0x2100, 0x0) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) setsockopt$auto(r3, 0x0, 0x60, 0x0, 0x10001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)={0x14, r6, 0x100, 0x70bd2d, 0x25dfdbff}, 0x9}, 0x1, 0x0, 0x0, 0x884}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, ',)'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) read$auto(r5, &(0x7f0000000000)='*`@\\!#.\\\x00', 0x3) 3.215522183s ago: executing program 6 (id=1335): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x101, 0x800002020009, 0x2000000000003, 0x80000051, 0x6, 0x7ff4) (async) mmap$auto(0x101, 0x800002020009, 0x2000000000003, 0x80000051, 0x6, 0x7ff4) mmap$auto(0x8, 0x400008, 0xdf, 0x16, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40084) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0xf) mmap$auto(0xff, 0x800040000c, 0xffffffff, 0x1002040009b72, 0x2, 0x400000802) (async) mmap$auto(0xff, 0x800040000c, 0xffffffff, 0x1002040009b72, 0x2, 0x400000802) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0xc6, "c8ab43295afb2c49605f64be2e9b21bef90b62a54e0f111386db6f75710fafcd", @raw=0x100}) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) (async) ioctl$auto(0xc8, 0x400454d9, 0x5c8d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) sendmmsg$auto(r0, 0x0, 0x3, 0x0) (async) sendmmsg$auto(r0, 0x0, 0x3, 0x0) pselect6$auto(0x4, 0x0, &(0x7f0000000200)={[0x2, 0x9, 0x2da0000, 0x0, 0x105, 0xf574, 0x6, 0x4, 0x0, 0x8, 0x1ff, 0x40000000000009, 0x1, 0x80, 0xe, 0x80000001]}, 0x0, 0x0, &(0x7f0000000300)="9c45e6a4280b39088c0b05c79319b55e0a71205a4cabe6ee2d32bb5bd01cc372cb774fcb10a3478a55e1dffe25bdc9de9b6ce4aa800f67200bc28bb517779111a70c220e6ab93b62ff9aa70e0f1d4c0e3b4a6c488fcb4672c236b6a6ce0d144400eb2013a1fdaab22dad138ec4d28dd1fa2fe2edcaf3e9593632c3fa22fbaaf46966a4804713cdba34bac5d422ef488ba30258ccce75f9527df487491ca7608b5f3a6f32badfbcac9b29dbbe484e14f317cbb1d2aad5eeff2c36f8b4c964e105814dc0e69946850911ded9a5d9aa35dac8f17b7470923129a1c23d029e7c721e2c357f44bd73d3d2d9013ee2194867119e1f9d49728719ccedd584ac2cf44aca8c440e7741500db70505cb5e213e09222118941118544b738920d44342eadcdf2bf289c0f8f43cc919bd78c1ca8dd07e61625bfc60434fa46b205c9e476eebc1d8b298d333cfae2febc5428dd7d17644c5fd7444ce04010f155bc52b68759f4a0414c5faa1afe701538a8d133a0f4e7bc5214f2d0e93019b5b205c318a5ba1b15ddb78fd5d14c0016c4fa7f06271f3ed8c6f05b42242975b2f2e3bfbd4ac7ee18808f8ca6d20e58f08077dc2aed1f377660a92278c0c99f73f239ee35063caede1a5876a8630cbed56ca77c041086a1cf67c07d591bc5bdc561458d3e89bc06f25dce907900981c58c0756b33a174494c62c6a8d5807fa79fa23320d382b8d175165d74174152f7b611955a4fd99913dd90088281771874a28a4626335b345906966be2ccaba2b99d77e149f78e51c2c2eca02d92716157e82feb0be8bede1b9f6a64b75d16a6a9910da024fcac4075d84630c8135b611d64f63cd7dbf7095166421b379a2559eb7829aa45ca51f75ebd7719ca7e5d675711cb4b265e5a2be1c2d6cc86853981ff8ae12c44c8dc124de4d7b8bf25daac1bf34ff313b6ac911a46f742f261be84e7b8b3a36a6ddfbe5b81dd902aca49b9ce661bf41c407") (async) pselect6$auto(0x4, 0x0, &(0x7f0000000200)={[0x2, 0x9, 0x2da0000, 0x0, 0x105, 0xf574, 0x6, 0x4, 0x0, 0x8, 0x1ff, 0x40000000000009, 0x1, 0x80, 0xe, 0x80000001]}, 0x0, 0x0, &(0x7f0000000300)="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") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) mq_notify$auto(r2, &(0x7f0000000100)={@sival_int=0x38bb, @raw=0x9, 0x1}) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) io_uring_register$auto(r1, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0xfffffffffffffffc, 0x10, 0x6, 0x9b72, r1, 0x5) (async) mmap$auto(0xfffffffffffffffc, 0x10, 0x6, 0x9b72, r1, 0x5) mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.977499067s ago: executing program 5 (id=1336): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x3, 0x5, 0x7, 0x0) r0 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_vsock_device_ops_af_vsock(r0, 0x7b9, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r1, 0x40085112, 0x3) ioctl$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffffff, 0x4, &(0x7f0000000100)="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") sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) fstat$auto(0x2, 0x0) ioctl$auto(0xc8, 0x401054d5, 0x0) 2.415482655s ago: executing program 2 (id=1337): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/ad_select\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001100)=""/4105, 0x1009) (async) ioctl$auto(r0, 0x5646, r0) (async) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000080)=""/27, 0x1b) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x444, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = io_uring_setup$auto(0x877, 0x0) io_uring_enter$auto(r3, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) (async) read$auto_nvmf_dev_fops_fabrics(r3, &(0x7f0000000140)=""/77, 0x4d) (async) ioctl$auto(r0, 0x10001, r0) 2.385827084s ago: executing program 3 (id=1338): close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2b, 0x1, 0x0) (async) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) (async) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (rerun: 32) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) r0 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async, rerun: 64) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xd, 0x0, 0x4}, 0x800009}, 0x5, 0x20000000) (async, rerun: 64) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x71cd3c7c, 0xb1) (async) ioctl$auto(0x3, 0x80000541b, 0x38) (async) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd77dcb7fcdf417c2fa7ff080000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x10000000) (async, rerun: 32) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (rerun: 32) r2 = socket(0x10, 0x2, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20001, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/oss\x00', 0x480, 0x0) sendmsg$auto_IPVS_CMD_GET_INFO(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4004010) sendmmsg$auto(0x3, 0x0, 0x10001, 0x800) 2.117243209s ago: executing program 5 (id=1339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4019}, 0x0) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r0) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ec0)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_RXSC_CONFIG={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xa3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) 2.042082238s ago: executing program 6 (id=1340): sethostname$auto(0xfffffffffffffffe, 0x8) close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x80000000) unshare$auto(0x40000080) socket(0x2, 0x2, 0x0) fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x82099, 0xe9e, 0x7, 0x15, 0xffd, 0x100000001, 0x4, 0xf, 0x0, 0x0, 0xe, 0x3, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xffffffffffffffff, r2, 0x0, 0x5) pidfd_open$auto(r2, 0x5) write$auto(r1, &(0x7f0000000000)='r\x02', 0x2fb) landlock_create_ruleset$auto(&(0x7f0000000200)={0x9, 0x7, 0x601}, 0x0, 0x7ffffffe) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r3, 0x104000000000010e, 0xc, 0x0, 0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x51, 0x2b, 0x0, 0x1, [@nested={0x14, 0xcb, 0x0, 0x1, [@nested={0x4, 0x120}, @typed={0xc, 0x104, 0x0, 0x0, @u64=0x1000}]}, @generic="ef3a65318392868d2af5a833a371643fcee230f1ab05fb9d8ef82ddfc4d1045e32ab4cf539e82ba6dfe62a8560b8938858ec3cf97801332277"]}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x5}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x6}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xfff}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x2c, 0x19, 0x0, 0x1, [@typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@empty}, @nested={0x1c, 0x12, 0x0, 0x1, [@typed={0x4, 0xa9}, @typed={0x8, 0x3d, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x2c, 0x0, 0x0, @u32=0xba6}, @nested={0x4, 0x13}]}, @nested={0x4, 0xea}]}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xfb}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_BEARER_GET(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)={0x14, 0x0, 0x9d0da3446261172d, 0x50bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008080) 1.887294685s ago: executing program 2 (id=1341): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/usb/usbmon/25u\x00', 0x214000, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002500)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x4008801) r2 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x3af80000, 0x400, 0x5, 0xffffffffffffffff, 0x1ff, 0x3c76}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), r2) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000002480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000002680)=ANY=[@ANYBLOB='L!\x00\x00', @ANYRESHEX=r1, @ANYBLOB="e96147ba76269034916d8a6ee4573e02c9baecadbcbcfd2d329b7704356d560b0badf760e3421f1a012c9a2e86", @ANYRES64=r0, @ANYBLOB="040093807b009700be30b493e3322737f5d76e2aeb30d153aabfcbcf53e5f7254155d428fdb9d182db514044d8eaf3147cb08cc63d923ca687f0f69b578b64a5276dbf93e2a61459bc1848818f15b96efd5e9b645e542299101313350eb6fd93b787eaccb7b4d61b634565bd0aae193d63ebaee35bf1a66dd50f5382dd878800635d4e428c3a9d35a59144a2f1a935e05ebc54a94fd3356f8a0255305409b2b74c555024924a51a67fcaf09d48382288d44778c7fb0d18424682548dee821715a1a719811ca6eb9b5bf824626250298404f09b2a27914f18961c45a172936f3329467bf04e544e65cb591f590b85fd5ff5094c5203877e69103d6b98a43087c5279a5500101008800410110098e9c6b220515599dee3232b7a884df7e31bc162c0b30da19354fd0935cd52fc28a7394105d61a14941d0901231fb06b07fadb795bcf0ae28e864f1998f9895c8e74d59893a6bb82bad734428d43f8e779006c7bfc86e0b9031fa855058f07c30af811b8cc148bdda51e3952bb0f7c07f9acd0c308e6ba43a0f2a3fe201d5883c5a2052235539eba66d68c188514b282650d563a0afbbe20965531afd337c029c72a83da51d2055044718375331981ff31c8497f2f795aed062bdb2b7bfceb64417b29be9111fe939d09ecfac7f18848d77bb163fe4a7a880fe331e97a02d53bba809e6eae4e63613edfee1540e0a01e483ec805c3d8feddb15d861a40e8b394c3c900abbb91cdb274ec0106aa3074b2664ba08418e9324a97601aeaf39efc77ec76042d10927d8eabbc8ce31875cb0d68315a4c8c9fa4ee128c1efda7d608f85a8d6d2d85ba67b709e5f4ef7cbdbb011abe29687cc6cef37792465f2ebe154c9139cc3ccee17e06fa58f3d152be618a9e5c395590b7079f5956aaff8f4d4c238eeaa36b1a944a5f6b0db236e0c631b240ddea86b14a0c0db8c572f076da374c9279218b48c1f852d81d40fe66870edb8d0c9040e5ffec43b42f2066d124bfeed5401bcb5db701dfd9ffce6aaede5a39a7ceb5c6f337a343358fb221da25aeddf2274ee7d2894cd0b964ede3a1c757265f4dcaef142d1854ff8718119e142718e6434ce047095b526a9fe09e2fe190cc16df70ec46178af114d73c2a8aae200fdd8edcf09caf0577ec0af48a1d1ce577673aca5393dceb9ce7b74289430d7e175f6bb9d9b59cdd1087b7bca5c3ce705e0075f29cfd4682ffebac323adff65a53ebe17049bad260acd69bbdc0e77cb6f867529c8cefdc83115af762299ea5bb8a32d89e3f2cabcb9bbc6258cd1f40b9541d6964fe3b2577d9e6bb264b306a22c02615767e2c6dcdc7e5ec0700346fc1b14dfff41d12297afc728172458e6d4a19d49ec55c5470dc9161ed81db764e2cb99ba50324b117fba1d27cfdef8707621fdcacf0ea1a92f1091ac2a838368da813eb486159e291a9e326eb13c01b62f01e51e3271bc2197e5cc683fc4b2a1f1459e12fc37b5aa2f7617e46ca5b9a1b46d2483f9d02fd45aa28fb00d2031b13f7f88b8ff2db3b1738155a1ef46e8cf358a0f705a878a2f63d2a7cd6cd826ae32cc65627717db1b47a8e6d0ed2fc8e776333280121ae2ecaf9f7ecedb2dc6b53a8c19e8c658932ec1cf70df186b05fe4f3a26f6c80ac1f6d6a2fcee7da7a9e69b223bb8c242adfd19ade28db60ffa4283813e18a97eab8a3dc80bfdaaaa209eb6c3d7e507ef245fb6045592b4c36bf49bb53eb1a3bc3ff902f74546652c504eff8e9750ef355145b1036e80ced1129c371baa43e111eb8fc7766af85b3deb5b9b9a2fcc633a23526a0a9cf8cb31e136ed93a8c0cd4a91adbe3810066e97a47293d7e2be1230d1bae5c328ce6e9ce70ea0ee999fdfb21335b82d0614db1793af455eea0fd069139a089e0b8ad22ac29c9f1e91fd976c56488e8f27948019535e419b7edc1f4bca6ba4b3db194e86b9792fc130aa308b8860d07e42d4dac02de1f44791398ed68c5b8bc0dcf28173d8b8c6386507b7d023938630902017ba4cd455b5adc3abf13880b0952e610711d871d81118f7565dac7bce12295e48024ce15863989d42694313ba3c82cf1158999633f571eef9938c4a5a736e017ec34b2754222a687a62aa083a28a6cb78ff06ac0792ac2134e2001dff7cd9840da0c51e2178e23083d4d4430d55e21d6d0e348d879e0b87245600f02ed8596d78de78dd51f2739812ae6d395d7550272ac78e89242121cf03e787df840be200ec2601c9ca3a98f9d21ad392efd544c5e3c38809d14319b90e820242aaaa3a360e65939d2dddc32803359560d6b0edd8d081df726026a9a15ddb7d6241711c0aee0128bacebdd42ce1e625b7e6e852bf8a9471d25f18cb9b19aebae70e0b70ea22c33518284ee154256b81a724dbe27f670089725e5526085b36109c6358529b493db01b4e3d83900f2178f414a4e3067e10f9b3149af3aaa83545f2a338fb5dfcd80dd4225dee48479cc25e19db52867c84b18a518b18f2633c6970ab2707147312d5a1ce435b7e73d2df19cbd1fa8f93f7f348af6f918baf3f6f021b09539cc78d9cfb415f83037658a5b6f4747b1e20d4d3149280a4175442a77020a2cbc5537b067e07bb821104652d48e2e28ca0d1feb248d5647e8a0bcdaa9b194add9ff3cf2f1394010f8ce321e46c4d47a30577ef9c7130c6ae9062a4e343a8f6b74c7074f4735a42e4cbe22f9653357a4f7aa7c51fd9a9685db3ef052bedd4ed0d3dc71e43b7213918abf42d48c37519965314e55fd426ca4c88b07bb400264c706298ca6ecb0ddd3145542591c5403e61a111f2a6dfdc7ee7b42b979249626789cdd69c02ee0ab5d472813480d1b3703b8cd1d590d40c875596287b30489ea9fb7a40b96907300f4ec4e39bcd1a15d9981e264b84adc2e73aa1cc105ead2be5304291d0d94bbc480cd3f4f243194eadd864e56123d0e0c34e7ca70292f03a6285e9e16bfc3746ccf92e8a0e5ae198c76e34b45a271e10a3ecb6f304832cb5bc768a41971ce3b1b7a5025ed010a7f0fb683aae385ca6b19f9833d2e4220344a6b51bd3f0ccee73a46eb13ecfee30c9092dd203fefe28a48c11f8a36a0f1a5f177b2b90a98eda0442523fceb2980bc329b2e1015f1824fa3ae2172e067ff37daf4f94c8a8827da1e9e25fbe45ec8ac1142540f4783cdef1b78e8f20c187e3465c394fa24abd659db09bd9aa514f7931c5270462486e51f6c650ee214c1b8eed346a5e4006edb912eddb8b01aa2255248119628aca2bc76c6617a9fb043830727864d14bd666c2eb467749c3450463421efbae638b93fde6afe2a5194ae4e6524a0bc54cf335463edf1b96196950accb8ce8f26ea2f65db25fbf5c6ae38ef608afebd1579a0be5516c125099d21e4efeb04c1a7234efcc5353335441cde22ba144882fc83b33ae0634a30e9c889b1687cfc4d5e0b7055f7f27cbb303e6400ed394ce715d1a7d05e4269d166dc0a2f20cebc84d2a42f2544e82cc6dfd795da14690c9b6b02072bc2609c7d5491262cd3b10a4c7846529c344407a450491998581785095c5f8eb8711e68370beb724bd5d85d6e104b21456cdeb648adec63f24663ef2ee22b5ff9f8b0f72551b7a0f80a873977f43afdb04836f668c06b5ba58a194f3b22ce99539949dbb6bcf8cc9886ed41986d3f2b63341d30a92d1659e76dadbecc24a66699ea3bb2273d99a1ca8669dc6dd9addc741cd8475341149b1ef56c70739abc7ba266cf11492e827fd94df90ce022cdc37cedc9c1dee70f87f4a343ef2ddeb5b80ac045037384684d730c989b97d90ec1c247154a14a012f88c5891da9a641ecee4c1c684645c15ec7d8d641d972db84388da9c0ed902ae0ed68be736619e44736a41bf3952b3e0e114eacaedb67ff1cd7245bbe4daab96b15b773e02c88b841439d77b301b914e2d2628ebf5a6494c411801333df26dacdc183d4c8b1678a939c2899202b333d76c2024e2920044d4adaf9da7d26a05b9b6d8d3ff8085027d62d8cfe65bf24d1e3407b6cc6e5e82a59c886f1232cdc3d57601fe4a823cbc1815843f3edbca4f410eec03bf1e05f0ab8b8606504a953bff52909dcc0fc06e48896ea3f991f76ee33aed67070298203d78f169c749b1fa72058600d447209e883af230543d5d133756bc1592fdd56698f49775bf70540732b7b397ac54ef660c6224af38ceacab351dc545272001859384a90abcbb4a1294054d088c223210cd76999f9cc118762393fec18fa9de85ec4038a074f47d6e92039c29334de93a322baed58febcea235481ad8738c61d4fbd90c2c5337605af54f1b5f74d30b78f11c9f5b6a04a3cf78dbfce6fad15dbba7ce7eaab658e18ac8b2818a317efe024b007010392427fb2ce58a89de4bf8cc551a971cd78bab3c66b78d1e3cd6cabd105e0da7d74a3db835204cd95bb89388de5d8263f68688b7b3345550f3ee00304fa48437fd759c4cdbf75c17d74403fb6bf9d1a49a625163c988c406b6422566b990123a447e06a9c60a8c74426cb460c9ec6f0f60fe6a746c1fc369d35e227bcd32dfd327e6aeeda8fc3d1d731a2e9d42817efdf68c0fc146541231b59abbbe0036ea791c06eacd926d5247146c4400d44a6362607aa927fe173641b0bd88933df7007da3e879e6bc060f34c4ca26f7fcf472c320a48ce09ac1a0abb30ef17fa2e09bd2b0b893754773dc7f7d0c01c3bb7af63c69440652de4e66e41c5b6fa12f120f3de3090cc26bdd9c4c77e7fdefd0be452cf513d0bdac875cc88ca6d67de08ff1124cf31df9698ddf7814e31f16ff295f40e4cab8e9944e5e986472313cc2a0e71465a9b96023d35837e3f332d5deff422c09677a5503b3ca5b985d47815d44c8b8ff8caf7098d13f917414c5ca024200256c1142db20c708d7f77e29cc764e2cadea2b4eac8258238388d84ecd0753382f1dbd21ad40389a0a2c34887627b124778feefaf3fc33bb19344dbaf837f1a0b2c3cd005dd3196e278e350acd3bc67ab8a0be8de17eba2dc93f86232087d56cc0edf7efac9d709dbc89b430335920a4ab91cd4fc1fe5f07c7ccb49385034beb588efbca277b947c69a1af1cce39541993fe82ba2ae5dd10f58dfbe05ce267b2843260789fc60806cf9a6022301b7e93d517c3b60505c760d055ed7bd257ecbb4549ad4d134884ec544c1f5b11339f85ca45889a30c591345869c22dd90b404a9d6d47338212a55e89b6e1f67ed54f107b503062a63a8d3da8a791299c9bf461a044abc8162726f07b673fd2d62910e9d76faac978fc6ca163908b07082af8b1223373e201e0d7a9167189099e728c8a36a4b90afda49c50724f2f2ff470f955bed9e051c47bc13a715c59b47489492ce430c977c7675f8db0944395d4baaad6dbb70b32fa00412401276102f05366a894a69ce598a9db8d11d6b75273b5d71e9a37a18e96161191bc61887294bceec5085e79c95c95cddb90d5e6b0f0199db77a0ea7aab9421c1fc0b2158e1e53e2e5566cab4635a5d63ccb9ac0571f258e41b47aa3a451c6a67313df476d1db2f2bf6cfddd239487250469604de2178b2adbef0e4cda797f2b7651b4d9645cec1b7d2ea7790a9f5faff1d671b3d1c63c1b7b058f20ee0f2e9756c94f7d0f0a2b8d06ae9461a532a3079f045e8756d2ff8951cea227945ec65a0506d6c1c8c9a8120d17ccecd306d4390f8c0aa45ee89eb4b8949e1e0f0db06ff8e9cf96b18d3839b1554b8951ea95ba52af862124b7b7896f99f672a4978f6f36852fbe100b23e757c10605b8b55223c4acd9762f09448b96c651c74925d144e6b9465f2e7924d94fad8832948bc9d12ac60a1c80a9855ca088d55fd69c7503f56ac6e0b4ebb7945657389c88287370e55f47d63615f3c0a3d34d5c58e4a54392c67fcbf4b13fc93ad381c965a2b0ce6d3fc773cc71699e4b4e67c8049e29038ea5197d1c1c6ca5bdd971c977bf568f21034c943546c49f9faf8f1f18d0a8667f8b3694e4ed45d0f192c84625f4d78e67acb7ca4f66f7e6d2505be174eeb6905beb23b9988971845397563c5859effab36fc8039bd409f3b07a5e006fe6ab33c3c56e01223437ae3009c500c5499bee189f7bf9334c8199d9f60014a078108536baee59f74ec8a061de43bfeaa00430d3c61137c63b04d4098a34e905001400000000000800060003000000"], 0x214c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0001"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="1200"], 0x1ac}}, 0x44000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/pci/devices\x00', 0x8080, 0x0) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000180), 0x0) unshare$auto(0x40000080) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000064cf4097e54843e4f28e62a1d00700", @ANYRES16=r7, @ANYBLOB="010027bd700001dcdf252700000018000180140002006c6f00"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4048081}, 0x20048010) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0x141c01, 0x0) socket(0x10, 0x3, 0x6) ioctl$auto(0x3, 0x8070ae9f, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) exit$auto(0x2) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) 1.69245685s ago: executing program 5 (id=1342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r0) (async) syz_clone3(&(0x7f0000000280)={0x800, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x26}, &(0x7f00000001c0)=""/108, 0x6c, &(0x7f0000000140)=""/16, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) (async) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000300)='ns/user\x00') setns(r3, 0x0) (async) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x4}, @IOAM6_ATTR_SC_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8010) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex$auto(0x0, 0x3, 0x8243, 0x0, 0x0, 0x4) r4 = open$dir(0x0, 0x400, 0x108) (async) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/ext4/sda1/fc_info\x00', 0x81, 0x0) lseek$auto(r5, 0x5, 0x0) (async) fanotify_mark$auto(0xffffffffffffffff, 0xc, 0x40, r4, &(0x7f0000000080)='./file0\x00') 1.101369474s ago: executing program 6 (id=1343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/block/loop15/rqos/wbt/inflight\x00', 0x8a81, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f0000000000)=""/193, 0xc1) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/midi2\x00', 0xa0102, 0x0) lstat$auto(&(0x7f0000000040)='.\x00', &(0x7f0000000080)={0xce71, 0x6, 0x4, 0x2, 0x1, 0xfffffff7, 0x0, 0x8000000000000001, 0x0, 0x7, 0x6, 0xf45, 0x6, 0xd0da, 0x35, 0x4, 0xfffffffffffffff9}) read$auto(r3, &(0x7f0000000140)='):\x00', 0x1) ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r3, 0x40045702, &(0x7f0000000040)=0x7fffffff) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000000c0)={0x1, 0x4, 0xd, 0x1, 0x7fffffff, "e72171dd8801000000a72e8f"}) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x3c, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0xa888, 0x128}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 766.136773ms ago: executing program 5 (id=1344): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x20000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000080)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd5a, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(0x0, 0x0, 0x100) getsockopt$auto(r0, 0x84, 0x0, 0x0, &(0x7f00000000c0)=0x10000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') write$auto(0x3, 0x0, 0x100082) 691.38467ms ago: executing program 2 (id=1345): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x8000000000000000, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r0, 0x2, 0x4) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x1, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008074}, 0x48004) connect$auto(0x3, &(0x7f0000000140), 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) select$auto(0xa, 0x0, &(0x7f00000000c0)={[0xbb0, 0x8101, 0x80, 0x1, 0xb, 0x4db11da, 0x3, 0x1000000007f, 0x2, 0x0, 0x32, 0xffffffffffffffff, 0x10000, 0x7, 0x6, 0xb83]}, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x541b, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0xd69a, 0x2, 0x8000) socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf2514001ce43d862659aa3400000c00018008000100", @ANYRES32=r5, @ANYBLOB="0800120002000000"], 0x28}, 0x1, 0x0, 0x0, 0x40448c1}, 0x0) 379.313317ms ago: executing program 3 (id=1346): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c03000000000000002f", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x107000, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x15, 0x10006, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x40, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x4}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) r4 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy9/netdev:wlan0/tsf\x00', 0x0, 0x0) read$auto(r4, &(0x7f00000002c0)='^$\x00', 0x3) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c110000", @ANYRES16=r2, @ANYBLOB="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"/4406], 0x113c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) 156.544646ms ago: executing program 2 (id=1347): mkdir$auto(&(0x7f0000000040)='./file1\x00', 0xcf18) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) shmctl$auto(0x691, 0x3, 0x0) setsockopt$auto(0x3, 0x0, 0x32, 0x0, 0x34) ioctl$auto(r1, 0x41045508, 0x1) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mouse0\x00', 0x341, 0x0) write$auto_mousedev_fops_mousedev(r0, &(0x7f00000001c0)="8a38897280add297f3ab74d8bb5ce39d2bfb59f0dc6ccf236d2192a11855b8a0ed1801ed27807c0a552046", 0x2b) r2 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim1/fib/nexthop_bucket_activity\x00', 0x12840, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ppoll$auto(&(0x7f0000000000)={r3, 0x40, 0x1}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0xfffffffffffffffc) sendfile$auto(r2, r3, &(0x7f0000000180)=0x85a, 0x9c0) socket(0x15, 0x5, 0x0) io_uring_setup$auto(0x7, 0x0) clone$auto(0x5a, 0x105, 0x0, 0x0, 0x9) exit$auto(0x7) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000580), 0x101000, 0x0) pselect6$auto(0x5, 0x0, &(0x7f0000000080)={[0x83, 0xfffffffffffff7f4, 0x3, 0x2, 0x4d5e, 0x5, 0x8, 0xffffffffffffffff, 0x29, 0x1, 0x200000000000a, 0xa3, 0x8, 0x9, 0x80, 0x8]}, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1348): keyctl$auto(0xf, 0xfffffffffffffffe, 0x6, 0x80, 0x401) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002c40)='/sys/power/suspend_stats/success\x00', 0x840, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f0000000100)="0a1b9a615c7b0f8262cd0a", 0xb) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000010c0)=""/4096, 0x1000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen_full\x00', 0x200, 0x0) fdatasync$auto(r2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. syzkaller login: [ 62.487963][ T5816] cgroup: Unknown subsys name 'net' [ 62.633609][ T5816] cgroup: Unknown subsys name 'cpuset' [ 62.641493][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.019114][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.764531][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.773154][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.781902][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.789782][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.797724][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.806304][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.814903][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.815135][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.829798][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.830881][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.840051][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.846027][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.851082][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.858783][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.866198][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.872535][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.881258][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.887541][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.893408][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.903538][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.915766][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.915818][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.939397][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.948119][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.287958][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 66.301346][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 66.409713][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 66.497358][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.505400][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.513396][ T5828] bridge_slave_0: entered allmulticast mode [ 66.520298][ T5828] bridge_slave_0: entered promiscuous mode [ 66.531458][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.538564][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.545914][ T5829] bridge_slave_0: entered allmulticast mode [ 66.552546][ T5829] bridge_slave_0: entered promiscuous mode [ 66.567421][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.574843][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.582140][ T5828] bridge_slave_1: entered allmulticast mode [ 66.588769][ T5828] bridge_slave_1: entered promiscuous mode [ 66.596371][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 66.606691][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.614094][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.621472][ T5829] bridge_slave_1: entered allmulticast mode [ 66.627992][ T5829] bridge_slave_1: entered promiscuous mode [ 66.694978][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.713975][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.725262][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.738745][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.782025][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.789102][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.797267][ T5826] bridge_slave_0: entered allmulticast mode [ 66.804387][ T5826] bridge_slave_0: entered promiscuous mode [ 66.811639][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.819214][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.826656][ T5826] bridge_slave_1: entered allmulticast mode [ 66.835067][ T5826] bridge_slave_1: entered promiscuous mode [ 66.852909][ T5829] team0: Port device team_slave_0 added [ 66.861891][ T5828] team0: Port device team_slave_0 added [ 66.879157][ T5828] team0: Port device team_slave_1 added [ 66.886877][ T5829] team0: Port device team_slave_1 added [ 66.919290][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.951900][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.975484][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.985462][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.993002][ T5827] bridge_slave_0: entered allmulticast mode [ 66.999552][ T5827] bridge_slave_0: entered promiscuous mode [ 67.009991][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.017373][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.043626][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.056272][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.065764][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.092449][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.110818][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.117937][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.125918][ T5827] bridge_slave_1: entered allmulticast mode [ 67.132671][ T5827] bridge_slave_1: entered promiscuous mode [ 67.139494][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.146870][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.173027][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.190505][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.197466][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.224328][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.243568][ T5826] team0: Port device team_slave_0 added [ 67.276025][ T5826] team0: Port device team_slave_1 added [ 67.296044][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.332065][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.356466][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.364219][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.390316][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.403220][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.410992][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.437211][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.466550][ T5828] hsr_slave_0: entered promiscuous mode [ 67.473560][ T5828] hsr_slave_1: entered promiscuous mode [ 67.505987][ T5829] hsr_slave_0: entered promiscuous mode [ 67.512661][ T5829] hsr_slave_1: entered promiscuous mode [ 67.518770][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.526921][ T5829] Cannot create hsr debugfs directory [ 67.535379][ T5827] team0: Port device team_slave_0 added [ 67.559680][ T5827] team0: Port device team_slave_1 added [ 67.576747][ T5826] hsr_slave_0: entered promiscuous mode [ 67.584580][ T5826] hsr_slave_1: entered promiscuous mode [ 67.591464][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.599041][ T5826] Cannot create hsr debugfs directory [ 67.663115][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.673021][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.699491][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.737630][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.745710][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.771912][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.843489][ T5827] hsr_slave_0: entered promiscuous mode [ 67.849719][ T5827] hsr_slave_1: entered promiscuous mode [ 67.856230][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.863933][ T5827] Cannot create hsr debugfs directory [ 67.961133][ T5831] Bluetooth: hci0: command tx timeout [ 67.961258][ T54] Bluetooth: hci2: command tx timeout [ 68.003447][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.015922][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.036073][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.040401][ T54] Bluetooth: hci3: command tx timeout [ 68.042871][ T5831] Bluetooth: hci1: command tx timeout [ 68.066219][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.127322][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.136522][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.166747][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.187698][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.213774][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.225925][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.257377][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.267886][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.316958][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.325974][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.336285][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.352971][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.431463][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.499762][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.519501][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.526770][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.552101][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.559210][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.594036][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.617551][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.637740][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.668462][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.703045][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.710212][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.748143][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.755425][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.772197][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.794899][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.817399][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.824675][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.837131][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.844356][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.875027][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.882218][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.898482][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.905613][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.933428][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.945513][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.038443][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.056887][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.070639][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.162962][ T5828] veth0_vlan: entered promiscuous mode [ 69.185958][ T5828] veth1_vlan: entered promiscuous mode [ 69.285600][ T5828] veth0_macvtap: entered promiscuous mode [ 69.313910][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.327319][ T5828] veth1_macvtap: entered promiscuous mode [ 69.367690][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.385837][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.405408][ T5827] veth0_vlan: entered promiscuous mode [ 69.417818][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.432182][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.443055][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.452977][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.464298][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.489888][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.497370][ T5827] veth1_vlan: entered promiscuous mode [ 69.553678][ T5829] veth0_vlan: entered promiscuous mode [ 69.591951][ T5827] veth0_macvtap: entered promiscuous mode [ 69.609660][ T5827] veth1_macvtap: entered promiscuous mode [ 69.623546][ T5829] veth1_vlan: entered promiscuous mode [ 69.670608][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.678529][ T5829] veth0_macvtap: entered promiscuous mode [ 69.678620][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.688335][ T5829] veth1_macvtap: entered promiscuous mode [ 69.719159][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.732777][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.744029][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.754632][ T5826] veth0_vlan: entered promiscuous mode [ 69.778582][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.789806][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.802636][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.818708][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.826723][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.836814][ T5826] veth1_vlan: entered promiscuous mode [ 69.845473][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.856362][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.866386][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.879514][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.892659][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.902538][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.912076][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.921942][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.931395][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.951359][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.963464][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.973415][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.984164][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.995646][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.027803][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.039108][ T5826] veth0_macvtap: entered promiscuous mode [ 70.051204][ T5831] Bluetooth: hci2: command tx timeout [ 70.051481][ T54] Bluetooth: hci0: command tx timeout [ 70.065088][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.076158][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.085298][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.094137][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.120559][ T5831] Bluetooth: hci1: command tx timeout [ 70.126087][ T54] Bluetooth: hci3: command tx timeout [ 70.176020][ T5826] veth1_macvtap: entered promiscuous mode [ 70.271631][ T5891] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.3'. [ 70.271649][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.271670][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.298140][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.308999][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.323537][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.334772][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.344841][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.355342][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.366196][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.402336][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.417441][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.427443][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.438084][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.448058][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.458593][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.469632][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.495318][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.506218][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.517554][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.535685][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.545242][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.554389][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.578436][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.606691][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.703652][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.733485][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.788719][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.815796][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.896662][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.905311][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.534992][ T5899] Zero length message leads to an empty skb [ 71.805856][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.812648][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.121764][ T54] Bluetooth: hci2: command tx timeout [ 72.121773][ T5831] Bluetooth: hci0: command tx timeout [ 72.200890][ T54] Bluetooth: hci3: command tx timeout [ 72.206364][ T54] Bluetooth: hci1: command tx timeout [ 73.532162][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 73.555948][ T5940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12'. [ 74.072114][ T5940] syz.2.12 (5940) used greatest stack depth: 20448 bytes left [ 74.200381][ T54] Bluetooth: hci0: command tx timeout [ 74.201626][ T5841] Bluetooth: hci2: command tx timeout [ 74.281032][ T5841] Bluetooth: hci1: command tx timeout [ 74.281200][ T54] Bluetooth: hci3: command tx timeout [ 74.932580][ T5951] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.406103][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 77.664266][ T5986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'. [ 77.706540][ T5986] veth0_macvtap: left promiscuous mode [ 78.282270][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.605951][ T5990] syz.1.26 uses obsolete (PF_INET,SOCK_PACKET) [ 78.620601][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.28'. [ 78.670816][ T6002] ip6gre0: entered promiscuous mode [ 81.366840][ T6046] QAT: Invalid ioctl 21593 [ 81.391855][ T6046] QAT: Stopping all acceleration devices. [ 81.941868][ T6053] bridge0: port 3(bond0) entered blocking state [ 81.948557][ T6053] bridge0: port 3(bond0) entered disabled state [ 81.961982][ T6053] bond0: entered allmulticast mode [ 81.968528][ T6053] bond_slave_0: entered allmulticast mode [ 82.000277][ T6053] bond_slave_1: entered allmulticast mode [ 82.021880][ T6053] bond0: entered promiscuous mode [ 82.059238][ T6053] bond_slave_0: entered promiscuous mode [ 82.100405][ T6053] bond_slave_1: entered promiscuous mode [ 82.121351][ T6053] bridge0: port 3(bond0) entered blocking state [ 82.127951][ T6053] bridge0: port 3(bond0) entered forwarding state [ 86.571764][ T6121] QAT: Invalid ioctl 21593 [ 86.587581][ T6121] QAT: Stopping all acceleration devices. [ 87.173433][ T974] cfg80211: failed to load regulatory.db [ 92.881013][ T6199] bridge0: port 3(bond0) entered blocking state [ 92.890464][ T6199] bridge0: port 3(bond0) entered disabled state [ 92.896909][ T6199] bond0: entered allmulticast mode [ 92.921721][ T6199] bond_slave_0: entered allmulticast mode [ 92.940326][ T6199] bond_slave_1: entered allmulticast mode [ 92.981830][ T6199] bond0: entered promiscuous mode [ 93.005852][ T6199] bond_slave_0: entered promiscuous mode [ 93.020736][ T6199] bond_slave_1: entered promiscuous mode [ 93.036481][ T6199] bridge0: port 3(bond0) entered blocking state [ 93.042998][ T6199] bridge0: port 3(bond0) entered forwarding state [ 93.359506][ T6189] netlink: 334 bytes leftover after parsing attributes in process `syz.2.78'. [ 94.123228][ T6226] capability: warning: `syz.1.85' uses 32-bit capabilities (legacy support in use) [ 96.501403][ T6257] ======================================================= [ 96.501403][ T6257] WARNING: The mand mount option has been deprecated and [ 96.501403][ T6257] and is ignored by this kernel. Remove the mand [ 96.501403][ T6257] option from the mount to silence this warning. [ 96.501403][ T6257] ======================================================= [ 101.757804][ T6317] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 102.031789][ T6324] process 'syz.0.111' launched './file0' with NULL argv: empty string added [ 102.741695][ T6342] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[6342] [ 105.121241][ T6373] netlink: 342 bytes leftover after parsing attributes in process `syz.3.120'. [ 107.163478][ T6398] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 112.589906][ T6512] can: request_module (can-proto-3) failed. [ 112.593088][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.149'. [ 112.643523][ T6514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.149'. [ 113.040670][ T6524] mmap: syz.2.150 (6524) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.069867][ T6560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.161'. [ 115.658170][ T6543] lo: entered allmulticast mode [ 115.672286][ T6542] lo: left allmulticast mode [ 116.379994][ T6573] erspan0: entered allmulticast mode [ 116.641692][ T6579] netlink: 338 bytes leftover after parsing attributes in process `syz.1.165'. [ 118.574433][ T6605] FAULT_INJECTION: forcing a failure. [ 118.574433][ T6605] name failslab, interval 1, probability 0, space 0, times 1 [ 118.650223][ T6605] CPU: 0 UID: 0 PID: 6605 Comm: syz.1.171 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 118.660866][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.670934][ T6605] Call Trace: [ 118.674213][ T6605] [ 118.677145][ T6605] dump_stack_lvl+0x16c/0x1f0 [ 118.681842][ T6605] should_fail_ex+0x497/0x5b0 [ 118.686528][ T6605] ? fs_reclaim_acquire+0xae/0x150 [ 118.691647][ T6605] should_failslab+0xc2/0x120 [ 118.696333][ T6605] __kmalloc_noprof+0xce/0x4f0 [ 118.701107][ T6605] ? rcu_is_watching+0x12/0xc0 [ 118.705877][ T6605] ? kernfs_fop_write_iter+0x223/0x500 [ 118.711351][ T6605] kernfs_fop_write_iter+0x223/0x500 [ 118.716650][ T6605] vfs_write+0x5ae/0x1150 [ 118.720992][ T6605] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 118.726813][ T6605] ? __pfx___mutex_lock+0x10/0x10 [ 118.731845][ T6605] ? __pfx_vfs_write+0x10/0x10 [ 118.736638][ T6605] ksys_write+0x12b/0x250 [ 118.740972][ T6605] ? __pfx_ksys_write+0x10/0x10 [ 118.745839][ T6605] do_syscall_64+0xcd/0x250 [ 118.750355][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.756258][ T6605] RIP: 0033:0x7f7509985d29 [ 118.760676][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.780297][ T6605] RSP: 002b:00007f750a7f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.788715][ T6605] RAX: ffffffffffffffda RBX: 00007f7509b75fa0 RCX: 00007f7509985d29 [ 118.796689][ T6605] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 118.804833][ T6605] RBP: 00007f750a7f1090 R08: 0000000000000000 R09: 0000000000000000 [ 118.812812][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.820784][ T6605] R13: 0000000000000000 R14: 00007f7509b75fa0 R15: 00007ffe9bd7caa8 [ 118.828770][ T6605] [ 121.005702][ T6655] FAULT_INJECTION: forcing a failure. [ 121.005702][ T6655] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 121.045075][ T6655] CPU: 1 UID: 0 PID: 6655 Comm: syz.0.181 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 121.055733][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.065829][ T6655] Call Trace: [ 121.069126][ T6655] [ 121.072077][ T6655] dump_stack_lvl+0x16c/0x1f0 [ 121.076794][ T6655] should_fail_ex+0x497/0x5b0 [ 121.081519][ T6655] _copy_from_iter+0x29b/0x1400 [ 121.086410][ T6655] ? trace_lock_acquire+0x14e/0x1f0 [ 121.091660][ T6655] ? __pfx__copy_from_iter+0x10/0x10 [ 121.096980][ T6655] ? __virt_addr_valid+0x1a4/0x590 [ 121.102128][ T6655] ? __virt_addr_valid+0x5e/0x590 [ 121.107186][ T6655] ? __phys_addr_symbol+0x30/0x80 [ 121.112250][ T6655] ? __check_object_size+0x488/0x710 [ 121.117579][ T6655] kernfs_fop_write_iter+0x19d/0x500 [ 121.122908][ T6655] vfs_write+0x5ae/0x1150 [ 121.127265][ T6655] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 121.133107][ T6655] ? __pfx___mutex_lock+0x10/0x10 [ 121.138169][ T6655] ? __pfx_vfs_write+0x10/0x10 [ 121.142998][ T6655] ksys_write+0x12b/0x250 [ 121.147354][ T6655] ? __pfx_ksys_write+0x10/0x10 [ 121.152242][ T6655] do_syscall_64+0xcd/0x250 [ 121.156777][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.162708][ T6655] RIP: 0033:0x7f626bb85d29 [ 121.167142][ T6655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.186785][ T6655] RSP: 002b:00007f626c95a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.195240][ T6655] RAX: ffffffffffffffda RBX: 00007f626bd75fa0 RCX: 00007f626bb85d29 [ 121.203246][ T6655] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 121.211242][ T6655] RBP: 00007f626c95a090 R08: 0000000000000000 R09: 0000000000000000 [ 121.219244][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.227242][ T6655] R13: 0000000000000000 R14: 00007f626bd75fa0 R15: 00007ffd00364418 [ 121.235266][ T6655] [ 121.972627][ T6675] rnbd_client L213: map_device: Parameters missing [ 123.110458][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 126.228063][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 127.360432][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 133.170644][ T6853] netlink: 'syz.2.223': attribute type 1 has an invalid length. [ 133.178340][ T6853] netlink: 230 bytes leftover after parsing attributes in process `syz.2.223'. [ 133.242681][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.249098][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.471541][ T6869] netlink: 342 bytes leftover after parsing attributes in process `syz.0.228'. [ 139.614815][ T6939] openvswitch: netlink: Message has 217 unknown bytes. [ 141.697718][ T6951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.248'. [ 146.218993][ T7064] netlink: 290 bytes leftover after parsing attributes in process `syz.3.269'. [ 149.254672][ T7126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.284'. [ 151.528262][ T7173] lo: entered allmulticast mode [ 151.555610][ T7172] lo: left allmulticast mode [ 152.346220][ T7193] netlink: 146 bytes leftover after parsing attributes in process `syz.3.299'. [ 152.722395][ T7204] netlink: 146 bytes leftover after parsing attributes in process `syz.3.299'. [ 153.380221][ T7236] netlink: 'syz.0.307': attribute type 14 has an invalid length. [ 153.403588][ T7236] netlink: 330 bytes leftover after parsing attributes in process `syz.0.307'. [ 154.450401][ T7266] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 154.524150][ T7266] svc: failed to register nfsdv3 RPC service (errno 111). [ 154.545846][ T7281] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 154.594034][ T7266] svc: failed to register nfsaclv3 RPC service (errno 111). [ 158.056494][ T7342] netlink: 350 bytes leftover after parsing attributes in process `syz.0.331'. [ 158.146212][ T7342] netlink: 350 bytes leftover after parsing attributes in process `syz.0.331'. [ 160.323583][ T7390] netlink: 350 bytes leftover after parsing attributes in process `syz.1.340'. [ 162.341891][ T7422] ptrace attach of "./syz-executor exec"[5829] was attempted by ""[7422] [ 163.459180][ T7432] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 163.604004][ T7432] svc: failed to register nfsdv3 RPC service (errno 111). [ 163.639638][ T7432] svc: failed to register nfsaclv3 RPC service (errno 111). [ 165.498182][ T7471] sd 0:0:1:0: PR command failed: 1026 [ 165.531112][ T7471] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 165.537893][ T7472] sd 0:0:1:0: PR command failed: 1026 [ 165.572147][ T7471] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 165.580243][ T7472] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 165.586977][ T7472] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 165.906239][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 165.960653][ T7483] netlink: 32 bytes leftover after parsing attributes in process `syz.1.361'. [ 166.008095][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.1.361'. [ 167.642726][ T7539] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[7539] [ 168.304522][ T7581] delete_channel: no stack [ 169.540917][ T7598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.381'. [ 172.530064][ T29] audit: type=1800 audit(6031115490.367:2): pid=7648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.393" name="dbroot" dev="configfs" ino=14961 res=0 errno=0 [ 172.552245][ T7648] db_root: cannot open: › [ 172.604983][ T7650] delete_channel: no stack [ 172.834752][ T7656] netlink: 330 bytes leftover after parsing attributes in process `syz.0.394'. [ 173.446316][ T7662] Invalid ELF header magic: != ELF [ 173.660178][ T7672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 173.737008][ T7672] bridge0: entered promiscuous mode [ 175.854399][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 177.230491][ T7761] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 177.941391][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 178.013643][ T7774] Invalid ELF header magic: != ELF [ 178.028099][ T7775] Invalid ELF header magic: != ELF [ 180.810997][ T7866] vivid-013: ================= START STATUS ================= [ 180.819061][ T7866] vivid-013: Generate PTS: true [ 180.938468][ T7866] vivid-013: Generate SCR: true [ 181.081235][ T7866] tpg source WxH: 640x360 (Y'CbCr) [ 181.119304][ T7866] tpg field: 1 [ 181.122766][ T7866] tpg crop: 640x360@0x0 [ 181.126944][ T7866] tpg compose: 640x360@0x0 [ 181.169907][ T7866] tpg colorspace: 8 [ 181.173771][ T7866] tpg transfer function: 0/0 [ 181.178377][ T7866] tpg Y'CbCr encoding: 0/0 [ 181.254160][ T7866] tpg quantization: 0/0 [ 181.301578][ T7866] tpg RGB range: 0/2 [ 181.311618][ T7866] vivid-013: ================== END STATUS ================== [ 181.974018][ T7890] netlink: 338 bytes leftover after parsing attributes in process `syz.3.442'. [ 182.826183][ T7898] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.875101][ T7898] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 182.971677][ T7898] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 183.008377][ T7898] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.029424][ T7898] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.089896][ T7898] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.109897][ T7898] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.115933][ T7898] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 183.175036][ T7898] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 183.211258][ T7898] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.217320][ T7898] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 183.252466][ T7898] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 184.890060][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.049065][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.128459][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 185.219068][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.237806][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 185.355310][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 185.408748][ T7929] netlink: 54 bytes leftover after parsing attributes in process `syz.1.451'. [ 186.713776][ T7962] FAULT_INJECTION: forcing a failure. [ 186.713776][ T7962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.763251][ T7962] CPU: 0 UID: 0 PID: 7962 Comm: syz.3.459 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 186.773906][ T7962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.784005][ T7962] Call Trace: [ 186.787308][ T7962] [ 186.790270][ T7962] dump_stack_lvl+0x16c/0x1f0 [ 186.794982][ T7962] should_fail_ex+0x497/0x5b0 [ 186.799695][ T7962] _copy_from_user+0x2e/0xd0 [ 186.804315][ T7962] __sys_bpf+0x215/0x57a0 [ 186.808667][ T7962] ? __pfx_lock_release+0x10/0x10 [ 186.813713][ T7962] ? __pfx___sys_bpf+0x10/0x10 [ 186.818503][ T7962] ? vfs_write+0x306/0x1150 [ 186.823035][ T7962] ? __mutex_unlock_slowpath+0x164/0x690 [ 186.828727][ T7962] ? fput+0x67/0x440 [ 186.832635][ T7962] ? ksys_write+0x1ba/0x250 [ 186.837147][ T7962] ? __pfx_ksys_write+0x10/0x10 [ 186.842008][ T7962] __x64_sys_bpf+0x78/0xc0 [ 186.846426][ T7962] ? lockdep_hardirqs_on+0x7c/0x110 [ 186.851630][ T7962] do_syscall_64+0xcd/0x250 [ 186.856142][ T7962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.862045][ T7962] RIP: 0033:0x7fc8c3f85d29 [ 186.866465][ T7962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.886077][ T7962] RSP: 002b:00007fc8c4d6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.894496][ T7962] RAX: ffffffffffffffda RBX: 00007fc8c4175fa0 RCX: 00007fc8c3f85d29 [ 186.902470][ T7962] RDX: 00000000000000a3 RSI: 0000000020000000 RDI: 0000000000000000 [ 186.910442][ T7962] RBP: 00007fc8c4d6a090 R08: 0000000000000000 R09: 0000000000000000 [ 186.918416][ T7962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.926390][ T7962] R13: 0000000000000000 R14: 00007fc8c4175fa0 R15: 00007fff141ca388 [ 186.934376][ T7962] [ 186.937443][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.008767][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.118218][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.197799][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.287239][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.221971][ T8035] Invalid ELF header magic: != ELF [ 188.258141][ T8036] Invalid ELF header magic: != ELF [ 189.031024][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.188142][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.268486][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.350049][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.226398][ T8064] random: crng reseeded on system resumption [ 190.816639][ T8078] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 192.425813][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.480'. [ 194.111183][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 194.455738][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.463057][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.553732][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.570788][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.579560][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.589187][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.597277][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 195.605707][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.165064][ T8167] chnl_net:caif_netlink_parms(): no params data found [ 197.003669][ T8167] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.013264][ T8167] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.028519][ T8167] bridge_slave_0: entered allmulticast mode [ 197.035732][ T8167] bridge_slave_0: entered promiscuous mode [ 197.045688][ T8167] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.057238][ T8167] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.064460][ T8167] bridge_slave_1: entered allmulticast mode [ 197.097286][ T8167] bridge_slave_1: entered promiscuous mode [ 197.319224][ T8167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.345297][ T8167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.392022][ T8167] team0: Port device team_slave_0 added [ 197.409010][ T8167] team0: Port device team_slave_1 added [ 197.524390][ T8167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.541756][ T8167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.613523][ T8167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.686777][ T8167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.696403][ T8167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.724064][ T5841] Bluetooth: hci4: command tx timeout [ 197.742819][ T8167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.803882][ T8167] hsr_slave_0: entered promiscuous mode [ 197.810393][ T8167] hsr_slave_1: entered promiscuous mode [ 197.825793][ T8167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.834246][ T8167] Cannot create hsr debugfs directory [ 198.158096][ T8167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 198.203500][ T8167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.224914][ T8167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.325088][ T8167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.552102][ T8167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.584295][ T8167] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.611864][ T6646] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.619063][ T6646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.687802][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.695724][ T6646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.130974][ T8167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.258224][ T8259] Process accounting resumed [ 199.772402][ T5841] Bluetooth: hci4: command tx timeout [ 199.940503][ T8167] veth0_vlan: entered promiscuous mode [ 200.012461][ T8167] veth1_vlan: entered promiscuous mode [ 200.118104][ T8167] veth0_macvtap: entered promiscuous mode [ 200.142515][ T8167] veth1_macvtap: entered promiscuous mode [ 200.197244][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.227582][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.248611][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.270116][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.294984][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.308072][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.323820][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.347033][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.371774][ T8167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.397350][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.428851][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.448788][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.468630][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.480338][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.482484][ T8295] Process accounting resumed [ 200.505979][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.528649][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.551014][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.584023][ T8167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.611011][ T8167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.636253][ T8167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.648994][ T8167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.658296][ T8167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.719852][ T8302] netlink: 44 bytes leftover after parsing attributes in process `syz.0.528'. [ 200.858726][ T7059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.875695][ T7059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.925143][ T8306] netlink: 4737 bytes leftover after parsing attributes in process `syz.2.529'. [ 200.940501][ T7034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.949310][ T7034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.841911][ T5841] Bluetooth: hci4: command tx timeout [ 203.911473][ T5841] Bluetooth: hci4: command tx timeout [ 204.189026][ T8379] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.195421][ T8379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.208217][ T8379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.215822][ T8379] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.257221][ T8379] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 204.264692][ T8379] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 205.741451][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.219207][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.219221][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.219264][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.994408][ T8459] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 207.008916][ T8459] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.026697][ T8459] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 207.066078][ T8459] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 207.095489][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 207.165415][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 207.679892][ T8515] aoe: can't write to that file. [ 208.294035][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 209.004568][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.084081][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 209.085817][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.345753][ T8558] Invalid ELF header magic: != ELF [ 211.153473][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 211.389371][ T8567] Invalid ELF header magic: != ELF [ 211.821726][ T8579] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 215.460259][ T8729] warning: `syz.4.613' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 216.100051][ T8741] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.617'. [ 216.120514][ T8740] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.617'. [ 216.149923][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 216.175849][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 216.854551][ T8751] Invalid ELF header magic: != ELF [ 217.852409][ T8760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.620'. [ 217.985512][ T8766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.623'. [ 218.271535][ T8760] geneve1: entered allmulticast mode [ 218.384943][ T8766] veth0_macvtap: left promiscuous mode [ 218.695694][ T8774] netlink: 'syz.0.624': attribute type 1 has an invalid length. [ 219.702788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 219.712045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 219.894795][ T8783] tipc: Started in network mode [ 219.903554][ T8783] tipc: Node identity ee00, cluster identity 4711 [ 219.944611][ T8783] tipc: Node number set to 60928 [ 220.225145][ T8790] Process accounting resumed [ 220.618593][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 223.258111][ T8875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.643'. [ 224.696644][ T8919] Invalid ELF header magic: != ELF [ 225.034451][ T8919] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 226.175822][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 226.453481][ T8945] netlink: 334 bytes leftover after parsing attributes in process `syz.3.658'. [ 229.837595][ T8976] kexec: Could not allocate control_code_buffer [ 230.218131][ T9000] blktrace: Concurrent blktraces are not allowed on sda [ 231.688061][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 234.303807][ T9105] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 235.927069][ T9077] kexec: Could not allocate control_code_buffer [ 237.584502][ T9189] MTRR 1 not used [ 238.508359][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'. [ 238.539512][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'. [ 239.434220][ T9230] netlink: 338 bytes leftover after parsing attributes in process `syz.0.707'. [ 240.513704][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 241.944690][ T9284] scsi_strcpy_devinfo: vendor string ';íÙ/&cŒÀ' is too long [ 243.193025][ T29] audit: type=1804 audit(6031115570.393:3): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.724" name="/newroot/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id" dev="configfs" ino=23533 res=1 errno=0 [ 243.239377][ T9297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 243.269913][ T29] audit: type=1800 audit(6031115570.393:4): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.724" name="lu_gp_id" dev="configfs" ino=23533 res=0 errno=0 [ 243.316100][ T9297] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.322205][ T9297] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.469098][ T9308] Process accounting resumed [ 243.495717][ T9308] kstrtoul() returned -22 for lu_gp_id [ 243.745991][ T9319] netlink: 342 bytes leftover after parsing attributes in process `syz.2.729'. [ 244.014747][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.363170][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.659144][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 244.866954][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.076705][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.086728][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.095598][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.103697][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.114142][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 245.121556][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.301168][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.363559][ T9342] netlink: 'syz.2.735': attribute type 2 has an invalid length. [ 245.375373][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 245.381455][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.395799][ T9342] netlink: 330 bytes leftover after parsing attributes in process `syz.2.735'. [ 245.687308][ T9320] kstrtoul() returned -22 for lu_gp_id [ 245.808507][ T35] bridge_slave_1: left allmulticast mode [ 245.828960][ T35] bridge_slave_1: left promiscuous mode [ 245.846072][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.885367][ T35] bridge_slave_0: left allmulticast mode [ 245.891157][ T35] bridge_slave_0: left promiscuous mode [ 245.913711][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.899631][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.930382][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.968479][ T35] bond0 (unregistering): Released all slaves [ 247.019416][ T9339] chnl_net:caif_netlink_parms(): no params data found [ 247.215832][ T54] Bluetooth: hci0: command tx timeout [ 247.927938][ T9312] kstrtoul() returned -22 for lu_gp_id [ 247.939457][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.949294][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.961798][ T9339] bridge_slave_0: entered allmulticast mode [ 247.970546][ T9339] bridge_slave_0: entered promiscuous mode [ 248.114765][ T35] hsr_slave_0: left promiscuous mode [ 248.160770][ T35] hsr_slave_1: left promiscuous mode [ 248.188276][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.195878][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.251729][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.259186][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.281417][ T9373] kstrtoul() returned -22 for lu_gp_id [ 248.304087][ T35] veth1_macvtap: left promiscuous mode [ 248.310846][ T35] veth1_vlan: left promiscuous mode [ 248.316495][ T35] veth0_vlan: left promiscuous mode [ 248.547232][ T9380] kstrtoul() returned -22 for lu_gp_id [ 249.223883][ T35] team0 (unregistering): Port device team_slave_1 removed [ 249.274993][ T54] Bluetooth: hci0: command tx timeout [ 249.314067][ T35] team0 (unregistering): Port device team_slave_0 removed [ 249.995077][ T9339] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.004409][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.012373][ T9339] bridge_slave_1: entered allmulticast mode [ 250.019497][ T9339] bridge_slave_1: entered promiscuous mode [ 250.230880][ T9339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.283048][ T9339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.671407][ T9339] team0: Port device team_slave_0 added [ 250.709491][ T9339] team0: Port device team_slave_1 added [ 250.760526][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.787019][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.855472][ T9339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.926306][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.933303][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.985762][ T9395] kstrtoul() returned -22 for lu_gp_id [ 250.992615][ T9339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.140879][ T9411] netlink: 'syz.0.743': attribute type 2 has an invalid length. [ 251.303816][ T9410] kstrtoul() returned -22 for lu_gp_id [ 251.354177][ T54] Bluetooth: hci0: command tx timeout [ 251.377642][ T9339] hsr_slave_0: entered promiscuous mode [ 251.395139][ T9339] hsr_slave_1: entered promiscuous mode [ 251.430035][ T9339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.437760][ T9339] Cannot create hsr debugfs directory [ 251.982377][ T9424] netlink: 342 bytes leftover after parsing attributes in process `syz.2.746'. [ 252.107659][ T9416] kstrtoul() returned -22 for lu_gp_id [ 252.245906][ T9339] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.271085][ T9437] Invalid ELF header magic: != ELF [ 252.284825][ T9339] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.306855][ T9339] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.331855][ T9339] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.461821][ T9436] kstrtoul() returned -22 for lu_gp_id [ 252.571107][ T9339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.645601][ T9339] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.681686][ T6646] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.688870][ T6646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.736341][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.743596][ T6646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.842743][ T9339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.908249][ T9339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.083578][ T29] audit: type=1804 audit(6031115580.334:5): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.752" name="/newroot/sys/kernel/tracing/set_event_pid" dev="tracefs" ino=1061 res=1 errno=0 [ 253.372993][ T9339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.414523][ T54] Bluetooth: hci0: command tx timeout [ 254.181580][ T9339] veth0_vlan: entered promiscuous mode [ 254.230954][ T9339] veth1_vlan: entered promiscuous mode [ 254.312352][ T9339] veth0_macvtap: entered promiscuous mode [ 254.334512][ T9339] veth1_macvtap: entered promiscuous mode [ 254.408801][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.438186][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.457149][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.489412][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.515147][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.532301][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.552919][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.582561][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.624495][ T9339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.663138][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.704162][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.724949][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.745991][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.786348][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.809804][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.842333][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.864119][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.892910][ T9339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.009295][ T9339] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.028928][ T9339] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.074698][ T9339] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.083458][ T9339] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.437593][ T7031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.513493][ T7031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.632348][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.638721][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.831087][ T7034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.838955][ T7034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.941668][ T9457] kstrtoul() returned -22 for lu_gp_id [ 256.068250][ T9456] kstrtoul() returned -22 for lu_gp_id [ 256.362139][ T9543] can: request_module (can-proto-0) failed. [ 257.621980][ T9564] kstrtoul() returned -22 for lu_gp_id [ 258.420602][ T9591] Process accounting resumed [ 259.130751][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'. [ 259.679085][ T9575] kstrtoul() returned -22 for lu_gp_id [ 259.785273][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 259.845949][ T9617] kstrtoul() returned -22 for lu_gp_id [ 260.649417][ T9646] cgroup: fork rejected by pids controller in /syz0 [ 260.815713][ T9651] kstrtoul() returned -22 for lu_gp_id [ 260.830769][ T9663] kstrtoul() returned -22 for lu_gp_id [ 260.998112][ T9628] sp0: Synchronizing with TNC [ 261.208592][ T9628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.772'. [ 261.501546][ T9628] hsr_slave_0 (unregistering): left promiscuous mode [ 261.557671][ T9641] kstrtoul() returned -22 for lu_gp_id [ 262.540562][ T29] audit: type=1800 audit(6031115589.833:6): pid=9701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.778" name="members" dev="configfs" ino=25706 res=0 errno=0 [ 263.430888][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.779'. [ 264.013896][ T9707] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 264.839488][ T9721] erspan0: entered allmulticast mode [ 265.432320][ T9739] Invalid ELF header magic: != ELF [ 266.477789][ T29] audit: type=1804 audit(6031115593.794:7): pid=9748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.783" name="/newroot/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id" dev="configfs" ino=23533 res=1 errno=0 [ 266.629058][ T9747] Process accounting resumed [ 266.633756][ T9747] kstrtoul() returned -22 for lu_gp_id [ 266.812818][ T9755] kstrtoul() returned -22 for lu_gp_id [ 267.167675][ T9734] kstrtoul() returned -22 for lu_gp_id [ 267.296715][ T9758] kstrtoul() returned -22 for lu_gp_id [ 267.416798][ T9763] Invalid ELF header magic: != ELF [ 267.912149][ T9783] delete_channel: no stack [ 268.358898][ T9773] kstrtoul() returned -22 for lu_gp_id [ 268.806946][ T9803] HfR: entered promiscuous mode [ 268.874160][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'. [ 268.904802][ T9803] HfR: left promiscuous mode [ 268.956534][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 269.190274][ T29] audit: type=1800 audit(6031115596.528:8): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.793" name="members" dev="configfs" ino=26757 res=0 errno=0 [ 270.766159][ T9815] kstrtoul() returned -22 for lu_gp_id [ 271.191282][ T9855] Invalid ELF header magic: != ELF [ 274.623726][ T9756] kstrtoul() returned -22 for lu_gp_id [ 274.748828][ T9918] openvswitch: netlink: IP tunnel dst address not specified [ 274.970978][ T9752] kstrtoul() returned -22 for lu_gp_id [ 278.596610][ T9852] kstrtoul() returned -22 for lu_gp_id [ 278.754203][ T9998] sctp: [Deprecated]: syz.3.817 (pid 9998) Use of int in maxseg socket option. [ 278.754203][ T9998] Use struct sctp_assoc_value instead [ 279.105233][ T9997] kstrtoul() returned -22 for lu_gp_id [ 279.409848][T10010] netlink: 334 bytes leftover after parsing attributes in process `syz.5.819'. [ 279.432187][T10008] kstrtoul() returned -22 for lu_gp_id [ 279.629012][T10014] HfR: entered promiscuous mode [ 279.686368][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 279.707087][T10014] HfR: left promiscuous mode [ 279.758986][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 280.163960][T10012] kstrtoul() returned -22 for lu_gp_id [ 280.754367][T10019] kstrtoul() returned -22 for lu_gp_id [ 281.025706][T10028] kstrtoul() returned -22 for lu_gp_id [ 281.254763][T10030] kstrtoul() returned -22 for lu_gp_id [ 281.442143][T10035] kstrtoul() returned -22 for lu_gp_id [ 281.891004][T10036] kstrtoul() returned -22 for lu_gp_id [ 282.162303][T10044] kstrtoul() returned -22 for lu_gp_id [ 282.447733][ T5829] Process accounting paused [ 282.711382][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.729423][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.738230][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.748589][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.758918][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.766677][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.832747][T10049] kstrtoul() returned -22 for lu_gp_id [ 282.887536][T10050] Process accounting resumed [ 283.405884][T10054] chnl_net:caif_netlink_parms(): no params data found [ 283.567491][T10062] netlink: 322 bytes leftover after parsing attributes in process `syz.3.832'. [ 283.871501][ T9660] syz.0.773 (9660) used greatest stack depth: 18768 bytes left [ 283.882375][T10054] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.901462][T10054] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.923795][T10054] bridge_slave_0: entered allmulticast mode [ 283.932784][T10054] bridge_slave_0: entered promiscuous mode [ 283.951526][T10054] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.960633][T10054] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.985060][T10054] bridge_slave_1: entered allmulticast mode [ 283.995652][T10054] bridge_slave_1: entered promiscuous mode [ 284.216727][T10054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.251036][T10054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.771223][ T5831] Bluetooth: hci4: command tx timeout [ 284.950055][T10054] team0: Port device team_slave_0 added [ 284.966637][T10054] team0: Port device team_slave_1 added [ 285.246851][T10054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.262153][T10054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.340774][T10054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.369297][T10054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.376319][T10054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.416871][T10054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.309332][T10054] hsr_slave_0: entered promiscuous mode [ 286.409376][T10054] hsr_slave_1: entered promiscuous mode [ 286.551929][T10054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.570874][T10054] Cannot create hsr debugfs directory [ 286.841406][ T5831] Bluetooth: hci4: command tx timeout [ 287.218101][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 288.121684][T10054] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 288.359883][T10054] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 288.425039][T10054] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 288.497847][T10054] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 288.594735][T10121] ovs_: entered promiscuous mode [ 288.912166][ T5831] Bluetooth: hci4: command tx timeout [ 289.043445][T10054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.113817][T10054] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.182444][ T7526] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.189636][ T7526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.299292][ T7021] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.306446][ T7021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.644820][T10054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.689729][T10054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.384967][T10054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.980685][ T54] Bluetooth: hci4: command tx timeout [ 291.154859][ T7021] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.703943][ T7021] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.864257][ T7021] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.259908][ T7021] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.649019][T10054] veth0_vlan: entered promiscuous mode [ 292.694502][T10054] veth1_vlan: entered promiscuous mode [ 292.809976][ T7021] bond0: left allmulticast mode [ 292.814909][ T7021] bond_slave_0: left allmulticast mode [ 292.855778][T10202] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 292.864055][ T7021] bond_slave_1: left allmulticast mode [ 292.908510][ T7021] bond0: left promiscuous mode [ 292.913344][ T7021] bond_slave_0: left promiscuous mode [ 292.938142][ T7021] bond_slave_1: left promiscuous mode [ 292.945159][ T7021] bridge0: port 3(bond0) entered disabled state [ 292.995413][ T7021] bridge_slave_1: left allmulticast mode [ 293.012504][ T7021] bridge_slave_1: left promiscuous mode [ 293.035267][ T7021] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.075565][ T7021] bridge_slave_0: left allmulticast mode [ 293.081630][ T7021] bridge_slave_0: left promiscuous mode [ 293.090065][ T7021] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.899539][ T7021] erspan0 (unregistering): left allmulticast mode [ 294.253419][T10239] zswap: compressor not available [ 294.609492][ T7021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.689121][ T7021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.744783][ T7021] bond0 (unregistering): Released all slaves [ 294.865223][T10054] veth0_macvtap: entered promiscuous mode [ 294.875123][T10054] veth1_macvtap: entered promiscuous mode [ 294.952514][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.985467][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.002607][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.016162][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.027110][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.038855][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.051242][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.080365][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.112021][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.136901][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.160068][T10054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.170909][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.182183][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.192759][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.215036][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.228197][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.239540][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.250199][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.261314][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.275217][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.287079][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.298330][T10054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.313359][ T7021] tipc: Left network mode [ 295.429068][T10054] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.441265][T10054] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.451034][T10054] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.460242][T10054] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.130673][ T6649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.149429][ T6649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.267692][ T7062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.301861][ T7062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.315249][ T7021] hsr_slave_0: left promiscuous mode [ 297.376158][ T7021] hsr_slave_1: left promiscuous mode [ 297.415025][ T7021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.433862][ T7021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.476555][ T7021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.484379][ T7021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.603420][ T7021] veth1_macvtap: left promiscuous mode [ 297.619285][ T7021] veth1_vlan: left promiscuous mode [ 297.626627][ T54] Bluetooth: hci2: unexpected event 0x02 length: 0 < 1 [ 297.641346][ T7021] veth0_vlan: left promiscuous mode [ 298.472014][ T7021] team0 (unregistering): Port device team_slave_1 removed [ 298.537029][ T7021] team0 (unregistering): Port device team_slave_0 removed [ 300.087997][T10388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.886'. [ 300.142927][T10388] vxcan1: entered promiscuous mode [ 300.398745][T10392] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 300.982931][T10374] kexec: Could not allocate control_code_buffer [ 301.186556][T10423] netlink: 326 bytes leftover after parsing attributes in process `syz.6.892'. [ 301.259760][T10423] veth1_macvtap: left promiscuous mode [ 302.608911][T10462] nvme_fcloop: unknown parameter or missing value '/' [ 302.847615][T10476] netlink: 28 bytes leftover after parsing attributes in process `syz.6.900'. [ 302.992555][T10476] lo: entered promiscuous mode [ 303.032592][T10476] lo: entered allmulticast mode [ 303.944160][ T29] audit: type=1800 audit(6031115631.469:9): pid=10480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.901" name="version" dev="configfs" ino=29526 res=0 errno=0 [ 307.205299][T10581] netlink: 28 bytes leftover after parsing attributes in process `syz.6.916'. [ 307.234406][T10585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.917'. [ 307.263139][T10581] veth0_macvtap: left promiscuous mode [ 307.324607][T10579] raw_sendmsg: syz.5.915 forgot to set AF_INET. Fix it! [ 308.743207][T10644] netlink: 28 bytes leftover after parsing attributes in process `syz.6.926'. [ 309.110537][T10654] netlink: 28 bytes leftover after parsing attributes in process `syz.5.929'. [ 309.306906][T10654] lo: entered promiscuous mode [ 309.311754][T10654] lo: entered allmulticast mode [ 309.627034][T10664] netlink: 28 bytes leftover after parsing attributes in process `syz.6.930'. [ 309.700826][T10664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.876830][T10664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.811233][T10710] sp0: Synchronizing with TNC [ 310.857687][T10710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.937'. [ 311.435963][T10710] team0: Port device team_slave_1 removed [ 311.702994][T10730] Invalid ELF header magic: != ELF [ 311.784629][T10736] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 311.791619][T10736] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 313.930019][T10807] netlink: 350 bytes leftover after parsing attributes in process `syz.3.955'. [ 314.383804][T10822] netlink: 'syz.2.959': attribute type 1 has an invalid length. [ 314.550270][T10826] openvswitch: netlink: Key type 29 is not supported [ 314.971013][T10839] syz.3.962 (10839): /proc/10836/oom_adj is deprecated, please use /proc/10836/oom_score_adj instead. [ 315.118239][T10822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 315.118438][T10822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 315.118577][T10822] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 315.118660][T10822] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 315.128153][T10822] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 315.139828][T10822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 315.141142][T10822] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 315.150246][T10822] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 315.208608][T10846] netlink: 28 bytes leftover after parsing attributes in process `syz.6.963'. [ 316.432005][T10856] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 316.689988][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.696974][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.711930][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 317.162029][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 317.169136][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 317.169149][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 318.635084][T10940] Falling back ldisc for ttyS2. [ 319.231998][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 319.238112][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 319.324613][T10927] mmap: syz.5.980 (10927): VmData 37859328 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 320.643927][T10994] Process accounting resumed [ 321.310449][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 321.310460][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 322.470667][T11035] netlink: 334 bytes leftover after parsing attributes in process `syz.2.996'. [ 323.090804][T11047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.999'. [ 323.111624][T11047] openvswitch: netlink: IP tunnel dst address not specified [ 323.644502][T11055] netlink: 346 bytes leftover after parsing attributes in process `syz.6.997'. [ 326.974601][T11160] Invalid ELF header magic: != ELF [ 327.138111][T11161] Invalid ELF header magic: != ELF [ 330.372292][T11251] netlink: 346 bytes leftover after parsing attributes in process `syz.2.1022'. [ 330.445509][T11250] netlink: 346 bytes leftover after parsing attributes in process `syz.2.1022'. [ 331.143411][T11264] netlink: 74 bytes leftover after parsing attributes in process `syz.2.1025'. [ 331.988677][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1028'. [ 332.868626][T11300] Invalid ELF header magic: != ELF [ 333.020258][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1030'. [ 333.546157][T11313] lo: entered allmulticast mode [ 333.682217][T11316] lo: left allmulticast mode [ 333.904899][T11255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1023'. [ 334.049001][T11255] lo: entered promiscuous mode [ 334.080133][T11255] lo: entered allmulticast mode [ 334.110631][T11322] futex_wake_op: syz.3.1034 tries to shift op by 64; fix this program [ 335.332645][T11335] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1036'. [ 335.566340][ T29] audit: type=1800 audit(6031115663.233:10): pid=11351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1040" name="dbroot" dev="configfs" ino=32816 res=0 errno=0 [ 335.609526][T11341] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1036'. [ 338.037586][T11391] IPVS: length: 11322 != 8 [ 338.042625][T11394] Process accounting resumed [ 340.329554][T11431] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1058'. [ 341.198246][T11448] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 341.246718][T11448] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 341.555136][T11454] Invalid ELF header magic: != ELF [ 342.938077][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1074'. [ 343.526314][T11512] netlink: 'syz.2.1078': attribute type 19 has an invalid length. [ 343.561324][T11512] netlink: 'syz.2.1078': attribute type 27 has an invalid length. [ 343.586774][T11512] netlink: 'syz.2.1078': attribute type 28 has an invalid length. [ 343.636897][T11512] netlink: 'syz.2.1078': attribute type 29 has an invalid length. [ 343.674033][T11512] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1078'. [ 344.166829][T11519] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1079'. [ 350.702567][T11603] Invalid ELF header magic: != ELF [ 351.230161][T11609] snd_aloop snd_aloop.0: control 16781581:65536:6:é'x?F¢é/èìzFË·fCªáª:0 is already present [ 352.568542][T11623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 353.646032][T11652] openvswitch: netlink: IPv4 tunnel dst address is zero [ 353.844817][T11657] netlink: Unknown conntrack attr (0) [ 357.985684][T11759] blktrace: Concurrent blktraces are not allowed on sg0 [ 358.344192][T11779] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1136'. [ 358.405787][T11776] HfR: entered promiscuous mode ` user features [ 361.438338][T11849] netlink: 322 bytes leftover after parsing attributes in process `syz.5.1154'. [ 361.451869][T11849] bond0: entered promiscuous mode [ 361.458493][T11849] bond_slave_0: entered promiscuous mode [ 361.498570][T11849] bond_slave_1: entered promiscuous mode [ 361.529817][T11849] bond0: entered allmulticast mode [ 361.554721][T11849] bond_slave_0: entered allmulticast mode [ 361.560519][T11849] bond_slave_1: entered allmulticast mode [ 362.049189][T11871] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1159'. [ 362.049242][T11868] program syz.6.1160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.604120][ T29] audit: type=1400 audit(6031115690.424:11): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11878 comm="syz.6.1161" [ 364.685679][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1174'. [ 365.028076][T11949] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1177'. [ 365.085412][T11950] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1177'. [ 366.048448][T11969] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1180'. [ 368.335209][T12022] can: request_module (can-proto-0) failed. [ 371.094480][T12082] nbd: nbd7 already in use syzkaller syzkaller login: [ 371.669205][T12072] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1198'. [ 373.347735][T12141] netlink: 74 bytes leftover after parsing attributes in process `syz.6.1208'. [ 377.831756][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.838250][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.132809][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1225'. [ 379.757943][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 379.844473][T12299] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 379.872421][T12302] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1238'. [ 380.702367][T12318] netlink: 'syz.5.1242': attribute type 1 has an invalid length. [ 383.982467][T12362] netlink: 178 bytes leftover after parsing attributes in process `syz.6.1253'. [ 385.848278][T12408] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1263'. [ 386.474295][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1265'. [ 387.199692][T12451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1270'. [ 388.701885][T12479] ubi0: attaching mtd0 [ 388.901909][T12479] ubi0: scanning is finished [ 388.907492][T12479] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 389.072719][T12438] syz.6.1267: vmalloc error: size 3870720, failed to allocated page array size 7560, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 389.100224][T12438] CPU: 0 UID: 0 PID: 12438 Comm: syz.6.1267 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 389.113179][T12438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 389.125262][T12438] Call Trace: [ 389.129206][T12438] [ 389.132742][T12438] dump_stack_lvl+0x16c/0x1f0 [ 389.138380][T12438] warn_alloc+0x24d/0x3a0 [ 389.143600][T12438] ? __pfx_warn_alloc+0x10/0x10 [ 389.149455][T12438] ? __get_vm_area_node+0x1b0/0x2f0 [ 389.155713][T12438] ? __get_vm_area_node+0x1dc/0x2f0 [ 389.161983][T12438] __vmalloc_node_range_noprof+0x1105/0x1530 [ 389.169198][T12438] ? ip_set_sockfn_get+0x185/0xc50 [ 389.175377][T12438] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 389.183043][T12438] ? __get_vm_area_node+0x1b0/0x2f0 [ 389.189309][T12438] ? __get_vm_area_node+0x1dc/0x2f0 [ 389.195584][T12438] __vmalloc_node_range_noprof+0xd85/0x1530 [ 389.202685][T12438] ? ip_set_sockfn_get+0x185/0xc50 [ 389.208846][T12438] ? __pfx___lock_acquire+0x10/0x10 [ 389.215096][T12438] ? ip_set_sockfn_get+0x185/0xc50 [ 389.221244][T12438] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 389.228864][T12438] ? apparmor_capable+0x114/0x1d0 [ 389.234902][T12438] ? ip_set_sockfn_get+0x185/0xc50 [ 389.241031][T12438] vmalloc_noprof+0x6b/0x90 [ 389.246430][T12438] ? ip_set_sockfn_get+0x185/0xc50 [ 389.252587][T12438] ip_set_sockfn_get+0x185/0xc50 [ 389.258529][T12438] ? __pfx_lock_release+0x10/0x10 [ 389.264561][T12438] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 389.271116][T12438] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 389.278301][T12438] nf_getsockopt+0x79/0xe0 [ 389.283605][T12438] ip_getsockopt+0x18e/0x1e0 [ 389.289105][T12438] ? __pfx_ip_getsockopt+0x10/0x10 [ 389.295225][T12438] ? __schedule+0xe60/0x5ad0 [ 389.300725][T12438] ? __pfx___lock_acquire+0x10/0x10 [ 389.307039][T12438] ipv6_getsockopt+0x230/0x280 [ 389.312750][T12438] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 389.319082][T12438] ? __pfx_mark_lock+0x10/0x10 [ 389.324807][T12438] sctp_getsockopt+0x1d2/0x7ae0 [ 389.330628][T12438] ? hlock_class+0x4e/0x130 [ 389.336025][T12438] ? mark_lock+0xb5/0xc60 [ 389.341215][T12438] ? aa_label_sk_perm+0x19d/0x5a0 [ 389.347248][T12438] ? __pfx_sctp_getsockopt+0x10/0x10 [ 389.353588][T12438] ? __lock_acquire+0x15a9/0x3c40 [ 389.359623][T12438] ? __pfx___lock_acquire+0x10/0x10 [ 389.365863][T12438] ? find_held_lock+0x2d/0x110 [ 389.371574][T12438] ? __might_fault+0x13b/0x190 [ 389.377303][T12438] ? __pfx_lock_release+0x10/0x10 [ 389.383340][T12438] ? trace_lock_acquire+0x14e/0x1f0 [ 389.389587][T12438] ? lock_acquire+0x2f/0xb0 [ 389.394998][T12438] ? __might_fault+0xe3/0x190 [ 389.400628][T12438] ? __might_fault+0xe3/0x190 [ 389.406255][T12438] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 389.413327][T12438] ? do_sock_getsockopt+0x3fe/0x870 [ 389.419573][T12438] do_sock_getsockopt+0x3fe/0x870 [ 389.425602][T12438] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 389.432243][T12438] ? lock_acquire+0x2f/0xb0 [ 389.437639][T12438] ? __fget_files+0x40/0x3a0 [ 389.443148][T12438] ? __fget_files+0x206/0x3a0 [ 389.448763][T12438] __sys_getsockopt+0x12f/0x260 [ 389.454590][T12438] __x64_sys_getsockopt+0xbd/0x160 [ 389.460722][T12438] ? do_syscall_64+0x91/0x250 [ 389.466338][T12438] ? lockdep_hardirqs_on+0x7c/0x110 [ 389.472570][T12438] do_syscall_64+0xcd/0x250 [ 389.477973][T12438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.485059][T12438] RIP: 0033:0x7fa1da985d29 [ 389.490377][T12438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.513909][T12438] RSP: 002b:00007fa1db7a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 389.524002][T12438] RAX: ffffffffffffffda RBX: 00007fa1dab75fa0 RCX: 00007fa1da985d29 [ 389.533561][T12438] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000004 [ 389.543218][T12438] RBP: 00007fa1daa01b08 R08: 0000000020000040 R09: 0000000000000000 [ 389.552776][T12438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.562334][T12438] R13: 0000000000000000 R14: 00007fa1dab75fa0 R15: 00007ffd06ff0dd8 [ 389.571903][T12438] [ 389.575630][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.625042][T12438] Mem-Info: [ 389.628835][T12438] active_anon:81171 inactive_anon:9 isolated_anon:0 [ 389.628835][T12438] active_file:11689 inactive_file:46179 isolated_file:0 [ 389.628835][T12438] unevictable:768 dirty:271 writeback:0 [ 389.628835][T12438] slab_reclaimable:11311 slab_unreclaimable:100305 [ 389.628835][T12438] mapped:47981 shmem:60118 pagetables:1218 [ 389.628835][T12438] sec_pagetables:0 bounce:0 [ 389.628835][T12438] kernel_misc_reclaimable:0 [ 389.628835][T12438] free:1186001 free_pcp:9220 free_cma:0 [ 389.683385][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.764392][T12438] Node 0 active_anon:334484kB inactive_anon:36kB active_file:46756kB inactive_file:184708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:195824kB dirty:1080kB writeback:0kB shmem:248936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12548kB pagetables:4872kB sec_pagetables:0kB all_unreclaimable? no [ 389.803684][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.890646][T12438] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 389.926721][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.311726][T12438] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.344277][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.383419][T12479] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 390.428920][T12438] lowmem_reserve[]: 0 2465 2466 0 0 [ 390.439010][T12438] Node 0 DMA32 free:808012kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:376484kB inactive_anon:36kB active_file:46756kB inactive_file:183880kB unevictable:1536kB writepending:1104kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:8408kB local_pcp:7908kB free_cma:0kB [ 390.475697][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.490683][T12438] lowmem_reserve[]: 0 0 0 0 0 [ 390.496396][T12438] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 390.577275][T12438] lowmem_reserve[]: 0 0 0 0 0 [ 390.584603][T12438] Node 1 Normal free:3865848kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:31824kB local_pcp:280kB free_cma:0kB [ 390.620235][T12438] lowmem_reserve[]: 0 0 0 0 0 [ 390.626308][T12438] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 390.641700][T12438] Node 0 DMA32: 10*4kB (UME) 13*8kB (UME) 36*16kB (UME) 67*32kB (UE) 9*64kB (UME) 68*128kB (UME) 315*256kB (UME) 83*512kB (UME) 32*1024kB (UM) 10*2048kB (UME) 151*4096kB (M) = 807024kB [ 390.664033][T12438] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 390.678447][T12438] Node 1 Normal: 160*4kB (UME) 73*8kB (UME) 41*16kB (UME) 133*32kB (UME) 96*64kB (UME) 26*128kB (UME) 12*256kB (UME) 6*512kB (UME) 4*1024kB (UM) 3*2048kB (ME) 936*4096kB (UM) = 3865848kB [ 390.701660][T12438] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 390.715211][T12438] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 390.726422][T12438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 390.737972][T12438] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 390.749389][T12438] 131889 total pagecache pages [ 390.755106][T12438] 28 pages in swap cache [ 390.760458][T12438] Free swap = 124452kB [ 390.765997][T12438] Total swap = 124996kB [ 390.771084][T12438] 2097051 pages RAM [ 390.775652][T12438] 0 pages HighMem/MovableOnly [ 390.781805][T12438] 427367 pages reserved [ 390.786804][T12438] 0 pages cma reserved [ 392.679629][T12535] lo: left promiscuous mode [ 392.687612][T12535] lo: left allmulticast mode [ 393.145720][T12547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1292'. [ 393.710140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 393.870494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 393.880720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 393.891043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 393.903021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 393.913287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 393.924103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 393.934999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 398.099824][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1309'. [ 398.210009][T12653] vivid-013: ================= START STATUS ================= [ 398.288404][T12653] vivid-013: Generate PTS: true [ 398.328005][T12653] vivid-013: Generate SCR: true [ 398.375694][T12653] tpg source WxH: 640x360 (Y'CbCr) [ 398.427602][T12653] tpg field: 1 [ 398.431695][T12653] tpg crop: 640x360@0x0 [ 398.437010][T12653] tpg compose: 640x360@0x0 [ 398.537098][T12653] tpg colorspace: 8 [ 398.566882][T12653] tpg transfer function: 0/0 [ 398.572449][T12653] tpg Y'CbCr encoding: 0/0 [ 398.603014][T12653] tpg quantization: 0/0 [ 398.626410][T12653] tpg RGB range: 0/2 [ 398.639151][T12653] vivid-013: ================== END STATUS ================== [ 401.502441][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1330'. [ 402.592621][T12754] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1333'. [ 403.773127][T12776] vivid-003: ================= START STATUS ================= [ 403.807862][T12776] vivid-003: Radio HW Seek Mode: Bounded [ 403.856597][T12776] vivid-003: Radio Programmable HW Seek: false [ 403.879457][T12776] vivid-003: RDS Rx I/O Mode: Block I/O [ 403.916464][T12776] vivid-003: Generate RBDS Instead of RDS: false [ 403.924134][T12776] vivid-003: RDS Reception: true [ 403.946310][T12776] vivid-003: RDS Program Type: 0 inactive [ 403.976577][T12776] vivid-003: RDS PS Name: inactive [ 403.982894][T12776] vivid-003: RDS Radio Text: inactive [ 404.039509][T12776] vivid-003: RDS Traffic Announcement: false inactive [ 404.063434][T12776] vivid-003: RDS Traffic Program: false inactive [ 404.091545][T12776] vivid-003: RDS Music: false inactive [ 404.099128][T12776] vivid-003: ================== END STATUS ================== [ 404.346542][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1338'. [ 405.709243][T12810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1345'. [ 406.322499][ T3569] ------------[ cut here ]------------ [ 406.329090][ T3569] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 406.348659][ T3569] WARNING: CPU: 1 PID: 3569 at net/mac80211/driver-ops.c:249 drv_get_tsf+0x1c7/0x780 [ 406.360274][ T3569] Modules linked in: [ 406.365333][ T3569] CPU: 1 UID: 0 PID: 3569 Comm: kworker/u8:8 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 406.378575][ T3569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 406.390864][ T3569] Workqueue: events_unbound cfg80211_wiphy_work [ 406.398457][ T3569] RIP: 0010:drv_get_tsf+0x1c7/0x780 [ 406.404796][ T3569] Code: 0f 84 44 05 00 00 e8 a8 57 0c f7 49 81 c4 20 01 00 00 e8 9c 57 0c f7 44 89 f2 4c 89 e6 48 c7 c7 80 fe 9d 8c e8 ca 1d cd f6 90 <0f> 0b 90 90 e8 80 57 0c f7 4c 89 ea 48 b8 00 00 00 00 00 fc ff df [ 406.428469][ T3569] RSP: 0018:ffffc9000dbd7c00 EFLAGS: 00010282 [ 406.436151][ T3569] RAX: 0000000000000000 RBX: ffff888046f14d80 RCX: ffffffff815a1789 [ 406.445904][ T3569] RDX: ffff8880319dbc00 RSI: ffffffff815a1796 RDI: 0000000000000001 [ 406.455825][ T3569] RBP: ffff888025238e40 R08: 0000000000000001 R09: 0000000000000000 [ 406.465735][ T3569] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888046f14120 [ 406.475514][ T3569] R13: ffff888046f15728 R14: 0000000000000000 R15: ffff8880252386a8 [ 406.485177][ T3569] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 406.495967][ T3569] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.503932][ T3569] CR2: 000000000000a000 CR3: 000000006711a000 CR4: 00000000003526f0 [ 406.513580][ T3569] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 406.523268][ T3569] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 406.532888][ T3569] Call Trace: [ 406.536827][ T3569] [ 406.540356][ T3569] ? __warn+0xea/0x3c0 [ 406.545308][ T3569] ? drv_get_tsf+0x1c7/0x780 [ 406.551042][ T3569] ? report_bug+0x3c0/0x580 [ 406.556751][ T3569] ? handle_bug+0x54/0xa0 [ 406.562176][ T3569] ? exc_invalid_op+0x17/0x50 [ 406.567821][ T3569] ? asm_exc_invalid_op+0x1a/0x20 [ 406.574111][ T3569] ? __warn_printk+0x199/0x350 [ 406.579865][ T3569] ? __warn_printk+0x1a6/0x350 [ 406.585688][ T3569] ? drv_get_tsf+0x1c7/0x780 [ 406.591485][ T3569] ieee80211_if_fmt_tsf+0x42/0x70 [ 406.597740][ T3569] ? __pfx_ieee80211_if_read_sdata_handler+0x10/0x10 [ 406.606076][ T3569] wiphy_locked_debugfs_read_work+0xe3/0x1c0 [ 406.613510][ T3569] ? trace_wiphy_work_run+0x19e/0x220 [ 406.620130][ T3569] cfg80211_wiphy_work+0x3de/0x560 [ 406.626478][ T3569] process_one_work+0x958/0x1b30 [ 406.632615][ T3569] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 406.641861][ T3569] ? __pfx_process_one_work+0x10/0x10 [ 406.648326][ T3569] ? rcu_is_watching+0x12/0xc0 [ 406.654505][ T3569] ? assign_work+0x1a0/0x250 [ 406.660056][ T3569] worker_thread+0x6c8/0xf00 [ 406.666050][ T3569] ? __kthread_parkme+0x148/0x220 [ 406.672454][ T3569] ? __pfx_worker_thread+0x10/0x10 [ 406.678604][ T3569] kthread+0x2c1/0x3a0 [ 406.683615][ T3569] ? _raw_spin_unlock_irq+0x23/0x50 [ 406.689874][ T3569] ? __pfx_kthread+0x10/0x10 [ 406.695582][ T3569] ret_from_fork+0x45/0x80 [ 406.700944][ T3569] ? __pfx_kthread+0x10/0x10 [ 406.706477][ T3569] ret_from_fork_asm+0x1a/0x30 [ 406.712310][ T3569] [ 406.715950][ T3569] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 406.724686][ T3569] CPU: 1 UID: 0 PID: 3569 Comm: kworker/u8:8 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 406.737719][ T3569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 406.749799][ T3569] Workqueue: events_unbound cfg80211_wiphy_work [ 406.757320][ T3569] Call Trace: [ 406.761263][ T3569] [ 406.764789][ T3569] dump_stack_lvl+0x3d/0x1f0 [ 406.770317][ T3569] panic+0x71d/0x800 [ 406.775016][ T3569] ? __pfx_panic+0x10/0x10 [ 406.780336][ T3569] ? show_trace_log_lvl+0x29d/0x3d0 [ 406.786596][ T3569] ? check_panic_on_warn+0x1f/0xb0 [ 406.792760][ T3569] ? drv_get_tsf+0x1c7/0x780 [ 406.798288][ T3569] check_panic_on_warn+0xab/0xb0 [ 406.804237][ T3569] __warn+0xf6/0x3c0 [ 406.808938][ T3569] ? drv_get_tsf+0x1c7/0x780 [ 406.814463][ T3569] report_bug+0x3c0/0x580 [ 406.819679][ T3569] handle_bug+0x54/0xa0 [ 406.824679][ T3569] exc_invalid_op+0x17/0x50 [ 406.830081][ T3569] asm_exc_invalid_op+0x1a/0x20 [ 406.835892][ T3569] RIP: 0010:drv_get_tsf+0x1c7/0x780 [ 406.842128][ T3569] Code: 0f 84 44 05 00 00 e8 a8 57 0c f7 49 81 c4 20 01 00 00 e8 9c 57 0c f7 44 89 f2 4c 89 e6 48 c7 c7 80 fe 9d 8c e8 ca 1d cd f6 90 <0f> 0b 90 90 e8 80 57 0c f7 4c 89 ea 48 b8 00 00 00 00 00 fc ff df [ 406.865652][ T3569] RSP: 0018:ffffc9000dbd7c00 EFLAGS: 00010282 [ 406.872937][ T3569] RAX: 0000000000000000 RBX: ffff888046f14d80 RCX: ffffffff815a1789 [ 406.882488][ T3569] RDX: ffff8880319dbc00 RSI: ffffffff815a1796 RDI: 0000000000000001 [ 406.892041][ T3569] RBP: ffff888025238e40 R08: 0000000000000001 R09: 0000000000000000 [ 406.901592][ T3569] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888046f14120 [ 406.911142][ T3569] R13: ffff888046f15728 R14: 0000000000000000 R15: ffff8880252386a8 [ 406.920702][ T3569] ? __warn_printk+0x199/0x350 [ 406.926419][ T3569] ? __warn_printk+0x1a6/0x350 [ 406.932134][ T3569] ieee80211_if_fmt_tsf+0x42/0x70 [ 406.938151][ T3569] ? __pfx_ieee80211_if_read_sdata_handler+0x10/0x10 [ 406.946150][ T3569] wiphy_locked_debugfs_read_work+0xe3/0x1c0 [ 406.953321][ T3569] ? trace_wiphy_work_run+0x19e/0x220 [ 406.959791][ T3569] cfg80211_wiphy_work+0x3de/0x560 [ 406.965924][ T3569] process_one_work+0x958/0x1b30 [ 406.971847][ T3569] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 406.980897][ T3569] ? __pfx_process_one_work+0x10/0x10 [ 406.987333][ T3569] ? rcu_is_watching+0x12/0xc0 [ 406.993049][ T3569] ? assign_work+0x1a0/0x250 [ 406.998555][ T3569] worker_thread+0x6c8/0xf00 [ 407.004062][ T3569] ? __kthread_parkme+0x148/0x220 [ 407.010082][ T3569] ? __pfx_worker_thread+0x10/0x10 [ 407.016205][ T3569] kthread+0x2c1/0x3a0 [ 407.021080][ T3569] ? _raw_spin_unlock_irq+0x23/0x50 [ 407.027305][ T3569] ? __pfx_kthread+0x10/0x10 [ 407.032802][ T3569] ret_from_fork+0x45/0x80 [ 407.038085][ T3569] ? __pfx_kthread+0x10/0x10 [ 407.043583][ T3569] ret_from_fork_asm+0x1a/0x30 [ 407.049306][ T3569] [ 407.053193][ T3569] Kernel Offset: disabled [ 407.058438][ T3569] Rebooting in 86400 seconds..