last executing test programs: 4m27.180954944s ago: executing program 2 (id=102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="c7590200000000000000abcbbe00000000448d9527abcce046860083e1deb48293f3d93616c708d11b81fa05daca24e72d5e0cbcffb999647ff7351b65d91a436605dcb116352878d7959d87eed8573186be4bb5b4ce256e8e6705f27a8f5c220af85ec5e7db4dd8f0c94a296ad79084438cfffcd98140f22850d40cdb99bdb2ca9fb7b1505705cb4346ac21b0977d69f0d6bf0f3f9a18f8ab03415ba2f94b9480560dc0c62eb488ded4702b1552661d58e7269f9d4f787772731b154dcdab90b5ebca9db30e0bd30e7d1a8bd305feb81f5cf3383d5d2b97a9be31562c25767b64548b3fe9f61879b623cf456800"/249], 0x14}}, 0x40810) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_START_POLL(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x9}, @NFC_ATTR_VENDOR_DATA={0xeb, 0x1f, "5bd9f9fee6b3f6611f7d93a2566f658595a08e9e31a9533d4ea5afaa7c6dc039060f340747d5d5d3d251458ad4bf2382ad9e3696c31fd0178f97c8674519d81d539459df518ac153903d7340f730601fdf47e5fb886ae3b9f9d3564bfc6325b579bc3a6d29bd6ce469d4783b891397edd7c0c48230012907d9e601182da630c7b233462b075b6d9019a173826b3db487d586340aa0c68a4a12525f582db5bc0b04255e5bed39949fefac4546a105879850827930866802c57453d80c408a7accb3abc252a914c0d71b7fd1e95fa5c9f16023fd0775ddb6047f547804556be89f93a265860f8a07"}, @NFC_ATTR_SE_APDU={0xd8, 0x19, "ab466fde3903ebebba07b079a7eada9755a944977b797f0650e555764e328fc99d1fe3e878cfd48369f2b55c630b831d4c8cc9c48f56751bc67ae54889b3b4918c9575b9d2da1b769a2104ab5735bc254ec09b5c6fe0f8d3d7b62634da5cac13d0817f35aaeb30b513edf6869d886a3b6681dd1558a632437f106727dbd2f6035309d788e336e79f3d925826176e438368434fc09285216e202fcb4dd4c6f8d677b66e0ffbb482b25ccaa2d1482b60cebe91613d211a139ce4215804176d20e1c2f3433064c621078868ac513927dca3e85adf01"}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x5}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x1}, 0x20000081) shmctl$auto(0x9, 0xc92, &(0x7f0000000240)={{0x1, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x28, 0xa}, 0x8, 0x8, 0x7f80000000, 0xfe4, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000080)="0f7e2f72e7f9e1c78e86b9179f120686779c33cb23c16ef3176b1afedf8d16a2802478d3cbed931f0461371fa351691336c431205b96d3559b083bba1b5e0d1eda39cf4ade6eec7e5d974bd8cdcc4e7d56f3430824380c56e143e176f3883366c64150dd578a165ff5f5ce397e863f6e9058f753a0b64607ffc49d09c948349f0a9e5bfdbc1bf5a6b8803fb7d5bc9b3eb9f6166591ffc6337407f87fee80978e09297f1533fb38467b843e7a07f9cc13dc46006999fdc11d31b223f1c9a7183b2d59c8631302be99c8196d3b08c8e250cace8ceb6d5a80c78c0a4412c74d62", &(0x7f0000000180)="820bdc6fc91073daced0498e3c23770279e90a71184132a59ee3fafd57ef3c7223be25"}) r6 = gettid() process_vm_readv$auto(r6, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) move_pages$auto(r6, 0x4, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) io_uring_setup$auto(0x6, 0x0) r7 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0x2, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mprotect$auto(0x3, 0x6ca3, 0xfffffffffffffffd) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)={0x17a8, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0x173c, 0x13, 0x0, 0x1, [@typed={0x8, 0x9b, 0x0, 0x0, @uid=r4}, @nested={0x1615, 0xf6, 0x0, 0x1, [@typed={0xc, 0x5f, 0x0, 0x0, @u64=0x5}, @generic="c112fedaa2415688589ba777112f5158b8409936b3ee9937501150629619c9039ddb11cdb5e88341bf5d60f0f72c20c59669911c0fe4750adc9925a181efdcad596d358b92a9ae30b5680920a91d3272be7545b8eb8551c4334e3008843bf0c0d83626e6ae15f38b586c11c30be008885fe17c5e470e5c0aacdf27f2132c49900d6a1d82c27e282a05d0f505db2f6c06628f1f7ccedd617974356af7dbad38", @generic="b291c0d73adf329bc140fb7d031374db0806631644a59c818013bf733b048e61f63ab72d5cd74b783ae9aa8713cf746f17240f1a4daf4faf2bbcd551be8fb338fa5e5c7e15881f088b7f976e32a62cbded7390c166fac68aeaeeda7e8d5c558a6833d03a934e452782dde4fbc6a5e0e5881d02ee7a8861bd5cc9c1f422676eb9225372a4c2787890f567f7b5a95936c13feb3852c8448b6a3d6f6e269f07be78301fa2c9fb141de320", @typed={0x8, 0x56, 0x0, 0x0, @pid=r6}, @generic="4ec2691e4db3a699b02e7882f6e58dcfc23d9bc3af9d62f1421bc2bf1d6ada6bf66ccd59ccd786ca0c477d7ee2dc7f2e7f74a9fd4381c5c98e86001fe1bc5c84fe18f4f3ca2210edac44bb920b3a6cc8e0ed0133532e0e270d", @nested={0x2c0, 0xd2, 0x0, 0x1, [@generic="1ee894aadba814b13adbc6361c3c045256c96af808362a80560b260450ffbcb5e74155d7c73946791de99d3e5df4b4a8992459550775f9d50d6f0e8e049b06473a", @generic="8c4cdc08fc0f2553d2c66f26f3e26eb86917d1060d25f122746921799e9608625accf690c427c3b2853212157d069988ed1e5b7118aad743c3cf59691bae9f59372e45d51ec6b5455adc99b02058c490d3d3517b3f7b8d76f1520137a1885da0a0d79bbb37159250a1e309cc8f8436c1cf07a37c259b765dd6a69e95be6451d31f3273582a46746ddd18309540db43536e1e12219b3af8263466a41cc8a41d0a5723adacebc203e38481fad2a74cb604c7e245829add55edc3e5c8cb583a5b6c34ca256ad06099", @nested={0x196, 0xdf, 0x0, 0x1, [@generic="bf49dab2b35bd4a42bddaa884f2944beebf9a6c4995b101d00fe3cfbc3c1042e3f39f3ad46bf495652799074723145d1c02340e4ff93d1909a0221bb40a7efdc20e9e495ccd81d717d21764be739fcb0c4f3b7a5a35a124b2830b938aeafbb5378f9d21fcabcfd1ab368223dccc83c76fd30e243c02aaae0284190ba4befd1afa0b8f03314830dea92857abe", @nested={0x4, 0x4c}, @typed={0x8, 0x2d, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x24, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0xa4, 0x0, 0x0, @pid=r5}, @typed={0x14, 0x85, 0x0, 0x0, @ipv6=@empty}, @generic="91c3c31b51a5ee9f48864ee666323f653b6728ac182a5ea97769ba2b9d87f68a43d4abcb8f977fe28245e22d5ce2030ba12559e032d07ea16f5e7052deaf44ddcdb5024897740411ca214de97005bfc14b73607526ad4a8aa6a89e9b7f58f609bc3d74616ce366d2b9ebb5661c50038e5bc4aacce91522c4d4eae144f07026301affdda9f35ace010f710e0f75e802cc95e36f5e28b0b2c24c8d7c93d33d364c0a9ff0d1c4c5b02863414481d73caeb89cc71687e6497c118667", @typed={0x14, 0x59, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x121, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x14, 0xf5, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x11e, 0x0, 0x0, @uid=r4}]}, @nested={0x1199, 0x10, 0x0, 0x1, [@typed={0xc, 0xf5, 0x0, 0x0, @u64=0x7}, @nested={0x8, 0x10f, 0x0, 0x1, [@nested={0x4, 0x53}]}, @nested={0x1172, 0x15, 0x0, 0x1, [@generic="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", @generic="e69c2e1ea7824fc9cb0fb1b10161d0a022745fa3901f8515798962963a8d0cc28a340deeb32046b2b116065a91572db8c58625fc9b7b554db1a77e3ca25f14d4573d63151538e316b7c26e113abd768d19c38c32ed1bc541ab3d4e43c1a0fd80e58251abb84ae46eb8d312a033feae845b8a6bc26738d2734b013aa26683505b56f41eadc0e0c26bb810c66205d6296fe764fb37b5ca1cce50e82f3cf380845207b7733903713076f0b63664f2d679600cebce508f986aee1a5e6bd67ef761732bd70793ae87a3d0f5474bf015b97c7332c5", @generic="139571b272d9a8e41d4c0eee71527cd835fe41d17d2f2d922527b457e4148a18f6ef1b5e39ba5e7ceb69bfd78f13a1fda55752cb896dd840fd4ad454410be52380017476aa257408b12ee5d0a52d084f2608b543bef6c4c5d68e7df0343b981b60dd47b8edbf6fea0971bb9fefca8fedee518181035f97be2d4444be17327c7c7419eb0fb6a89ac26e50c4226f282a39f4bab4e0ae24e6b5cc47fe37"]}, @generic='\b', @typed={0xc, 0x143, 0x0, 0x0, @u64=0xf}]}]}, @nested={0x14, 0xe9, 0x0, 0x1, [@typed={0x4, 0x147}, @nested={0x4, 0x142}, @nested={0x4, 0x50}, @nested={0x4, 0x10d}]}, @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x1857}, @nested={0xfb, 0xf4, 0x0, 0x1, [@typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x2}, @typed={0x8, 0xc5, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x54}, @generic="b7a8e938020d395e54285f613a0e71b201bc6b0b79073b699b6cd5f1161c3a9f4bf51d85fea7bba0bed5d33d0915bdb5021eb141077675983e66fe6b87a541a0cdcba756b6a7df0c7655a86d9808c7b5692ced", @generic="e3e925c8e089d929d88e2a0647f23883cbf73bf469264cbf4ec06db1f0c9a5ddcb51b51fecba299bb5eb6066cfeb9d5f8a3ab39f1719a1036be63aa9e9756dd295ccdf2832153dae93ed8071e65be3bbfa681418cd4c944146454d2f9a9e62ee48a02ae2188e27effc6491899b0a3d85", @typed={0xf, 0x127, 0x0, 0x0, @str='net-shaper\x00'}]}]}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xf246}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x2}, @NFC_ATTR_VENDOR_DATA={0x47, 0x1f, "f8628607fe5aa6d3066c56bd0838fe5ddec0ee01e4b8da7b402e7e18c4155eb2847508ff20962820d265308a73052de47ba0317b78479546627136821b36577503a3a4"}]}, 0x17a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48011) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x7ff) 4m26.808491859s ago: executing program 2 (id=104): r0 = socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0xffff8000, 0x9, 0x2, 0x8000000008011, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000001480)=r0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r3, 0x2, 0x2) splice$auto(r3, &(0x7f0000000000)=0xe0a, r1, &(0x7f0000000080)=0x1000, 0x8000000000000001, 0x1) r4 = getsockopt$auto(r2, 0xfffffff8, 0x5, &(0x7f00000001c0)='@]\x00', &(0x7f0000000200)=0x10001) memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16) cachestat$auto(0x3, &(0x7f0000000080)={0x3, 0xa1}, 0x0, 0x4) socket(0x1e, 0x5, 0x0) r5 = socket(0x10, 0x2, 0xc) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:04.0/broken_parity_status\x00', 0x129982, 0x0) write$auto(r6, 0x0, 0x40db) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0xffffffffffffff2e, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r4], 0x18}, 0x1, 0x0, 0x0, 0x200440c0}, 0x40014) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10048884) 4m26.609128089s ago: executing program 2 (id=105): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x10000000) r0 = socket(0x1e, 0x4, 0x0) socket(0xa, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x3, 0xfffffffffffffffd, 0x0) r1 = fcntl$getown(r0, 0x9) prctl$auto(0x5, 0x8, r1, 0x0, 0x800) keyctl$auto(0x13, 0x102000000010001, 0x7d, 0x201, 0x3) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) 4m26.104834704s ago: executing program 2 (id=106): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x1000000, 0x2000000c) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80502, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getrlimit$auto(0x6, 0x0) 4m23.660528432s ago: executing program 2 (id=115): mmap$auto(0x400, 0x1, 0xdf, 0x7fffffff, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24004000}, 0xc0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xb}, 0x7}, 0x3, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) getpid() fcntl$getown(r1, 0x9) capget$auto(&(0x7f00000002c0)={0x10001}, 0x0) r2 = getpid() process_vm_readv$auto(r2, 0x0, 0x1, 0x0, 0x6, 0x0) r3 = getpid() pidfd_open$auto(r3, 0x0) syz_clone3(0x0, 0x0) open(0x0, 0x22240, 0x155) mmap$auto_fb_fops_fb_chrdev(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x9e) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2003f0, 0x4) tkill$auto(0x1, 0x7) creat$auto(0x0, 0x4) swapon$auto(0x0, 0x3) 4m22.659240141s ago: executing program 2 (id=120): socket(0x10, 0x80002, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24008050) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4m22.246092819s ago: executing program 32 (id=120): socket(0x10, 0x80002, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24008050) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4m3.393269996s ago: executing program 4 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020029bd7000fbdbdf252600000008000700ffff000018000200d0840000080002000a07000028000180080003000800000014000200626f6e6430000000000000000000000008000300f5ffffff080002000400000008000700ff7f00000800020007000000"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x10) acct$auto(&(0x7f0000001080)='/sys//block/nbd3/que\xd6D\xf0\xfa^!\"B\xf9\xee\x0f]r\xd4\xed\xf9ue/rotational\x00\xda\xc8\x83\x8b\x82;\xf4\n\xcfn\thz\xb1\x8b\x96\xfdPw\xa4M@.\xe1\xe7P\xf0}\x98\xb6(\xa6[\xc2\xfcn\x115\xfbHX\x83\xbf\x141\xd6s\xa8\xb1\a-HG\xae\x03\xc3\x1f`\x84\x1b\x81\xda2r{$3d') (async) acct$auto(&(0x7f0000001080)='/sys//block/nbd3/que\xd6D\xf0\xfa^!\"B\xf9\xee\x0f]r\xd4\xed\xf9ue/rotational\x00\xda\xc8\x83\x8b\x82;\xf4\n\xcfn\thz\xb1\x8b\x96\xfdPw\xa4M@.\xe1\xe7P\xf0}\x98\xb6(\xa6[\xc2\xfcn\x115\xfbHX\x83\xbf\x141\xd6s\xa8\xb1\a-HG\xae\x03\xc3\x1f`\x84\x1b\x81\xda2r{$3d') mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffefffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$auto(0x3, 0x0, 0x100082) 4m3.234340811s ago: executing program 4 (id=207): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) socket(0x10, 0x2, 0x0) r0 = socket(0x15, 0x5, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x9, 0x2, 0x8000000008011, 0x4, 0x0) mmap$auto(0x0, 0x800, 0xdf, 0x8000009b72, 0x2, 0x8000) io_uring_setup$auto(0xa, 0x0) open(0x0, 0xa240, 0x15e) close_range$auto(0x0, 0x1c94, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0xa, 0x0, 0xfffffffffffffff9) socket(0x2, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x9) inotify_add_watch$auto(0x4, 0x0, 0x80000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x4, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x54) getpeername$auto(r0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x480200, 0xb5d1af1605322ce3) open_by_handle_at$auto(r2, &(0x7f0000000140)={0xd, 0x2, '\x00'/13}, 0x3fffc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(r1, &(0x7f0000000100)={0x0, 0x7fffffffeffb}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 4m2.700109674s ago: executing program 4 (id=211): mmap$auto(0x0, 0x4020009, 0x180000, 0xeb1, 0x401, 0x6) sigaltstack$auto(&(0x7f0000000040)={0x0, 0x1, 0x3227}, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x21, 0x0) 4m2.50279319s ago: executing program 4 (id=212): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvme-delete-wq/affinity_strict\x00', 0x183042, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x701c41, 0x7) read$auto(r0, 0x0, 0x1) sysfs$auto(0x2, 0x45e, 0x1) write$auto(0x3, 0x0, 0xffd8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40440) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x801, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x1) mmap$auto(0x2, 0x800, 0x0, 0x40000eb1, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x4004000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000) getpid() mmap$auto(0xfffffffffffffffe, 0x20005, 0x4000000000df, 0x8000000000eb1, r1, 0x7) socketpair$auto(0x5, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x0, 0x155) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fffe000) mincore$auto(0x2, 0x0, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0x10000000000eb1, 0x401, 0x8000) r4 = gettid() kill$auto(r4, 0x11) prctl$auto(0x2, 0x9, r4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) 4m1.832542053s ago: executing program 4 (id=216): mmap$auto(0x0, 0x20006, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0x2, 0x6, 0x0) setsockopt$auto(r0, 0x10d, 0xb, 0x0, 0x17) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x24, r1, 0x100, 0x70bd26, 0x25dfdc00, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8080003}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r3) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c040}, 0x20004000) 4m1.569603272s ago: executing program 4 (id=218): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x5609, 0xafca) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000080), 0xffffffffffffffff) getpid() (async) r2 = getpid() pidfd_open$auto(r2, 0x0) (async) pidfd_open$auto(r2, 0x0) r3 = clone$auto(0x6, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=0x9, 0x3) capget$auto(&(0x7f00000002c0)={0x8c15}, &(0x7f0000000180)={0x5, 0xffffffff, 0xe}) (async) capget$auto(&(0x7f00000002c0)={0x8c15, 0x0}, &(0x7f0000000180)={0x5, 0xffffffff, 0xe}) getpgrp(0x0) (async) r5 = getpgrp(0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket(0xf, 0x3, 0x2) (async) socket(0xf, 0x3, 0x2) socket(0x2, 0xa, 0xe57a) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x6, 0x8000000000000006, 0x13, 0x0, 0x7ffffc) gettid() (async) r6 = gettid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x101}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x20004000) kill$auto(r6, 0x11) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0x4}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r2}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r3}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r4}, @TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0xf, 0x3, '/dev/tty12\x00'}, @TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r5}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r6}, @TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0x7, 0x3, '(.,'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 3m46.282800141s ago: executing program 33 (id=218): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x5609, 0xafca) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000080), 0xffffffffffffffff) getpid() (async) r2 = getpid() pidfd_open$auto(r2, 0x0) (async) pidfd_open$auto(r2, 0x0) r3 = clone$auto(0x6, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=0x9, 0x3) capget$auto(&(0x7f00000002c0)={0x8c15}, &(0x7f0000000180)={0x5, 0xffffffff, 0xe}) (async) capget$auto(&(0x7f00000002c0)={0x8c15, 0x0}, &(0x7f0000000180)={0x5, 0xffffffff, 0xe}) getpgrp(0x0) (async) r5 = getpgrp(0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket(0xf, 0x3, 0x2) (async) socket(0xf, 0x3, 0x2) socket(0x2, 0xa, 0xe57a) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x6, 0x8000000000000006, 0x13, 0x0, 0x7ffffc) gettid() (async) r6 = gettid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x101}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x20004000) kill$auto(r6, 0x11) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0x4}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r2}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r3}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r4}, @TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0xf, 0x3, '/dev/tty12\x00'}, @TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r5}, @TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r6}, @TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0x7, 0x3, '(.,'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 1m18.977432557s ago: executing program 0 (id=1063): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/psaux\x00', 0x8800, 0x0) read$auto_mousedev_fops_mousedev(r0, 0x0, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/user_power_level\x00', 0x210400, 0x0) (async) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy14/netdev:wlan1/user_power_level\x00', 0x210400, 0x0) mmap$auto(0x2, 0x9fd, 0xe3, 0xeb1, r1, 0x400000000008200) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x101400, 0x0) link$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') ioctl$auto_SNDCTL_DSP_MAPOUTBUF(r2, 0x80105014, &(0x7f0000000080)={&(0x7f0000000040)=0xffffff80, 0x4}) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0) read$auto(0x3, 0x0, 0x80) (async) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0xa, 0x2, 0x0) socket(0x2, 0x6, 0x0) epoll_create$auto(0x4) (async) epoll_create$auto(0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0xfbe8, 0xffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x800000000000005) (async) mlockall$auto(0x800000000000005) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r5, 0x0) epoll_ctl$auto(0x5, 0x3, r4, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) (async) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r6, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r7 = accept4$auto(0xffffffffffffffff, &(0x7f0000000200)=@can, &(0x7f0000000240)=0xfffff800, 0x9) linkat$auto(r3, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000280)='./file0\x00', 0x5) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x1, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) 1m18.288967401s ago: executing program 0 (id=1067): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy0/statistics/dot11RTSFailureCount\x00', 0x149040, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x801, 0x0) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x104c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xf3}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_BSS_SELECT={0x100c, 0xe3, 0x0, 0x1, [@nested={0x1008, 0x65, 0x0, 0x1, [@generic="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", @nested={0x4, 0xe7}]}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x1f, 0xe8, "6bff90e5c3503f3a549163d9bffa2df4e3ce35de44e4d68108fda8"}]}, 0x104c}, 0x1, 0x0, 0x0, 0x8001}, 0x4) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/tasks\x00', 0x87a20, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) (async) acct$auto(&(0x7f0000000000)='/sys/kernel/reb\x01ot/mode\x00') acct$auto(0x0) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000001c0)={{@inferred=0x0, 0x1, 0x6, 0x0, "aab8e85e0a000000529f895cf5e8ec8f46cbb766439daa41e1aa000000000000000000000000f4ffffff00"}, 0x6, 0xc, 0x7, @raw=0x9, @reserved="fb99d320be0de941ac3f58d75bd3c4768e7f0197f69ec76b4312382d618e150342771e3ac6e9a9df07cf9b1c017c611a1804d0d3c89bdd7005c58ffd5ab811fd53443e6cf63a902991b44e48364e8de3f3c467565f104f1422376c4f064c38f5352a95473c9523203e261f1f5ed26400", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f00000000c0)={@inferred=r3, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) connect$auto(0x3, &(0x7f00000000c0)=@isdn={0x22, 0x1, 0x13, 0x9, 0x1}, 0x0) msgsnd$auto(0xfffffff8, &(0x7f0000001240)={0x5, 0x4}, 0xfffffffffffffffb, 0x7) (async) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x111000, 0x0) r4 = openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080), 0x4a6182, 0x0) ioctl$auto(r1, 0x8000, r4) 1m18.199901829s ago: executing program 0 (id=1069): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ext4/sda1/err_ratelimit_burst\x00', 0x103841, 0x0) readv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000000)="93bf79e32aa05db353c59353a424f9947af3bf67bd4112c1de6696c8485adc0d6927130ba663c9dacc8f5583fe84a500a5f6154ac5e5a592af36e78b71745f67c68fbbc6a2d94c70c23f7f936bc18dc3aab97533c9cb9b67143fc8921143b69c573f095331d7e4beba0ed0f498481995b0fbe10a3be3d21b0bad073e8acea3d3e6a2ee96cc859d8776895752472ac6c676c63ad7c9932f3492fc22b7842467b7", 0x4}, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/0000:00:03.0/consistent_dma_mask_bits\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/40, 0x28) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) 1m17.990242643s ago: executing program 0 (id=1070): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdb99e1f9eb6703df2502000000080002000d0000000800"], 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8003) (async) r1 = socket(0x2b, 0x1, 0x1) (async) ioperm$auto(0x7, 0x6, 0x2) madvise$auto(0x1, 0xffffffffffff0005, 0x800015) unlinkat$auto(0xffffffffffffffff, 0x0, 0x8) (async) setsockopt$auto(r1, 0x4, 0x140020, 0x0, 0x9) (async) listen$auto(0x3, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x4000814}, 0x810) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/gspca_gl860/parameters/sensor\x00', 0x22001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000180)="09fb3105b62f33", 0x7) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x400}, 0x3, 0x80000) (async) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000280), r0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip6_mr_vif\x00', 0xbc54ad4ffcd2ba96, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) r3 = socket(0x15, 0x5, 0x0) setsockopt$auto(r3, 0x114, 0x6, 0x0, 0x8000002) (async) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9cb, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x80000, 0x0) r6 = socket(0x2, 0x2, 0x1) setsockopt$auto(r6, 0x0, 0x15, &(0x7f0000000040)='\xda\x00\xbf\n\xf0\f(\xd9V\xb0\xd6/!', 0x41) (async) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto__ctl_fops_dm_ioctl(r4, 0x4020aea5, 0x0) (async) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x100010, 0x7f}, 0x283) 1m17.229225612s ago: executing program 0 (id=1074): socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) tkill$auto(0x1, 0x7) bind$auto(0x3, 0x0, 0x68) socket(0xa, 0x801, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x4, 0x2020009, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000) msync$auto(0x0, 0x5, 0x6) connect$auto(0xffffffffffffffff, 0x0, 0xcada) 1m16.052028072s ago: executing program 0 (id=1082): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x20342, 0x0) statmount$auto(0x0, 0x0, 0xc5c7, 0x421c) write$auto(0xffffffffffffffff, &(0x7f0000000700)='(dev/vhci\x00', 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) set_mempolicy$auto(0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x100, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) socket(0x2, 0x3, 0x1) bpf$auto(0x7ff, 0x0, 0x6) mlock2$auto(0x1, 0x8001, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x100}, 0x4d) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) r1 = socket(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x48000) unshare$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 1m15.899791222s ago: executing program 34 (id=1082): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x20342, 0x0) statmount$auto(0x0, 0x0, 0xc5c7, 0x421c) write$auto(0xffffffffffffffff, &(0x7f0000000700)='(dev/vhci\x00', 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) set_mempolicy$auto(0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x100, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) socket(0x2, 0x3, 0x1) bpf$auto(0x7ff, 0x0, 0x6) mlock2$auto(0x1, 0x8001, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x100}, 0x4d) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) r1 = socket(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x48000) unshare$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 7.363154063s ago: executing program 1 (id=1401): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/20u\x00', 0x80, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) socket(0x2, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xf, 0x8000) io_uring_setup$auto(0x4a, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r4 = socket(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, 0xffffffffffffffff, 0x4, 0x401, r4, @relative_fd=r5, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_11={0x5, 0x8000000000000005, 0x9, 0x161f, 0xf870e9f, 0xa4ea, 0x8}, 0x9) 6.39236852s ago: executing program 1 (id=1411): io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x10001, 0x6fb3, 0x8a, 0xfffffff7, 0xffffffffffffffff, [0x5, 0x6, 0x7f], {0x2, 0x7, 0x3034, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b6}, {0x4000, 0xfc, 0x9, 0x0, 0x4000, 0xb89, 0xd5, 0x837, 0x8}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x5) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440)="661b0cbd4aeb33a218", 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyy9\x00', 0x4000, 0x0) rt_sigaction$auto(0x200, &(0x7f0000000200)={&(0x7f0000000140)=&(0x7f0000000100)=0xf9, 0x271, &(0x7f00000001c0)=&(0x7f0000000180)=0x7, {0x50100d37}}, &(0x7f0000000380)={&(0x7f0000000280)=&(0x7f0000000240)=0x5, 0x0, &(0x7f0000000340)=&(0x7f00000002c0)=0xa1, {0x77}}, 0x8) r2 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000002a00)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x540c1, 0x0) mmap$auto(0x20000000000000, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sysfs$auto(0x2, 0x40, 0x0) fsopen$auto(0x0, 0x1) readv$auto(r2, &(0x7f00000143c0)={&(0x7f00000142c0), 0x200}, 0x2) 6.038633541s ago: executing program 3 (id=1405): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) socket(0x6, 0x3, 0x5) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0x3, 0x4, 0xa553) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x23, 0x80805, 0x0) socket(0x1, 0x1, 0x1) shutdown$auto(0x200000003, 0x2) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a00)={0x40, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@nested={0x4, 0x7}, @nested={0x4, 0x26}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x1ff, 0xdf, 0xeb1, 0x40000000000a5, 0x5) r3 = io_uring_setup$auto(0x85, 0x0) connect$auto(r0, 0x0, 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0x1a1942, 0x0) write$auto(r4, &(0x7f0000000000)='-\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) close_range$auto(0x2, 0x8, 0x0) getsockname$auto(0xffffffffffffffff, 0x0, 0x0) listen$auto(0xffffffffffffffff, 0x9) mmap$auto(0x8, 0xfffffffffffffffb, 0x9, 0x11, r3, 0x6c) accept$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) 5.791970814s ago: executing program 6 (id=1407): r0 = openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy16/hwsim/dfs_simulate_radar\x00', 0x400, 0x0) write$auto_hwsim_simulate_radar_(r0, &(0x7f0000000040)="578b560e811365a8416c40563b52cb7ae0ec03d18dd6bb127d7e898861b0b90d7ed6b084cd11e6ad080014110f014c195a085854387ce490f7b9e8e3e414f9f736f34953b26a731e6d7b0d0225fdfa56568df16f7e364f0ca852d07c9313fab44ded88974cde654e94517b8307b955a4336d46defbe7475bf05b22e8d352711c56d8fd41855c2e457d62accd21a07de138e346ed7df03fd1922a33aab0cf2ee8cea307548ce4945b76e6142ff17e", 0xae) openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy6/hwsim/dfs_simulate_radar\x00', 0x90080, 0x0) r1 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg/1:0:0:0\x00', 0x101a00, 0x0) ioctl$auto_SG_SET_COMMAND_Q(r1, 0x2271, 0x0) r2 = pipe$auto(&(0x7f0000000180)=0xffffffffffffffff) r4 = waitid$auto(0xfffffff9, r3, &(0x7f00000001c0)={@_si_pad}, 0x800, &(0x7f0000000240)={{0x6, 0xffffffffffffff7f}, {0xe080}, 0x7, 0x4, 0x9, 0xfffffffffffffffd, 0x6, 0x81, 0x8, 0x1e, 0x2, 0x66, 0x8, 0x7, 0x4, 0x1}) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r2) sendmsg$auto_NL80211_CMD_VENDOR(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_HE_CAPABILITY={0x9, 0x10d, "85e9ec31ef"}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xe000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c840}, 0xc010) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'vlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r3, &(0x7f0000000600)={&(0x7f0000000440), 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x94, r6, 0x1000, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PLCA_NODE_CNT={0x8, 0x5, 0x5}, @ETHTOOL_A_PLCA_NODE_ID={0x8, 0x6, 0xf7d8}, @ETHTOOL_A_PLCA_TO_TMR={0x8, 0x7, 0x6}, @ETHTOOL_A_PLCA_NODE_CNT={0x8, 0x5, 0x7}, @ETHTOOL_A_PLCA_NODE_ID={0x8, 0x6, 0x1}, @ETHTOOL_A_PLCA_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x38a8}]}, @ETHTOOL_A_PLCA_BURST_TMR={0x8, 0x9, 0x6}, @ETHTOOL_A_PLCA_TO_TMR={0x8, 0x7, 0x8868}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040040}, 0x80c0) r8 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000680), r3) sendmsg$auto_NET_SHAPER_CMD_DELETE(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x8c, r8, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NET_SHAPER_A_HANDLE={0x54, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xfffffffd}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x3}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xf45873e7}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x4}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x80000001}, @NET_SHAPER_A_HANDLE_ID={0x8}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x4}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x56b8cd24}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_HANDLE={0x1c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x1}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x2}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x3}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) r9 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000840), r3) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r3, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xb0, r9, 0x100, 0x70bd27, 0x25dfdbfc, {}, "e9c89d24e49ca8f4125b6cb1fa9ebbaf866af34f2d649aba8c2447bedd293fc3be65a5b11e17e4f0052c271a17bcff16d5f8289f1367c3c75a588897d260f2024d5090ed9fe5b264193cf13557c54e93d11c4b65da480012eecf8d59cf703a84ffb429ff18338342c66fe98a304551655d3842e77a71820f53f7a59f256201ba8beba184102e265da92cad4cdd96f9fefe4bfd0f493a0b04a91a00b1"}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_BANDWIDTH_DOWN={0x8, 0x1c, 0x3}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0xf3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x40044) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000ac0), r2) ioctl$auto_UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000b00)={r2, 0x7, 0x0, 0x1000}) r11 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b80), r2) sendmsg$auto_SEG6_CMD_DUMPHMAC(r10, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r11, 0x808, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfd}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffff7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8001) ppoll$auto(&(0x7f0000000c80)={r10, 0xc94, 0x8}, 0x0, &(0x7f0000000cc0)={0x2, 0xfff}, &(0x7f0000000d00)={0x8}, 0x8) read$auto_tracing_thresh_fops_trace(0xffffffffffffffff, &(0x7f0000000d40)=""/109, 0x6d) r13 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000e00), r3) sendmsg$auto_OVS_METER_CMD_FEATURES(r12, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r13, 0x100, 0x70bd28, 0x25dfdbff, {}, [@OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x7, 0x2}}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x34}}, 0x1) read$auto_mtd_fops_mtdchar(0xffffffffffffffff, &(0x7f0000000f00)=""/186, 0xba) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r10, &(0x7f0000001180)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x10c, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0x19, 0x6, "4f226c3155e15c7fcc6fbc5ebd0ffd79d3ff565322"}, @NL80211_ATTR_EMA_RNR_ELEMS={0xd0, 0x145, 0x0, 0x1, [@nested={0x6e, 0xe3, 0x0, 0x1, [@typed={0x8, 0xd4, 0x0, 0x0, @pid=r4}, @generic="9d12649bdde1d5b61bf4448a88a3fec5097483547068f937d24d020c78a07fbec5b5aa1490a340081c385dd6529c33", @generic, @nested={0x4, 0x13a}, @nested={0x4, 0x66}, @typed={0x8, 0x2e, 0x0, 0x0, @pid=r4}, @generic="529f6361acbb61150eb17c5e50c4630af72c9f", @typed={0x4, 0x17}, @nested={0x4, 0x95}, @typed={0x8, 0x13d, 0x0, 0x0, @pid=r4}]}, @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x45, 0x8e, 0x0, 0x1, [@generic="761f2f5d415a3069035a6880b836240da17105b8d3687f77030f3e6d315be826a95aa994cec99f42f8224951b8aeb3205f5f61282a40e42396b6d09a5a135e2de3"]}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24000058}, 0x20000010) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r10, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_TZ_NAME={0x6, 0xb, '1]'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) read$auto_debugfs_devm_entry_ops_file(r12, &(0x7f00000012c0)=""/252, 0xfc) io_uring_register$auto(r2, 0x8001, &(0x7f00000013c0)="de68e682fd5328525aa855cbdd398c557cd929fcf5268f86", 0x6) 5.648844655s ago: executing program 1 (id=1408): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap$auto(0xfffffffffffffffe, 0x7fffffff, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0x4, 0x80}, 0x96) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x7}, 0xc) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, 0x0, 0x40000) map_shadow_stack$auto(0xfffffffffffffffd, 0x7, 0x9) unshare$auto(0x40000080) msgctl$auto(0xe, 0x9, 0x0) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x80c00, 0x0) socket(0x28, 0x2, 0xf) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000200), 0x484400, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dri/card1\x00', 0x109400, 0x0) bpf$auto(0x4, &(0x7f0000001e80)=@iter_create={r1, 0x6}, 0x5) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) r2 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r3) sendmsg$auto_TIPC_NL_MEDIA_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x14, r4, 0x701, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) read$auto(0x3, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) 5.026067781s ago: executing program 3 (id=1409): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x9) landlock_restrict_self$auto(r1, 0xffff) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) sendfile$auto(0x6, 0xffffffffffffffff, 0x0, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 4.809817425s ago: executing program 1 (id=1410): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040), 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) connect$auto(0x3, &(0x7f0000000140), 0x55) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x0, 0x0, 0xfbf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89b0, &(0x7f0000000140)={'vlan0\x00'}) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x296) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r1, 0x0, 0x20048800) select$auto(0x1000009, 0x0, &(0x7f0000000100)={[0xa, 0x200, 0x80000000000000b, 0xc, 0x9, 0xf4, 0x6, 0x1, 0x40009, 0x2000000000003, 0x4000000000000000, 0x6, 0x95, 0x8, 0x8, 0x6]}, 0x0, 0x0) pipe2$auto(&(0x7f0000000000)=r0, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01032cbd700000000000000010000015000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4019}, 0x0) 4.786533759s ago: executing program 6 (id=1412): mmap$auto(0x8e, 0x3, 0x7fffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) r1 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) munmap$auto(0x1ffff000, 0x2000000c) write$auto_dev_fops_plock(r1, &(0x7f0000000740)="cacbc35874f3520ede8ad842e90500ae67af5c4b22cd56582e0f3d8bc5c5f248d71a9dea75b359f918bd7aa8c9691bba9d686ef9a6ca1081bfbb40e2ea75159b", 0x40) read$auto_transactions_fops_(r0, &(0x7f0000000000)=""/191, 0xbf) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r2) 3.493416681s ago: executing program 3 (id=1415): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) rseq$auto(&(0x7f0000000080)={0xe, 0x401, 0x0, 0x3, 0xffffffff, 0x3, "5343f576ae6176950fef5e185cc2816d4c007d6f6cb1942f26377aeaa2092e956ca5f09b18473d1fe47691460312ec62768b0935aa8631bbda06a26ce01b4817da1ab93554819ab9"}, 0x8000, 0xffffffff, 0x6) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r0 = socket(0xa, 0x2, 0x73) sendto$auto(r0, 0x0, 0xf, 0x800e, &(0x7f00000004c0), 0x19) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0xe, 0x0, 0x8e, 0x40}, 0x8}, 0x1, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) r2 = socket(0x10, 0x2, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r2, &(0x7f0000000000)='-\x00', 0x1ff) socket(0x2, 0xa, 0xe57a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_GET(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) socket(0x11, 0x80003, 0x300) ioctl$auto(0x3, 0x541b, 0x10000000000402) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010325bd705a946421250a000000d2e36d4c6f84ad020f94bdef2ba619c5fa208af9f80a3b6291a5f8aa7f3496a8ca072da2560f32ef3747898c4a9fc42c797e4b38321d8d1f87cf8085b76aaf4cb8643d6d2831c94d37a1f935a3ac97e4c2544bd81a5479ae6790"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) 2.86866724s ago: executing program 3 (id=1417): socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040026bd7000fedbdf2529000000f212720100da507733dee2857da2402f29"], 0x14}}, 0x40) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) fcntl$auto(0x8000000000000001, 0x26, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) read$auto(r1, 0x0, 0x1f3c) set_mempolicy$auto(0x4006, 0x0, 0x7) socket(0xa, 0x801, 0x84) mmap$auto(0x3, 0xb, 0x5, 0xeb1, 0x3ff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x405, 0x8000) r2 = gettid() r3 = pidfd_open$auto(r2, 0x0) read$auto_l2cap_debugfs_fops_(r3, &(0x7f0000000040)=""/42, 0x2a) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram0/io-timeout-fail\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x28, 0x5, 0x0) pipe2$auto(0x0, 0x80) 2.713215488s ago: executing program 1 (id=1419): setresuid$auto(0x2, 0xffffffffffffffff, 0x200) (async) setresuid$auto(0x2, 0xffffffffffffffff, 0x200) socket(0x2, 0x3, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) (async) r0 = pipe$auto(0x0) pipe$auto(0x0) read$auto(0x3, 0x0, 0x80) setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x19, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x19, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x3, 0xc, 0x9c2, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0xb, 0xb0, 0x9, 0x2, 0x7, 0x5, 0x7, 0x0, 0x0, 0xa8c, 0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x40, 0x39, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0xb, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) (async) r2 = socket(0x2, 0x1, 0x0) bind$auto(r2, 0x0, 0x67) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x30c40, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000480)="fb8afd14e18d56058479060000000000000072e2944ccdbe7d7f48e4c97b971995d55b6b2e4711fcd7271910481547407d4638cfd84d2320e92f39dfc55536f5418b39710a42426c9cddef0a118a5bea11cfcabbcdc31c138d67860e621c63661ee39f698960773d08dbec65a21b9a2ed6ea3ddc77678c1f1cba1653773310d533476034fd7929c189f12a9aab9c45a359f3a6a1219c078167685bd6ea1e683e823f7dbd3daf075c9c921e67", 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x8, 0x20000004) rseq$auto(0x0, 0x8000, 0x0, 0x6) geteuid() ioctl$auto__ctl_fops_dm_ioctl(r0, 0x5, &(0x7f0000000380)="f473e62cc102c049a7a0c6f04f3dc0fae624d2681dfcd792606ed2d5209f9279d133d3e21b216bba4a83588def7c7d5d4631ae02d06f073951a81f90575a378de2619623aaf81951c93b65dab6654929080eaae2cb1f19ae8c5082768b8d83b7c86fdfabaa14164ebd27e57c043ac29ada99a6f86a4c20b83fc3708c4264a03653305d45e8a128136eecb0d89ed8bcf7eaacd0c781eec7bce4cf1522f52bd2fc50b8c6bfb0a7bba621451690335f347eb13af4b091f9a40e01aaada288286518c9cac16f") socket(0x11, 0x80003, 0x300) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x80002, 0x0) (async) r3 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x80002, 0x0) write$auto(r3, 0x0, 0x3) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100) 2.061117774s ago: executing program 1 (id=1421): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap$auto(0xfffffffffffffffe, 0x7fffffff, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0x4, 0x80}, 0x96) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x7}, 0xc) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, 0x0, 0x40000) map_shadow_stack$auto(0xfffffffffffffffd, 0x7, 0x9) unshare$auto(0x40000080) msgctl$auto(0xe, 0x9, 0x0) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x80c00, 0x0) socket(0x28, 0x2, 0xf) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000200), 0x484400, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dri/card1\x00', 0x109400, 0x0) bpf$auto(0x4, &(0x7f0000001e80)=@iter_create={r1, 0x6}, 0x5) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) r2 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r3) sendmsg$auto_TIPC_NL_MEDIA_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x14, r4, 0x701, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) read$auto(0x3, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) 2.041008556s ago: executing program 6 (id=1422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000040)={0xa, 0x80000000}) poll$auto(&(0x7f0000003640)={r0, 0x7, 0x6}, 0x6, 0x100000) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x41555856, 0xd, 0x2008, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r5, 0x29, 0x20, 0x0, 0x20) r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000140), r4) sendmsg$auto_OVS_VPORT_CMD_SET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="5bd226bd7000fddbdf25040000000400048008000800", @ANYRES32=0x0, @ANYBLOB="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"], 0x20}}, 0x4004094) socket(0xa, 0x801, 0x84) r7 = socket(0x10, 0x3, 0x4) r8 = socket(0xa, 0x3, 0x3a) r9 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x80000001, 0xfffffffffffffffd, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x80000001, 0xec, 0x0, 0x81, 0x8, 0x3, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r10, 0x811, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x4040810) write$auto(r7, &(0x7f0000000100)='ovs_vport\x00', 0x2) setsockopt$auto(r8, 0x29, 0xca, 0x0, 0x4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032bbd7000fddbdf250a", @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4) 1.921575276s ago: executing program 3 (id=1423): getxattrat$auto(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0, 0x10) mmap$auto(0x0, 0x400008, 0x10000000df, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000280)=@l2={0x1f, 0x7, @none, 0x200, 0x1}, 0x4) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) bpf$auto(0x4, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, r1, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0x1) socket(0xa, 0x1, 0x84) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/components\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4096, 0x1000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) getrandom$auto(&(0x7f0000000180)=',\x00', 0x3ff, 0x468) rseq$auto(&(0x7f0000000040)={0x5, 0x2, 0x9, 0x8, 0x8, 0x8000, "2cd959c34079b2ed59d9c90da1e49ddf05ee3c279270bd2f0a27f736568375e621a2ea63e2c813adba49c0916a0a7ba7607f549099df6c094fcfcaf97965ab393adc118c2a738eabb277363cc3e56fea0e"}, 0x65, 0x0, 0xda) acct$auto(&(0x7f0000000000)=',\x00') madvise$auto(0x0, 0xffffffffffff0001, 0x15) set_mempolicy_home_node$auto(0x8000, 0x10001, 0x0, 0x0) 1.702262746s ago: executing program 5 (id=1424): socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/phonet\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000380)=""/177, 0xb1) io_uring_setup$auto(0x6, 0x0) mprotect$auto(0x9, 0xfff, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) poll$auto(&(0x7f00000002c0)={0xffffffffffffffff, 0x6668, 0x403}, 0x3, 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r1 = socket(0xa, 0x2, 0x3a) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x200000, 0x0) close_range$auto(0x2, 0x8000, 0x0) getgroups$auto(0xc5f1, 0x0) setsockopt$auto(r1, 0x29, 0x43, &(0x7f00000002c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,&\xd5z\xe6\x93\xb9\aE\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000110) open(0x0, 0x22240, 0x155) 1.541108156s ago: executing program 6 (id=1425): open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) write$auto(0x3, 0x0, 0xfdef) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_USB_RAW_IOCTL_INIT(r1, 0x41015500, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) close_range$auto(r0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/arp_missed_max\x00', 0x100, 0x0) memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80000001, 0x8) process_vm_writev$auto(0x0, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) madvise$auto(0x0, 0x2002003f0, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1.332446038s ago: executing program 6 (id=1426): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000002, 0x5) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) (async) r2 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) write$auto(r2, &(0x7f0000000180)='*})$-)-\\\x00', 0xf605) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) mmap$auto(0x0, 0xa, 0x72, 0x8b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x200800, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x200800, 0x0) memfd_secret$auto(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptywa\x00', 0x400, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x8000000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x8d, 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) r6 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000200), r2) sendmsg$auto_NLBL_MGMT_C_VERSION(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x7f}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x80000001}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x1}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x9}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x9}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '*})$-)-\\\x00'}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000000) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) (async) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) ioctl$auto_TCFLSH2(r5, 0x541b, 0xfdfd) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bpf$auto(0x3, &(0x7f00000000c0)=@raw_tracepoint={0x8, r3, 0x0, 0xe}, 0x2) 1.279419672s ago: executing program 5 (id=1427): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001380)='/sys/fs/ocfs2/cluster_stack\x00', 0x400, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001380)='/sys/fs/ocfs2/cluster_stack\x00', 0x400, 0x0) r1 = epoll_create$auto(0x2) epoll_pwait2$auto(r1, 0x0, 0x8, &(0x7f0000002780)={0x0, 0x6}, 0x0, 0x8) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) socket(0xa, 0x2, 0x88) (async) r4 = socket(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1ff, r4, @relative_id=0x13, 0xe600}, 0xf) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000005e00)='/sys/fs/o2cb/logmask/TCP\x00', 0x0, 0x0) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000005e00)='/sys/fs/o2cb/logmask/TCP\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000005e40)=""/103, 0x67) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r2, 0x800, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PHY_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_PHY_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_PHY_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x81}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x404c0c1) (async) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r2, 0x800, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PHY_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_PHY_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_PHY_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x81}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x404c0c1) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/192, 0xc0) 1.068952297s ago: executing program 6 (id=1428): r0 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/trap_flow_action_cookie\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0xd00064c0, 0xc36) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r0, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) kexec_load$auto(0x5, 0x2, 0x0, 0x4) fchdir$auto(r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:01.1/ata1/host0/target0:0:0/0:0:0:0/vpd_pg89\x00', 0x20000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.depth\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000001000001, 0xd) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x20601, 0x0) write$auto_sg_fops_sg(r2, &(0x7f0000000080)="06", 0x1) msgctl$auto(0x288a, 0x0, &(0x7f0000000180)={{0xe7b, 0xffffffffffffffff, 0xee00, 0x20000000, 0x9a, 0xd, 0x3}, &(0x7f0000000100)=0x3, 0x0, 0x8, 0x1, 0x4, 0x7fffffffffffffff, 0x100, 0x0, 0x9633, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x89}) r3 = socket(0x2, 0x801, 0x6) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) setsockopt$auto(r3, 0x1, 0x12, 0x0, 0xa4) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) socket(0x2b, 0x1, 0x1) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x2, 0x0) socket(0x2, 0x1, 0x8) setsockopt$auto(0x3, 0x9, 0x2, 0x0, 0xc) close_range$auto(0x2, 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) 972.592334ms ago: executing program 5 (id=1429): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x10, 0x3, 0x6) (async) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4192d66e5cb751cb8c4d14800000c6ad6912aa3f8aff81d4eaf20a0f9bbea9f40bbda0816d93a0ad06914ce97357a5199c99607554f8534b4afa26d710f8b4226e2d94b6fd0b9d48441c7085053adc7909eb805dbd734a160bea4f4852b337faf5438dbbac80a0755cc0e4ed879ab7b53a84e124a232d7c25e019cbe437b47c63af1d97a7f389a2438b335fb6d043b2456182ba9d174559c24cda231a047c868a74892b702bf523899b203332de97f5beb46e71b41b4915e651f24922acdd6ab506d57ce71cf69a4746be7221b5db09f5bd25c08deeaf3847a20", @ANYRES16=r1, @ANYBLOB="09032abd7000fedbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 667.34664ms ago: executing program 3 (id=1430): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (async) ppoll$auto(&(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x9}, 0x3, 0x0, &(0x7f0000000180), 0x8) (async) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x19, 0x4, 0x4, 0x9, 0x8, 0xc, 0x66b, 0x4, 0x7ff}, 0x6f4) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000040), 0xffffffffffffffff) (async) socket(0x2, 0x5, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) ioctl$auto_TIOCGPTPEER2(r2, 0x5441, 0x0) (async) socket(0xa, 0x2, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x8, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x5602, 0x1) (async) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x6, 0x1, 'd\x00'}]}, 0x1c}}, 0x40000) 581.195069ms ago: executing program 5 (id=1431): r0 = accept$auto(0xffffffffffffffff, &(0x7f0000000000)=@hci={0x1f, 0x4, 0x3}, &(0x7f0000000080)=0x82a9) mmap$auto(0x3, 0x5, 0x2, 0x40eb2, r0, 0x2) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) writev$auto(0x8, &(0x7f0000000040)={&(0x7f0000000000), 0x1}, 0xabc) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 286.90075ms ago: executing program 5 (id=1432): r0 = socket(0x10, 0x2, 0x0) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x3000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/iomem\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) setsockopt$auto(0x4, 0x88, 0x64, &(0x7f0000000000)='!/*:(*\'\x00', 0xe) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/250, 0xfa) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mmap$auto(0x0, 0x20009, 0x800000000df, 0xeb1, 0x10, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/hugepages-128kB/stats/shmem_fallback_charge\x00', 0x200, 0x0) read$auto(0x3, 0x0, 0x80) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f00000001c0)) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(0x3, 0x401070c9, 0xd4e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='f\x00\'a)'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0000ffffaa0a6a99c7521942e676a446edc0e96e195150457997089895c05feaf0c656270dcc8cb1175f9e6d47a88af91a33df3c4ed69febd2494dab8d9328be8db153ee13deeeaa049fb0b76be8d455e717500a439d", @ANYRES16=0x0, @ANYBLOB="080029bd7000fedbdf2562000000060043010200000004008300"], 0x20}, 0x1, 0x0, 0x0, 0x24000080}, 0x4040000) 0s ago: executing program 5 (id=1433): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000300)='./file0\x00', 0xf801) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1e, 0x2, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) chdir$auto(&(0x7f0000000000)='./file1\x00') getsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x16, 0x0, &(0x7f0000000040)=0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) chmod$auto(&(0x7f0000000040)='./file0\x00', 0x10fe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 350.131492][ T5841] cgroup: Unknown subsys name 'net' [ 350.284654][ T5841] cgroup: Unknown subsys name 'cpuset' [ 350.292678][ T5841] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 351.628292][ T5841] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 353.400118][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.420952][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.422565][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.429994][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.444316][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.452685][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.456809][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.459918][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.467787][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.477999][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.481515][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.488498][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.496840][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.503952][ T5863] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 353.511181][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.516870][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.522944][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.538198][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.544262][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 353.553745][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.562676][ T5864] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 353.572401][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.579935][ T5144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 353.596104][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.868801][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 354.012999][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 354.054972][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.071665][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.079291][ T5850] bridge_slave_0: entered allmulticast mode [ 354.087016][ T5850] bridge_slave_0: entered promiscuous mode [ 354.097239][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.104672][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.112902][ T5850] bridge_slave_1: entered allmulticast mode [ 354.119510][ T5850] bridge_slave_1: entered promiscuous mode [ 354.148266][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 354.171027][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 354.189262][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.200831][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.289230][ T5850] team0: Port device team_slave_0 added [ 354.299571][ T5850] team0: Port device team_slave_1 added [ 354.358342][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.365583][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.372954][ T5851] bridge_slave_0: entered allmulticast mode [ 354.379539][ T5851] bridge_slave_0: entered promiscuous mode [ 354.404652][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.411881][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.419030][ T5851] bridge_slave_1: entered allmulticast mode [ 354.426753][ T5851] bridge_slave_1: entered promiscuous mode [ 354.445209][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.452285][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.478666][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.508948][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.516272][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.524074][ T5853] bridge_slave_0: entered allmulticast mode [ 354.530634][ T5853] bridge_slave_0: entered promiscuous mode [ 354.546671][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.554035][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.580073][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.591225][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.598998][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.606363][ T5852] bridge_slave_0: entered allmulticast mode [ 354.613384][ T5852] bridge_slave_0: entered promiscuous mode [ 354.620099][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.627726][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.635035][ T5853] bridge_slave_1: entered allmulticast mode [ 354.641775][ T5853] bridge_slave_1: entered promiscuous mode [ 354.650248][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.665102][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.672534][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.679683][ T5852] bridge_slave_1: entered allmulticast mode [ 354.686884][ T5852] bridge_slave_1: entered promiscuous mode [ 354.704337][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.742156][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.769063][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.796411][ T5851] team0: Port device team_slave_0 added [ 354.805225][ T5851] team0: Port device team_slave_1 added [ 354.814761][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.834371][ T5853] team0: Port device team_slave_0 added [ 354.865105][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.886975][ T5853] team0: Port device team_slave_1 added [ 354.895407][ T5850] hsr_slave_0: entered promiscuous mode [ 354.902320][ T5850] hsr_slave_1: entered promiscuous mode [ 354.909486][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.917329][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.943524][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.956904][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.964163][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.990193][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.045910][ T5852] team0: Port device team_slave_0 added [ 355.064686][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.072108][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.098585][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.112860][ T5852] team0: Port device team_slave_1 added [ 355.123392][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.130357][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.156822][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.206317][ T5851] hsr_slave_0: entered promiscuous mode [ 355.213217][ T5851] hsr_slave_1: entered promiscuous mode [ 355.219447][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.227469][ T5851] Cannot create hsr debugfs directory [ 355.251411][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.258607][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.284904][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.325175][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.332393][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.358715][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.372890][ T5853] hsr_slave_0: entered promiscuous mode [ 355.379202][ T5853] hsr_slave_1: entered promiscuous mode [ 355.385989][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.394977][ T5853] Cannot create hsr debugfs directory [ 355.491324][ T5852] hsr_slave_0: entered promiscuous mode [ 355.497866][ T5852] hsr_slave_1: entered promiscuous mode [ 355.504713][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.512530][ T5852] Cannot create hsr debugfs directory [ 355.633686][ T5861] Bluetooth: hci2: command tx timeout [ 355.639567][ T5861] Bluetooth: hci1: command tx timeout [ 355.645310][ T5144] Bluetooth: hci0: command tx timeout [ 355.651200][ T5144] Bluetooth: hci3: command tx timeout [ 355.719725][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.736667][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.746286][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.765338][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.805875][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.815434][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.828126][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.838900][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.899018][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.914739][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.924947][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 355.935791][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.006535][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.017391][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.030026][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.047758][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 356.107326][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.166313][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.196161][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.204038][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.226747][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.250476][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.257642][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.293913][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.321575][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.328682][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.344996][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.352166][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.370218][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.425820][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.458359][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.498671][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.508441][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.515634][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.550064][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.557261][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.569055][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.576256][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.585418][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.592579][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.671487][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.826685][ T5850] veth0_vlan: entered promiscuous mode [ 356.853824][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.869762][ T5850] veth1_vlan: entered promiscuous mode [ 356.971498][ T5850] veth0_macvtap: entered promiscuous mode [ 356.993575][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.007806][ T5851] veth0_vlan: entered promiscuous mode [ 357.020652][ T5850] veth1_macvtap: entered promiscuous mode [ 357.039275][ T5851] veth1_vlan: entered promiscuous mode [ 357.097439][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.130293][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.139602][ T5853] veth0_vlan: entered promiscuous mode [ 357.162193][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.171114][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.180337][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.189334][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.201121][ T5851] veth0_macvtap: entered promiscuous mode [ 357.217652][ T5851] veth1_macvtap: entered promiscuous mode [ 357.246510][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.256773][ T5853] veth1_vlan: entered promiscuous mode [ 357.319661][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.332659][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.344070][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.382954][ T5904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.387258][ T5853] veth0_macvtap: entered promiscuous mode [ 357.398448][ T5904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.407430][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.419269][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.430162][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.462911][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.472240][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.480969][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.490352][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.513553][ T5853] veth1_macvtap: entered promiscuous mode [ 357.539998][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.544843][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.558789][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.566434][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.566454][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.566472][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.567637][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.639979][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.656537][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.666536][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.677564][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.689160][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.708106][ T5852] veth0_vlan: entered promiscuous mode [ 357.712907][ T5144] Bluetooth: hci3: command tx timeout [ 357.714111][ T5861] Bluetooth: hci2: command tx timeout [ 357.719011][ T5144] Bluetooth: hci1: command tx timeout [ 357.726226][ T5861] Bluetooth: hci0: command tx timeout [ 357.746859][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.755827][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.765638][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.774628][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.819812][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 357.832555][ T5893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.843183][ T5893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.856339][ T5852] veth1_vlan: entered promiscuous mode [ 357.924093][ T5893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.938162][ T5893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.963768][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.977333][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.984435][ T5852] veth0_macvtap: entered promiscuous mode [ 357.995177][ T5852] veth1_macvtap: entered promiscuous mode [ 358.094473][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.128553][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.139745][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.149931][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.161714][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.173069][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.183305][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.195905][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.219102][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.254850][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.268815][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.290450][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.303999][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.315432][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.327779][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.339479][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.361003][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.377555][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.387212][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.396379][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.443026][ T5917] nvme_fcloop: unknown parameter or missing value '' [ 358.648293][ T5925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5'. [ 358.651331][ T5892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.679270][ T5892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.692472][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.759443][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.913880][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.951817][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.539420][ T5942] mmap: syz.0.8 (5942) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 359.792366][ T5861] Bluetooth: hci1: command tx timeout [ 359.792654][ T5144] Bluetooth: hci0: command tx timeout [ 359.797798][ T5861] Bluetooth: hci2: command tx timeout [ 359.803262][ T5865] Bluetooth: hci3: command tx timeout [ 361.873231][ T5861] Bluetooth: hci2: command tx timeout [ 361.878704][ T5861] Bluetooth: hci0: command tx timeout [ 361.881772][ T5144] Bluetooth: hci1: command tx timeout [ 361.889598][ T5855] Bluetooth: hci3: command tx timeout [ 361.992854][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'. [ 362.011999][ T5978] Zero length message leads to an empty skb [ 362.023205][ T5978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 363.341265][ T5999] HfR: entered promiscuous mode [ 363.379971][ T5999] openvswitch: HfR: Dropping previously announced user features [ 363.438537][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20'. [ 363.471135][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.489391][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.548915][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.579730][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.847174][ T5997] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 364.962069][ T6026] block nbd0: Unsupported socket: shutdown callout must be supported. [ 365.241797][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 366.077236][ T6040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'. [ 366.132531][ T6026] scsi_dev_info_list_add_str: bad dev info string ';' '' '' [ 366.688272][ T6051] netlink: 330 bytes leftover after parsing attributes in process `syz.2.31'. [ 371.796410][ T6117] nl80211: entered promiscuous mode [ 371.853472][ T6117] capability: warning: `syz.1.42' uses 32-bit capabilities (legacy support in use) [ 371.917677][ T6117] openvswitch: HfR: Dropping previously announced user features [ 372.290578][ T6107] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 372.326430][ T6107] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 372.837949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 373.565843][ T6154] block nbd0: Unsupported socket: shutdown callout must be supported. [ 374.152934][ T6163] HfR: entered promiscuous mode [ 374.163238][ T6165] openvswitch: HfR: Dropping previously announced user features [ 374.172584][ T6163] openvswitch: HfR: Dropping previously announced user features [ 374.252481][ T6154] nvme_fcloop: unknown parameter or missing value '' [ 374.432148][ T6167] block nbd0: Unsupported socket: shutdown callout must be supported. [ 374.881056][ T6167] nvme_fcloop: unknown parameter or missing value '' [ 377.818508][ T6211] HfR: entered promiscuous mode [ 378.247009][ T6216] openvswitch: HfR: Dropping previously announced user features [ 378.322660][ T6216] openvswitch: HfR: Dropping previously announced user features [ 378.949765][ T6220] nvme_fcloop: unknown parameter or missing value '' [ 379.012187][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.018882][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.063346][ T6229] FAULT_INJECTION: forcing a failure. [ 380.063346][ T6229] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 380.091819][ T6229] CPU: 1 UID: 0 PID: 6229 Comm: syz.3.67 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 380.102387][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 380.112474][ T6229] Call Trace: [ 380.115773][ T6229] [ 380.118747][ T6229] dump_stack_lvl+0x16c/0x1f0 [ 380.123484][ T6229] should_fail_ex+0x497/0x5b0 [ 380.128210][ T6229] _copy_from_iter+0x29b/0x1400 [ 380.133114][ T6229] ? trace_lock_acquire+0x14e/0x1f0 [ 380.138356][ T6229] ? __pfx__copy_from_iter+0x10/0x10 [ 380.143699][ T6229] ? __virt_addr_valid+0x1a4/0x590 [ 380.148867][ T6229] ? __virt_addr_valid+0x5e/0x590 [ 380.153933][ T6229] ? __phys_addr_symbol+0x30/0x80 [ 380.158990][ T6229] ? __check_object_size+0x488/0x710 [ 380.164318][ T6229] kernfs_fop_write_iter+0x19d/0x500 [ 380.169655][ T6229] vfs_write+0x5ae/0x1150 [ 380.174031][ T6229] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 380.179883][ T6229] ? __pfx___mutex_lock+0x10/0x10 [ 380.184955][ T6229] ? __pfx_vfs_write+0x10/0x10 [ 380.189803][ T6229] ksys_write+0x12b/0x250 [ 380.194184][ T6229] ? __pfx_ksys_write+0x10/0x10 [ 380.199086][ T6229] do_syscall_64+0xcd/0x250 [ 380.203657][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.209595][ T6229] RIP: 0033:0x7fe1c3f85d29 [ 380.214124][ T6229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.233768][ T6229] RSP: 002b:00007fe1c4e7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 380.242222][ T6229] RAX: ffffffffffffffda RBX: 00007fe1c4175fa0 RCX: 00007fe1c3f85d29 [ 380.250231][ T6229] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000005 [ 380.258240][ T6229] RBP: 00007fe1c4e7d090 R08: 0000000000000000 R09: 0000000000000000 [ 380.266252][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.274260][ T6229] R13: 0000000000000000 R14: 00007fe1c4175fa0 R15: 00007ffde6f11988 [ 380.282269][ T6229] [ 381.648275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 381.656882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 381.701729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 383.058970][ T6256] nvme_fcloop: unknown parameter or missing value '' [ 383.752201][ T6273] netlink: 'syz.1.75': attribute type 1 has an invalid length. [ 383.822619][ T6273] netlink: 'syz.1.75': attribute type 1 has an invalid length. [ 384.877288][ T29] audit: type=1800 audit(1734811966.595:2): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.80" name="dbroot" dev="configfs" ino=7939 res=0 errno=0 [ 385.283891][ T6303] Invalid ELF header magic: != ELF [ 385.640943][ T6304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.85'. [ 385.781996][ T6304] geneve1: entered allmulticast mode [ 386.114829][ T6304] syz.1.85 (6304) used greatest stack depth: 21040 bytes left [ 386.641896][ T6309] nvme_fcloop: unknown parameter or missing value '' [ 386.942309][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 387.733102][ T6350] openvswitch: HfR: Dropping previously announced user features [ 387.754055][ T6350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.97'. [ 388.866172][ T6364] nvme_fcloop: unknown parameter or missing value '' [ 393.078067][ T6447] netlink: zone id is out of range [ 393.098426][ T6447] netlink: zone id is out of range [ 393.111652][ T6447] netlink: zone id is out of range [ 393.118857][ T6447] netlink: zone id is out of range [ 393.131650][ T6447] netlink: zone id is out of range [ 393.148344][ T6447] netlink: zone id is out of range [ 393.162207][ T6447] netlink: zone id is out of range [ 393.177693][ T6447] netlink: zone id is out of range [ 393.203657][ T6447] netlink: set zone limit has 4 unknown bytes [ 394.086814][ T5893] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.240566][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 394.250086][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 394.259208][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 394.268109][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 394.278314][ T5861] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 394.288040][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 394.336350][ T5893] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.489407][ T5893] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.796149][ T5893] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.918390][ T6490] Invalid ELF header magic: != ELF [ 395.159611][ T6492] size and base must be multiples of 4 kiB [ 395.165787][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz.0.126 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 395.176432][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.186526][ T6492] Call Trace: [ 395.189839][ T6492] [ 395.192818][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 395.197547][ T6492] mtrr_add+0xdf/0x110 [ 395.201672][ T6492] mtrr_ioctl+0x7cd/0xcd0 [ 395.206053][ T6492] ? __pfx_mtrr_ioctl+0x10/0x10 [ 395.210958][ T6492] ? find_held_lock+0x2d/0x110 [ 395.215785][ T6492] ? __pfx_mtrr_ioctl+0x10/0x10 [ 395.220694][ T6492] proc_reg_unlocked_ioctl+0x226/0x320 [ 395.226198][ T6492] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 395.232220][ T6492] __x64_sys_ioctl+0x190/0x200 [ 395.237007][ T6492] do_syscall_64+0xcd/0x250 [ 395.241536][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.247455][ T6492] RIP: 0033:0x7f6690f85d29 [ 395.251882][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.271515][ T6492] RSP: 002b:00007f6691d55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.279949][ T6492] RAX: ffffffffffffffda RBX: 00007f6691175fa0 RCX: 00007f6690f85d29 [ 395.287933][ T6492] RDX: 0000000000000002 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 395.295919][ T6492] RBP: 00007f6691001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 395.303901][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.311970][ T6492] R13: 0000000000000000 R14: 00007f6691175fa0 R15: 00007fff6a113ff8 [ 395.319963][ T6492] [ 395.469849][ T5893] bridge_slave_1: left allmulticast mode [ 395.482966][ T5893] bridge_slave_1: left promiscuous mode [ 395.503647][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.567190][ T5893] bridge_slave_0: left allmulticast mode [ 395.576419][ T5893] bridge_slave_0: left promiscuous mode [ 395.596388][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.683132][ T6496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.127'. [ 395.886501][ T6502] binder: 6501:6502 ioctl c0306201 9 returned -14 [ 396.355234][ T5855] Bluetooth: hci2: command tx timeout [ 396.370279][ T5893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.389932][ T5893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.405470][ T5893] bond0 (unregistering): Released all slaves [ 396.537107][ T6496] geneve1: entered allmulticast mode [ 396.717311][ T6475] chnl_net:caif_netlink_parms(): no params data found [ 397.284289][ T5893] hsr_slave_0: left promiscuous mode [ 397.298499][ T5893] hsr_slave_1: left promiscuous mode [ 397.315864][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.345222][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.383730][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.391200][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.477248][ T5893] veth1_macvtap: left promiscuous mode [ 397.483490][ T5893] veth0_macvtap: left promiscuous mode [ 397.489355][ T5893] veth1_vlan: left promiscuous mode [ 397.495428][ T5893] veth0_vlan: left promiscuous mode [ 398.302303][ T6543] nvme_fcloop: unknown parameter or missing value '' [ 398.431836][ T5855] Bluetooth: hci2: command tx timeout [ 398.528117][ T6536] [U] [ 398.531001][ T6536] [U] [ 398.533713][ T6536] [U] [ 398.536429][ T6536] [U] [ 398.542158][ T6536] [U] [ 398.544912][ T6536] [U] [ 398.547640][ T6536] [U] [ 398.550368][ T6536] [U] [ 398.554676][ T5893] team0 (unregistering): Port device team_slave_1 removed [ 398.572157][ T6536] [U] [ 398.574936][ T6536] [U] [ 398.577661][ T6536] [U] [ 398.580382][ T6536] [U] [ 398.586162][ T6536] [U] [ 398.588936][ T6536] [U] [ 398.591676][ T6536] [U] [ 398.594410][ T6536] [U] [ 398.597472][ T6536] [U] [ 398.600209][ T6536] [U] [ 398.602939][ T6536] [U] [ 398.605665][ T6536] [U] [ 398.608760][ T6536] [U] [ 398.611754][ T6536] [U] [ 398.614490][ T6536] [U] [ 398.617216][ T6536] [U] [ 398.620504][ T6536] [U] [ 398.623248][ T6536] [U] [ 398.625981][ T6536] [U] [ 398.628705][ T6536] [U] [ 398.631849][ T6536] [U] [ 398.634586][ T6536] [U] [ 398.637292][ T6536] [U] [ 398.640107][ T6536] [U] [ 398.657782][ T5893] team0 (unregistering): Port device team_slave_0 removed [ 398.666166][ T6538] [U] [ 399.305055][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.326139][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.338464][ T6475] bridge_slave_0: entered allmulticast mode [ 399.362656][ T6475] bridge_slave_0: entered promiscuous mode [ 399.398208][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.406388][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.442536][ T6475] bridge_slave_1: entered allmulticast mode [ 399.443224][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 399.449562][ T6475] bridge_slave_1: entered promiscuous mode [ 399.559996][ T6475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.664170][ T6475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.830676][ T6475] team0: Port device team_slave_0 added [ 399.860885][ T6475] team0: Port device team_slave_1 added [ 399.941754][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.961834][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.031689][ T6475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.112383][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.119385][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.191657][ T6475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.284707][ T6475] hsr_slave_0: entered promiscuous mode [ 400.297861][ T6475] hsr_slave_1: entered promiscuous mode [ 400.312433][ T6475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.320066][ T6475] Cannot create hsr debugfs directory [ 400.511799][ T5855] Bluetooth: hci2: command tx timeout [ 400.866471][ T6475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 400.906396][ T6475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 400.925539][ T6475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 400.947730][ T6475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 401.103558][ T6475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.164503][ T6475] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.194925][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.202125][ T6413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.262736][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.271042][ T6413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.433010][ T6475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.488154][ T6475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.725269][ T6638] kernel read not supported for file /#)-\&[} (pid: 6638 comm: syz.3.152) [ 401.823396][ T29] audit: type=1800 audit(1734811983.545:3): pid=6638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.152" name="#)-\&[}" dev="mqueue" ino=10001 res=0 errno=0 [ 402.127679][ T6475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.591930][ T5855] Bluetooth: hci2: command tx timeout [ 402.809412][ T6475] veth0_vlan: entered promiscuous mode [ 402.853708][ T6475] veth1_vlan: entered promiscuous mode [ 402.887917][ T6475] veth0_macvtap: entered promiscuous mode [ 402.938963][ T6475] veth1_macvtap: entered promiscuous mode [ 402.979742][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.002325][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.014124][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.047729][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.065792][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.081648][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.111631][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.143025][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.154694][ T6475] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.181816][ T6475] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.190582][ T6475] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.221678][ T6475] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.491274][ T6394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.535659][ T6394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.601689][ T6414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.623960][ T6414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.853102][ T6750] nvme_fcloop: unknown parameter or missing value '' [ 404.875357][ T6721] syz.1.164 (6721) used greatest stack depth: 20848 bytes left [ 405.347535][ T6763] openvswitch: HfR: Dropping previously announced user features [ 405.970183][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 407.499262][ T6797] syz.0.176 uses obsolete (PF_INET,SOCK_PACKET) [ 409.081757][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 409.616627][ T6875] netlink: 354 bytes leftover after parsing attributes in process `syz.1.186'. [ 409.670648][ T6875] netlink: 334 bytes leftover after parsing attributes in process `syz.1.186'. [ 410.919305][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 411.175915][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.188'. [ 411.479421][ T6910] process 'syz.1.195' launched './file0' with NULL argv: empty string added [ 411.523646][ T6887] team0: Port device team_slave_0 removed [ 411.726744][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 414.970829][ T7033] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 415.273739][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.224'. [ 415.354498][ T7042] vcan0: entered promiscuous mode [ 416.862586][ T7059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.228'. [ 417.262335][ T7075] Process accounting resumed [ 417.305210][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.231'. [ 417.450222][ T7075] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 417.490310][ T7075] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 417.741923][ T7079] nvme_fcloop: unknown parameter or missing value '' [ 418.101223][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 421.982055][ T7196] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 422.010139][ T7195] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 427.029981][ T7275] vmstat_refresh: nr_hugetlb -1536 [ 429.147467][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 430.383309][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 430.393683][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 430.402416][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 430.411026][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 430.423525][ T5861] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 430.431066][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 430.469158][ T29] audit: type=1800 audit(1734812012.185:4): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.260" name="dbroot" dev="configfs" ino=13572 res=0 errno=0 [ 431.032214][ T7332] chnl_net:caif_netlink_parms(): no params data found [ 431.302753][ T7339] block nbd0: not configured, cannot reconfigure [ 431.707393][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 431.740668][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.759327][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.784617][ T7332] bridge_slave_0: entered allmulticast mode [ 431.831870][ T7332] bridge_slave_0: entered promiscuous mode [ 431.857674][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.876991][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.902094][ T7332] bridge_slave_1: entered allmulticast mode [ 431.922878][ T7332] bridge_slave_1: entered promiscuous mode [ 432.005340][ T7332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.051235][ T7332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.132801][ T7332] team0: Port device team_slave_0 added [ 432.164353][ T7332] team0: Port device team_slave_1 added [ 432.243881][ T7332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.260473][ T7332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.330247][ T7332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.365061][ T7332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.387797][ T7332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.465462][ T7332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.512498][ T5861] Bluetooth: hci4: command tx timeout [ 432.691457][ T7332] hsr_slave_0: entered promiscuous mode [ 432.705681][ T7332] hsr_slave_1: entered promiscuous mode [ 432.723886][ T7332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.737225][ T7332] Cannot create hsr debugfs directory [ 433.485407][ T7369] HSR: entered promiscuous mode [ 433.873524][ T7332] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 433.901951][ T7332] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 433.930574][ T7332] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 434.622347][ T5861] Bluetooth: hci4: command tx timeout [ 435.105509][ T7369] delete_channel: no stack [ 435.655445][ T6402] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.707095][ T7332] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 435.814022][ T6402] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.936604][ T6402] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.033366][ T6402] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.349834][ T7332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.417777][ T6402] bridge_slave_1: left allmulticast mode [ 436.435480][ T6402] bridge_slave_1: left promiscuous mode [ 436.456937][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.509669][ T6402] bridge_slave_0: left allmulticast mode [ 436.528794][ T6402] bridge_slave_0: left promiscuous mode [ 436.542364][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.672185][ T5861] Bluetooth: hci4: command tx timeout [ 437.677972][ T6402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.720017][ T6402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.757137][ T6402] bond0 (unregistering): Released all slaves [ 437.858449][ T7332] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.504445][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.511629][ T6414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.543163][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.550358][ T6414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.757752][ T5861] Bluetooth: hci4: command tx timeout [ 438.951501][ T6402] hsr_slave_0: left promiscuous mode [ 438.968992][ T6402] hsr_slave_1: left promiscuous mode [ 438.999030][ T6402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.009739][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.025587][ T6402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.035967][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.067657][ T6402] veth1_macvtap: left promiscuous mode [ 439.076526][ T6402] veth0_macvtap: left promiscuous mode [ 439.086159][ T6402] veth1_vlan: left promiscuous mode [ 439.094384][ T6402] veth0_vlan: left promiscuous mode [ 439.976997][ T6402] team0 (unregistering): Port device team_slave_1 removed [ 440.049613][ T6402] team0 (unregistering): Port device team_slave_0 removed [ 440.438993][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.446130][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.307133][ T7332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.165873][ T7332] veth0_vlan: entered promiscuous mode [ 442.217364][ T7332] veth1_vlan: entered promiscuous mode [ 442.268707][ T7499] nvme_fcloop: unknown parameter or missing value '' [ 442.378193][ T7332] veth0_macvtap: entered promiscuous mode [ 442.419503][ T7332] veth1_macvtap: entered promiscuous mode [ 442.457979][ T7332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.483119][ T7332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.524778][ T7332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.544165][ T7332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.563432][ T7332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.583023][ T7332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.602912][ T7332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.645165][ T7332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.692626][ T7332] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.710505][ T7332] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.733495][ T7332] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.771884][ T7332] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.035267][ T6413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.066915][ T6413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.095879][ T6414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.105294][ T6414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.660071][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.259'. [ 443.684806][ T7527] hsr_slave_0: left promiscuous mode [ 443.710097][ T7527] hsr_slave_1: left promiscuous mode [ 445.575344][ T7520] Invalid ELF header magic: != ELF [ 446.145991][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.304'. [ 446.201485][ T7607] hsr_slave_0: left promiscuous mode [ 446.223722][ T7607] hsr_slave_1: left promiscuous mode [ 446.793843][ T7637] mmap: syz.3.308 (7637): VmData 37597184 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 447.050358][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.5.311'. [ 449.153451][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.317'. [ 449.202038][ T7707] hsr_slave_0: left promiscuous mode [ 449.228434][ T7707] hsr_slave_1: left promiscuous mode [ 450.409582][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.326'. [ 451.171030][ T7750] vmstat_refresh: nr_hugetlb -3072 [ 451.222621][ T7757] Invalid ELF header magic: != ELF [ 453.051375][ T7789] vivid-013: ================= START STATUS ================= [ 453.072645][ T7789] vivid-013: Generate PTS: true [ 453.079937][ T7789] vivid-013: Generate SCR: true [ 453.092751][ T7789] tpg source WxH: 640x360 (Y'CbCr) [ 453.098588][ T7789] tpg field: 1 [ 453.114713][ T7789] tpg crop: 640x360@0x0 [ 453.118933][ T7789] tpg compose: 640x360@0x0 [ 453.139250][ T7789] tpg colorspace: 8 [ 453.149179][ T7789] tpg transfer function: 0/0 [ 453.161863][ T7789] tpg Y'CbCr encoding: 0/0 [ 453.166376][ T7789] tpg quantization: 0/0 [ 453.170659][ T7789] tpg RGB range: 0/2 [ 453.177044][ T7789] vivid-013: ================== END STATUS ================== [ 454.066408][ T7808] Process accounting resumed [ 454.441280][ T7812] sctp: [Deprecated]: syz.3.343 (pid 7812) Use of int in max_burst socket option deprecated. [ 454.441280][ T7812] Use struct sctp_assoc_value instead [ 459.089761][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 459.107111][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 459.703742][ T7995] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 459.722949][ T7985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.379'. [ 459.725040][ T7995] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 459.752815][ T7985] bridge_slave_1: left allmulticast mode [ 459.758521][ T7985] bridge_slave_1: left promiscuous mode [ 459.779124][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.892798][ T7985] bridge_slave_0: left allmulticast mode [ 459.911662][ T7985] bridge_slave_0: left promiscuous mode [ 459.922342][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.690305][ T8019] mkiss: ax0: crc mode is auto. [ 460.736599][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.385'. [ 460.776615][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.385'. [ 461.489783][ T8059] vmstat_refresh: nr_hugetlb -4608 [ 461.718197][ T8067] Process accounting resumed [ 462.135227][ T8079] mkiss: ax0: crc mode is auto. [ 462.784185][ T8103] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 463.485388][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 464.332241][ T8168] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 469.831195][ T8296] netlink: 342 bytes leftover after parsing attributes in process `syz.0.436'. [ 470.129729][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.438'. [ 472.180946][ T8339] program syz.3.449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.683293][ T8350] dlm: non-version read from control device 2147479552 [ 474.994733][ T8394] svc: failed to register nfsdv3 RPC service (errno 111). [ 475.037445][ T8394] svc: failed to register nfsaclv3 RPC service (errno 111). [ 478.357468][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 478.363703][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 478.369790][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 479.939935][ T8463] Invalid ELF header magic: != ELF [ 480.416200][ T8465] erspan0: entered allmulticast mode [ 480.603288][ T8467] netlink: 28 bytes leftover after parsing attributes in process `syz.5.478'. [ 481.405818][ T8474] vmstat_refresh: nr_hugetlb -5120 [ 482.638825][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 483.703829][ T8507] netlink: 326 bytes leftover after parsing attributes in process `syz.1.491'. [ 484.752838][ T8520] netlink: 252 bytes leftover after parsing attributes in process `syz.1.494'. [ 486.301356][ T8532] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 486.321724][ T8532] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 486.377845][ T8532] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 486.428159][ T8532] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 486.538572][ T8532] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 486.545570][ T8532] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 486.595549][ T8532] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 486.607742][ T8532] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 486.660388][ T8532] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 487.634756][ T5861] Bluetooth: hci0: command 0x0406 tx timeout [ 488.441970][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 488.591651][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 488.672209][ T5865] Bluetooth: hci4: command 0x0c1a tx timeout [ 488.716348][ T8590] ima: policy update failed [ 488.723013][ T29] audit: type=1802 audit(1734812070.435:5): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.518" res=0 errno=0 [ 489.163304][ T8599] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 489.713384][ T5865] Bluetooth: hci0: command 0x0406 tx timeout [ 490.514332][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 490.671978][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 490.707812][ T8632] netlink: 'syz.3.530': attribute type 3 has an invalid length. [ 490.751821][ T5865] Bluetooth: hci4: command 0x0c1a tx timeout [ 490.847002][ T8632] bond0: option updelay: invalid value (/sys/devices/virtual/block/loop5/queue/discard_max_hw_bytes) [ 490.871703][ T8632] bond0: option updelay: allowed values 0 - 2147483647 [ 491.230078][ T8649] netlink: 146 bytes leftover after parsing attributes in process `syz.0.535'. [ 491.648777][ T8669] netlink: 342 bytes leftover after parsing attributes in process `syz.5.540'. [ 491.660633][ T8668] netlink: 342 bytes leftover after parsing attributes in process `syz.5.540'. [ 492.440170][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.551'. [ 492.710790][ T8723] netlink: 74 bytes leftover after parsing attributes in process `syz.0.554'. [ 492.833043][ T5865] Bluetooth: hci4: command 0x0c1a tx timeout [ 493.782452][ T8745] ======================================================= [ 493.782452][ T8745] WARNING: The mand mount option has been deprecated and [ 493.782452][ T8745] and is ignored by this kernel. Remove the mand [ 493.782452][ T8745] option from the mount to silence this warning. [ 493.782452][ T8745] ======================================================= [ 494.838113][ T8768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.565'. [ 495.407235][ T8772] erspan0: entered allmulticast mode [ 497.245721][ T8812] mkiss: ax0: crc mode is auto. [ 497.314919][ T8812] netlink: 28 bytes leftover after parsing attributes in process `syz.5.574'. [ 497.801444][ T8820] Invalid ELF header magic: != ELF [ 498.787608][ T8831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.576'. [ 498.849720][ T8848] kernel read not supported for file /#)-\&[} (pid: 8848 comm: syz.3.580) [ 498.888076][ T8831] geneve1: left allmulticast mode [ 498.898402][ T29] audit: type=1800 audit(4294967302.190:6): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.580" name="#)-\&[}" dev="mqueue" ino=10001 res=0 errno=0 [ 498.959878][ T29] audit: type=1326 audit(4294967302.230:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.0.582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6690f85d29 code=0x0 [ 499.344355][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 499.995662][ T8870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.586'. [ 500.153069][ T8870] bond0: (slave bond_slave_1): Releasing backup interface [ 500.797638][ T8885] netlink: 40 bytes leftover after parsing attributes in process `syz.5.589'. [ 501.145685][ T8883] syz.0.588: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 501.191893][ T8881] can: request_module (can-proto-0) failed. [ 501.198362][ T8883] CPU: 0 UID: 0 PID: 8883 Comm: syz.0.588 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 501.209015][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 501.219117][ T8883] Call Trace: [ 501.222433][ T8883] [ 501.225402][ T8883] dump_stack_lvl+0x16c/0x1f0 [ 501.230141][ T8883] warn_alloc+0x24d/0x3a0 [ 501.234537][ T8883] ? __pfx_warn_alloc+0x10/0x10 [ 501.239448][ T8883] ? __pfx_mark_lock+0x10/0x10 [ 501.244280][ T8883] ? lock_acquire.part.0+0x11b/0x380 [ 501.249632][ T8883] __vmalloc_node_range_noprof+0x10df/0x1530 [ 501.255672][ T8883] ? rcu_is_watching+0x12/0xc0 [ 501.260504][ T8883] ? trace_contention_end+0xee/0x140 [ 501.265852][ T8883] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 501.271471][ T8883] ? dvb_demux_do_ioctl+0x496/0x1340 [ 501.276844][ T8883] ? __pfx___mutex_lock+0x10/0x10 [ 501.281936][ T8883] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 501.288334][ T8883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 501.294287][ T8883] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 501.299641][ T8883] vmalloc_noprof+0x6b/0x90 [ 501.304197][ T8883] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 501.309515][ T8883] dvb_demux_do_ioctl+0x54d/0x1340 [ 501.314658][ T8883] dvb_usercopy+0x165/0x320 [ 501.319178][ T8883] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 501.324745][ T8883] ? __pfx_dvb_usercopy+0x10/0x10 [ 501.329817][ T8883] ? __pfx_lock_release+0x10/0x10 [ 501.334870][ T8883] ? __fget_files+0x206/0x3a0 [ 501.339568][ T8883] dvb_demux_ioctl+0x29/0x40 [ 501.344170][ T8883] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 501.349483][ T8883] __x64_sys_ioctl+0x190/0x200 [ 501.354264][ T8883] do_syscall_64+0xcd/0x250 [ 501.358789][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.364699][ T8883] RIP: 0033:0x7f6690f85d29 [ 501.369123][ T8883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.388754][ T8883] RSP: 002b:00007f6691d34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.397209][ T8883] RAX: ffffffffffffffda RBX: 00007f6691176080 RCX: 00007f6690f85d29 [ 501.405202][ T8883] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 501.413185][ T8883] RBP: 00007f6691001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 501.421162][ T8883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.429141][ T8883] R13: 0000000000000000 R14: 00007f6691176080 R15: 00007fff6a113ff8 [ 501.437136][ T8883] [ 501.452012][ T8883] Mem-Info: [ 501.455299][ T8883] active_anon:18117 inactive_anon:63 isolated_anon:0 [ 501.455299][ T8883] active_file:5040 inactive_file:51937 isolated_file:0 [ 501.455299][ T8883] unevictable:768 dirty:1075 writeback:0 [ 501.455299][ T8883] slab_reclaimable:10790 slab_unreclaimable:94391 [ 501.455299][ T8883] mapped:24418 shmem:2149 pagetables:1097 [ 501.455299][ T8883] sec_pagetables:0 bounce:0 [ 501.455299][ T8883] kernel_misc_reclaimable:0 [ 501.455299][ T8883] free:1313472 free_pcp:14009 free_cma:0 [ 501.500863][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.540807][ T8883] Node 0 active_anon:69868kB inactive_anon:224kB active_file:15232kB inactive_file:203236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96928kB dirty:3520kB writeback:0kB shmem:7564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11996kB pagetables:4300kB sec_pagetables:0kB all_unreclaimable? no [ 501.573363][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.588215][ T8883] Node 1 active_anon:0kB inactive_anon:0kB active_file:5012kB inactive_file:4512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:940kB dirty:884kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 501.619185][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.631122][ T8883] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.658454][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.674974][ T8883] lowmem_reserve[]: 0 2465 2466 0 0 [ 501.681429][ T8883] Node 0 DMA32 free:1397904kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:74032kB inactive_anon:224kB active_file:15232kB inactive_file:202404kB unevictable:1536kB writepending:3520kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:2216kB local_pcp:768kB free_cma:0kB [ 501.713731][ T8883] lowmem_reserve[]: 0 0 0 0 0 [ 501.718523][ T8883] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 501.745730][ T8883] lowmem_reserve[]: 0 0 0 0 0 [ 501.750522][ T8883] Node 1 Normal free:3839520kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:5012kB inactive_file:4512kB unevictable:1536kB writepending:884kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:53956kB local_pcp:26340kB free_cma:0kB [ 501.803735][ T8883] lowmem_reserve[]: 0 0 0 0 0 [ 501.808545][ T8883] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 501.876435][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.894828][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.907946][ T8883] Node 0 DMA32: 2360*4kB (UM) 1279*8kB (UME) 1149*16kB (UME) 1013*32kB (UME) 754*64kB (UME) 375*128kB (UME) 239*256kB (UM) 114*512kB (UM) 62*1024kB (UM) 12*2048kB (ME) 250*4096kB (M) = 1398344kB [ 501.971735][ T8883] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 502.012226][ T8883] Node 1 Normal: 404*4kB (UME) 164*8kB (UME) 125*16kB (UME) 251*32kB (UME) 142*64kB (UME) 74*128kB (UME) 19*256kB (UME) 18*512kB (UM) 7*1024kB (UM) 5*2048kB (UE) 922*4096kB (M) = 3839520kB [ 502.061721][ T8883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 502.071335][ T8883] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 502.090262][ T8906] could not allocate digest TFM handle [ 502.111233][ T8883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 502.131764][ T8883] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 502.141114][ T8883] 60807 total pagecache pages [ 502.179064][ T8883] 109 pages in swap cache [ 502.184037][ T8883] Free swap = 118516kB [ 502.188230][ T8883] Total swap = 124996kB [ 502.221732][ T8883] 2097051 pages RAM [ 502.232215][ T8883] 0 pages HighMem/MovableOnly [ 502.236947][ T8883] 427367 pages reserved [ 502.241132][ T8883] 0 pages cma reserved [ 502.330715][ T8909] could not allocate digest TFM handle [ 502.362769][ T8905] netlink: 130 bytes leftover after parsing attributes in process `syz.5.592'. [ 502.730395][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 506.216820][ T9020] netlink: 330 bytes leftover after parsing attributes in process `syz.1.623'. [ 506.588581][ T9024] Process accounting resumed [ 508.060906][ T9054] Invalid ELF header magic: != ELF [ 508.624926][ T9058] Process accounting resumed [ 508.951059][ T9062] FAULT_INJECTION: forcing a failure. [ 508.951059][ T9062] name failslab, interval 1, probability 0, space 0, times 1 [ 508.991627][ T9062] CPU: 0 UID: 0 PID: 9062 Comm: syz.5.635 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 509.002282][ T9062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 509.012374][ T9062] Call Trace: [ 509.015678][ T9062] [ 509.018640][ T9062] dump_stack_lvl+0x16c/0x1f0 [ 509.023362][ T9062] should_fail_ex+0x497/0x5b0 [ 509.028086][ T9062] ? fs_reclaim_acquire+0xae/0x150 [ 509.033238][ T9062] should_failslab+0xc2/0x120 [ 509.037950][ T9062] __kmalloc_noprof+0xce/0x4f0 [ 509.042750][ T9062] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 509.048414][ T9062] ? tomoyo_realpath_from_path+0xbf/0x710 [ 509.054179][ T9062] tomoyo_realpath_from_path+0xbf/0x710 [ 509.059766][ T9062] ? tomoyo_path_number_perm+0x235/0x5b0 [ 509.065468][ T9062] tomoyo_path_number_perm+0x248/0x5b0 [ 509.070972][ T9062] ? tomoyo_path_number_perm+0x235/0x5b0 [ 509.076656][ T9062] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 509.082714][ T9062] ? __pfx_lock_release+0x10/0x10 [ 509.087766][ T9062] ? trace_lock_acquire+0x14e/0x1f0 [ 509.093008][ T9062] ? lock_acquire+0x2f/0xb0 [ 509.097537][ T9062] ? __fget_files+0x40/0x3a0 [ 509.102200][ T9062] ? __fget_files+0x206/0x3a0 [ 509.106893][ T9062] security_file_ioctl+0x9b/0x240 [ 509.111931][ T9062] __x64_sys_ioctl+0xb7/0x200 [ 509.116615][ T9062] do_syscall_64+0xcd/0x250 [ 509.121136][ T9062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.127215][ T9062] RIP: 0033:0x7f660bf85d29 [ 509.131634][ T9062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.151509][ T9062] RSP: 002b:00007f660ce56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.159942][ T9062] RAX: ffffffffffffffda RBX: 00007f660c175fa0 RCX: 00007f660bf85d29 [ 509.167936][ T9062] RDX: 0000000000000003 RSI: 0000000080045104 RDI: 0000000000000003 [ 509.175918][ T9062] RBP: 00007f660ce56090 R08: 0000000000000000 R09: 0000000000000000 [ 509.183897][ T9062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.191873][ T9062] R13: 0000000000000000 R14: 00007f660c175fa0 R15: 00007fff3c5c8f98 [ 509.199951][ T9062] [ 509.388344][ T9062] ERROR: Out of memory at tomoyo_realpath_from_path. [ 511.175256][ T9094] FAULT_INJECTION: forcing a failure. [ 511.175256][ T9094] name failslab, interval 1, probability 0, space 0, times 0 [ 511.208815][ T9094] CPU: 1 UID: 0 PID: 9094 Comm: syz.5.646 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 511.219500][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 511.229593][ T9094] Call Trace: [ 511.232909][ T9094] [ 511.235877][ T9094] dump_stack_lvl+0x16c/0x1f0 [ 511.240607][ T9094] should_fail_ex+0x497/0x5b0 [ 511.245319][ T9094] ? fs_reclaim_acquire+0xae/0x150 [ 511.250652][ T9094] should_failslab+0xc2/0x120 [ 511.255380][ T9094] __kmalloc_noprof+0xce/0x4f0 [ 511.260192][ T9094] ? d_absolute_path+0x137/0x1b0 [ 511.265179][ T9094] ? tomoyo_encode2+0x100/0x3e0 [ 511.270073][ T9094] tomoyo_encode2+0x100/0x3e0 [ 511.274798][ T9094] tomoyo_realpath_from_path+0x1a7/0x710 [ 511.280483][ T9094] tomoyo_path_number_perm+0x248/0x5b0 [ 511.285989][ T9094] ? tomoyo_path_number_perm+0x235/0x5b0 [ 511.291669][ T9094] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 511.297729][ T9094] ? __pfx_lock_release+0x10/0x10 [ 511.302778][ T9094] ? trace_lock_acquire+0x14e/0x1f0 [ 511.308000][ T9094] ? lock_acquire+0x2f/0xb0 [ 511.312524][ T9094] ? __fget_files+0x40/0x3a0 [ 511.317142][ T9094] ? __fget_files+0x206/0x3a0 [ 511.321842][ T9094] security_file_ioctl+0x9b/0x240 [ 511.326881][ T9094] __x64_sys_ioctl+0xb7/0x200 [ 511.331575][ T9094] do_syscall_64+0xcd/0x250 [ 511.336092][ T9094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.342000][ T9094] RIP: 0033:0x7f660bf85d29 [ 511.346417][ T9094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.366035][ T9094] RSP: 002b:00007f660ce56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.374470][ T9094] RAX: ffffffffffffffda RBX: 00007f660c175fa0 RCX: 00007f660bf85d29 [ 511.382470][ T9094] RDX: 0000000000000003 RSI: 0000000080045104 RDI: 0000000000000003 [ 511.390712][ T9094] RBP: 00007f660ce56090 R08: 0000000000000000 R09: 0000000000000000 [ 511.398690][ T9094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.406687][ T9094] R13: 0000000000000000 R14: 00007f660c175fa0 R15: 00007fff3c5c8f98 [ 511.414701][ T9094] [ 511.495297][ T9094] ERROR: Out of memory at tomoyo_realpath_from_path. [ 511.780426][ T9096] netlink: 'syz.3.647': attribute type 16 has an invalid length. [ 511.799710][ T9096] netlink: 330 bytes leftover after parsing attributes in process `syz.3.647'. [ 512.227053][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.651'. [ 513.214527][ T9132] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 514.174819][ T9145] erspan0: entered allmulticast mode [ 514.592786][ T9147] nl80211: entered promiscuous mode [ 516.543985][ T9202] 6_J_HfR: entered promiscuous mode [ 516.553668][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 517.602286][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.676'. [ 518.128432][ T9238] nbd: couldn't find a device at index 0 [ 520.101966][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 520.349553][ T9302] HSR: entered promiscuous mode [ 522.659318][ T9354] can: request_module (can-proto-0) failed. [ 523.745978][ T9370] futex_wake_op: syz.3.712 tries to shift op by 64; fix this program [ 524.220702][ T9379] FAULT_INJECTION: forcing a failure. [ 524.220702][ T9379] name failslab, interval 1, probability 0, space 0, times 0 [ 524.291663][ T9379] CPU: 0 UID: 0 PID: 9379 Comm: syz.3.715 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 524.302315][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 524.312405][ T9379] Call Trace: [ 524.315713][ T9379] [ 524.318666][ T9379] dump_stack_lvl+0x16c/0x1f0 [ 524.323459][ T9379] should_fail_ex+0x497/0x5b0 [ 524.328169][ T9379] ? fs_reclaim_acquire+0xae/0x150 [ 524.333320][ T9379] should_failslab+0xc2/0x120 [ 524.338036][ T9379] __kmalloc_noprof+0xce/0x4f0 [ 524.342840][ T9379] ? rcu_is_watching+0x12/0xc0 [ 524.347641][ T9379] ? kernfs_fop_write_iter+0x223/0x500 [ 524.353149][ T9379] kernfs_fop_write_iter+0x223/0x500 [ 524.358476][ T9379] vfs_write+0x5ae/0x1150 [ 524.362842][ T9379] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 524.368699][ T9379] ? __pfx___mutex_lock+0x10/0x10 [ 524.373766][ T9379] ? __pfx_vfs_write+0x10/0x10 [ 524.378595][ T9379] ksys_write+0x12b/0x250 [ 524.382961][ T9379] ? __pfx_ksys_write+0x10/0x10 [ 524.387867][ T9379] do_syscall_64+0xcd/0x250 [ 524.392419][ T9379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.398353][ T9379] RIP: 0033:0x7fe1c3f85d29 [ 524.402804][ T9379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.422437][ T9379] RSP: 002b:00007fe1c4e7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 524.430863][ T9379] RAX: ffffffffffffffda RBX: 00007fe1c4175fa0 RCX: 00007fe1c3f85d29 [ 524.438841][ T9379] RDX: 0000000000000004 RSI: 0000000020000100 RDI: 0000000000000003 [ 524.446903][ T9379] RBP: 00007fe1c4e7d090 R08: 0000000000000000 R09: 0000000000000000 [ 524.454878][ T9379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.462940][ T9379] R13: 0000000000000000 R14: 00007fe1c4175fa0 R15: 00007ffde6f11988 [ 524.470937][ T9379] [ 525.452002][ T9408] Process accounting resumed [ 526.002160][ T9426] FAULT_INJECTION: forcing a failure. [ 526.002160][ T9426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.033528][ T9426] CPU: 1 UID: 0 PID: 9426 Comm: syz.3.726 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 526.044198][ T9426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 526.054294][ T9426] Call Trace: [ 526.057600][ T9426] [ 526.060554][ T9426] dump_stack_lvl+0x16c/0x1f0 [ 526.065287][ T9426] should_fail_ex+0x497/0x5b0 [ 526.070027][ T9426] _copy_from_iter+0x29b/0x1400 [ 526.074927][ T9426] ? trace_lock_acquire+0x14e/0x1f0 [ 526.080188][ T9426] ? __pfx__copy_from_iter+0x10/0x10 [ 526.085532][ T9426] ? __virt_addr_valid+0x1a4/0x590 [ 526.090691][ T9426] ? __virt_addr_valid+0x5e/0x590 [ 526.095768][ T9426] ? __phys_addr_symbol+0x30/0x80 [ 526.100832][ T9426] ? __check_object_size+0x488/0x710 [ 526.106185][ T9426] kernfs_fop_write_iter+0x19d/0x500 [ 526.111525][ T9426] vfs_write+0x5ae/0x1150 [ 526.115882][ T9426] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 526.121797][ T9426] ? __pfx___mutex_lock+0x10/0x10 [ 526.126853][ T9426] ? __pfx_vfs_write+0x10/0x10 [ 526.131655][ T9426] ksys_write+0x12b/0x250 [ 526.135994][ T9426] ? __pfx_ksys_write+0x10/0x10 [ 526.140867][ T9426] do_syscall_64+0xcd/0x250 [ 526.145388][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.151298][ T9426] RIP: 0033:0x7fe1c3f85d29 [ 526.155719][ T9426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.175465][ T9426] RSP: 002b:00007fe1c4e7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 526.183895][ T9426] RAX: ffffffffffffffda RBX: 00007fe1c4175fa0 RCX: 00007fe1c3f85d29 [ 526.191877][ T9426] RDX: 0000000000000004 RSI: 0000000020000100 RDI: 0000000000000003 [ 526.199853][ T9426] RBP: 00007fe1c4e7d090 R08: 0000000000000000 R09: 0000000000000000 [ 526.207832][ T9426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.215811][ T9426] R13: 0000000000000000 R14: 00007fe1c4175fa0 R15: 00007ffde6f11988 [ 526.223893][ T9426] [ 526.852186][ T9454] ecryptfs_miscdev_write: Invalid packet size [174] [ 527.927176][ T9471] netlink: 346 bytes leftover after parsing attributes in process `syz.0.740'. [ 529.027388][ T9502] Invalid ELF header magic: != ELF [ 529.946444][ T9525] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 531.482278][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.5.766'. [ 531.538614][ T9563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.556148][ T9563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.603790][ T9563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.611500][ T9563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.689804][ T9572] netlink: 334 bytes leftover after parsing attributes in process `syz.0.767'. [ 532.480850][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 532.521388][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 532.704584][ T9575] Invalid ELF header magic: != ELF [ 533.475704][ T9611] Invalid ELF header magic: != ELF [ 534.651774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 535.313307][ T9661] can: request_module (can-proto-0) failed. [ 535.330794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 535.362447][ T9661] kernel read not supported for file /#)-\&[} (pid: 9661 comm: syz.3.786) [ 535.421490][ T29] audit: type=1800 audit(4294967338.700:8): pid=9661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.786" name="#)-\&[}" dev="mqueue" ino=10001 res=0 errno=0 [ 536.651925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 536.910474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 536.920499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 537.373194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 538.173795][ T9711] netlink: 592 bytes leftover after parsing attributes in process `syz.3.799'. [ 538.185395][ T9712] netlink: 592 bytes leftover after parsing attributes in process `syz.3.799'. [ 538.606277][ T9724] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 538.641222][ T9724] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 538.676294][ T9724] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 538.709135][ T9724] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 538.727787][ T9724] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 538.741886][ T9724] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 538.796107][ T9724] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 538.831980][ T9724] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 538.867033][ T9724] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 538.888473][ T9724] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 539.785398][ T9754] netlink: 334 bytes leftover after parsing attributes in process `syz.3.809'. [ 540.032142][ T29] audit: type=1800 audit(4294967343.320:9): pid=9751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="members" dev="configfs" ino=22837 res=0 errno=0 [ 540.119793][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.812'. [ 540.882809][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.821'. [ 541.046630][ T9805] netlink: 326 bytes leftover after parsing attributes in process `syz.1.823'. [ 541.369895][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.827'. [ 542.336235][ T9855] ptrace attach of "./syz-executor exec"[5850] was attempted by "r毭ň |zIpNm+N?ƬifnNH^ɳu0vٲV\x1b7p\x0cJ筻{ޞ0j9Zq޶@\x07\x22iEvY'@l{8s\x1bW;o(fĀHjeJp\x0dV l{et -[\x227^3˶N!t[Jp2\x0d4BGe|y!ϑ\x0cr:F#DJw\x0dM0{f A*1gU\x0c$:]PpD\x0aiorOZnHij%\x1bBd9os7jp\x0d&`yf*qY=K\x22z^n4s\x0a{ c@QJ-V]P50P;gSD\x0b8/;_^E\x0d(F9Zbhg\x0dt [ 544.074613][ T9911] netlink: 330 bytes leftover after parsing attributes in process `syz.0.853'. [ 544.200700][ T9911] mac80211_hwsim hwsim4 : renamed from wlan0 (while UP) [ 544.652648][ T9939] netlink: 342 bytes leftover after parsing attributes in process `syz.0.859'. syzkaller syzkaller login: [ 544.771775][ T9936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.857'. [ 544.819841][ T9936] lo: entered promiscuous mode [ 544.846203][ T9936] lo: entered allmulticast mode [ 545.709419][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 547.075057][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.871'. [ 547.141942][ T9992] unsupported nlmsg_type 40 [ 548.638246][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 549.376371][T10057] program syz.0.889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.844369][T10123] Invalid ELF header magic: != ELF [ 556.065020][T10228] Process accounting resumed [ 556.070843][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'. [ 556.100794][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 556.426016][ T29] audit: type=1326 audit(4294968382.719:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.0.936" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6690f85d29 code=0x0 [ 556.576884][ T29] audit: type=1326 audit(4294968382.869:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.0.936" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6690f85d29 code=0x0 [ 557.017527][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.939'. [ 557.029198][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.939'. [ 558.697826][T10314] netlink: 302 bytes leftover after parsing attributes in process `syz.1.953'. [ 560.016595][T10323] kexec: Could not allocate control_code_buffer [ 562.562566][T10398] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 562.612311][T10398] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 562.633653][T10398] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 562.674893][T10398] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 563.032849][T10423] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[10423] [ 563.315286][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.324402][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.052914][T10471] netlink: 816 bytes leftover after parsing attributes in process `syz.0.988'. [ 564.194609][ T5865] Bluetooth: hci0: command 0x0406 tx timeout [ 564.684430][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 564.684450][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 564.751646][ T5865] Bluetooth: hci4: command 0x0c1a tx timeout [ 567.392719][T10509] unsupported nla_type 32969 [ 569.097140][T10574] RDS: rds_bind could not find a transport for fe80::3030:3030:3a30:302f, load rds_tcp or rds_rdma? [ 569.826761][T10597] raw_sendmsg: syz.0.1014 forgot to set AF_INET. Fix it! [ 570.957872][T10621] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 571.009828][T10621] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 571.773681][T10619] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 571.779817][T10619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 571.786161][T10619] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 571.794711][T10619] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 573.068668][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1034'. [ 573.100594][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1034'. [ 573.471695][ T5865] Bluetooth: hci0: command 0x0406 tx timeout [ 573.471761][T10675] netlink: 'syz.3.1037': attribute type 10 has an invalid length. [ 573.488311][T10675] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1037'. [ 573.695282][T10678] syz.1.1039 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 573.791843][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 573.799027][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 573.872027][ T5865] Bluetooth: hci4: command 0x0c1a tx timeout [ 574.384395][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'. [ 576.215287][T10739] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1054'. [ 576.767784][ T29] audit: type=1804 audit(4294968403.059:12): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1059" name="#)-\&[}" dev="mqueue" ino=27237 res=1 errno=0 [ 576.804684][T10766] kernel read not supported for file /#)-\&[} (pid: 10766 comm: syz.5.1059) [ 576.892060][ T29] audit: type=1800 audit(4294968403.189:13): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1059" name="#)-\&[}" dev="mqueue" ino=27237 res=0 errno=0 [ 576.955153][ T29] audit: type=1804 audit(4294968403.249:14): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1059" name="#)-\&[}" dev="mqueue" ino=27237 res=1 errno=0 [ 577.021659][ T29] audit: type=1804 audit(4294968403.279:15): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1059" name="#)-\&[}" dev="mqueue" ino=27237 res=1 errno=0 [ 577.058407][T10774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1061'. [ 577.600233][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'. [ 578.196143][T10805] gspca_gl860.sensor: string doesn't fit in 6 chars. [ 578.582304][T10816] erspan0: left allmulticast mode [ 578.951877][T10803] syz.3.1068: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 578.981886][T10803] CPU: 1 UID: 0 PID: 10803 Comm: syz.3.1068 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 578.992741][T10803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 579.002817][T10803] Call Trace: [ 579.006103][T10803] [ 579.009039][T10803] dump_stack_lvl+0x16c/0x1f0 [ 579.013734][T10803] warn_alloc+0x24d/0x3a0 [ 579.018088][T10803] ? __pfx_warn_alloc+0x10/0x10 [ 579.022953][T10803] ? __pfx_mark_lock+0x10/0x10 [ 579.027745][T10803] ? lock_acquire.part.0+0x11b/0x380 [ 579.033049][T10803] __vmalloc_node_range_noprof+0x10df/0x1530 [ 579.039049][T10803] ? rcu_is_watching+0x12/0xc0 [ 579.043826][T10803] ? trace_contention_end+0xee/0x140 [ 579.049146][T10803] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 579.054447][T10803] ? dvb_demux_do_ioctl+0x496/0x1340 [ 579.059750][T10803] ? __pfx___mutex_lock+0x10/0x10 [ 579.064795][T10803] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 579.071145][T10803] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 579.077061][T10803] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 579.082363][T10803] vmalloc_noprof+0x6b/0x90 [ 579.086881][T10803] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 579.092201][T10803] dvb_demux_do_ioctl+0x54d/0x1340 [ 579.097342][T10803] dvb_usercopy+0x165/0x320 [ 579.101860][T10803] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 579.107427][T10803] ? __pfx_dvb_usercopy+0x10/0x10 [ 579.112459][T10803] ? __pfx_lock_release+0x10/0x10 [ 579.117500][T10803] ? __fget_files+0x206/0x3a0 [ 579.122193][T10803] dvb_demux_ioctl+0x29/0x40 [ 579.126796][T10803] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 579.132095][T10803] __x64_sys_ioctl+0x190/0x200 [ 579.136870][T10803] do_syscall_64+0xcd/0x250 [ 579.141393][T10803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.147315][T10803] RIP: 0033:0x7fe1c3f85d29 [ 579.151743][T10803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.171472][T10803] RSP: 002b:00007fe1c4e5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.179922][T10803] RAX: ffffffffffffffda RBX: 00007fe1c4176080 RCX: 00007fe1c3f85d29 [ 579.187906][T10803] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 579.195887][T10803] RBP: 00007fe1c4001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 579.203882][T10803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.211874][T10803] R13: 0000000000000000 R14: 00007fe1c4176080 R15: 00007ffde6f11988 [ 579.219879][T10803] [ 579.223162][T10801] can: request_module (can-proto-0) failed. [ 579.264771][T10828] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1076'. [ 579.329641][T10803] Mem-Info: [ 579.352358][T10803] active_anon:31878 inactive_anon:60 isolated_anon:0 [ 579.352358][T10803] active_file:3051 inactive_file:53985 isolated_file:0 [ 579.352358][T10803] unevictable:768 dirty:760 writeback:9 [ 579.352358][T10803] slab_reclaimable:10774 slab_unreclaimable:94991 [ 579.352358][T10803] mapped:34480 shmem:17716 pagetables:1001 [ 579.352358][T10803] sec_pagetables:0 bounce:0 [ 579.352358][T10803] kernel_misc_reclaimable:0 [ 579.352358][T10803] free:1303703 free_pcp:10374 free_cma:0 [ 579.397936][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.411811][T10803] Node 0 active_anon:127712kB inactive_anon:240kB active_file:7192kB inactive_file:211428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137080kB dirty:2736kB writeback:36kB shmem:69628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11708kB pagetables:3904kB sec_pagetables:0kB all_unreclaimable? no [ 579.444530][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.491615][T10803] Node 1 active_anon:0kB inactive_anon:0kB active_file:5012kB inactive_file:4512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:940kB dirty:304kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 579.522513][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.620844][T10803] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.660876][T10803] lowmem_reserve[]: 0 2465 2466 0 0 [ 579.666753][T10803] Node 0 DMA32 free:1340704kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:131708kB inactive_anon:240kB active_file:7192kB inactive_file:210596kB unevictable:1536kB writepending:2772kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:3332kB local_pcp:2396kB free_cma:0kB [ 579.721730][T10803] lowmem_reserve[]: 0 0 0 0 0 [ 579.726538][T10803] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 579.771688][T10803] lowmem_reserve[]: 0 0 0 0 0 [ 579.776508][T10803] Node 1 Normal free:3855900kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:5012kB inactive_file:4512kB unevictable:1536kB writepending:304kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:37752kB local_pcp:24724kB free_cma:0kB [ 579.839230][T10803] lowmem_reserve[]: 0 0 0 0 0 [ 579.851668][T10803] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 579.881683][T10803] Node 0 DMA32: 271*4kB (UME) 707*8kB (UME) 1373*16kB (UME) 683*32kB (UME) 326*64kB (UME) 357*128kB (UME) 126*256kB (UM) 107*512kB (UME) 58*1024kB (UME) 15*2048kB (M) 255*4096kB (M) = 1338756kB [ 579.921715][T10803] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 579.944718][T10803] Node 1 Normal: 311*4kB (UME) 186*8kB (UME) 131*16kB (UME) 272*32kB (UME) 155*64kB (UME) 91*128kB (UME) 23*256kB (UME) 23*512kB (UM) 12*1024kB (UM) 7*2048kB (UME) 922*4096kB (M) = 3855900kB [ 579.972863][T10803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 579.982682][T10803] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 579.992258][T10803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.001929][T10803] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 580.011359][T10803] 77535 total pagecache pages [ 580.016238][T10803] 138 pages in swap cache [ 580.020824][T10803] Free swap = 118828kB [ 580.025202][T10803] Total swap = 124996kB [ 580.029376][T10803] 2097051 pages RAM [ 580.033243][T10803] 0 pages HighMem/MovableOnly [ 580.038034][T10803] 427367 pages reserved [ 580.042280][T10803] 0 pages cma reserved [ 580.547766][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 580.559703][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 580.567881][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 580.587315][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 580.597615][ T5861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 580.613228][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 580.997498][T10854] chnl_net:caif_netlink_parms(): no params data found [ 581.153246][T10854] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.176095][T10854] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.199807][T10854] bridge_slave_0: entered allmulticast mode [ 581.226098][T10854] bridge_slave_0: entered promiscuous mode [ 581.268478][T10854] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.296833][T10854] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.321912][T10854] bridge_slave_1: entered allmulticast mode [ 581.338491][T10854] bridge_slave_1: entered promiscuous mode [ 581.398438][T10854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.434635][T10854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.597238][T10854] team0: Port device team_slave_0 added [ 581.618112][T10854] team0: Port device team_slave_1 added [ 581.776871][T10854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.784009][T10854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.811014][T10854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.851762][T10854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.858962][T10854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.931591][T10854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.189609][T10897] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1091'. [ 582.264080][T10854] hsr_slave_0: entered promiscuous mode [ 582.286682][T10854] hsr_slave_1: entered promiscuous mode [ 582.674454][ T5861] Bluetooth: hci1: command tx timeout [ 582.876098][T10854] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 582.913590][T10854] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 582.946077][T10854] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 582.970132][T10854] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 583.125422][T10854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.164657][T10854] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.188446][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.195624][ T6403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.222990][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.230124][ T6402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.640393][T10854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.040061][T10927] can: request_module (can-proto-0) failed. [ 584.123261][T10854] veth0_vlan: entered promiscuous mode [ 584.148175][T10854] veth1_vlan: entered promiscuous mode [ 584.327601][T10854] veth0_macvtap: entered promiscuous mode [ 584.340377][T10854] veth1_macvtap: entered promiscuous mode [ 584.355769][T10854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.366360][T10854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.378388][T10854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.388890][T10854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.399419][T10854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.409386][T10854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.420019][T10854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.431336][T10854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.465588][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'. [ 584.510813][T10854] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.521181][T10854] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.531569][T10854] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.540306][T10854] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.753720][ T5861] Bluetooth: hci1: command tx timeout [ 584.834864][ T5904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.856504][ T5904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.949282][ T6397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.966345][ T6397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.711395][T10967] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 585.721757][T10967] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 585.782932][T10971] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1107'. [ 586.832105][ T5861] Bluetooth: hci1: command tx timeout [ 587.142785][T11018] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1115'. [ 587.890777][T11033] erspan0: entered allmulticast mode [ 588.189753][T11044] netlink: 146 bytes leftover after parsing attributes in process `syz.6.1122'. [ 588.912053][ T5861] Bluetooth: hci1: command tx timeout [ 589.158962][T11069] Invalid ELF header magic: != ELF [ 591.241866][T11114] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1141'. [ 591.282362][T11114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.432286][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 591.453228][T11114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.152223][T11267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1181'. [ 600.208973][T11267] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.217087][T11267] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.265916][T11267] bridge0: entered allmulticast mode [ 600.537643][T11276] Invalid ELF header magic: != ELF [ 601.264066][ T29] audit: type=1800 audit(4294968427.559:16): pid=11291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1186" name="discovery_nqn" dev="configfs" ino=30980 res=0 errno=0 [ 601.582663][T11300] FAULT_INJECTION: forcing a failure. [ 601.582663][T11300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.651801][T11300] CPU: 1 UID: 0 PID: 11300 Comm: syz.6.1189 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 601.662746][T11300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 601.672843][T11300] Call Trace: [ 601.676151][T11300] [ 601.679110][T11300] dump_stack_lvl+0x16c/0x1f0 [ 601.683929][T11300] should_fail_ex+0x497/0x5b0 [ 601.688658][T11300] _copy_to_user+0x32/0xd0 [ 601.693157][T11300] simple_read_from_buffer+0xd0/0x160 [ 601.698586][T11300] bm_entry_read+0x36b/0x690 [ 601.703231][T11300] ? __pfx_bm_entry_read+0x10/0x10 [ 601.708388][T11300] vfs_readv+0x6bf/0x890 [ 601.712679][T11300] ? fdget_pos+0x267/0x390 [ 601.717140][T11300] ? __pfx_vfs_readv+0x10/0x10 [ 601.721932][T11300] ? __mutex_lock+0x1cc/0xa60 [ 601.726639][T11300] ? find_held_lock+0x2d/0x110 [ 601.731446][T11300] ? __pfx___mutex_lock+0x10/0x10 [ 601.736507][T11300] ? trace_lock_acquire+0x14e/0x1f0 [ 601.741736][T11300] ? __fget_files+0x206/0x3a0 [ 601.746522][T11300] ? do_readv+0x133/0x340 [ 601.750859][T11300] do_readv+0x133/0x340 [ 601.755024][T11300] ? __pfx_do_readv+0x10/0x10 [ 601.759715][T11300] do_syscall_64+0xcd/0x250 [ 601.764322][T11300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.770227][T11300] RIP: 0033:0x7f152e785d29 [ 601.774643][T11300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.794258][T11300] RSP: 002b:00007f152c5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 601.802767][T11300] RAX: ffffffffffffffda RBX: 00007f152e975fa0 RCX: 00007f152e785d29 [ 601.810742][T11300] RDX: 0000000000000002 RSI: 00000000200143c0 RDI: 0000000000000003 [ 601.818734][T11300] RBP: 00007f152c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 601.826710][T11300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.834686][T11300] R13: 0000000000000000 R14: 00007f152e975fa0 R15: 00007ffe9e4c26e8 [ 601.842678][T11300] [ 602.755638][T11317] erspan0: entered allmulticast mode [ 603.291202][T11342] FAULT_INJECTION: forcing a failure. [ 603.291202][T11342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.331795][T11342] CPU: 1 UID: 0 PID: 11342 Comm: syz.5.1200 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 603.342634][T11342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 603.352727][T11342] Call Trace: [ 603.356028][T11342] [ 603.358979][T11342] dump_stack_lvl+0x16c/0x1f0 [ 603.363826][T11342] should_fail_ex+0x497/0x5b0 [ 603.368550][T11342] _copy_to_user+0x32/0xd0 [ 603.373014][T11342] simple_read_from_buffer+0xd0/0x160 [ 603.378435][T11342] proc_fail_nth_read+0x198/0x270 [ 603.383514][T11342] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.389107][T11342] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.394698][T11342] vfs_read+0x1df/0xbe0 [ 603.398882][T11342] ? __fget_files+0x1fc/0x3a0 [ 603.403572][T11342] ? __pfx___mutex_lock+0x10/0x10 [ 603.408624][T11342] ? __pfx_vfs_read+0x10/0x10 [ 603.413322][T11342] ? __fget_files+0x206/0x3a0 [ 603.418021][T11342] ksys_read+0x12b/0x250 [ 603.422274][T11342] ? __pfx_ksys_read+0x10/0x10 [ 603.427051][T11342] do_syscall_64+0xcd/0x250 [ 603.431575][T11342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.437482][T11342] RIP: 0033:0x7f660bf8473c [ 603.441905][T11342] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 603.461529][T11342] RSP: 002b:00007f660ce56030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 603.469953][T11342] RAX: ffffffffffffffda RBX: 00007f660c175fa0 RCX: 00007f660bf8473c [ 603.477931][T11342] RDX: 000000000000000f RSI: 00007f660ce560a0 RDI: 0000000000000004 [ 603.486081][T11342] RBP: 00007f660ce56090 R08: 0000000000000000 R09: 0000000000000000 [ 603.494056][T11342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.502030][T11342] R13: 0000000000000000 R14: 00007f660c175fa0 R15: 00007fff3c5c8f98 [ 603.510020][T11342] [ 604.094232][T11355] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1203'. [ 604.977030][T11366] Invalid ELF header magic: != ELF [ 605.668002][T11373] ptrace attach of "./syz-executor exec"[7332] was attempted by "./syz-executor exec"[11373] [ 607.166480][T11413] netlink: 'syz.1.1213': attribute type 1 has an invalid length. [ 608.254741][T11436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 608.296254][T11436] veth1_macvtap: left promiscuous mode [ 608.304809][T11436] macsec0: entered allmulticast mode [ 608.682948][T11454] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1226'. [ 610.373494][T11480] Invalid ELF header magic: != ELF [ 612.156611][T11500] device-mapper: ioctl: Unable to rename non-existent device, to [ 612.272454][T11499] batman_adv: Routing algorithm '' is not supported [ 612.786469][T11514] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1238'. [ 614.232353][T11531] net_ratelimit: 23 callbacks suppressed [ 614.232375][T11531] netlink: zone id is out of range [ 614.384905][T11531] netlink: set zone limit has 8 unknown bytes [ 624.764665][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.772259][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.305807][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1286'. [ 625.658759][T11734] netlink: 122 bytes leftover after parsing attributes in process `syz.5.1287'. [ 625.684269][T11726] netlink: 'syz.6.1289': attribute type 1 has an invalid length. [ 625.724495][T11726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1289'. [ 625.774604][T11733] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1288'. [ 625.816662][T11733] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1288'. [ 625.857578][T11733] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1288'. [ 625.920635][T11726] netlink: 'syz.6.1289': attribute type 1 has an invalid length. [ 626.006071][T11726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1289'. [ 626.055730][T11726] netlink: 'syz.6.1289': attribute type 1 has an invalid length. [ 626.101985][T11726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1289'. [ 626.111164][T11726] netlink: 'syz.6.1289': attribute type 1 has an invalid length. [ 626.161757][T11726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1289'. [ 626.191840][T11726] netlink: 'syz.6.1289': attribute type 1 has an invalid length. [ 626.199881][T11726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1289'. [ 626.241812][T11726] netlink: 'syz.6.1289': attribute type 1 has an invalid length. [ 626.272017][T11726] netlink: 'syz.6.1289': attribute type 1 has an invalid length. [ 626.279993][T11726] netlink: 'syz.6.1289': attribute type 1 has an invalid length. [ 626.315271][T11726] netlink: 'syz.6.1289': attribute type 1 has an invalid length. [ 626.337711][T11726] netlink: 'syz.6.1289': attribute type 1 has an invalid length. [ 626.856452][T11753] Format for deleting device is "id" (uint). [ 626.902556][T11755] scsi_strcpy_devinfo: vendor string ';/&c' is too long [ 626.932062][T11751] ptrace attach of "./syz-executor exec"[10854] was attempted by "$=)l[}\x22;sAd>:\x0dx}\x0bbI]Dj@Ek\x0dԮA(ťs%ί\x0c=uh\x0bc3|:)cpR['r3!7J%yGċݜ^LXѭ<*y9\x07q+M/-h/9\x0b7.lBAZn}.\x0bon4x<'LqUTgF߮7\x098vR\x0dR]\x0aq` D:S.#P)ָ[\x1b](xԣW|›)K+z'x`1#|3d.&\x0cԬ@¬{eZ$qכ_cwTE~]g,7T7zpDE3:Nwې~fx5-0tx\x09#%K8Dlcp|\x0c%Q\x0c$Rd0)d6%\x0dهW)V!l0`Ҷ8XCh\x0aaOk6piKNhrQ> 粵n|X10eJb:]q6\x22#is3GV|AoCAQgv(&d\x0a.:\x0c&HUf{\x0b̻*(:&z%\x073UA_>1HXk&RHf/g$E3\x1bgZ\x5c}!Yfj* [ 630.048308][T11785] Process accounting resumed [ 630.745299][T11802] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 632.396183][T11820] __nla_validate_parse: 61 callbacks suppressed [ 632.396206][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1309'. [ 632.563877][T11826] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1308'. [ 632.678842][T11822] cougar: G6 mapped to space [ 633.555762][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1320'. [ 633.607307][T11857] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1319'. [ 633.622157][T11857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.629814][T11857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.736151][T11860] netlink: Unknown conntrack attr (type=64, max=9) [ 634.853994][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'. [ 634.893100][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'. [ 637.207823][T11953] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1345'. [ 637.390392][T11953] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.832918][T11953] bridge_slave_0 (unregistering): left allmulticast mode [ 637.880169][T11953] bridge_slave_0 (unregistering): left promiscuous mode [ 637.967977][T11953] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.851087][T12000] netlink: 146 bytes leftover after parsing attributes in process `syz.6.1354'. [ 640.521847][T12012] scsi_dev_info_list_add_str: bad dev info string ';/&c $3' '' '' [ 640.801586][T12022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1360'. [ 640.810899][T12022] lo: entered promiscuous mode [ 640.815939][T12022] lo: entered allmulticast mode [ 640.829831][T12022] openvswitch: netlink: IP tunnel dst address not specified [ 640.910719][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1364'. [ 641.897672][ T29] audit: type=1800 audit(4294967327.510:17): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1362" name="features" dev="configfs" ino=34496 res=0 errno=0 [ 642.511853][T12060] svc: failed to register nfsdv3 RPC service (errno 111). [ 642.550795][T12060] svc: failed to register nfsaclv3 RPC service (errno 111). [ 643.155457][T12088] device-mapper: ioctl: Unable to rename non-existent device, to [ 643.526893][T12097] Process accounting resumed [ 645.191976][T12123] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1381'. [ 645.235057][T12123] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 645.283260][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1378'. [ 645.301902][T12108] lo: entered promiscuous mode [ 645.312233][T12108] lo: entered allmulticast mode [ 648.597054][T12197] Process accounting resumed [ 649.636391][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1403'. [ 649.925000][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1403'. [ 650.103490][T12226] delete_channel: no stack [ 651.658391][T12264] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1413'. [ 656.043972][T12346] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI [ 656.056649][T12346] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 656.065080][T12346] CPU: 0 UID: 0 PID: 12346 Comm: udevd Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 656.075438][T12346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 656.085519][T12346] RIP: 0010:tomoyo_check_acl+0xb0/0x410 [ 656.091105][T12346] Code: 00 0f 85 57 03 00 00 49 8b 5d 00 49 39 dd 0f 84 fc 01 00 00 e8 91 07 48 fd 48 8d 7b 18 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 28 38 d0 7f 08 84 c0 0f 85 cc 02 00 00 44 0f b6 7b 18 31 [ 656.110751][T12346] RSP: 0018:ffffc9000c4dfb48 EFLAGS: 00010246 [ 656.116850][T12346] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000001 [ 656.124849][T12346] RDX: 0000000000000000 RSI: ffffffff8451475f RDI: 0000000000000018 [ 656.132846][T12346] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 656.140845][T12346] R10: 0000000000000007 R11: 63732f766564752f R12: ffff88807c538000 [ 656.148842][T12346] R13: ffff888027b71d90 R14: 0000000000000000 R15: 0000000000000007 [ 656.156842][T12346] FS: 00007fd425ce5c80(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 656.165808][T12346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 656.172432][T12346] CR2: 00007fd4258c2723 CR3: 000000003be98000 CR4: 00000000003526f0 [ 656.180434][T12346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 656.188432][T12346] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 656.196451][T12346] Call Trace: [ 656.196463][T12346] [ 656.196472][T12346] ? die_addr+0x3b/0xa0 [ 656.196509][T12346] ? exc_general_protection+0x155/0x230 [ 656.196550][T12346] ? asm_exc_general_protection+0x26/0x30 [ 656.196585][T12346] ? tomoyo_check_acl+0x9f/0x410 [ 656.196618][T12346] ? tomoyo_check_acl+0xb0/0x410 [ 656.196650][T12346] ? tomoyo_check_acl+0x9f/0x410 [ 656.196680][T12346] ? __pfx_tomoyo_check_env_acl+0x10/0x10 [ 656.196716][T12346] tomoyo_env_perm+0x1be/0x210 [ 656.196748][T12346] ? __pfx_tomoyo_env_perm+0x10/0x10 [ 656.196784][T12346] tomoyo_find_next_domain+0xe6c/0x2070 [ 656.196822][T12346] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 656.196855][T12346] ? lock_acquire+0x2f/0xb0 [ 656.196875][T12346] ? tomoyo_bprm_check_security+0x119/0x1d0 [ 656.196902][T12346] tomoyo_bprm_check_security+0x12e/0x1d0 [ 656.196931][T12346] ? tomoyo_bprm_check_security+0x119/0x1d0 [ 656.196962][T12346] security_bprm_check+0x1b9/0x1e0 [ 656.196996][T12346] bprm_execve+0x642/0x19b0 [ 656.197025][T12346] ? __pfx_bprm_execve+0x10/0x10 [ 656.197049][T12346] ? copy_strings.isra.0+0x3c0/0x450 [ 656.197078][T12346] do_execveat_common.isra.0+0x4f1/0x630 [ 656.197108][T12346] __x64_sys_execve+0x8c/0xb0 [ 656.197135][T12346] do_syscall_64+0xcd/0x250 [ 656.197166][T12346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.197197][T12346] RIP: 0033:0x7fd4258fcef7 [ 656.197217][T12346] Code: ba 0f 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 63 d8 fb ff 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 90 b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 01 3f 0f 00 f7 d8 64 89 01 48 [ 656.197239][T12346] RSP: 002b:00007fff4056d5b8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 656.197264][T12346] RAX: ffffffffffffffda RBX: 00007fd425ce5ae0 RCX: 00007fd4258fcef7 [ 656.197282][T12346] RDX: 000055fca7fd0a20 RSI: 00007fff4056d6b8 RDI: 00007fff4056deb8 [ 656.197298][T12346] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000002 [ 656.197313][T12346] R10: 0000000000000008 R11: 0000000000000246 R12: 000000000000000e [ 656.197328][T12346] R13: 000000000000000b R14: 000055fc7a876f18 R15: 00007fff4056f7f8 [ 656.197351][T12346] [ 656.197360][T12346] Modules linked in: [ 656.197456][ C0] vkms_vblank_simulate: vblank timer overrun [ 656.198232][T12346] ---[ end trace 0000000000000000 ]--- [ 656.286451][T12323] kexec: Could not allocate control_code_buffer [ 656.293993][T12346] RIP: 0010:tomoyo_check_acl+0xb0/0x410 [ 656.294042][T12346] Code: 00 0f 85 57 03 00 00 49 8b 5d 00 49 39 dd 0f 84 fc 01 00 00 e8 91 07 48 fd 48 8d 7b 18 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 28 38 d0 7f 08 84 c0 0f 85 cc 02 00 00 44 0f b6 7b 18 31 [ 656.294065][T12346] RSP: 0018:ffffc9000c4dfb48 EFLAGS: 00010246 [ 656.294088][T12346] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000001 [ 656.294104][T12346] RDX: 0000000000000000 RSI: ffffffff8451475f RDI: 0000000000000018 [ 656.294121][T12346] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 656.294137][T12346] R10: 0000000000000007 R11: 63732f766564752f R12: ffff88807c538000 [ 656.294154][T12346] R13: ffff888027b71d90 R14: 0000000000000000 R15: 0000000000000007 [ 656.294171][T12346] FS: 00007fd425ce5c80(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 656.294198][T12346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 656.294216][T12346] CR2: 00007f660c172000 CR3: 000000003be98000 CR4: 00000000003526f0 [ 656.294233][T12346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 656.294248][T12346] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 656.294266][T12346] Kernel panic - not syncing: Fatal exception [ 656.294552][T12346] Kernel Offset: disabled