last executing test programs: 5m21.556505216s ago: executing program 1 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio1/power/wakeup_active_count\x00', 0x80100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000600)=""/4096, 0x1000) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_setup$auto(0x54d5, &(0x7f0000000000)) (async) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100a8bd7000fbdbdf250f00000008000300", @ANYRES32=r4, @ANYBLOB="0800340007000000bb3b07556cdd7af9b08ee98f12ca1635b3cba5f6e8ad65a3fb9c82092bf5bd587e4da53f4cae79d157438897d4d4e8918d542af163301ae3359e62bcaf20eba352dacef7bd012bd7fe07e2b40018e258269e8b64505c9c06867e68d9f33da42c76ec18deccd23c997e866bda4fe47655b2419460b02d82"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) (async) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) (async) r5 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/psaux\x00', 0x801, 0x0) (async) socket(0x2, 0x3, 0x6) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) r6 = memfd_create$auto(&(0x7f00000000c0)='IPVS\x00\x84\x94\xbf\x7f\xe0(\xc7^M\xbe\x92\x98?I\xa5\x95V\xf2{\xd6\xc1\xc4.\xc3ja\xe8\xa1o\xb5-Z\x9dc\x152\xaew`0M\x1b3\r\x8afQ\xc2\x82W?r$\xf0\xce\x7f\x15\xa1\x13\xb2\x84\x04\xad<\x91\x85\xb22G\xf6\x8b\xba<\xe9&\x17%\x1a\xa5c\xe8\x06\xd4ok\x8a\xb2\xbaz\xf1\v\xf4\xaa\xda\x91\xfb\xea\x17~C\xb3\xc4S\xce\x83\x13\xd9\xbd{d\xfdB]\xb0R\x05b\x1b\xa5\xb8\x85\xa9\xbc5-9\x94\xa4QG\x06Z3#\x1cK\xbe\x16\xebaE~\x00\x00\x00\x00\x00', 0x6) ftruncate$auto(r6, 0x8800000) (async) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x20800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x7fff) ioctl$auto(r7, 0x5603, 0x1) (async) ppoll$auto(&(0x7f0000000080)={r0, 0x1, 0x3}, 0x5, &(0x7f0000000180)={0x10000, 0x7fffffffffffffff}, &(0x7f00000001c0)={0x1}, 0x8) (async) write$auto_mousedev_fops_mousedev(r5, &(0x7f0000000200)="ddeb40434d3bbc862840015fbe63846737c4a1f4c73af87e4b9565350c797e12dca7236e2d1b3615ae0940aa3bc3e43a1052caf8a6f20f88663ec62ce4c08c86cbdc1b541cb699a05dc99d787afdefacc10a73e7b0e35562fd91e616f45c1a3295039a15432b14fbb6772ec2fe78aba2b391586674d10758a9a2aba15e302fe6d4dff0f4a85f136a5c50d55ad7f9db32d7ce7d096515cd9065b040889eb7a292ebf50cfc08dbd6657fc5f605df4fedc3", 0xb0) (async) r9 = io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) (async) personality$auto(0x2) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r0) getpeername$auto(r5, &(0x7f0000000000)=@l2={0x1f, 0xfffa, @none, 0x3}, &(0x7f00000002c0)=0x6) epoll_ctl$auto(r9, 0xfffffff5, r8, &(0x7f0000000300)={0x4, 0x2}) 5m21.171803064s ago: executing program 1 (id=6): unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7f, 0x200000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x18, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex_requeue$auto(0x0, 0x80, 0x2, 0x101) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x18, 0x5, 0x2) mmap$auto(0x1000, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000000c0), 0x55) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0xfffffffffffffffe, 0x6, 0xdf, 0xa4d0, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xda, 0x2000000018, 0xffffffffffffffff, 0x7ffe) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x5) socket$nl_generic(0x10, 0x3, 0x10) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x800c000, 0x40000000, 0x800c000}, 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4105, 0x1009) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x0, 0x5, 0x3, 0x2000000000210006, 0x0, 0x7, 0x5, 0x8, 0x1, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0x1b16, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) prctl$auto(0x35, 0x8, 0xec, 0x2, 0x80000000) socket(0x10, 0x2, 0x0) 5m19.996129559s ago: executing program 1 (id=12): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x5, 0x6, 0x7fff) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101040, 0x20) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2) prctl$auto(0x5b, 0x7, r0, 0x8000000000000000, 0x9) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/sctp/remaddr\x00', 0x101d00, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001080)=""/244, 0xf4) mlock$auto(0xfbe8, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/icmp\x00', 0x2040, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/assocs\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x4, 0x8000) symlink$auto(&(0x7f0000000080)='\xe6\'\xd4\v{T+\xac', &(0x7f0000000000)='\'--[[\x14+\\\x00') r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_CQM(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={0x30c, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BEACON_HEAD={0x1e4, 0xe, "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"}, @NL80211_ATTR_PMKR0_NAME={0x103, 0x102, "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"}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x5}]}, 0x30c}, 0x1, 0x0, 0x0, 0x800}, 0x800) madvise$auto(0x1, 0x9, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20080000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone3(&(0x7f0000000200)={0x1a2005180, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) kill$auto(0x0, 0x11) syz_clone(0x8124400, 0x0, 0x0, 0x0, 0x0, 0x0) 5m18.300473457s ago: executing program 1 (id=21): mmap$auto(0x0, 0x20007, 0x80000000004000df, 0x10004000eb1, 0x8, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) select$auto(0xd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x8001, 0xc, 0x5, 0x3, 0xff, 0x2000000000000002, 0x9, 0x8, 0x103, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0xc800}, 0x400d4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"/396, @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251200000008000600800000000c00018008000100", @ANYRES32=r3, @ANYBLOB="0800070006000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2b, 0x1, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) bind$auto(r4, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710, @host}, 0x10006a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0xbcc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0003, 0x15) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb2, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 5m17.111954979s ago: executing program 1 (id=27): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x4) socket(0xa, 0x5, 0x0) open(&(0x7f0000000080)='.\x00', 0x0, 0x1f2) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) open(0x0, 0x22240, 0x155) 5m16.707075851s ago: executing program 1 (id=29): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video13\x00', 0x64c6c2, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x40901, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4020009, 0x400000db, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x3, 0xc040563d, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80000, 0x0) accept$auto(r1, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f0000000080)=0x3) ioctl$auto_evdev_fops_evdev(r2, 0x400445a0, 0x0) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x47a) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) ioctl$auto_MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000040)={0x1, 0x1, 0x5, 0x2, 0x8, 0x5, 0x4, 0x3, 0x3, 0x81, 0x8, 0x7, 0x2, @setup="bcc9db37759ae648", 0x0, 0xfffffff8, 0x2}, &(0x7f0000000100), 0x2}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/031/001\x00', 0x80, 0x0) lseek$auto(r3, 0xfffffffffffffffd, 0x1) socketpair$auto(0x8, 0x9, 0x80040003, 0x0) r5 = socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) setsockopt$auto(r5, 0x200, 0x81, 0x0, 0x3) 5m1.575406194s ago: executing program 32 (id=29): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video13\x00', 0x64c6c2, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x40901, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4020009, 0x400000db, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x3, 0xc040563d, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80000, 0x0) accept$auto(r1, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f0000000080)=0x3) ioctl$auto_evdev_fops_evdev(r2, 0x400445a0, 0x0) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x47a) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) ioctl$auto_MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000040)={0x1, 0x1, 0x5, 0x2, 0x8, 0x5, 0x4, 0x3, 0x3, 0x81, 0x8, 0x7, 0x2, @setup="bcc9db37759ae648", 0x0, 0xfffffff8, 0x2}, &(0x7f0000000100), 0x2}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/031/001\x00', 0x80, 0x0) lseek$auto(r3, 0xfffffffffffffffd, 0x1) socketpair$auto(0x8, 0x9, 0x80040003, 0x0) r5 = socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) setsockopt$auto(r5, 0x200, 0x81, 0x0, 0x3) 29.527796332s ago: executing program 4 (id=1283): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) keyctl$auto(0x20000000000001c, 0xffffffffffffffff, 0x363, 0xa, 0x8000000000000007) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x141f02, 0x0) sysfs$auto(0x2, 0x10000000000000b, 0x0) fsopen$auto(0x0, 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x4) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/interrupts\x00', 0x40440, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000080)=""/121, 0x79) (async) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000080)=""/121, 0x79) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) read$auto(r0, &(0x7f0000000000)='\'/-\x00', 0xff) (async) read$auto(r0, &(0x7f0000000000)='\'/-\x00', 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0xb, 0x1, 0x0, 0xffffffffffffffff) sysinfo$auto(0x0) (async) sysinfo$auto(0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x800, 0x2, 0x40eb1, 0x602, 0x200000000004) (async) mmap$auto(0x0, 0x800, 0x2, 0x40eb1, 0x602, 0x200000000004) ioperm$auto(0x4, 0x8001, 0x1) uname$auto(0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100cda4420008bd7100f9db5f250200000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x114, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xa0a2}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "3dccae6ae05ac95dd3eb0f10"}, @NL80211_ATTR_BSSID={0xd5, 0xf5, "f75f6be6b06cdb19e7c9427224d5110e83416fd4243663fee793cc7c23fb1a68073d359f281c005c29a9f1edb33dae6ed9c08b090ddb513d441780d6919baca71481c98fec838c49bf1c12f020d7eed1f873bf928d595cd70a896585501d7fbcb5923364f0e38df6e90115a63034d08836890bdf04cbbce4e27bf6ba1b7a1bafdcbe2ef1baf04324d7541c06e546eeac1b60a180c21481051df50c34cfc16c32b36efb322a069f4770fd91b641b3c94e448451fabd9fd110703178fcc6f9e31a7665baa05afa32a25a3905ee919e1d3e9d"}]}, 0x114}, 0x1, 0x0, 0x0, 0x8845}, 0x40010) (async) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x114, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xa0a2}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "3dccae6ae05ac95dd3eb0f10"}, @NL80211_ATTR_BSSID={0xd5, 0xf5, "f75f6be6b06cdb19e7c9427224d5110e83416fd4243663fee793cc7c23fb1a68073d359f281c005c29a9f1edb33dae6ed9c08b090ddb513d441780d6919baca71481c98fec838c49bf1c12f020d7eed1f873bf928d595cd70a896585501d7fbcb5923364f0e38df6e90115a63034d08836890bdf04cbbce4e27bf6ba1b7a1bafdcbe2ef1baf04324d7541c06e546eeac1b60a180c21481051df50c34cfc16c32b36efb322a069f4770fd91b641b3c94e448451fabd9fd110703178fcc6f9e31a7665baa05afa32a25a3905ee919e1d3e9d"}]}, 0x114}, 0x1, 0x0, 0x0, 0x8845}, 0x40010) 29.019785413s ago: executing program 4 (id=1286): capset$auto(&(0x7f0000000080)={0x80000000, 0x0}, &(0x7f00000000c0)={0x3, 0x8, 0x7}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000001c0)={{@inferred=r0, 0x66d1, 0xffff6571, 0x71, "2d9520fb7ec91dbc900700000066f1ffe185301b4e352e371e8f750f4d7484cf24fafc91c0c70e6fb0498441"}, 0x0, @enumerated=@item=[0x2, 0x44f71334, 0x1, 0x200, 0xa1, 0x63e, 0x80000001, 0x9, 0x80000001, 0xfffffffd, 0xbb, 0xfffffff7, 0x0, 0x6, 0x5, 0x7, 0xffff, 0x8, 0xdd7, 0xf, 0x2, 0x40, 0x6034, 0x7fff, 0x1, 0x8, 0x3, 0x2, 0x3, 0x276, 0x620, 0x8001, 0x7fffffff, 0x80000001, 0x4, 0x9, 0x81, 0x80, 0x6, 0x4, 0x1, 0x5, 0x40, 0x6, 0x1, 0xfffffffe, 0x3, 0xffffff00, 0x3, 0x1, 0x8, 0x4, 0x6, 0x0, 0x80, 0x2f, 0x8, 0x101, 0x489c, 0x1, 0x3, 0xffffffff, 0x2, 0x7, 0x8, 0x4, 0x9, 0x9, 0x7, 0x0, 0xf, 0xcb, 0x6, 0x7b49, 0x9, 0xd, 0x3, 0x3, 0x6, 0x428e, 0x3, 0x8, 0x2, 0x6, 0x10001, 0x6, 0xa2c, 0x8, 0x1, 0x9, 0x4, 0x4, 0xfffffc01, 0x0, 0xfffffcca, 0x39, 0xcbf2, 0x80, 0x40000000, 0x80000000, 0x5, 0xffffffea, 0x1, 0xffffff18, 0x6, 0x6694, 0xc, 0xd4ea, 0x5, 0x2, 0x81, 0x6, 0x8, 0x4a90, 0x9, 0xf, 0x2, 0x7, 0x0, 0x7, 0x2, 0x4, 0x8f04, 0xfff, 0x9, 0x77, 0x58, 0x4], "ed73acd0f01fcb12f1c6824fd270d30da1fe9621575a656ce4c6d4098b4094caf703dd9bb2d915b237e17e9a74ab4bc63062913d45c7a6e0eeb759b4712a6be7642a8a0eaee5e1b71487c74434f5da9f601f2a676159fac607ad76ec43feebf7fe7b76f8eb8e351c6097c4c6713ee799106b65ea99ab3c9fe49bb49570e5806a"}) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) r1 = io_uring_setup$auto(0x2, 0x0) io_uring_enter$auto(r1, 0x4000401, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) ioctl$auto_KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async) request_key$auto(&(0x7f0000000300)='\xcb\x02\xf7d\xdae\xa2%\x98N\xfdH\x99\x9d\xbe\xf4\t\xb5\xdf\xf1\x82{R\xd8\xa7\xbd\x89\xde\xe0?\x17+\xe7\x17z\xdd\x14\f\xd2\xf3\x01\x82g\xfb\xd3\xf2v\x01!\x9bs\x03\xd0\x813\xb1\x14\x8b\xc9\x1b*\x9a\xec\x17}:\xa3\xac\xb7`\xb1\xd0V:\x8b\xb0\xa0\xff_Co\xe4\xfe\x8e;g\xb0f\xe2\xefG\xd2m\\df\xf6h\x17\x81\xf1p\x11\x9bf\xf3\xb4\xbe\x84z\xbf\xe5\rf}\xde\xdf\xcdc\x01H\xae\xd58\f\xf36\xa2J3^b\x17\xdb\xd2\xae\xdb\xb3(V\xfb\x1b\x992\xff\xa9/\b\xf4\xb1d\x84\fm\xbbuH\xa6v\xff \x91<\\\\\x04\xe8\xe2\x1a\xd9\xaa\xb3\xbdx|\xd4\xeb\x00\x8e\r\xc0\xddq\a\xd3\x9b\x03\xea\xc9a3\xdbw\xe7\xf7\xc1\xbb\xb7f\xd1\xc1\xf8\xae_t\xcf\xc8a`\x8f<\xbf_\x9c|s\xd2\xe2|\xb9\xfd{\n\xadC\xcb\\\x19\xaea\xed!\xe8\x8ee1\xbf\xa1\xdb^eA;\x1f;\xc6L\xeeTd(\x9b\xe4b\x00y\xfaI\x14\xad\xbe\xa4\a\xab\xfb,Q%.\xe7\xcff.\xd2SI\xa5h\x85\xd2\x8aM\xc3\xd2\xc7H\xdf\xec\xeeY\xd0\x81\xf1k\x1d\x18\xe8g8z#\x8b\xe2\xb2]\xe4:p\x99\xba\x93v8I\xe8\x16t\xed\xbb\x043t\xba\x7fu\xbe\xc9I\x86\xb1\xd9\t\x12\xff.\xac\xea\xd6v\x8ff\xeepEu|\xf2\xa2?h\"\xba\xbfg\xca\xa8\vk\xf0\f\x17~\r^\xf3\x16J\xc2\xc9ic\xaen\xb6\xf3\xe1\xcak\'\xa0\x12\xbd\x8d\ti\"\xb6\f\r\xc3\xc2\r\'i\x04\x168\x1e\x00\xb1\xb7\xc1\xec\xf5u*B-\x99\xac\xda\xb3@\xfd9V\xf6\b\b\xa60\xdc\x1e\x1b\x04\x19\xfed\x00w\xed\xc7W\xfd\x99\xdbba\xe8=\xf3\x9c\xaf\xa9`\xe3q\x85\xcaY\xd3\x15y\x04r\xc6,\x16\xec\x8a~\x14\xfb2\v\xa3r/:\xbb\xce\xa2>5\xc5\xdb\x0e\xd0-\xa2\xf6~\x92\x88\x1b\xa3^\xd4nER\x03\xec\xda\\\x11\xe8^\xf8\x8d\xce\x92u\xd7\xd71\xc9%sQ\x98\xcd\xb4B\x92\"2\xf1F\x10\x19\xc4\x83P\x13\xb5\xe7\x8a\xca\xd1\xd7\xbf\xda\x8c\xb9\x1f\\\x9dP`\x01@\xfa \xe7\xea\x81\x10P2F,\xd5\xd8>\xbb\xcdz\x83\x04\xe9', 0x0, 0x0, 0x4008) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMK(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf255c00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 28.659845907s ago: executing program 4 (id=1289): openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x103, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card2/midi1\x00', 0x8a400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000000)=""/210, 0xd2) read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f0000000000)=""/182, 0xb6) remap_file_pages$auto(0xa45, 0xb, 0x4, 0xfdf6, 0x400) 28.559784351s ago: executing program 4 (id=1290): mmap$auto(0x0, 0x240000a, 0xdf, 0x17d, 0x2, 0x2000000000180000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="c7290000", @ANYRES16=r1, @ANYBLOB="010325bd7040ffdbdf250a0000000600010000020000"], 0x1c}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) socket(0x2, 0x1, 0x106) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000060}, 0x20000010) mq_unlink$auto(&(0x7f0000000000)='(/}%!-\x00') mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x41b8e9c, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x4b68, 0xb551) madvise$auto(0xfffffffffffffffe, 0xffffffffffff0005, 0x19) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x1, 0x7, 0xf3, 0x2000eb7, 0x5, 0x8000) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r0) sendmsg$auto_BATADV_CMD_GET_HARDIF(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x68, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BLA_BACKBONE={0xa, 0x21, @multicast}, @BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @remote}, @BATADV_ATTR_ACTIVE={0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd253}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) read$auto(0x3, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioperm$auto(0x800, 0x5, 0xd) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x5, r6) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) 26.101998743s ago: executing program 4 (id=1297): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) preadv2$auto(0x8, &(0x7f0000000140)={&(0x7f0000000040)="7c2a0e4d8bb8d1bfc7dd720ef243b6bb1d", 0x81}, 0x10001, 0x5, 0x0, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xffff) 25.007686125s ago: executing program 4 (id=1299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x81}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x10}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045051}, 0x40) 13.877669528s ago: executing program 2 (id=1343): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a40000f20600b90676b63f00", @ANYRES16=0x0, @ANYBLOB="00042dbd"], 0xa4}, 0x1, 0x0, 0x0, 0x4008045}, 0x1) r1 = socket(0x2, 0x5, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101040, 0x20) mount_setattr$auto(r2, &(0x7f0000000080)='./file0\x00', 0x7af3, &(0x7f0000001180)={0x631, 0x100000001, 0x1, @raw=0x5}, 0x800) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) r3 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x53) mmap$auto(0x0, 0x600004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) write$auto_proc_fault_inject_operations_base(r4, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000af"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8000000, &(0x7f00000002c0)={0x0, 0x2}, 0x1, 0x0, 0x2, 0x7}, 0x4}, 0x3, 0x0) 13.492921142s ago: executing program 2 (id=1346): io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.2MB.limit_in_bytes\x00', 0x42000, 0x0) mprotect$auto(0x1ffff000, 0x80000000, 0x9) acct$auto(&(0x7f0000000080)='X\xb5[h\xcd\xaf\x06\x01\x00') acct$auto(0x0) mmap$auto(0x100000, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xfff, 0x1, 0x1, 0x0, 0xee00, 0x0, 0x0, 0xe, 0x4, 0x4, 0x7, 0xd41, 0x2, 0x5, 0x9a, 0x2, 0xffffffffffff1dc9}) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x2) openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f0000000200), 0x10002, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) clone$auto(0x9, 0x3, 0x0, 0x0, 0x7) 12.762127718s ago: executing program 2 (id=1348): r0 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xfffffffffffff029, 0x5, 0x7}, 0x8, 0x5) read$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000080)=""/4096, 0x1000) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) write$auto(0x3, 0x0, 0x3f00) 12.495400908s ago: executing program 2 (id=1350): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2a, 0x2, 0x6) connect$auto(0x3, 0xfffffffffffffffe, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mincore$auto(0x0, 0xffffffff, 0x0) (async) mincore$auto(0x0, 0xffffffff, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x80a00, 0x0) mmap$auto(0x0, 0x2, 0x1, 0x15, 0x0, 0x7ffb) (async) mmap$auto(0x0, 0x2, 0x1, 0x15, 0x0, 0x7ffb) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x80002, 0x5) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) (async) r0 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) pread64$auto(r0, 0x0, 0x5bbcf9f5, 0x100000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x8000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) ioctl$auto_evdev_fops_evdev(r1, 0xfffeffff80004521, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) socket(0xf, 0x80000, 0x401) (async) socket(0xf, 0x80000, 0x401) read$auto(r2, 0x0, 0x80000001) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) 10.378676481s ago: executing program 2 (id=1358): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x7ffffffffffffffc, 0xdf, 0x9b71, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) wait4$auto(0xffffffffffffffff, 0x0, 0x4, 0x0) pipe$auto(&(0x7f0000000000)=r0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) stat$auto(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x3, 0x9, 0x0, 0x4, 0xee00, 0xee01, 0x0, 0x40, 0x5, 0x10001, 0x1, 0x6, 0x3, 0x2, 0x6, 0x2, 0x79c}) sendmsg$auto_NL80211_CMD_DEL_KEY(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x10, 0x2c, 0x0, 0x1, [@nested={0xc, 0x45, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @uid=r3}, @generic]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x4000004) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x10000009, 0x7, 0x2e, 0x6, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x20004, 0xb4, 0x20000000009, 0x2, 0x10000, 0x81, 0x7, 0x0, 0x4, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0xfffffffffffffffd, 0x1, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x400000000005b8, 0xc, 0x3, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x7, 0x8000000000008, 0x0, 0x3, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0x200d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x88c}, 0x48000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r4, 0x54a3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 9.915553978s ago: executing program 33 (id=1299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x81}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x10}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045051}, 0x40) 9.849153893s ago: executing program 2 (id=1362): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x220a00, 0x0) r0 = memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000200)={0x9, &(0x7f00000001c0)={0xfffc, 0xb5, 0x81, @raw=0xfff}}) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x1, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000, 0x0) seccomp$auto(0x4, 0x6584, &(0x7f00000000c0)="4b2cacd643eb0bcf3d226fed46486ac07cc6e5994438d3459ecb3ae11c1006ba8b83599b55904d4816db975266f9b8042989cc831f1457ac1cdd811b8407e03a6f30afc9bc20f0bee7f30e3d69ea0f0adb4d98dc7a33c7074d2b82453320c23c819574c94cc27c0d22abde25fa28fc90e2eee33d6cb6978a4c708b") r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r1, 0x541b, 0x1000000000000) futex$auto(0x0, 0x7, 0x0, 0x0, 0x0, 0x80000003) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000780)='/proc/sys/net/ipv6/neigh/virt_wifi0/retrans_time\x00', 0x101000, 0x0) read$auto_lru_gen_rw_fops_vmscan(r2, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002580), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000025c0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000003780)={0x7fff, 0x3ffffffe}, 0x8) 5.027484716s ago: executing program 5 (id=1378): pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) write$auto(0x3, 0x0, 0x5dc) r0 = socket(0x2, 0x1, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a48000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) r1 = socket(0x9, 0x2, 0x84) listen$auto(r1, 0x3) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) getsockopt$auto(r0, 0x0, 0x41, 0x0, &(0x7f00000000c0)=0x28) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8002) r2 = socket(0x10, 0x3, 0xa) flistxattr$auto(r2, 0x0, 0xfffffffffffffffe) r3 = socket(0xa, 0x801, 0x106) mknod$auto(&(0x7f0000000040)='./cgroup\x00', 0x7, 0x7fff) setsockopt$auto(r3, 0x6, 0x24, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="110041926f2f8fe6db3cc2221cab969240e14bfab7c2a1dc762347c5b29be9b1f55409fb3fbc80660673da234215db2c25d4b484b64b2fd8a7d19c7d5c494c6d8be718a74978f53ac41ff417afa988e62a9f17ce38debcb042cb35b0a5be00"/105], 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) socket(0x8, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x18, 0x5, 0x0) process_mrelease$auto(0xffffffffffffffff, 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x4008b100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.716553879s ago: executing program 5 (id=1379): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) (async) r0 = accept$auto(0xffffffffffffffff, &(0x7f0000000000)=@can, &(0x7f0000000040)=0x3b8a) ioctl$auto_def_blk_fops_fs(r0, 0x73, &(0x7f0000000080)="42e189583b5db679b4497af903ec5dfa8e393269c638d23bef32e30c7c6d3e8a55f6e319b8f4f3a20df451eb6310c5f294ee891c") (async) madvise$auto(0x0, 0x200007, 0x8) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async, rerun: 64) madvise$auto(0x800, 0x200007, 0xe) (rerun: 64) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0xffdf, 0x7) 4.2718969s ago: executing program 5 (id=1382): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b80)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket(0x1, 0x3, 0x2000006) (async) r2 = socket(0x1, 0x3, 0x2000006) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000040), r2) geteuid() (async) r5 = geteuid() setreuid$auto(r5, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001c40)={0x2c, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x14}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xcc5f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000093}, 0x8004) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000100)={0x0, 0x28, &(0x7f00000000c0)={&(0x7f0000000800)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x50}}, 0x0) 4.159877141s ago: executing program 5 (id=1383): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x101000, 0x0) syz_genetlink_get_family_id$auto_handshake(0xffffffffffffffff, 0xffffffffffffffff) socket(0x25, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x24c041, 0x0) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xb, 0x401, 0x0, 0x2, 0xffffffff, 0x2}, 0x20008000, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mincore$auto(0x0, 0xffffffff, 0x0) mq_open$auto(&(0x7f0000000200)='#\x01\x00\xdc\xff\xff\xee\xff', 0xde8, 0xb, &(0x7f0000000240)={0x9, 0x400004, 0x2, 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r2, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c) fallocate$auto(0x8000000000000003, 0x0, 0x1000, 0x1) fallocate$auto(0x3, 0x3, 0xe, 0x80000007) r4 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci1/force_wakeup\x00', 0x101200, 0x0) read$auto_force_wakeup_fops_hci_vhci(r4, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f00000000c0)={0x7, 0x5, 0xb}, 0x6, 0x7) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x1000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000080)={@raw=0x5, 0x8000, 0x5, 0x7, "34ab35e21087c92d9f06a27f7dcccca2e31a3c5f7b6f1774d1b23d727d44ae9bf3580b18813ce8fa5c4a1b3b", @raw=0xc}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) close_range$auto(0x2, 0x8, 0x0) 2.676290608s ago: executing program 3 (id=1389): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x401, 0x5, 0x0) futimesat$auto(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100, 0x8}) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1fe, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000e80), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)={0x14, r2, 0x72b, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x18094}, 0x80800) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nfs\x00\x00L\xa5iw\xe8\xf7\xc8\xc4T\x1bx\xcb\xe3\xb0\x82=\xc7\xd6\x8bk.\x96\x7fbDu\x108P\xd6g@\xa0\xe0p\xf5\xc0oA\x8b\x90X\xf0\xf2D\x82\xac\x05ct\x8dD\x9c\xb7\xef\xf2\xa4B\x1f', 0x200, &(0x7f0000000080)) r4 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8954, 0x0) getsockopt$auto(0x6, 0x1, 0x11, 0xfffffffffffffffe, 0x0) 2.24044259s ago: executing program 3 (id=1391): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x34000010, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x6, 0x5) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0xf, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x1}, 0xab5e871f, 0x20000000) recvmmsg$auto(0x3, 0x0, 0x40, 0x10006, 0x0) 1.944622726s ago: executing program 0 (id=1392): socket(0x2, 0x801, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/fs/netfs/caches\x00', 0x20000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f00000002c0)=""/233, 0xe9) read$auto(0x3, 0x0, 0x80) fchdir$auto(r1) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0xc005) pwrite64$auto(0xc8, &(0x7f0000000540)='\vX\xb5n\x91p\xe6\x94\xa1\x90z\x99\x88d\x11\x01J\x99\x12:\x00!\r>\x94\x1a\xd3\xd3\x1d\x93\xab{Lh\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\x04\nlE@\xc1\xf2o\xdb\x96t2s\xb3\"\x8fY\x06r\xfex\x88\f\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CQ\"\x01\x0e\xa4\xdf\x11\x030\x19o\x17\xf7\xcc7\xd3\x1b\xe0y[\xce\xbb\a\x90\x11x\xfb\xdao>C\x8a\xeeq\xf0\xcdr\xc1\xa8\xcd\xf9.=(\xeb\xd1\x14^\x87&^\xcc\x181\xd6\xa3k\xd9\x9f\xefC\xda\x1f+\xb4`\xdd02S\x18\x9efHu\xfe\xfd\x90\xdb\xff9{\xa6 \x88\x19\x82?\x88\xed\x88V\x95\x13\xa2(o\xdf\x82\xca\xb4C\x06-&\xf1\xa22(\xc7}\x0eE.R<\xea\x8e\x13\x9c', 0x2b, 0x6) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x101842, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000300)={{@raw=0x1, 0xa, 0xf8, 0x4671, "a401d243991a4dc376cc2bd4dbe3040e3cff152230323227f8d6c24be7ceeed84366bbadec197ea40209a468", @raw}, 0x1ec, 0x80d, 0x1, @inferred, @reserved="b2089ab0bbaab63c40853405fb772ade9448008d0040560232dbb586cf8f11ca82a2ba37174118952b850ad2099d3a3bc1c77e916330e96e2989bebf719430efe8c9a59c9349eac701c2bbb3122607916561a6da1cfdfc5dc83f4cc979d6dbf96bcb58d1f9042592b39ceec6193960c9a37975bc0153c5fce4d94f329d47f6d4", "2bb2d72b107f03a0ef0c6760e2e1fd64b8ae4a5be70b75810dfa4cc7182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"}) r4 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x20480, 0x0) read$auto_trace_options_fops_trace(r4, 0x0, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x3, 0x0, 0x3) mlockall$auto(0x7) mlockall$auto(0x6b94) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(0xffffffffffffffff, 0x5509, 0x0) acct$auto(&(0x7f0000000200)='/proc/sys/kernel/sched_deadline_period_max_us\x00') acct$auto(0x0) ioctl$auto(0xc8, 0x6, 0x5d6e859b) madvise$auto(0x0, 0xffffffffffff0001, 0x9) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffff, 0x40000000000f, 0x7, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 1.474047781s ago: executing program 0 (id=1393): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@llc={0x1a, 0x17, 0x7f, 0x89, 0x6b, 0x24, @remote}, 0x6a) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x23, 0x0, 0x8) timer_delete$auto(0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b00"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.287792342s ago: executing program 0 (id=1394): syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01012bbd7000fddbdf250d00000008000300", @ANYRES32=0x0, @ANYBLOB="0ceb05000400000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) 1.184593585s ago: executing program 3 (id=1395): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.0/subsystem_device\x00', 0xa8000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/192, 0xc0) r1 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x9, 0x4, 0x8012, 0x3, 0x8000) mremap$auto(0x0, 0x2, 0x3fd6, 0x0, 0x7fffffffb000) mlock$auto(0x3, 0x2) r2 = fcntl$auto(r1, 0xfa0e, 0xffffffffffffffff) read$auto_proc_setgroups_operations_base(r2, &(0x7f0000000140)=""/126, 0x7e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/net/bond0/queues/tx-10/xps_cpus\x00', 0x8080, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x59f, 0x0, 0x20}, 0x5b3}, 0x40, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) mlockall$auto(0x7) 1.067927436s ago: executing program 0 (id=1396): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/requests\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, 0x0, 0x0) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/sda/sched/dispatch1\x00', 0x2880, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) write$auto(r2, 0x0, 0x9) ioctl$auto(r2, 0x80044141, r1) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mount_setattr$auto(r3, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = socket(0x2b, 0x1, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_safesetid_gid_file_fops_securityfs(r3, &(0x7f0000000040)=""/217, 0xd9) ioctl$auto(r4, 0x8941, 0x4) 1.025724218s ago: executing program 0 (id=1397): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x7) mmap$auto(0x0, 0x4, 0xffd, 0x8000000008012, 0x3, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x40) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') fstat$auto(r2, 0x0) readv$auto(0x3, 0x0, 0x1) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) adjtimex$auto(&(0x7f0000000100)={0xfffffff5, 0x0, 0x1, 0x81, 0xffffffffffffffff, 0x5, 0x401, 0x0, 0xa6, 0x94b, 0xc5, {0x9099, 0x10}, 0x1, 0x64d0, 0x7, 0x6, 0x0, 0x6, 0x6, 0x9, 0x6, 0x76a, 0xfffffffe}) 948.900425ms ago: executing program 3 (id=1398): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dbdbdf25020000000800030000000000050004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x40000000, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_enter$auto(r1, 0x0, 0x7, 0x9, 0x0, 0x8000000000018) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = gettid() r4 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000180), r0) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200029bd7000fddbdf250200214b8ffe6fbf56a35389000008000200350e000008b902000800000008000200070000000800020007000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x400c, 0xdf, 0xeb1, 0x401, 0x8) kill$auto(r3, 0x11) bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x630, 0x57d, 0x9, 0x8}, 0xa3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r5, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) io_uring_setup$auto(0x0, &(0x7f0000000340)={0x4, 0xa3fe, 0x6, 0x1, 0x8, 0xee33, r5, [0x58, 0x10, 0x5], {0x200, 0x3, 0x2, 0x3, 0x9, 0x5, 0x8001, 0x3, 0x5}, {0x0, 0x2, 0x1, 0x8, 0x81, 0x0, 0x3ffa906f, 0x7, 0xf}}) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) 874.394717ms ago: executing program 0 (id=1399): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r0) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="131788a1f809030000000800050009e4000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x40040) setrlimit$auto(0x1000000007, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x1f, 0x1, 0xffffffffffffffff, 0x3, 0x400110000000001) socket(0x200000000000011, 0x2, 0x0) 278.811077ms ago: executing program 5 (id=1400): socket(0xa, 0x3, 0x6) bpf$auto(0x4, &(0x7f0000000280)=@bpf_attr_1={0x3, 0xca99, @value=0x5, 0xa}, 0x1c) ioctl$auto(0x3, 0x8936, 0x91) 277.694574ms ago: executing program 3 (id=1401): mlockall$auto(0x7) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mincore$auto(0x0, 0x10000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="412e593e45701c000000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf250300000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0xfff, 0x5881, 0x39, 0x6, 0x1) (async) remap_file_pages$auto(0xfff, 0x5881, 0x39, 0x6, 0x1) fanotify_init$auto(0x1, 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x400000000004, 0x7, 0x3, 0xeb1, 0x0, 0x8000) setuid$auto(0x0) (async) setuid$auto(0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) select$auto(0x8, &(0x7f0000000080)={[0x20000009, 0xfffffffffffbfffc, 0x9, 0x5, 0xc, 0x3, 0x7, 0x1ffe000, 0x2, 0x8, 0x5, 0xf, 0xd, 0x1, 0x6, 0x1]}, 0x0, 0x0, 0x0) futex$auto(0x0, 0x8c, 0x1, 0x0, 0x0, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) 193.171299ms ago: executing program 5 (id=1402): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x20000411, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r0 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) sendfile$auto(0x6, 0xffffffffffffffff, 0x0, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 0s ago: executing program 3 (id=1403): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x34000010, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x6, 0x5) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0xf, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x1}, 0xab5e871f, 0x20000000) recvmmsg$auto(0x3, 0x0, 0x40, 0x10006, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.37' (ED25519) to the list of known hosts. [ 65.683761][ T5816] cgroup: Unknown subsys name 'net' [ 65.814589][ T5816] cgroup: Unknown subsys name 'cpuset' [ 65.822710][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.171917][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.866082][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.873958][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.880714][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.884193][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.896229][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.896531][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.911149][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.912552][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.918792][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.933432][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.941476][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.946058][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.956582][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.962692][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.965024][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.978032][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.986462][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.994428][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.994486][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.001774][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.015939][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.016028][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.042212][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.049797][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.348569][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 69.444454][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 69.459183][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 69.549355][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 69.558304][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.565816][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.573673][ T5826] bridge_slave_0: entered allmulticast mode [ 69.580263][ T5826] bridge_slave_0: entered promiscuous mode [ 69.614448][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.621496][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.628891][ T5826] bridge_slave_1: entered allmulticast mode [ 69.635702][ T5826] bridge_slave_1: entered promiscuous mode [ 69.700107][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.713785][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.728351][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.736444][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.743625][ T5832] bridge_slave_0: entered allmulticast mode [ 69.750093][ T5832] bridge_slave_0: entered promiscuous mode [ 69.770042][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.777699][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.787708][ T5825] bridge_slave_0: entered allmulticast mode [ 69.794332][ T5825] bridge_slave_0: entered promiscuous mode [ 69.801320][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.808542][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.815915][ T5832] bridge_slave_1: entered allmulticast mode [ 69.822665][ T5832] bridge_slave_1: entered promiscuous mode [ 69.840845][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.848245][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.857923][ T5825] bridge_slave_1: entered allmulticast mode [ 69.864657][ T5825] bridge_slave_1: entered promiscuous mode [ 69.894431][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.901493][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.908810][ T5835] bridge_slave_0: entered allmulticast mode [ 69.915615][ T5835] bridge_slave_0: entered promiscuous mode [ 69.923023][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.930109][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.937711][ T5835] bridge_slave_1: entered allmulticast mode [ 69.944340][ T5835] bridge_slave_1: entered promiscuous mode [ 69.953642][ T5826] team0: Port device team_slave_0 added [ 69.967470][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.979704][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.999547][ T5826] team0: Port device team_slave_1 added [ 70.007030][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.019696][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.066342][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.091560][ T5832] team0: Port device team_slave_0 added [ 70.099832][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.118399][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.127104][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.155688][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.169659][ T5825] team0: Port device team_slave_0 added [ 70.177282][ T5832] team0: Port device team_slave_1 added [ 70.191211][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.198395][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.224442][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.242653][ T5825] team0: Port device team_slave_1 added [ 70.264564][ T5835] team0: Port device team_slave_0 added [ 70.270819][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.277809][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.303784][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.331656][ T5835] team0: Port device team_slave_1 added [ 70.356971][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.364073][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.390221][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.410542][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.417660][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.443671][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.486384][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.493508][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.519950][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.533450][ T5826] hsr_slave_0: entered promiscuous mode [ 70.539664][ T5826] hsr_slave_1: entered promiscuous mode [ 70.549246][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.556254][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.583164][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.608265][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.615252][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.641668][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.654968][ T5832] hsr_slave_0: entered promiscuous mode [ 70.661023][ T5832] hsr_slave_1: entered promiscuous mode [ 70.667354][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.675046][ T5832] Cannot create hsr debugfs directory [ 70.721256][ T5825] hsr_slave_0: entered promiscuous mode [ 70.727432][ T5825] hsr_slave_1: entered promiscuous mode [ 70.734182][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.741739][ T5825] Cannot create hsr debugfs directory [ 70.766645][ T5835] hsr_slave_0: entered promiscuous mode [ 70.773696][ T5835] hsr_slave_1: entered promiscuous mode [ 70.779637][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.787342][ T5835] Cannot create hsr debugfs directory [ 71.033255][ T5840] Bluetooth: hci0: command tx timeout [ 71.042207][ T5840] Bluetooth: hci3: command tx timeout [ 71.048771][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.061724][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.073972][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.095162][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.112456][ T5831] Bluetooth: hci2: command tx timeout [ 71.118201][ T5840] Bluetooth: hci1: command tx timeout [ 71.143571][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.153021][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.171506][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.180455][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.243324][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.255207][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.285548][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.294903][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.331932][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.360154][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.369474][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.380402][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.396671][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.407009][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.435964][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.443304][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.474641][ T3588] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.481729][ T3588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.555655][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.577326][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.597167][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.604344][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.624691][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.631939][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.650767][ T1856] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.657971][ T1856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.696069][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.755775][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.786456][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.806004][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.836370][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.843505][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.862513][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.869859][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.879619][ T3588] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.886758][ T3588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.898631][ T3588] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.905770][ T3588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.008519][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.029220][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.066157][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.128036][ T5826] veth0_vlan: entered promiscuous mode [ 72.169191][ T5825] veth0_vlan: entered promiscuous mode [ 72.183200][ T5826] veth1_vlan: entered promiscuous mode [ 72.211352][ T5825] veth1_vlan: entered promiscuous mode [ 72.265146][ T5826] veth0_macvtap: entered promiscuous mode [ 72.296542][ T5826] veth1_macvtap: entered promiscuous mode [ 72.329402][ T5825] veth0_macvtap: entered promiscuous mode [ 72.340630][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.357052][ T5825] veth1_macvtap: entered promiscuous mode [ 72.369769][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.386983][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.399955][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.420594][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.431578][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.440602][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.450283][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.480295][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.495849][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.506846][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.519858][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.530698][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.545512][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.576166][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.585313][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.595076][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.604549][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.650765][ T5835] veth0_vlan: entered promiscuous mode [ 72.661194][ T5832] veth0_vlan: entered promiscuous mode [ 72.705076][ T5832] veth1_vlan: entered promiscuous mode [ 72.716475][ T5835] veth1_vlan: entered promiscuous mode [ 72.758359][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.778898][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.807923][ T5832] veth0_macvtap: entered promiscuous mode [ 72.835939][ T5832] veth1_macvtap: entered promiscuous mode [ 72.845448][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.853557][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.888939][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.900902][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.910833][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.924834][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.936184][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.946649][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.958078][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.968200][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.978890][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.990267][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.004346][ T5835] veth0_macvtap: entered promiscuous mode [ 73.021848][ T3588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.023094][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.029986][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.039538][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.052040][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.065895][ T3588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.074448][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.088783][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.115242][ T5831] Bluetooth: hci0: command tx timeout [ 73.118646][ T5835] veth1_macvtap: entered promiscuous mode [ 73.120775][ T5840] Bluetooth: hci3: command tx timeout [ 73.190795][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.207874][ T5840] Bluetooth: hci1: command tx timeout [ 73.211298][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.213539][ T5831] Bluetooth: hci2: command tx timeout [ 73.240838][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.250793][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.261912][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.271809][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.282890][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.295387][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.350831][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.362976][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.373154][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.383968][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.407307][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.446316][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.471885][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.481293][ T3426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.485674][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.500835][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.512560][ T3426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.512974][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.542060][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.705741][ T3426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.721826][ T3426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.739763][ T1856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.768034][ T1856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.940035][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.987003][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.111624][ T5890] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.368572][ T5906] Process accounting resumed [ 75.194953][ T5831] Bluetooth: hci3: command tx timeout [ 75.200423][ T5840] Bluetooth: hci0: command tx timeout [ 75.228629][ T5906] Process accounting resumed [ 75.282928][ T5831] Bluetooth: hci2: command tx timeout [ 75.288387][ T5840] Bluetooth: hci1: command tx timeout [ 75.599255][ T5921] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 75.823017][ T5916] kexec: Could not allocate control_code_buffer [ 77.289312][ T5840] Bluetooth: hci3: command tx timeout [ 77.292086][ T5831] Bluetooth: hci0: command tx timeout [ 77.354185][ T5831] Bluetooth: hci2: command tx timeout [ 77.354193][ T5840] Bluetooth: hci1: command tx timeout [ 77.703363][ T5986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.140747][ T5997] Zero length message leads to an empty skb [ 78.179112][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 78.212357][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 79.628688][ T6026] netlink: 338 bytes leftover after parsing attributes in process `syz.3.30'. [ 80.424658][ T6032] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.913920][ T25] cfg80211: failed to load regulatory.db [ 82.076082][ T6051] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET) [ 82.904837][ T6077] binder: BINDER_SET_CONTEXT_MGR already set [ 82.910990][ T6077] binder: 6075:6077 ioctl 4018620d 9 returned -16 [ 84.882767][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 84.903107][ T6105] nbd: socks must be embedded in a SOCK_ITEM attr [ 85.425389][ T6112] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 85.462980][ T6112] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 86.245184][ T6123] netlink: 'syz.3.59': attribute type 2 has an invalid length. [ 86.491036][ T6128] Invalid ELF header magic: != ELF [ 88.491472][ T6145] kernel read not supported for file /#)-\&[} (pid: 6145 comm: syz.2.64) [ 88.574591][ T6143] can: request_module (can-proto-0) failed. [ 88.709803][ T29] audit: type=1800 audit(1735739596.826:2): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.64" name="#)-\&[}" dev="mqueue" ino=8380 res=0 errno=0 [ 89.442430][ T6156] mmap: syz.0.66 (6156) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.502629][ T6160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.67'. [ 89.556487][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'. [ 90.922856][ T6179] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 90.990188][ T6178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.336496][ T6188] kernel read not supported for file /8SpExYXgh|lH敿9.KgPn֤L]XF (pid: 6188 comm: syz.3.75) [ 91.424671][ T29] audit: type=1800 audit(1735739599.566:3): pid=6188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.75" name=11F9BC9A3897C953FE7016B04578951E595883AE6714BB68CF7C6C489B01FCFA14C2EC06E695BF392E1B4B6702A0A9EFFE500EE66ED6A44C8F9A1EEF5D58DB46A6D0 dev="mqueue" ino=9326 res=0 errno=0 [ 91.429523][ T6187] bond0: option arp_validate: invalid value () [ 91.636932][ T6187] process 'syz.0.74' launched ':,' with NULL argv: empty string added [ 93.982976][ T6218] capability: warning: `syz.2.80' uses 32-bit capabilities (legacy support in use) [ 94.759210][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.777804][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.810261][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.840975][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.850643][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.874192][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.305342][ T77] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.511282][ T77] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.681703][ T77] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.734805][ T6230] chnl_net:caif_netlink_parms(): no params data found [ 95.784609][ T77] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.089615][ T6230] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.125522][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.146651][ T6230] bridge_slave_0: entered allmulticast mode [ 96.167980][ T6230] bridge_slave_0: entered promiscuous mode [ 96.224491][ T6230] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.251049][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.280085][ T6230] bridge_slave_1: entered allmulticast mode [ 96.330230][ T6230] bridge_slave_1: entered promiscuous mode [ 96.654648][ T77] bridge_slave_1: left allmulticast mode [ 96.660485][ T77] bridge_slave_1: left promiscuous mode [ 96.702832][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.906186][ T77] bridge_slave_0: left allmulticast mode [ 96.911864][ T77] bridge_slave_0: left promiscuous mode [ 96.933908][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.952333][ T5840] Bluetooth: hci4: command tx timeout [ 97.709284][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 98.360694][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.400053][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.429349][ T77] bond0 (unregistering): Released all slaves [ 98.454341][ T6230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.469994][ T6230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.599215][ T6230] team0: Port device team_slave_0 added [ 98.742339][ T6230] team0: Port device team_slave_1 added [ 98.838411][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.856566][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.934846][ T6230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.032497][ T5840] Bluetooth: hci4: command tx timeout [ 99.083352][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.090327][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.137617][ T6230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.214989][ T77] hsr_slave_0: left promiscuous mode [ 99.236625][ T77] hsr_slave_1: left promiscuous mode [ 99.286309][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.316679][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.365671][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.408235][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.583271][ T77] veth1_macvtap: left promiscuous mode [ 99.589173][ T77] veth0_macvtap: left promiscuous mode [ 99.602165][ T77] veth1_vlan: left promiscuous mode [ 99.608687][ T77] veth0_vlan: left promiscuous mode [ 100.524319][ T77] team0 (unregistering): Port device team_slave_1 removed [ 100.602881][ T77] team0 (unregistering): Port device team_slave_0 removed [ 101.112281][ T5840] Bluetooth: hci4: command tx timeout [ 101.167630][ T6326] netlink: 334 bytes leftover after parsing attributes in process `syz.3.101'. [ 101.543663][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 101.792857][ T6230] hsr_slave_0: entered promiscuous mode [ 101.808641][ T6230] hsr_slave_1: entered promiscuous mode [ 101.860316][ T6230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.868592][ T6230] Cannot create hsr debugfs directory [ 102.357453][ T6230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.378445][ T6230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.390637][ T6230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.446723][ T6230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.731388][ T6366] Process accounting resumed [ 102.831696][ T6366] Process accounting resumed [ 102.866466][ T6230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.119905][ T6230] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.170883][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.178034][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.192117][ T5840] Bluetooth: hci4: command tx timeout [ 103.195287][ T3588] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.204644][ T3588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.725153][ T6230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.970822][ T6384] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 104.412766][ T6230] veth0_vlan: entered promiscuous mode [ 104.475996][ T6230] veth1_vlan: entered promiscuous mode [ 104.570596][ T6230] veth0_macvtap: entered promiscuous mode [ 104.605324][ T6230] veth1_macvtap: entered promiscuous mode [ 104.651986][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.692066][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.701891][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.759634][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.807762][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.824714][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.854196][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.953962][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.997082][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.032094][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.054032][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.092057][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.122179][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.153076][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.290738][ T6230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.324374][ T6230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.356062][ T6230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.385278][ T6435] Line length is too long: Should be less than 4094 [ 105.392068][ T6230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.707833][ T6429] Line length is too long: Should be less than 4094 [ 105.757205][ T1856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.781375][ T1856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.917212][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.992111][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.743674][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 111.312082][ T29] audit: type=1326 audit(1735739619.446:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.2.133" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1870b85d29 code=0x0 [ 112.732280][ T6623] tty tty40: ldisc open failed (-12), clearing slot 39 [ 116.385386][ T6700] Invalid ELF header magic: != ELF [ 116.401514][ T6699] Invalid ELF header magic: != ELF [ 118.798071][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.158'. [ 118.812376][ T6737] ipvlan0: entered allmulticast mode [ 118.817704][ T6737] veth0_vlan: entered allmulticast mode [ 119.430928][ T6757] bridge0: port 3(veth1_to_hsr) entered blocking state [ 119.460743][ T6757] bridge0: port 3(veth1_to_hsr) entered disabled state [ 119.488145][ T6757] veth1_to_hsr: entered allmulticast mode [ 119.510248][ T6757] veth1_to_hsr: entered promiscuous mode [ 119.547274][ T6757] bridge0: port 3(veth1_to_hsr) entered blocking state [ 119.554541][ T6757] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 119.639136][ T6762] futex_wake_op: syz.0.162 tries to shift op by 64; fix this program [ 123.865045][ T6876] sctp: [Deprecated]: syz.3.186 (pid 6876) Use of int in maxseg socket option. [ 123.865045][ T6876] Use struct sctp_assoc_value instead [ 126.239964][ T6914] warning: `syz.0.191' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.569431][ T6982] Invalid ELF header magic: != ELF [ 127.620026][ T6985] Invalid ELF header magic: != ELF [ 127.626887][ T6985] Invalid ELF header magic: != ELF [ 127.706749][ T6982] Invalid ELF header magic: != ELF [ 127.745156][ T6982] Invalid ELF header magic: != ELF [ 133.037955][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.044577][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.142367][ T7154] ======================================================= [ 136.142367][ T7154] WARNING: The mand mount option has been deprecated and [ 136.142367][ T7154] and is ignored by this kernel. Remove the mand [ 136.142367][ T7154] option from the mount to silence this warning. [ 136.142367][ T7154] ======================================================= [ 136.177235][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.240330][ T7164] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 137.282494][ T7168] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 137.831393][ T7188] Process accounting resumed [ 138.433291][ T7190] raw_sendmsg: syz.3.236 forgot to set AF_INET. Fix it! [ 139.624558][ T7210] netlink: 334 bytes leftover after parsing attributes in process `syz.2.242'. [ 139.962617][ T7213] RDS: rds_bind could not find a transport for ::ffff:172.30.65.3, load rds_tcp or rds_rdma? [ 140.918690][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.245'. [ 140.941907][ T7223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.958762][ T7223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.990891][ T7223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.022253][ T7223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.840382][ T7226] netlink: 342 bytes leftover after parsing attributes in process `syz.2.247'. [ 142.890180][ T7236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.249'. [ 142.944725][ T7236] ip6gre0: entered promiscuous mode [ 143.059244][ T7236] RDS: rds_bind could not find a transport for ::ffff:3.0.0.0, load rds_tcp or rds_rdma? [ 143.564491][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 144.462789][ T7258] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.252'. [ 144.493670][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 145.325247][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.261'. [ 145.517192][ T7282] Process accounting resumed [ 147.941346][ T7298] syz.0.257 (7298) used greatest stack depth: 20576 bytes left [ 153.914538][ T7383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.284'. [ 157.878936][ T7468] Process accounting resumed [ 159.785279][ T7509] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 160.231342][ T7522] nvme_fabrics: missing parameter 'transport=%s' [ 160.253932][ T7522] nvme_fabrics: missing parameter 'nqn=%s' [ 162.643408][ T7583] Invalid ELF header magic: != ELF [ 163.107353][ T7586] Process accounting resumed [ 164.140832][ T6941] syz.4.194 (6941) used greatest stack depth: 18464 bytes left [ 164.331652][ T7626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.336'. [ 164.362758][ T7614] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.371529][ T7614] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.412138][ T7626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.419562][ T7626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.452836][ T7614] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 164.483536][ T7626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.485016][ T7614] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.505447][ T7626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.516989][ T7614] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.582845][ T7614] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 164.656320][ T7614] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.668445][ T7614] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.710056][ T7614] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.727031][ T7614] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 164.747149][ T7614] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.823475][ T7614] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.861337][ T7617] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 165.852104][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.991381][ T7684] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 166.509368][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 166.552191][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.722768][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.792756][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.915499][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.632166][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.823193][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.884470][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.992134][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.203272][ T7718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.354'. [ 170.302765][ T7718] veth1_macvtap: left promiscuous mode [ 170.308424][ T7718] macsec0: entered promiscuous mode [ 170.524707][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 170.712244][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.872245][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.953377][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 171.587961][ T7108] syz.4.210 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 171.726989][ T7108] CPU: 1 UID: 0 PID: 7108 Comm: syz.4.210 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 171.737625][ T7108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.747708][ T7108] Call Trace: [ 171.751006][ T7108] [ 171.753956][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 171.758662][ T7108] dump_header+0x101/0x900 [ 171.763105][ T7108] oom_kill_process+0x270/0xa60 [ 171.767979][ T7108] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 171.773644][ T7108] out_of_memory+0x351/0x1700 [ 171.778369][ T7108] ? __pfx_out_of_memory+0x10/0x10 [ 171.783515][ T7108] ? rcu_read_unlock+0x17/0x60 [ 171.788311][ T7108] ? find_held_lock+0x2d/0x110 [ 171.793122][ T7108] mem_cgroup_out_of_memory+0x207/0x270 [ 171.798692][ T7108] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 171.804778][ T7108] ? do_raw_spin_unlock+0x172/0x230 [ 171.809992][ T7108] try_charge_memcg+0x54c/0xaf0 [ 171.814862][ T7108] ? __pfx_try_charge_memcg+0x10/0x10 [ 171.820246][ T7108] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 171.825714][ T7108] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 171.831184][ T7108] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 171.836739][ T7108] __mem_cgroup_charge+0x9b/0x280 [ 171.841780][ T7108] shmem_alloc_and_add_folio+0x507/0xc00 [ 171.847429][ T7108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.853343][ T7108] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 171.859515][ T7108] ? shmem_huge_global_enabled+0x176/0x250 [ 171.865351][ T7108] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 171.871260][ T7108] shmem_get_folio_gfp+0x689/0x1530 [ 171.876480][ T7108] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 171.882123][ T7108] ? mark_held_locks+0x9f/0xe0 [ 171.886902][ T7108] ? timestamp_truncate+0x21f/0x2e0 [ 171.892116][ T7108] shmem_write_begin+0x161/0x300 [ 171.897063][ T7108] ? __pfx_shmem_write_begin+0x10/0x10 [ 171.902534][ T7108] ? inode_set_ctime_current+0x2a7/0x900 [ 171.908186][ T7108] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 171.915051][ T7108] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 171.921055][ T7108] generic_perform_write+0x2ba/0x920 [ 171.926376][ T7108] ? __pfx_generic_perform_write+0x10/0x10 [ 171.932189][ T7108] ? __mark_inode_dirty+0x2a5/0xe50 [ 171.937403][ T7108] ? generic_update_time+0xcf/0xf0 [ 171.942527][ T7108] ? mnt_put_write_access_file+0x45/0xf0 [ 171.948169][ T7108] shmem_file_write_iter+0x10e/0x140 [ 171.953468][ T7108] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 171.959283][ T7108] __kernel_write_iter+0x318/0xa80 [ 171.964407][ T7108] ? __pfx___kernel_write_iter+0x10/0x10 [ 171.970046][ T7108] ? get_dump_page+0x15b/0x230 [ 171.974832][ T7108] ? __pfx___might_resched+0x10/0x10 [ 171.980131][ T7108] dump_user_range+0x389/0x8c0 [ 171.984915][ T7108] ? __pfx_dump_user_range+0x10/0x10 [ 171.990234][ T7108] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 171.996409][ T7108] ? __pfx_writenote+0x10/0x10 [ 172.001187][ T7108] elf_core_dump+0x2787/0x3880 [ 172.005975][ T7108] ? __pfx_elf_core_dump+0x10/0x10 [ 172.011094][ T7108] ? kasan_save_stack+0x42/0x60 [ 172.015957][ T7108] ? kasan_save_stack+0x33/0x60 [ 172.020820][ T7108] ? kasan_save_track+0x14/0x30 [ 172.025681][ T7108] ? __kasan_kmalloc+0xaa/0xb0 [ 172.030453][ T7108] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 172.035923][ T7108] ? do_coredump+0x1665/0x43e0 [ 172.040706][ T7108] ? get_signal+0x23f3/0x2610 [ 172.045439][ T7108] ? rcu_is_watching+0x12/0xc0 [ 172.050211][ T7108] ? trace_lock_acquire+0x14e/0x1f0 [ 172.055424][ T7108] ? __pfx_sort+0x10/0x10 [ 172.059766][ T7108] ? get_signal+0x23f3/0x2610 [ 172.064459][ T7108] ? do_coredump+0x2dd5/0x43e0 [ 172.069236][ T7108] do_coredump+0x2dd5/0x43e0 [ 172.073854][ T7108] ? __pfx_do_coredump+0x10/0x10 [ 172.078805][ T7108] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 172.084770][ T7108] get_signal+0x23f3/0x2610 [ 172.089293][ T7108] ? __pfx_get_signal+0x10/0x10 [ 172.094154][ T7108] ? rcu_is_watching+0x12/0xc0 [ 172.098926][ T7108] ? trace_irq_disable.constprop.0+0xea/0x140 [ 172.105011][ T7108] arch_do_signal_or_restart+0x90/0x7e0 [ 172.110607][ T7108] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 172.116793][ T7108] ? do_user_addr_fault+0xa4b/0x13f0 [ 172.122098][ T7108] irqentry_exit_to_user_mode+0x13f/0x280 [ 172.127832][ T7108] asm_exc_page_fault+0x26/0x30 [ 172.132692][ T7108] RIP: 0033:0x401000 [ 172.136590][ T7108] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 172.156199][ T7108] RSP: 002b:0000000000000013 EFLAGS: 00010246 [ 172.162274][ T7108] RAX: 0000000000000000 RBX: 00007f3a7c775fa0 RCX: 00007f3a7c585d29 [ 172.170251][ T7108] RDX: 0000000020000040 RSI: 000000000000000b RDI: 0000000000000003 [ 172.178226][ T7108] RBP: 00007f3a7c601b08 R08: 0000000000000003 R09: 0000000000000000 [ 172.186202][ T7108] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 [ 172.194176][ T7108] R13: 0000000000000000 R14: 00007f3a7c775fa0 R15: 00007ffce3bf1b48 [ 172.202165][ T7108] [ 172.307377][ T7108] memory: usage 307200kB, limit 307200kB, failcnt 25647 [ 172.315781][ T7108] memory+swap: usage 429160kB, limit 9007199254740988kB, failcnt 0 [ 172.323770][ T7108] kmem: usage 3608kB, limit 9007199254740988kB, failcnt 0 [ 172.331902][ T7108] Memory cgroup stats for /syz4: [ 172.333004][ T7108] cache 302338048 [ 172.342062][ T7108] rss 7634944 [ 172.345371][ T7108] rss_huge 0 [ 172.348580][ T7108] shmem 302338048 [ 172.356554][ T7108] mapped_file 35885056 [ 172.360647][ T7108] dirty 0 [ 172.363728][ T7108] writeback 0 [ 172.367031][ T7108] workingset_refault_anon 1399 [ 172.371806][ T7108] workingset_refault_file 0 [ 172.376362][ T7108] swap 124887040 [ 172.379921][ T7108] swapcached 856064 [ 172.384114][ T7108] pgpgin 178690 [ 172.387592][ T7108] pgpgout 102804 [ 172.391151][ T7108] pgfault 50814 [ 172.394750][ T7108] pgmajfault 251 [ 172.398310][ T7108] inactive_anon 249384960 [ 172.402758][ T7108] active_anon 61444096 [ 172.406841][ T7108] inactive_file 0 [ 172.410481][ T7108] active_file 0 [ 172.415128][ T7108] unevictable 0 [ 172.418607][ T7108] hierarchical_memory_limit 314572800 [ 172.424240][ T7108] hierarchical_memsw_limit 9223372036854771712 [ 172.430411][ T7108] total_cache 302338048 [ 172.434624][ T7108] total_rss 7634944 [ 172.438441][ T7108] total_rss_huge 0 [ 172.473920][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'. [ 172.492534][ T7108] total_shmem 302338048 [ 172.496718][ T7108] total_mapped_file 35885056 [ 172.511614][ T7108] total_dirty 0 [ 172.523163][ T7108] total_writeback 0 [ 172.544855][ T7108] total_workingset_refault_anon 1399 [ 172.607861][ T7108] total_workingset_refault_file 0 [ 172.652565][ T7108] total_swap 124887040 [ 172.656658][ T7108] total_swapcached 856064 [ 172.671216][ T7108] total_pgpgin 178690 [ 172.676828][ T7108] total_pgpgout 102804 [ 172.681640][ T7108] total_pgfault 50814 [ 172.691566][ T7108] total_pgmajfault 251 [ 172.719421][ T7108] total_inactive_anon 249384960 [ 172.744554][ T7108] total_active_anon 61444096 [ 172.766731][ T7108] total_inactive_file 0 [ 172.777080][ T7108] total_active_file 0 [ 172.791701][ T7108] total_unevictable 0 [ 172.807852][ T7108] anon_cost 0 [ 172.811163][ T7108] file_cost 0 [ 172.842083][ T7108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.194,pid=6970,uid=0 [ 172.878131][ T7108] Memory cgroup out of memory: Killed process 6970 (syz.4.194) total-vm:131696kB, anon-rss:840kB, file-rss:51356kB, shmem-rss:19564kB, UID:0 pgtables:240kB oom_score_adj:1000 [ 173.174965][ T7772] zswap: compressor not available [ 173.393486][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 173.527847][ T7780] misc userio: Invalid payload size [ 173.761386][ T6956] syz.4.194 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 173.792651][ T7784] block nbd1: Unsupported socket: shutdown callout must be supported. [ 173.882091][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.4.194 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 173.892711][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 173.902794][ T6956] Call Trace: [ 173.906088][ T6956] [ 173.909041][ T6956] dump_stack_lvl+0x16c/0x1f0 [ 173.913752][ T6956] dump_header+0x101/0x900 [ 173.918201][ T6956] oom_kill_process+0x270/0xa60 [ 173.923079][ T6956] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 173.928740][ T6956] out_of_memory+0x351/0x1700 [ 173.933454][ T6956] ? __pfx_out_of_memory+0x10/0x10 [ 173.938592][ T6956] ? rcu_read_unlock+0x17/0x60 [ 173.943387][ T6956] ? find_held_lock+0x2d/0x110 [ 173.948189][ T6956] mem_cgroup_out_of_memory+0x207/0x270 [ 173.953762][ T6956] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 173.959867][ T6956] ? do_raw_spin_unlock+0x172/0x230 [ 173.965111][ T6956] try_charge_memcg+0x54c/0xaf0 [ 173.970024][ T6956] ? __pfx_try_charge_memcg+0x10/0x10 [ 173.975429][ T6956] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 173.980917][ T6956] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 173.986406][ T6956] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 173.991986][ T6956] __mem_cgroup_charge+0x9b/0x280 [ 173.997045][ T6956] shmem_alloc_and_add_folio+0x507/0xc00 [ 174.002708][ T6956] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 174.008624][ T6956] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 174.014798][ T6956] ? shmem_huge_global_enabled+0x176/0x250 [ 174.020640][ T6956] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 174.026579][ T6956] shmem_get_folio_gfp+0x689/0x1530 [ 174.031812][ T6956] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 174.037509][ T6956] ? mark_held_locks+0x9f/0xe0 [ 174.042308][ T6956] ? timestamp_truncate+0x21f/0x2e0 [ 174.047543][ T6956] shmem_write_begin+0x161/0x300 [ 174.052511][ T6956] ? __pfx_shmem_write_begin+0x10/0x10 [ 174.057998][ T6956] ? inode_set_ctime_current+0x2a7/0x900 [ 174.063666][ T6956] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 174.070550][ T6956] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 174.076571][ T6956] generic_perform_write+0x2ba/0x920 [ 174.081901][ T6956] ? __pfx_generic_perform_write+0x10/0x10 [ 174.087735][ T6956] ? __mark_inode_dirty+0x2a5/0xe50 [ 174.092974][ T6956] ? generic_update_time+0xcf/0xf0 [ 174.098119][ T6956] ? mnt_put_write_access_file+0x45/0xf0 [ 174.103785][ T6956] shmem_file_write_iter+0x10e/0x140 [ 174.109107][ T6956] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 174.114948][ T6956] __kernel_write_iter+0x318/0xa80 [ 174.120096][ T6956] ? __pfx___kernel_write_iter+0x10/0x10 [ 174.125756][ T6956] ? get_dump_page+0x15b/0x230 [ 174.130582][ T6956] ? __pfx___might_resched+0x10/0x10 [ 174.135893][ T6956] ? dump_user_range+0x399/0x8c0 [ 174.140876][ T6956] dump_user_range+0x389/0x8c0 [ 174.145685][ T6956] ? __pfx_dump_user_range+0x10/0x10 [ 174.151010][ T6956] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 174.157201][ T6956] ? __pfx_writenote+0x10/0x10 [ 174.161999][ T6956] elf_core_dump+0x2787/0x3880 [ 174.166806][ T6956] ? __pfx_elf_core_dump+0x10/0x10 [ 174.171943][ T6956] ? kasan_save_stack+0x42/0x60 [ 174.176821][ T6956] ? kasan_save_stack+0x33/0x60 [ 174.181709][ T6956] ? kasan_save_track+0x14/0x30 [ 174.186587][ T6956] ? __kasan_kmalloc+0xaa/0xb0 [ 174.191384][ T6956] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 174.196877][ T6956] ? do_coredump+0x1665/0x43e0 [ 174.201673][ T6956] ? get_signal+0x23f3/0x2610 [ 174.206436][ T6956] ? rcu_is_watching+0x12/0xc0 [ 174.211228][ T6956] ? trace_lock_acquire+0x14e/0x1f0 [ 174.216462][ T6956] ? __pfx_sort+0x10/0x10 [ 174.220820][ T6956] ? get_signal+0x23f3/0x2610 [ 174.225542][ T6956] ? do_coredump+0x2dd5/0x43e0 [ 174.230342][ T6956] do_coredump+0x2dd5/0x43e0 [ 174.234985][ T6956] ? __pfx_do_coredump+0x10/0x10 [ 174.239974][ T6956] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 174.245971][ T6956] get_signal+0x23f3/0x2610 [ 174.250521][ T6956] ? __pfx_get_signal+0x10/0x10 [ 174.255399][ T6956] ? rcu_is_watching+0x12/0xc0 [ 174.260189][ T6956] ? trace_irq_disable.constprop.0+0xea/0x140 [ 174.266291][ T6956] arch_do_signal_or_restart+0x90/0x7e0 [ 174.271881][ T6956] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 174.278080][ T6956] ? do_user_addr_fault+0xa4b/0x13f0 [ 174.283404][ T6956] irqentry_exit_to_user_mode+0x13f/0x280 [ 174.289159][ T6956] asm_exc_page_fault+0x26/0x30 [ 174.294041][ T6956] RIP: 0033:0x21000 [ 174.297897][ T6956] Code: Unable to access opcode bytes at 0x20fd6. [ 174.304323][ T6956] RSP: 002b:000000000000000d EFLAGS: 00010246 [ 174.310416][ T6956] RAX: 0000000000000000 RBX: 00007f3a7c775fa0 RCX: 00007f3a7c585d29 [ 174.318410][ T6956] RDX: ffffffffffffffff RSI: 0000000000000005 RDI: 0000000002008001 [ 174.326400][ T6956] RBP: 00007f3a7c601b08 R08: 0000000000000016 R09: 0000000000000000 [ 174.334392][ T6956] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 174.342391][ T6956] R13: 0000000000000000 R14: 00007f3a7c775fa0 R15: 00007ffce3bf1b48 [ 174.350394][ T6956] ? 0xffffffffff600000 [ 174.354581][ T6956] [ 174.602080][ T6956] memory: usage 305900kB, limit 307200kB, failcnt 26313 [ 174.609069][ T6956] memory+swap: usage 428064kB, limit 9007199254740988kB, failcnt 0 [ 174.892107][ T6956] kmem: usage 3308kB, limit 9007199254740988kB, failcnt 0 [ 174.899266][ T6956] Memory cgroup stats for /syz4: [ 174.899449][ T6956] cache 298442752 [ 174.962094][ T6956] rss 7700480 [ 175.010434][ T6956] rss_huge 0 [ 175.042090][ T6956] shmem 298442752 [ 175.067407][ T6956] mapped_file 38076416 [ 175.202200][ T6956] dirty 0 [ 175.205177][ T6956] writeback 0 [ 175.208478][ T6956] workingset_refault_anon 1513 [ 175.278912][ T6956] workingset_refault_file 0 [ 175.309826][ T6956] swap 125173760 [ 175.380430][ T6956] swapcached 1323008 [ 175.395769][ T6956] pgpgin 182248 [ 175.399257][ T6956] pgpgout 107182 [ 175.510967][ T6956] pgfault 52304 [ 175.554284][ T6956] pgmajfault 251 [ 175.557864][ T6956] inactive_anon 234000384 [ 175.620660][ T6956] active_anon 73408512 [ 175.674799][ T6956] inactive_file 0 [ 175.768335][ T6956] active_file 0 [ 175.828308][ T6956] unevictable 0 [ 175.893870][ T6956] hierarchical_memory_limit 314572800 [ 175.941176][ T6956] hierarchical_memsw_limit 9223372036854771712 [ 176.102137][ T6956] total_cache 298442752 [ 176.106336][ T6956] total_rss 7700480 [ 176.110152][ T6956] total_rss_huge 0 [ 176.155944][ T7810] Process accounting paused [ 176.362064][ T6956] total_shmem 298442752 [ 176.412065][ T6956] total_mapped_file 38076416 [ 176.422065][ T6956] total_dirty 0 [ 176.425554][ T6956] total_writeback 0 [ 176.429374][ T6956] total_workingset_refault_anon 1513 [ 176.634560][ T6956] total_workingset_refault_file 0 [ 176.639627][ T6956] total_swap 125173760 [ 176.892229][ T6956] total_swapcached 1323008 [ 176.962105][ T6956] total_pgpgin 182248 [ 176.982375][ T7837] nfs: Bad value for 'source' [ 177.000820][ T6956] total_pgpgout 107182 [ 177.041769][ T6956] total_pgfault 52304 [ 177.290394][ T6956] total_pgmajfault 251 [ 177.337801][ T6956] total_inactive_anon 234000384 [ 177.372121][ T6956] total_active_anon 73408512 [ 177.376738][ T6956] total_inactive_file 0 [ 177.380905][ T6956] total_active_file 0 [ 177.545376][ T6956] total_unevictable 0 [ 177.674673][ T6956] anon_cost 0 [ 177.678425][ T6956] file_cost 0 [ 177.681739][ T6956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.194,pid=6956,uid=0 [ 177.789851][ T6956] Memory cgroup out of memory: Killed process 6956 (syz.4.194) total-vm:131696kB, anon-rss:840kB, file-rss:49692kB, shmem-rss:19616kB, UID:0 pgtables:236kB oom_score_adj:1000 [ 177.851027][ T7842] usb usb15: usbfs: interface 0 claimed by hub while 'syz.0.382' sets config #0 [ 178.608362][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 180.367580][ T6970] syz.4.194 (6970) used greatest stack depth: 17664 bytes left [ 183.595972][ T7981] binder: 7980:7981 ioctl c0105512 1 returned -22 [ 183.997990][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 184.044112][ T7984] tc_dump_action: action bad kind [ 187.034224][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 187.462673][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 190.614854][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 190.917408][ T8121] FAULT_INJECTION: forcing a failure. [ 190.917408][ T8121] name failslab, interval 1, probability 0, space 0, times 1 [ 190.948001][ T8121] CPU: 1 UID: 0 PID: 8121 Comm: syz.3.434 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 190.958625][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 190.968709][ T8121] Call Trace: [ 190.972001][ T8121] [ 190.974944][ T8121] dump_stack_lvl+0x16c/0x1f0 [ 190.979650][ T8121] should_fail_ex+0x497/0x5b0 [ 190.984353][ T8121] ? fs_reclaim_acquire+0xae/0x150 [ 190.989504][ T8121] should_failslab+0xc2/0x120 [ 190.994227][ T8121] __kmalloc_noprof+0xce/0x4f0 [ 190.999024][ T8121] ? rcu_is_watching+0x12/0xc0 [ 191.003814][ T8121] ? kernfs_fop_write_iter+0x223/0x500 [ 191.009306][ T8121] kernfs_fop_write_iter+0x223/0x500 [ 191.014626][ T8121] vfs_write+0x5ae/0x1150 [ 191.018980][ T8121] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 191.024818][ T8121] ? __pfx___mutex_lock+0x10/0x10 [ 191.029870][ T8121] ? __pfx_vfs_write+0x10/0x10 [ 191.034666][ T8121] ksys_write+0x12b/0x250 [ 191.038999][ T8121] ? __pfx_ksys_write+0x10/0x10 [ 191.043861][ T8121] do_syscall_64+0xcd/0x250 [ 191.048370][ T8121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.054717][ T8121] RIP: 0033:0x7f349af85d29 [ 191.059135][ T8121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.078741][ T8121] RSP: 002b:00007f349bd34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.087164][ T8121] RAX: ffffffffffffffda RBX: 00007f349b176080 RCX: 00007f349af85d29 [ 191.095139][ T8121] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 191.103108][ T8121] RBP: 00007f349bd34090 R08: 0000000000000000 R09: 0000000000000000 [ 191.111073][ T8121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.119041][ T8121] R13: 0000000000000000 R14: 00007f349b176080 R15: 00007fff3a24c6f8 [ 191.127025][ T8121] [ 192.155476][ T8143] Invalid ELF header magic: != ELF [ 192.159900][ T8142] Invalid ELF header magic: != ELF [ 192.425113][ T8142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.439'. [ 192.434859][ T8150] sg_write: process 578 (syz.3.440) changed security contexts after opening file descriptor, this is not allowed. [ 192.733009][ T8142] geneve1: entered allmulticast mode [ 193.018837][ T8162] FAULT_INJECTION: forcing a failure. [ 193.018837][ T8162] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 193.042253][ T8162] CPU: 1 UID: 0 PID: 8162 Comm: syz.4.444 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 193.052886][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 193.062961][ T8162] Call Trace: [ 193.066255][ T8162] [ 193.069208][ T8162] dump_stack_lvl+0x16c/0x1f0 [ 193.073925][ T8162] should_fail_ex+0x497/0x5b0 [ 193.078641][ T8162] _copy_from_iter+0x29b/0x1400 [ 193.083533][ T8162] ? trace_lock_acquire+0x14e/0x1f0 [ 193.088769][ T8162] ? __pfx__copy_from_iter+0x10/0x10 [ 193.094087][ T8162] ? __virt_addr_valid+0x1a4/0x590 [ 193.099239][ T8162] ? __virt_addr_valid+0x5e/0x590 [ 193.104303][ T8162] ? __phys_addr_symbol+0x30/0x80 [ 193.109360][ T8162] ? __check_object_size+0x488/0x710 [ 193.114685][ T8162] kernfs_fop_write_iter+0x19d/0x500 [ 193.120012][ T8162] vfs_write+0x5ae/0x1150 [ 193.124373][ T8162] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 193.130210][ T8162] ? __pfx___mutex_lock+0x10/0x10 [ 193.135277][ T8162] ? __pfx_vfs_write+0x10/0x10 [ 193.140101][ T8162] ksys_write+0x12b/0x250 [ 193.144464][ T8162] ? __pfx_ksys_write+0x10/0x10 [ 193.149353][ T8162] do_syscall_64+0xcd/0x250 [ 193.153888][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.159797][ T8162] RIP: 0033:0x7f3a7c585d29 [ 193.164220][ T8162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.183839][ T8162] RSP: 002b:00007f3a7d362038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.192262][ T8162] RAX: ffffffffffffffda RBX: 00007f3a7c775fa0 RCX: 00007f3a7c585d29 [ 193.200241][ T8162] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 193.208221][ T8162] RBP: 00007f3a7d362090 R08: 0000000000000000 R09: 0000000000000000 [ 193.216197][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.224170][ T8162] R13: 0000000000000000 R14: 00007f3a7c775fa0 R15: 00007ffce3bf1b48 [ 193.232163][ T8162] [ 193.502362][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.445'. [ 193.725220][ T8170] hsr_slave_1 (unregistering): left promiscuous mode [ 194.485817][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.492289][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.091502][ T8237] vivid-003: ================= START STATUS ================= [ 196.117870][ T8237] vivid-003: Radio HW Seek Mode: Bounded [ 196.142136][ T8237] vivid-003: Radio Programmable HW Seek: false [ 196.148361][ T8237] vivid-003: RDS Rx I/O Mode: Block I/O [ 196.180787][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 196.185033][ T8237] vivid-003: Generate RBDS Instead of RDS: false [ 196.232101][ T8237] vivid-003: RDS Reception: true [ 196.247310][ T8237] vivid-003: RDS Program Type: 0 inactive [ 196.267543][ T8237] vivid-003: RDS PS Name: inactive [ 196.295128][ T8237] vivid-003: RDS Radio Text: inactive [ 196.321019][ T8237] vivid-003: RDS Traffic Announcement: false inactive [ 196.338275][ T8237] vivid-003: RDS Traffic Program: false inactive [ 196.365023][ T8237] vivid-003: RDS Music: false inactive [ 196.380774][ T8237] vivid-003: ================== END STATUS ================== [ 196.871777][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 196.927732][ T8249] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 197.296746][ T8256] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 197.352109][ T8256] CIFS mount error: No usable UNC path provided in device string! [ 197.352109][ T8256] [ 197.362406][ T8256] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 197.480319][ T8272] CIFS mount error: No usable UNC path provided in device string! [ 197.480319][ T8272] [ 197.512347][ T8272] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 198.926613][ T8288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.473'. [ 199.338553][ T8288] bond0: (slave bond_slave_1): Releasing backup interface [ 199.919303][ T8323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.480'. [ 201.531112][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 201.644818][ T8361] zswap: compressor not available [ 202.809650][ T8376] Process accounting resumed [ 202.974385][ T8393] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.499'. [ 203.028416][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 204.732931][ T8444] binder: 8443:8444 ioctl c0105512 1 returned -22 [ 204.754937][ T8444] binder: 8443:8444 ioctl 0 ffffffffffffffff returned -22 [ 204.961689][ T29] audit: type=1800 audit(8277292115.590:5): pid=8445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.511" name="discovery_nqn" dev="configfs" ino=18767 res=0 errno=0 [ 207.815586][ T8469] Process accounting resumed [ 210.084517][ T8535] netlink: 'syz.2.531': attribute type 2 has an invalid length. [ 211.472977][ T35] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 213.237600][ T8578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.541'. [ 213.684224][ T8578] bond0: (slave bond_slave_1): Releasing backup interface [ 217.165421][ T8676] HfR: entered promiscuous mode [ 217.215241][ T8676] netlink: 32 bytes leftover after parsing attributes in process `syz.2.562'. [ 217.616831][ T8684] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(3376084085.1365887764.2146742831), cmd(20) [ 217.742454][ T8690] bond0: option arp_validate: invalid value () [ 219.256361][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.569'. [ 219.302722][ T8708] geneve1: left allmulticast mode [ 219.421146][ T8726] Process accounting resumed [ 220.733106][ T8776] program syz.4.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.897874][ T8776] program syz.4.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.044365][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 222.062908][ T8800] tc_dump_action: action bad kind [ 224.077191][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.607'. [ 224.157207][ T8855] hsr_slave_1 (unregistering): left promiscuous mode [ 226.140225][ T8904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.148959][ T8904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.177724][ T8904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.204988][ T8904] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 226.571133][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 226.846112][ T8939] kernel read not supported for file /#)-\&[} (pid: 8939 comm: syz.4.625) [ 226.854984][ T29] audit: type=1804 audit(8277292137.480:6): pid=8939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.625" name="#)-\&[}" dev="mqueue" ino=21591 res=1 errno=0 [ 226.921016][ T29] audit: type=1804 audit(8277292137.540:7): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.625" name="#)-\&[}" dev="mqueue" ino=21591 res=1 errno=0 [ 226.945816][ T8936] can: request_module (can-proto-0) failed. [ 226.981705][ T29] audit: type=1804 audit(8277292137.540:8): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.625" name="#)-\&[}" dev="mqueue" ino=21591 res=1 errno=0 [ 227.070352][ T29] audit: type=1800 audit(8277292137.550:9): pid=8939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.625" name="#)-\&[}" dev="mqueue" ino=21591 res=0 errno=0 [ 227.085726][ T8934] can: request_module (can-proto-0) failed. [ 227.593401][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 228.152114][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 228.232188][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 228.238261][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 228.575360][ T9003] netlink: 172 bytes leftover after parsing attributes in process `syz.0.636'. [ 228.612423][ T8999] netlink: 172 bytes leftover after parsing attributes in process `syz.0.636'. [ 229.623739][ T9038] netlink: 'syz.2.643': attribute type 11 has an invalid length. [ 230.573518][ T9075] netlink: 338 bytes leftover after parsing attributes in process `syz.3.649'. [ 230.669465][ T9066] netlink: 342 bytes leftover after parsing attributes in process `syz.2.646'. [ 230.971449][ T9078] netlink: 342 bytes leftover after parsing attributes in process `syz.2.646'. [ 231.155346][ T9075] netlink: 338 bytes leftover after parsing attributes in process `syz.3.649'. [ 231.257592][ T9085] netlink: 342 bytes leftover after parsing attributes in process `syz.2.646'. [ 231.694194][ T9099] netlink: 342 bytes leftover after parsing attributes in process `syz.2.646'. syzkaller syzkaller login: [ 234.137247][ T9160] netlink: zone id is out of range [ 234.142571][ T9160] netlink: zone id is out of range [ 234.147787][ T9160] netlink: zone id is out of range [ 234.153020][ T9160] netlink: zone id is out of range [ 234.162119][ T9160] netlink: zone id is out of range [ 234.167259][ T9160] netlink: zone id is out of range [ 234.172518][ T9160] netlink: zone id is out of range [ 234.177646][ T9160] netlink: zone id is out of range [ 234.182878][ T9160] netlink: zone id is out of range [ 234.188082][ T9160] netlink: zone id is out of range [ 235.881450][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 237.938753][ T9232] Process accounting paused [ 239.868027][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.697'. [ 239.919552][ T9281] ipvlan0: entered allmulticast mode [ 239.948848][ T9281] veth0_vlan: entered allmulticast mode syzkaller syzkaller login: [ 240.400743][ T9306] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 241.125111][ T9276] kexec: Could not allocate control_code_buffer [ 241.990081][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'. [ 242.026471][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'. [ 243.516213][ T9372] Invalid ELF header magic: != ELF [ 243.567459][ T9377] usb usb15: usbfs: process 9377 (syz.3.719) did not claim interface 0 before use [ 243.934195][ T9372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.717'. [ 243.977709][ T9383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.717'. [ 244.044050][ T9372] geneve1: entered allmulticast mode [ 244.483168][ T9380] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 244.489258][ T9380] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.504739][ T9380] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.524824][ T9380] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 245.055796][ T9414] netlink: 146 bytes leftover after parsing attributes in process `syz.2.726'. [ 245.934415][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.174292][ T9423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.729'. [ 246.205846][ T9423] nbd: must specify at least one socket [ 246.558408][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.562184][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 246.565123][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 249.991956][ T9471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.741'. [ 250.784725][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 250.934357][ T9489] net_ratelimit: 12 callbacks suppressed [ 250.934378][ T9489] netlink: zone id is out of range [ 250.972102][ T9489] netlink: zone id is out of range [ 250.991454][ T9489] netlink: zone id is out of range [ 251.009657][ T9489] netlink: zone id is out of range [ 251.040526][ T9489] netlink: zone id is out of range [ 251.071131][ T9489] netlink: zone id is out of range [ 251.088408][ T9489] netlink: zone id is out of range [ 251.122262][ T9489] netlink: zone id is out of range [ 251.132454][ T9489] netlink: zone id is out of range [ 251.152193][ T9489] netlink: zone id is out of range [ 251.229836][ T9493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.747'. [ 252.744806][ T9512] devtmpfs: Unknown parameter '#' [ 253.807836][ T9537] netlink: 326 bytes leftover after parsing attributes in process `syz.3.757'. [ 253.846112][ T9538] netlink: 2 bytes leftover after parsing attributes in process `syz.0.755'. [ 255.292326][ T9562] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 255.925198][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.931626][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.944422][ T9587] netlink: 342 bytes leftover after parsing attributes in process `syz.4.769'. [ 257.969404][ T29] audit: type=1326 audit(8277292168.599:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.4.776" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a7c585d29 code=0x0 [ 258.382193][ T9620] net_ratelimit: 565 callbacks suppressed [ 258.382214][ T9620] openvswitch: netlink: IP tunnel dst address not specified [ 258.628369][ T9636] netlink: zone id is out of range [ 258.642097][ T9636] netlink: zone id is out of range [ 258.647250][ T9636] netlink: zone id is out of range [ 258.686586][ T9636] netlink: zone id is out of range [ 258.722111][ T9636] netlink: zone id is out of range [ 258.733419][ T9636] netlink: zone id is out of range [ 258.753936][ T9636] netlink: zone id is out of range [ 258.785414][ T9636] netlink: zone id is out of range [ 258.802174][ T9636] netlink: zone id is out of range [ 260.934189][ T9673] netlink: 452 bytes leftover after parsing attributes in process `syz.4.790'. [ 260.973057][ T9673] vivid-013: ================= START STATUS ================= [ 261.002161][ T9673] vivid-013: Generate PTS: true [ 261.022100][ T9673] vivid-013: Generate SCR: true [ 261.053260][ T9673] tpg source WxH: 640x360 (Y'CbCr) [ 261.058412][ T9673] tpg field: 1 [ 261.061849][ T9673] tpg crop: 640x360@0x0 [ 261.189288][ T9673] tpg compose: 640x360@0x0 [ 261.214460][ T9673] tpg colorspace: 8 [ 261.218311][ T9673] tpg transfer function: 0/0 [ 261.253208][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.784'. [ 261.264333][ T9673] tpg Y'CbCr encoding: 0/0 [ 261.268772][ T9673] tpg quantization: 0/0 [ 261.289066][ T9673] tpg RGB range: 0/2 [ 261.312108][ T9673] vivid-013: ================== END STATUS ================== [ 261.314294][ T9660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.372145][ T9660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.431147][ T9660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.512106][ T9660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.955134][ T9703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.799'. [ 264.208782][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.801'. [ 264.426804][ T29] audit: type=1800 audit(8277292175.059:11): pid=9722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.805" name="version" dev="configfs" ino=23414 res=0 errno=0 [ 264.589197][ T9720] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 264.928792][ T9728] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.982684][ T9728] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 264.989185][ T9728] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 265.032776][ T9728] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 265.154108][ T9740] vivid-003: ================= START STATUS ================= [ 265.188753][ T9740] vivid-003: Radio HW Seek Mode: Bounded [ 265.221223][ T9740] vivid-003: Radio Programmable HW Seek: false [ 265.282178][ T9740] vivid-003: RDS Rx I/O Mode: Block I/O [ 265.288102][ T9740] vivid-003: Generate RBDS Instead of RDS: false [ 265.332066][ T9740] vivid-003: RDS Reception: true [ 265.342164][ T9740] vivid-003: RDS Program Type: 0 inactive [ 265.365572][ T9740] vivid-003: RDS PS Name: inactive [ 265.392100][ T9740] vivid-003: RDS Radio Text: inactive [ 265.451602][ T9740] vivid-003: RDS Traffic Announcement: false inactive [ 265.482117][ T9740] vivid-003: RDS Traffic Program: false inactive [ 265.600852][ T9740] vivid-003: RDS Music: false inactive [ 265.622187][ T9740] vivid-003: ================== END STATUS ================== [ 266.710999][ T29] audit: type=1800 audit(8277292177.339:12): pid=9761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.811" name="features" dev="configfs" ino=24586 res=0 errno=0 [ 266.952135][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.032237][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 267.038299][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 267.045619][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 267.616685][ T9766] Process accounting resumed [ 268.047328][ T9761] Process accounting resumed [ 275.233107][ T9932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.845'. [ 275.332729][ T9932] ip6gre0: entered promiscuous mode [ 277.067241][ T9960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.852'. [ 280.279669][T10023] net_ratelimit: 565 callbacks suppressed [ 280.279690][T10023] openvswitch: netlink: IP tunnel dst address not specified [ 280.621381][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.627780][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 282.043539][T10092] : Can't lookup blockdev [ 282.107324][ T29] audit: type=1800 audit(8277292192.739:13): pid=10077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.871" name="features" dev="configfs" ino=25325 res=0 errno=0 [ 291.282131][ T29] audit: type=1326 audit(8277292201.899:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10284 comm="syz.2.915" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1870b85d29 code=0x0 [ 291.303714][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.691255][T10299] nfsd: Unknown parameter 'ڸ ds' [ 295.315615][T10387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.942'. [ 295.447254][T10387] bond0: (slave bond_slave_0): Releasing backup interface [ 296.290267][T10417] can: request_module (can-proto-0) failed. [ 296.788198][T10439] netlink: 326 bytes leftover after parsing attributes in process `syz.0.955'. [ 298.257673][T10483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.968'. [ 299.289419][T10502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.980'. [ 299.382474][T10508] netlink: zone id is out of range [ 300.667818][T10541] Invalid ELF header magic: != ELF [ 301.613625][ T29] audit: type=1800 audit(8277292212.249:15): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.993" name="dbroot" dev="configfs" ino=27930 res=0 errno=0 [ 302.744427][T10607] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1000'. [ 305.805644][T10672] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.1015'. [ 305.871081][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 307.874049][T10715] Invalid ELF header magic: != ELF [ 308.705445][T10725] netlink: 'syz.0.1031': attribute type 29 has an invalid length. [ 308.752215][T10725] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1031'. [ 309.070883][ T29] audit: type=1800 audit(8277292219.699:16): pid=10739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1034" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 311.355864][T10777] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1041'. [ 314.475405][T10835] Invalid ELF header magic: != ELF [ 314.784829][T10840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 315.334217][T10850] netlink: 'syz.3.1060': attribute type 2 has an invalid length. [ 315.412242][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 317.368735][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.382723][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.324264][T10893] vivid-013: ================= START STATUS ================= [ 319.346059][T10893] vivid-013: Generate PTS: true [ 319.350995][T10893] vivid-013: Generate SCR: true [ 319.368235][T10893] tpg source WxH: 640x360 (Y'CbCr) [ 319.378351][T10893] tpg field: 1 [ 319.381758][T10893] tpg crop: 640x360@0x0 [ 319.392462][T10893] tpg compose: 640x360@0x0 [ 319.398524][T10893] tpg colorspace: 8 [ 319.412106][T10893] tpg transfer function: 0/0 [ 319.416725][T10893] tpg Y'CbCr encoding: 0/0 [ 319.421157][T10893] tpg quantization: 0/0 [ 319.433829][T10893] tpg RGB range: 0/2 [ 319.437758][T10893] vivid-013: ================== END STATUS ================== [ 319.486589][T10894] vivid-013: ================= START STATUS ================= [ 319.513801][T10894] vivid-013: Generate PTS: true [ 319.527892][T10894] vivid-013: Generate SCR: true [ 319.566505][T10894] tpg source WxH: 640x360 (Y'CbCr) [ 319.574672][T10894] tpg field: 1 [ 319.589373][T10894] tpg crop: 640x360@0x0 [ 319.615563][T10894] tpg compose: 640x360@0x0 [ 319.634484][T10894] tpg colorspace: 8 [ 319.642368][T10894] tpg transfer function: 0/0 [ 319.663896][T10894] tpg Y'CbCr encoding: 0/0 [ 319.695580][T10894] tpg quantization: 0/0 [ 319.706199][T10894] tpg RGB range: 0/2 [ 319.724392][T10894] vivid-013: ================== END STATUS ================== [ 322.763347][T10954] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1084'. [ 323.903767][T10965] bridge0: port 3(batadv0) entered blocking state [ 323.910382][T10965] bridge0: port 3(batadv0) entered disabled state [ 323.963495][T10965] batadv0: entered allmulticast mode [ 323.993195][T10965] batadv0: entered promiscuous mode [ 324.043750][T10965] bridge0: port 3(batadv0) entered blocking state [ 324.050283][T10965] bridge0: port 3(batadv0) entered forwarding state [ 324.483991][ T9850] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 324.493716][ T9850] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 325.261640][T11002] HfR: entered promiscuous mode [ 325.306491][T11002] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1096'. [ 326.802847][T11043] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1101'. [ 327.952395][T11064] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1105'. [ 329.115292][T11083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1108'. [ 329.158281][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1108'. [ 332.699833][T11157] kexec: Could not allocate control_code_buffer [ 333.040591][T11163] Process accounting resumed [ 335.094950][T11209] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1137'. [ 335.104382][T11209] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1137'. [ 335.169875][T11209] netlink: 134 bytes leftover after parsing attributes in process `syz.0.1137'. [ 336.258046][T11231] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1141'. [ 336.323123][T11231] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1141'. [ 339.017926][T11274] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1149'. [ 339.077285][T11270] Invalid ELF header magic: != ELF [ 339.214211][T11274] geneve1: entered allmulticast mode [ 339.618743][T11285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1154'. [ 339.627938][T11285] macsec0: entered allmulticast mode [ 339.633871][T11285] veth1_macvtap: entered allmulticast mode [ 340.982311][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 342.298140][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 342.330903][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 342.363133][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 342.382829][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 342.397223][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 342.423423][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 342.442348][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 342.463721][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 342.503798][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 344.638990][T11387] HfR: entered promiscuous mode [ 347.644532][T11459] __nla_validate_parse: 59 callbacks suppressed [ 347.644550][T11459] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1192'. [ 348.027285][T11469] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1198'. [ 348.345077][T11473] : Can't lookup blockdev [ 349.546503][T11482] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1200'. [ 352.385571][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 353.366464][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1212'. [ 353.871105][T11551] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1215'. [ 353.898735][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 354.122621][T11551] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1215'. [ 354.407295][T11572] vivid-013: ================= START STATUS ================= [ 354.422059][T11572] vivid-013: Generate PTS: true [ 354.432114][T11572] vivid-013: Generate SCR: true [ 354.437051][T11572] tpg source WxH: 640x360 (Y'CbCr) [ 354.482152][T11572] tpg field: 1 [ 354.501492][T11572] tpg crop: 640x360@0x0 [ 354.517475][T11572] tpg compose: 640x360@0x0 [ 354.522002][T11572] tpg colorspace: 8 [ 354.547324][T11572] tpg transfer function: 0/0 [ 354.551953][T11572] tpg Y'CbCr encoding: 0/0 [ 354.602061][T11572] tpg quantization: 0/0 [ 354.604912][T11578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1221'. [ 354.649395][T11572] tpg RGB range: 0/2 [ 354.683361][T11572] vivid-013: ================== END STATUS ================== [ 357.170738][T11634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1234'. [ 357.651459][T11641] Invalid ELF header magic: != ELF [ 358.116581][T11648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1236'. [ 358.293353][T11648] geneve1: entered allmulticast mode [ 358.554364][T11641] Invalid ELF header magic: != ELF [ 358.604633][T11670] Invalid ELF header magic: != ELF [ 361.122210][T11715] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1252'. [ 362.653553][T11750] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1259'. [ 362.670061][T11750] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1259'. [ 363.156218][T11757] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 365.025079][T11798] nbd: must specify a device to reconfigure [ 366.417747][T11835] openvswitch: netlink: Duplicate key (type 15). [ 368.329415][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'. [ 368.532362][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'. [ 369.538305][T11912] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1292'. [ 371.275800][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'. [ 372.783510][T11957] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1305'. [ 372.853051][T11956] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1306'. [ 373.416732][T11961] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1307'. [ 373.522303][T11962] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1307'. [ 373.947277][T11964] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1308'. [ 375.240203][T11977] netlink: 'syz.0.1312': attribute type 4 has an invalid length. [ 375.249019][T11977] netlink: 'syz.0.1312': attribute type 4 has an invalid length. [ 375.764178][T11969] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.779083][T11969] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.785404][T11969] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.833924][T11969] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 376.632137][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 377.842931][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 377.848993][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 377.855144][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 378.028691][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 378.795627][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.802055][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.464681][T12166] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 381.482218][T12166] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1339'. [ 381.622578][T12168] IPVS: length: 11322 != 840 [ 381.733429][T12176] can: request_module (can-proto-0) failed. [ 382.543430][T12193] Process accounting resumed [ 384.148037][T12226] syz.0.1355 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 384.329356][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'. [ 385.545858][T12234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1357'. [ 385.667999][T12240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1358'. [ 385.697231][T12234] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 386.406811][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 386.418889][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 386.427363][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 386.436083][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 386.445162][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 386.453978][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.659138][T12248] ICMPv6: process `syz.2.1362' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 387.051530][T12253] chnl_net:caif_netlink_parms(): no params data found [ 387.674147][T12253] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.681274][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.743995][T12253] bridge_slave_0: entered allmulticast mode [ 387.768541][T12253] bridge_slave_0: entered promiscuous mode [ 387.784294][T12253] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.800632][T12253] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.822521][T12253] bridge_slave_1: entered allmulticast mode [ 387.834827][T12253] bridge_slave_1: entered promiscuous mode [ 387.879919][T12253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.896282][T12253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.951776][T12253] team0: Port device team_slave_0 added [ 387.969217][T12253] team0: Port device team_slave_1 added [ 388.033263][T12253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.043483][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.098926][T12253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.120855][T12253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.139989][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.192219][T12253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.426496][T12253] hsr_slave_0: entered promiscuous mode [ 388.443124][T12253] hsr_slave_1: entered promiscuous mode [ 388.475008][T12253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.485112][T12253] Cannot create hsr debugfs directory [ 388.552289][ T5831] Bluetooth: hci0: command tx timeout [ 388.555835][T12289] Invalid ELF header magic: != ELF [ 388.727095][T12253] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 388.744831][T12253] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 388.765258][T12253] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 388.779228][T12253] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 388.910678][T12253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.945870][T12253] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.974595][T11014] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.981726][T11014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.010657][T11014] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.017821][T11014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.147695][T12297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1372'. [ 389.209292][T12297] vxcan1: entered promiscuous mode [ 389.479064][T12253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.982820][T12253] veth0_vlan: entered promiscuous mode [ 389.999100][T12253] veth1_vlan: entered promiscuous mode [ 390.039691][T12253] veth0_macvtap: entered promiscuous mode [ 390.057725][T12253] veth1_macvtap: entered promiscuous mode [ 390.084001][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.093856][T12316] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1375'. [ 390.097510][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.117935][T12253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.131924][T12253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.147722][T12253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.160471][T12253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.180551][T12253] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.191884][T12253] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.201198][T12253] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.213380][T12253] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.340133][T11008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.349876][T11008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.361895][T11022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.369940][T11022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.632915][ T5831] Bluetooth: hci0: command tx timeout [ 391.566288][T12337] nbd: couldn't find a device at index 0 [ 392.577202][ T29] audit: type=1800 audit(4294969375.217:17): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1384" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 392.742238][ T5831] Bluetooth: hci0: command tx timeout [ 393.168000][T12363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1387'. [ 393.426097][T12371] nfs: Unknown parameter 'nl80211' [ 394.101664][T12383] bridge0: port 4(team0) entered blocking state [ 394.118424][T12383] bridge0: port 4(team0) entered disabled state [ 394.128566][T12383] team0: entered allmulticast mode [ 394.142196][T12383] team_slave_0: entered allmulticast mode [ 394.147960][T12383] team_slave_1: entered allmulticast mode [ 394.165976][T12383] team0: entered promiscuous mode [ 394.182173][T12383] team_slave_0: entered promiscuous mode [ 394.188196][T12383] team_slave_1: entered promiscuous mode [ 394.202792][T12383] bridge0: port 4(team0) entered blocking state [ 394.209167][T12383] bridge0: port 4(team0) entered forwarding state [ 394.612600][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1394'. [ 394.792347][ T5831] Bluetooth: hci0: command tx timeout [ 395.883240][T12405] ------------[ cut here ]------------ [ 395.889069][T12405] WARNING: CPU: 1 PID: 12405 at mm/page_alloc.c:4729 __alloc_pages_noprof+0xeff/0x25b0 [ 395.898869][T12405] Modules linked in: [ 395.902831][T12405] CPU: 1 UID: 0 PID: 12405 Comm: syz.5.1402 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 395.913805][T12405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.923929][T12405] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 395.930081][T12405] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 14 6d 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 6f a4 0c 00 8b 14 24 e9 [ 395.949810][T12405] RSP: 0018:ffffc900031e78e8 EFLAGS: 00010246 [ 395.955985][T12405] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 395.964254][T12405] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 395.972427][T12405] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000100 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 395.980433][T12405] R10: 0000000000000100 R11: ffffffff8b19e44d R12: 0000000000000013 [ 395.988475][T12405] R13: 0000000000040cc0 R14: 1ffff9200063cf31 R15: 00000000ffffffff [ 395.996624][T12405] FS: 00007faedcc546c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 396.005745][T12405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.012426][T12405] CR2: 0000000000007000 CR3: 0000000027bc6000 CR4: 00000000003526f0 [ 396.020436][T12405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 396.028500][T12405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 396.036556][T12405] Call Trace: [ 396.039857][T12405] [ 396.042851][T12405] ? __warn+0xea/0x3c0 [ 396.046971][T12405] ? __alloc_pages_noprof+0xeff/0x25b0 [ 396.052530][T12405] ? report_bug+0x3c0/0x580 [ 396.057079][T12405] ? handle_bug+0x54/0xa0 [ 396.061566][T12405] ? exc_invalid_op+0x17/0x50 [ 396.066516][T12405] ? asm_exc_invalid_op+0x1a/0x20 [ 396.071598][T12405] ? do_syscall_64+0xcd/0x250 [ 396.076726][T12405] ? __alloc_pages_noprof+0xeff/0x25b0 [ 396.082461][T12405] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 396.088311][T12405] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.093653][T12405] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 396.099502][T12405] ? stack_depot_save_flags+0x36d/0x9e0 [ 396.105143][T12405] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 396.110911][T12405] ? kasan_save_stack+0x33/0x60 [ 396.115862][T12405] ? __kasan_kmalloc+0xaa/0xb0 [ 396.120669][T12405] ? safesetid_uid_file_write+0x84/0xc0 [ 396.126310][T12405] ? vfs_write+0x24c/0x1150 [ 396.130858][T12405] ? ksys_write+0x12b/0x250 [ 396.135444][T12405] ? do_syscall_64+0xcd/0x250 [ 396.140160][T12405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.146336][T12405] ___kmalloc_large_node+0x84/0x1b0 [ 396.151578][T12405] __kmalloc_large_node_noprof+0x1c/0x70 [ 396.157312][T12405] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 396.164095][T12405] ? handle_policy_update+0x188/0x11e0 [ 396.169596][T12405] memdup_user_nul+0x2b/0x110 [ 396.174490][T12405] handle_policy_update+0x188/0x11e0 [ 396.179818][T12405] ? __pfx_handle_policy_update+0x10/0x10 [ 396.185647][T12405] ? apparmor_capable+0x114/0x1d0 [ 396.190713][T12405] ? bpf_lsm_capable+0x9/0x10 [ 396.195479][T12405] ? security_capable+0x7e/0x260 [ 396.200461][T12405] safesetid_uid_file_write+0x84/0xc0 [ 396.205921][T12405] ? __pfx_safesetid_uid_file_write+0x10/0x10 [ 396.212070][T12405] vfs_write+0x24c/0x1150 [ 396.216442][T12405] ? __might_fault+0xe3/0x190 [ 396.221171][T12405] ? __pfx_vfs_write+0x10/0x10 [ 396.226013][T12405] ? do_futex+0x123/0x350 [ 396.230387][T12405] ? __pfx_do_futex+0x10/0x10 [ 396.235169][T12405] ? fdget+0x187/0x210 [ 396.239279][T12405] ? __sys_sendmsg+0x19a/0x220 [ 396.244222][T12405] ? __x64_sys_futex+0x1e1/0x4c0 [ 396.249203][T12405] ? __x64_sys_futex+0x1ea/0x4c0 [ 396.254233][T12405] ksys_write+0x12b/0x250 [ 396.258599][T12405] ? __pfx_ksys_write+0x10/0x10 [ 396.263555][T12405] do_syscall_64+0xcd/0x250 [ 396.268222][T12405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.274366][T12405] RIP: 0033:0x7faedbd85d29 [ 396.278815][T12405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.298531][T12405] RSP: 002b:00007faedcc54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 396.307015][T12405] RAX: ffffffffffffffda RBX: 00007faedbf75fa0 RCX: 00007faedbd85d29 [ 396.315113][T12405] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 396.323144][T12405] RBP: 00007faedbe01b08 R08: 0000000000000000 R09: 0000000000000000 [ 396.331146][T12405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.339208][T12405] R13: 0000000000000000 R14: 00007faedbf75fa0 R15: 00007ffffbaa08c8 [ 396.347258][T12405] [ 396.350303][T12405] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 396.357599][T12405] CPU: 1 UID: 0 PID: 12405 Comm: syz.5.1402 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 396.368371][T12405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 396.378431][T12405] Call Trace: [ 396.381712][T12405] [ 396.384648][T12405] dump_stack_lvl+0x3d/0x1f0 [ 396.389250][T12405] panic+0x71d/0x800 [ 396.393168][T12405] ? __pfx_panic+0x10/0x10 [ 396.397598][T12405] ? show_trace_log_lvl+0x29d/0x3d0 [ 396.402815][T12405] ? __alloc_pages_noprof+0xeff/0x25b0 [ 396.408291][T12405] check_panic_on_warn+0xab/0xb0 [ 396.413249][T12405] __warn+0xf6/0x3c0 [ 396.417164][T12405] ? __alloc_pages_noprof+0xeff/0x25b0 [ 396.422639][T12405] report_bug+0x3c0/0x580 [ 396.426981][T12405] handle_bug+0x54/0xa0 [ 396.431148][T12405] exc_invalid_op+0x17/0x50 [ 396.435669][T12405] asm_exc_invalid_op+0x1a/0x20 [ 396.440530][T12405] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 396.446612][T12405] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 14 6d 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 6f a4 0c 00 8b 14 24 e9 [ 396.466233][T12405] RSP: 0018:ffffc900031e78e8 EFLAGS: 00010246 [ 396.472323][T12405] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 396.480308][T12405] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 396.488285][T12405] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000100 [ 396.496321][T12405] R10: 0000000000000100 R11: ffffffff8b19e44d R12: 0000000000000013 [ 396.504303][T12405] R13: 0000000000040cc0 R14: 1ffff9200063cf31 R15: 00000000ffffffff [ 396.512286][T12405] ? do_syscall_64+0xcd/0x250 [ 396.516990][T12405] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 396.522805][T12405] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.528010][T12405] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 396.533822][T12405] ? stack_depot_save_flags+0x36d/0x9e0 [ 396.539387][T12405] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 396.545124][T12405] ? kasan_save_stack+0x33/0x60 [ 396.549983][T12405] ? __kasan_kmalloc+0xaa/0xb0 [ 396.554755][T12405] ? safesetid_uid_file_write+0x84/0xc0 [ 396.560308][T12405] ? vfs_write+0x24c/0x1150 [ 396.564817][T12405] ? ksys_write+0x12b/0x250 [ 396.569328][T12405] ? do_syscall_64+0xcd/0x250 [ 396.574020][T12405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.580119][T12405] ___kmalloc_large_node+0x84/0x1b0 [ 396.585327][T12405] __kmalloc_large_node_noprof+0x1c/0x70 [ 396.590971][T12405] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 396.597575][T12405] ? handle_policy_update+0x188/0x11e0 [ 396.603044][T12405] memdup_user_nul+0x2b/0x110 [ 396.607731][T12405] handle_policy_update+0x188/0x11e0 [ 396.613031][T12405] ? __pfx_handle_policy_update+0x10/0x10 [ 396.618756][T12405] ? apparmor_capable+0x114/0x1d0 [ 396.623795][T12405] ? bpf_lsm_capable+0x9/0x10 [ 396.628482][T12405] ? security_capable+0x7e/0x260 [ 396.633440][T12405] safesetid_uid_file_write+0x84/0xc0 [ 396.638819][T12405] ? __pfx_safesetid_uid_file_write+0x10/0x10 [ 396.644890][T12405] vfs_write+0x24c/0x1150 [ 396.649234][T12405] ? __might_fault+0xe3/0x190 [ 396.653934][T12405] ? __pfx_vfs_write+0x10/0x10 [ 396.658709][T12405] ? do_futex+0x123/0x350 [ 396.663051][T12405] ? __pfx_do_futex+0x10/0x10 [ 396.667742][T12405] ? fdget+0x187/0x210 [ 396.671819][T12405] ? __sys_sendmsg+0x19a/0x220 [ 396.676604][T12405] ? __x64_sys_futex+0x1e1/0x4c0 [ 396.681554][T12405] ? __x64_sys_futex+0x1ea/0x4c0 [ 396.686509][T12405] ksys_write+0x12b/0x250 [ 396.690849][T12405] ? __pfx_ksys_write+0x10/0x10 [ 396.695719][T12405] do_syscall_64+0xcd/0x250 [ 396.700236][T12405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.706145][T12405] RIP: 0033:0x7faedbd85d29 [ 396.710564][T12405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.730177][T12405] RSP: 002b:00007faedcc54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 396.738597][T12405] RAX: ffffffffffffffda RBX: 00007faedbf75fa0 RCX: 00007faedbd85d29 [ 396.746572][T12405] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 396.754545][T12405] RBP: 00007faedbe01b08 R08: 0000000000000000 R09: 0000000000000000 [ 396.762518][T12405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.770497][T12405] R13: 0000000000000000 R14: 00007faedbf75fa0 R15: 00007ffffbaa08c8 [ 396.778493][T12405] [ 396.781749][T12405] Kernel Offset: disabled [ 396.786119][T12405] Rebooting in 86400 seconds..