last executing test programs: 15.015592148s ago: executing program 0 (id=1346): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = pidfd_open$auto(0xffffffffffffffff, 0x3) r1 = semctl$auto(0x5, 0x8, 0x3, 0x9) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'macvlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x24004004) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000300)="608b5fac2c39a24936a2c33c4b06995260e79bb53bd2a2d60ec6d8d511e41fde8caa6dac1961abd6277a564308bdad8428c79a2eac36109a124cc917f91b998a3340b2dc1a97f150daa190cdaece6192c357801e4122abad330013eeaca82558640b06ef6482e385613b69e0907557f63f89b30683cbeffb568e369d3fff990f484171bf52117ffbf4e749af8448c955d2d185479d66e3eac5d1a789352ebdbbcd2995232d37617206aaaec8b5717f9a75c2ef29679dde3d57f81f5982f79d5fee5e7340641105866b42716af8a603741b5011aefaa367bc1d66476112ab04893b7ccfc76a9bbc7e6ab80803db54327e", 0x0, &(0x7f0000000000)={&(0x7f0000000140)="216ab3bf45d38f000e2f6bcb0f1e504f8250d72f5785cc677415c4dad5ed0785850dea7fe9747149ab314e939593d58848c8f6a70c459746744d6d8c8330adaada7e70a220cd9f5e0970f591704e8e3225cdaf51e4bf34b24e1dbd19946d260b8c38503330f40d7dd1358920a4cc62f65a3bd54548ad5322f802532c008851c6fcbf2fa7ade227f7e744d959954f093bfde714eea29399f721926324e4ba388d9dcc4f47e1c6f75a", 0x6}, 0x2, &(0x7f0000000280)="501f6956ef05dcba97216d0eca6b6902f7b488b1abeaaf3f0efe6445", 0x4, 0x4}, 0x10001}, 0x2, 0xb7) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_LINK={0x8, 0x1, 0x9}, @GTPA_I_TEI={0x8, 0x8, 0x8001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c051) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) pidfd_open$auto(0xffffffffffffffff, 0x3) (async) semctl$auto(0x5, 0x8, 0x3, 0x9) (async) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'macvlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x24004004) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000300)="608b5fac2c39a24936a2c33c4b06995260e79bb53bd2a2d60ec6d8d511e41fde8caa6dac1961abd6277a564308bdad8428c79a2eac36109a124cc917f91b998a3340b2dc1a97f150daa190cdaece6192c357801e4122abad330013eeaca82558640b06ef6482e385613b69e0907557f63f89b30683cbeffb568e369d3fff990f484171bf52117ffbf4e749af8448c955d2d185479d66e3eac5d1a789352ebdbbcd2995232d37617206aaaec8b5717f9a75c2ef29679dde3d57f81f5982f79d5fee5e7340641105866b42716af8a603741b5011aefaa367bc1d66476112ab04893b7ccfc76a9bbc7e6ab80803db54327e", 0x0, &(0x7f0000000000)={&(0x7f0000000140)="216ab3bf45d38f000e2f6bcb0f1e504f8250d72f5785cc677415c4dad5ed0785850dea7fe9747149ab314e939593d58848c8f6a70c459746744d6d8c8330adaada7e70a220cd9f5e0970f591704e8e3225cdaf51e4bf34b24e1dbd19946d260b8c38503330f40d7dd1358920a4cc62f65a3bd54548ad5322f802532c008851c6fcbf2fa7ade227f7e744d959954f093bfde714eea29399f721926324e4ba388d9dcc4f47e1c6f75a", 0x6}, 0x2, &(0x7f0000000280)="501f6956ef05dcba97216d0eca6b6902f7b488b1abeaaf3f0efe6445", 0x4, 0x4}, 0x10001}, 0x2, 0xb7) (async) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_LINK={0x8, 0x1, 0x9}, @GTPA_I_TEI={0x8, 0x8, 0x8001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c051) (async) 14.444493781s ago: executing program 0 (id=1348): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x5435c1, 0x0) acct$auto(&(0x7f0000000040)='/dev/adsp1\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) acct$auto(&(0x7f0000000100)='/dev/zero\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r2, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @fd}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r3 = socket(0x11, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getpeername$auto(r3, 0x0, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0xc8002, 0x0) clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) read$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000080)=""/58, 0xfffffffffffffde7) 12.985795382s ago: executing program 0 (id=1352): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x108000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x4, 0x19de, r0, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7f, 0x200000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x18, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000de, 0x2c74, r0, 0x14000000000) futex_requeue$auto(0x0, 0x80, 0x2, 0x101) r1 = bpf$auto(0x3, 0x0, 0xb72) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x25, 0xa, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) connect$auto(0x3, &(0x7f00000000c0)=@l2={0x1f, 0x6da8, @none, 0x9}, 0x55) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x3, 0x4020009, 0x1a, 0xeb1, 0x2, 0x0) mmap$auto(0xae, 0x400008, 0xe0, 0x9b72, 0x2, 0x7ffffffffffffffd) madvise$auto(0x0, 0x24, 0xc01) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x20003, 0x4000000000000eb1, r1, 0x8400) socket(0x10, 0x2, 0x0) pipe$auto(&(0x7f0000000080)=0xe7da) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x34, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) dup2$auto(0x0, 0x4) 11.376933479s ago: executing program 1 (id=1355): syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video61\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) acct$auto(&(0x7f0000000000)='/dev/video61\x00') r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_mcast\x00', 0x101000, 0x0) pread64$auto(r1, 0x0, 0x8, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0xffffffff, &(0x7f00000000c0)=@link_create={@map_fd=r2, @target_fd=r2, 0x8, 0x1, @tcx={@relative_id=0x454c, 0x3ff}}, 0x5) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) setsockopt$auto(0x4, 0x0, 0x14, 0xfffffffffffffffe, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy18/netdev:wlan1/stations\x00', 0x200, 0x0) close_range$auto(r3, r1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) 10.000508873s ago: executing program 2 (id=1357): userfaultfd$auto(0x1) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x108000, 0x800034, 0x9) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mprotect$auto(0x0, 0x8000000000000001, 0x6) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) sendfile$auto(r0, r1, &(0x7f00000000c0)=0x4, 0x7de7f42d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000040)='.\'*&\x04!\x00', 0x1, 0x8) 9.74961606s ago: executing program 1 (id=1358): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x4) r0 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x3, 0x1) socket(0xf, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) memfd_create$auto(&(0x7f0000000100)='@\\{.}\x00', 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) socket(0xa, 0x2, 0x88) bpf$auto(0x1, &(0x7f0000000000)=@link_create={@prog_fd=r1, @target_fd, 0x4, 0x2, @kprobe_multi={0x5, 0x4, 0x400004, 0x3, 0x7}}, 0xa3) read$auto_ptdump_curusr_fops_(r0, &(0x7f0000000080)=""/18, 0x12) socket(0xa, 0x3, 0x6) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x82, 0x0, 0xebe, r2, 0x8000) sysfs$auto(0x2, 0x8, 0x4) mincore$auto(0x1000, 0x8001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/radio18\x00', 0x100, 0x0) 9.708911737s ago: executing program 0 (id=1359): r0 = socket(0x1d, 0x4, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r1 = io_uring_setup$auto(0x40005, 0x0) madvise$auto(0xf3, 0x800034, 0x9) r2 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0xffffffff, &(0x7f00000001c0)=@task_fd_query={0x0, r2, 0x800, 0x10008, 0x7, 0x1000049, 0xffffffffffffffff, 0x2, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mbind$auto(0x401, 0x400, 0x6, &(0x7f0000000040)=0x7, 0x7fff, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x69) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x62, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r0) r6 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000300), 0x1a1000, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYRES8=r5, @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0400f5800400b2800c00480007000000000000001c000180080003e70500000108000f005e0700000800030000010000090003008e5150fa1e000000"], 0x22c}}, 0x20000000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) madvise$auto(0x7, 0x8, 0x1) read$auto(r7, 0x0, 0x9) write$auto(0x3, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, 0xffffffffffffffff, 0x4, 0x1, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/ip_tables_matches\x00', 0xe8800, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0000dd8a7a0778e9b5a495267234b46dc131d767afe47db1e462606fc768201e61119d13131e4b85f65639ad699ba9b74294d1", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="fcb24b1536f1d69ca959729ba904e41a35d79b79dc20b1b654d41bc218b1ebb19e76b53e3cb15ff7be5734eb523487c25f498d2fcff730b1f2b909b333b54c"], 0x34}, 0x1, 0x0, 0x0, 0x4040041}, 0x2004c090) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) 8.05391516s ago: executing program 2 (id=1360): mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xcb) (async) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4044087}, 0x8004) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 64) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x10, &(0x7f0000000000)={0x0, 0xd6c6}, 0x2, 0x0, 0xe, 0x4}, 0x3}, 0x200, 0xb07e) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='O\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async, rerun: 32) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async, rerun: 32) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) fspick$auto(0xffffffffffffff9c, &(0x7f0000000000)='!\x00', 0x6) 7.104480161s ago: executing program 2 (id=1361): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x5435c1, 0x0) acct$auto(&(0x7f0000000040)='/dev/adsp1\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) r1 = socket(0x11, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getpeername$auto(r1, 0x0, 0x0) clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) read$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000080)=""/58, 0xfffffffffffffde7) 5.793398245s ago: executing program 2 (id=1364): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e23}, 0x67) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) rseq$auto(0x0, 0x8000, 0x0, 0x6) connect$auto(r0, &(0x7f0000000000)=@hci={0x1f, 0x4}, 0x50000000) write$auto(0x3, 0x0, 0x200000000fdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x8a002, 0x0) ioctl$auto(r1, 0x227e, r1) r2 = socket(0x2, 0x1, 0x0) r3 = getsockopt$auto(r2, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x200039) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x18, 0x80000, 0x9) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f0000000040)={0x9, 0x7, 0xc, 0x0, 0x4, "183f628716d974cc1ed38a5c122202c2"}) socket(0x18, 0x5, 0x2) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000080)={0x0, 0x2, 0xa, 0x2, 0x401, 0x4, "22e267f10a23f1cbb417ba05096b80b92d3577453ae4744f8e1f9fbe61bd14a449e10599da28f4f8b0ce088fd9ca13994a93c0c5d99444"}, 0x5, 0x81, 0x80000001) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000a40), r0) mmap$auto(0x0, 0x400008, 0x9, 0x9b72, 0x2, 0x8000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="02002cbd7100ffdbdf25980000000800010009000000"], 0x1c}}, 0x41) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x198, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x128, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xa8}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0x88, 0x4, "93c302302195e0270ca7cd19e5b23a3d40e1ab5c5a19936c649dee5466cf0c831b09b3cd2a29c35ae503e592f60ed374d394e078f4a6921b7426e8ec7d4abfbc7b7cde2b498127a1783cce24c2e480fcbe73968faaecb2b6b9b1cbe2c81ea1b3d2ca2f8576a889271d7716fa43bc47ebb417a212aaa0ba05976ac1428d5cdb71b31f60b6"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x81}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x57, 0x5, "29be71288e61ac401e5e2ebab4936d4d95322da7215c35140ca3620b883e0b207f7a40811b2985596880f20b6f7056c9cf506087fbce1d2d482557908c325aec989685427bfc7c803ef7854b2ade3d51dad339"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x33, 0x5, "49fe798ad17f273bd27efed556fac59baee234d33ed6f7f1095daeb45e0481a49dca125439b575658bf6a0b8b47d64"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MBSSID_ELEMS={0x40, 0x133, 0x0, 0x1, [@nested={0x1c, 0xdf, 0x0, 0x1, [@nested={0x4, 0x4c}, @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0xf4, 0x0, 0x0, @u64=0x8}]}, @generic="7968f38c6ed30bf0c85f316ff4bc3385", @typed={0x8, 0x12, 0x0, 0x0, @ipv4=@local}, @typed={0x6, 0x37, 0x0, 0x0, @str='-\x00'}]}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) mprotect$auto(0x1ffff000, 0x9f6, 0x9) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) shutdown$auto(0x200000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.074887375s ago: executing program 0 (id=1366): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = eventfd2$auto(0x6, 0x800) read$auto(r0, 0x0, 0x10001) read$auto_hwsim_fops_ps_(r0, &(0x7f0000001dc0)=""/128, 0x80) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x10001, &(0x7f0000000440)="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") r3 = socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r4 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x188) ppoll$auto(&(0x7f0000000180)={r4, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) r5 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2501000000080000000000eb2cc2e3e78fb672c5251553aa39ff794b9051", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000280), r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) socket(0x11, 0x80003, 0x300) fanotify_init$auto(0x65, 0x2) pipe$auto(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r10 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r10, @ANYRES8=r9, @ANYRES32], 0x18}}, 0x80) 4.463797908s ago: executing program 3 (id=1367): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/first_error_errcode\x00', 0xa0440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/64, 0x40) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000100), 0xa8380, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/first_error_errcode\x00', 0xa0440, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/64, 0x40) (async) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000100), 0xa8380, 0x0) (async) 4.095152112s ago: executing program 1 (id=1368): openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/version\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) truncate$auto(&(0x7f0000000000)='./file0\x00', 0x8cffffffffffffff) 3.984512716s ago: executing program 3 (id=1369): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/nfsfs/servers\x00', 0x400, 0x0) mmap$auto(0xfffffffffffffffe, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x7ffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(0x3, 0x5646, 0x38) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/interrupts\x00', 0x10b402, 0x0) socket(0xa, 0x2, 0x88) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/dynamic_events\x00', 0x400a80, 0x0) socket(0x26, 0x80805, 0x0) bind$auto(0x3, &(0x7f0000000000)=@generic={0x1d, "300d591f2aa59b764486be5aa222"}, 0x69) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto(0x3, 0x80045515, 0x1) sysfs$auto(0x2, 0x4, 0x4) mincore$auto(0x1000, 0x8001, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hci_uart/parameters/txcrc\x00', 0x1c9140, 0x0) sysfs$auto(0x6, 0x4, 0x4) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x80043, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) read$auto(r0, &(0x7f0000000180)='l.\x00\x0fx\x1e-[\x85\xe7e\x12\x1f\xcc_G\x11\x95\x9ex\x1bY@\xe1\xf7\a\"o\xec\b>\xee!y\xf1\xd7W\xfa\xd01#D\xe9\xef\xf2\xb8\x1e\x91u[\x17\xae\x8e\xb7R\x19\xe8X\xb2c\xc9/0\xe1\x10\x8d#*\xd7s\xd1:\xe1\x88%\xca\'X\a\a\xb0\xc3\xea\xa9\xce.n\x81\xa44\x04\x95\x06z\xb2DD=\xbf.\xdd\x17\xc9\x982\xb8\xcb\x15Y`\x84\x86i7\x8a\xa3L\xc0\x11\xc8\xea\xe5YR9=wA\xa26\xe2Ka\x17\x94\xf1d\x89\x17\x1e\x9b\x8c-\x1d\xd2\xd3o0\xf6\x8f\xce\xb5Y\xc6\x00R\xb2\x183E\x1c\x06\x00\xadj\x807u#Vwv\xfen\x81T\xf0 \x02\xbb\x9c\xe6\xe8Y0{\x83\xaa\xbd\xff2i\x83\x92\xfc\xfao\xa0\xb9}\xa5\xc7\xf2S\x90\xac\xe8\xcb\x9fn\xfc\x0e@\xf5H\b\x14\xce\xaec8$Z\xf9_ym\xdc', 0x1) mincore$auto(0x1000, 0x8001, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x103, 0x0) io_uring_setup$auto(0x877, 0x0) r1 = io_uring_setup$auto(0x877, 0x0) io_uring_enter$auto(r1, 0x8, 0x0, 0x7, 0x0, 0xffffffffffffffff) 3.815754833s ago: executing program 1 (id=1370): mmap$auto(0x1, 0x400008, 0xdf, 0x9b72, 0x400000000002, 0x8000) getitimer$auto(0x100000000, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) socket(0x2, 0x6, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@can, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(0x0, 0xc162, 0x0) r1 = socket(0x10, 0x2, 0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="5de1"], 0x1ac}}, 0x40000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x181902, 0x0) ioctl$auto(r4, 0x80044dff, 0x9) socket(0x10, 0x2, 0x4) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_0={0x0, 0x10, 0xb, 0x4, 0xffffff6e, r1, 0xc4d, "f764be97dc40f0adc0d3faa53368f611", r3, r0, 0x401, 0x1, 0x2b, 0x0, 0xffffffffffffffff, r1}, 0x8) open(0x0, 0x22240, 0x154) unshare$auto(0x40000080) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa41c2, 0x84) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/thread-self/net/igmp\x00', 0x20000, 0x0) pread64$auto(r5, &(0x7f0000000000)='/proc/thread-self/net/igmp\x00', 0x5, 0xe8f) 3.638887918s ago: executing program 1 (id=1371): r0 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000180), 0x14881, 0x0) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/bus/usb/017/001\x00', 0xa300, 0x0) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r2, 0x300000000000) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) acct$auto(&(0x7f0000000000)='/dev/usbmon0\x00') msgrcv$auto(0x1, 0x0, 0x1, 0x0, 0x5) read$auto_tracing_entries_fops_trace(r3, 0x0, 0x0) pread64$auto(r1, 0x0, 0x100000001, 0x100000000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, r0, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) madvise$auto(0x0, 0x53, 0x9) ioctl$auto(0x3, 0x80084d17, 0x38) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.threads\x00', 0x20000, 0x0) r4 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0) pread64$auto(r4, &(0x7f0000002cc0)='&,\x00', 0x8, 0x81) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x40000000005, 0x7) r6 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) close_range$auto(r6, 0xffffffffffffffff, 0x0) fsetxattr$auto(r5, 0x0, 0x0, 0x6f, 0x7ff) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) read$auto(r7, 0x0, 0x7) 3.588325753s ago: executing program 3 (id=1372): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x5435c1, 0x0) acct$auto(&(0x7f0000000040)='/dev/adsp1\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) r1 = socket(0x11, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getpeername$auto(r1, 0x0, 0x0) clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) read$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000080)=""/58, 0xfffffffffffffde7) 2.699534953s ago: executing program 2 (id=1373): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) socket(0x2, 0x6, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0) connect$auto(0x3, &(0x7f00000000c0), 0x55) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/arp_tables_matches\x00', 0x80, 0x0) io_uring_setup$auto(0x7, &(0x7f00000001c0)={0x5, 0xdf, 0xffffffff, 0xfffffffd, 0x53, 0x2, 0xffffffffffffffff, [0x9574, 0x7, 0x1], {0x9, 0x2, 0x201, 0x7, 0x3d, 0x8000001, 0x5530, 0x400, 0x1}, {0x3, 0x23, 0x7fff, 0x6, 0x400, 0x58, 0x5, 0x27, 0x40}}) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/248, 0xf8) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000040)=""/142, 0x8e) setresgid$auto(0xffffffffffffffff, 0x28000000000000, 0x7) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r1) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003180)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x6044091}, 0x0) 2.652087054s ago: executing program 0 (id=1374): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = socket(0x10, 0xc04, 0x4) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0x14}}, 0x10004010) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x648880, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x81, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r6, &(0x7f00000012c0)="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", 0x10d) ioctl$auto(r5, 0x4b4b, 0x9) set_tid_address$auto(0x0) utimensat$auto(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40, 0x7}, 0x33fe) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d) ftruncate$auto(0x3, 0x700) close_range$auto(0x2, 0x8000, 0x0) getegid() sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) 2.028146789s ago: executing program 3 (id=1375): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x806, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f00000004c0), r1) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000d80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000000d40)={&(0x7f0000000500)={0x824, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4a9, 0x8, 0x0, 0x1, [@generic="a16b63405d9195824c0ca441d3cc30567d53bb1f680739e596459235c71764dbc092728416545024aaa6d4fe3c3f09c75ef7959ab9e55c93a706ee5c9342b4001831f444b51717e8ef60d93e088363f4553e93f26bdd6ebccd938b07a0dd5e0d3af74dd1fe79bba5b77a64727b62cc02a8f44181edebb4f02ec0d60b36dc691b6e283c771dddbce8db3f24b0cf4ebe411ce37721f78f38cbfa47cc", @typed={0x8, 0xa4, 0x0, 0x0, @u32=0x80000001}, @nested={0x118, 0xde, 0x0, 0x1, [@generic="7bf53e47e7f729d85be66f58a6e5c0100c3ef83dc45eb50e2deffd353e5f2440b0145991", @typed={0xef, 0x74, 0x0, 0x0, @binary="a2e84c0d0f4602432bfbd9b31ad1b4855e599865832432acfbbf75f80d190d936b15f37f94d21938bb56ee921f81b836e205d94617eddd20b14c9f7c2db8012a08376a030a0f78cdd00eb06320dee7d56b11b45ae52ea054a9ddd1b9fd59e278090eda4fcf3ddffd18dbabe0e8ccd2d124c12ecb91b349b14a55b43312f7f790e665467c12e7df1e72bbaf8b53591e3142119517e50ce2a791df321f7b5047db761bcc3fe723cdf94f71084d6344fffdec98cb5debe00c9682ba297a5c9270557bcc25eec0bd03d3d70726b1afcb73010b4cfe928a91e7dd19a3f821d55b7d6cb4a30ca3cd2977ee7fa92c"}]}, @nested={0x1aa, 0xa7, 0x0, 0x1, [@typed={0x14, 0xdf, 0x0, 0x0, @ipv6=@empty}, @generic="51c8eceedc9bc90437d830bd388ade68cdacdc0d2b78a6644e391f03dd35fef73dabde3a6956c34631d1b65ae291f7813ee3b5915544b33d487958c7bf3a3a6cb7291af4cea81a5cd9dcda47c60cb55c97341730c359809c01a6f1e7e0be1cbd676d04d91157a41da438ae6708ca7b9e843eec3d7a62551e3165709e5ee39f2e9d10d49b1a31dd262cf87b43294bbadf052e33a1a8a942dce9e594532416a9058874ccd961acdb827c0a28d329d8ce1280654d027b5be8ec4d7209656f4300ebc14d1ce63a002d230f582c8f9e1b110ecf55f7af29", @generic="86b1700ded5dea860de5790fc10f6d9b747a18daa993925ca8e5a3d6f7a252faf9c9e895577be40505ca5588e39f75b6bad09659a171218db13fff1008afbb55bd7fc7b2f015a63f475a60c6b150f39ba39620172cb691e4669651c3fb7a62013f6f951510f1bfe67f742115b696f4c897d9b0d86e7e7ced73db6e7d94ba4a03a8e6eb20490937b1364b4ee8e548b8d934662915198cb9dc33607a1de6a4c2ba1124cc81814086d18d175d6df6b0455bf7777d5e7c7e95ecce", @nested={0x4, 0x125}]}, @generic="12897d15549043cbc2f379bf86d7427226bbd9b6ea5dcbd966b327f1a9be614e1ad44c80aa1b1804bcaf218d55a0f45f13decae792698b6b136fbd8eccbd5aa851ce5ac92a4e9d977df094eecab8", @generic="579c868967b3613ca8a3e30465f548e7d6f58eebc656b5c8a1edfd9e2f7f27e7f9391a41dba891535d754929b362eeca8409bb08534f09589ace2e4a376930bb441e0497a846644a8e1a353a111fb0372d1a34073a057851b9f913121a11c888bf7208f97a68d4d362f054cdb660ca4a195dbf82dcd9a324aa2872055e13597a618bad06125369074a1883f787119be474a9ebf48bc87faf1379c2c4b443a8b2b1aaee8dd54f3f3d98b7eb4c16e80e0c34b8a113f06b76c9977154b3fda699126c091917fa812aab80", @generic="f3dc1b837d5ff75a220c33e1302ec675e7aa9fc97d2a6ab1108bb762a04f502b6674907945bbf0"]}, @NLBL_CIPSOV4_A_TAGLST={0x353, 0x4, 0x0, 0x1, [@generic="93fbf1fc50fb1136b210e2f0bb93999a763f8506c276321f029390868b1476b6636ab3f7c343bee1db5ecfbc250ca2d9bfeb4b6661e8265c2a9a0738306f6e83187eab1218519dc341b9c45df6b685543c30b178f1cbb1b97811c0210ddd2077dd20b4f6a8d980152dd1229ad0cd9dfe18dc709aab273529c2c910c17645847e050cb571d2fad4b27c01a38c93395168b95fbeda0aca5527509d336a", @generic="fdea8dd9d5965ed6ab2b6321de8fa0d25f4138d6585f48a67285678527adbb14a55f288466a2c77fbb49f9db8bc0d2ce238bff4c8f7e5b24e34d7d249644383aec69876efa01284019097fef8db522b6ff538c45179679c28561298ee933e1353c1f45a4012ebe7fcf81438d708b8d7cf32cfc490486cd1165c7f6dba5e435532072b9b2abc19c2c1d7cce6df639b3052074c5b8cecc10c369fcf4628c6b469af779b34b5f442bcfb9c5b6061ba7edfd3b417327fde0731ac812de51424e8ba44f0d69917bcf8e513a212c72fdc9b1c024ddd3699ccc9d676cdb8486", @nested={0x63, 0xf3, 0x0, 0x1, [@generic="641fec8eae3268fb80f5dcb5dc06cc0bfc2662679ca022907a1e29cfeccf97017df9b0f3170e0a3e1002b192dee530db739788b3e57a52005f18d1519feded3c598a9e10e25bc0f2cf7f00860298239dff36e945d4819e58c6f00a", @nested={0x4, 0x40}]}, @nested={0x18, 0x22, 0x0, 0x1, [@typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2d}}]}, @generic="92bfecba5607fce130f1d3965c7090e6285f48218725f56c7a134ed435292094873f88024e2667797b081e65824bf67a747a87abc52dbb96c55eee44c4a4ff1be344ab859b7bd18a9136337077f8f1aacdd8f4cf0dd5e7261b8f926f53f102", @generic="b1b3fe114067248f90ca2ce08b7f43caab40abf7de978a2879fe6540ba416d110ca48bd38e6fa72ddd7a14d1929ff696cb2a02b2acb6a3cc519b8146d0e347fe90b80f5a1a28d137c301e7e983c7c0b008cbac403587ccc2eaecac864dfb1469feafb39f0f1c15ef1131c5c954b203033baf31388851fe333f786391463159c8290c7ee8bd5aa7be4d50b9b145573f98c6b08d3e738e25b38af0944070b3edb7e0d8158796902dabd76ef678b6a2a98b9b787b29d6206d2f3d6214b7947334a684df66bf5fe2d6028248d55e6a3a", @generic="16b871dc67cd084d35fbfb0d7cdc9d0870dfa763f7b50a02f0728223ce9d27d21b1028f8c4b68e8037f644095671"]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x7f}, @NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0xe6}]}, 0x824}}, 0x40) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r4 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/cmdline\x00', 0x61a0c2, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dvmrp1\x00', 0x0}) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES16=r9, @ANYRESOCT=r4, @ANYRES32=r11, @ANYBLOB="08006100010000000800620000000080"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'nicvf0\x00', 0x0}) r13 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r14, 0xfd}, 0x6a) r15 = socket(0xa, 0x2, 0x88) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r18, r17, 0x8, 0xff, r15, @relative_fd, 0xe600}, 0xf) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1ec, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PSE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffffc}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x10000}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_PSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1c00000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}]}, @ETHTOOL_A_PSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe75}]}, @ETHTOOL_A_PSE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xb7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_PSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}]}, @ETHTOOL_A_PSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffffe}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x95f}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) close_range$auto(0x2, 0x8000, 0x0) 679.663181ms ago: executing program 3 (id=1376): r0 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000180), 0x14881, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, r0, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) madvise$auto(0x0, 0x53, 0x9) ioctl$auto(0x3, 0x80084d17, 0x38) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.threads\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/156, 0x9c) r2 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0) pread64$auto(r2, &(0x7f0000002cc0)='&,\x00', 0x8, 0x81) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x40000000005, 0x7) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) close_range$auto(r4, 0xffffffffffffffff, 0x0) fsetxattr$auto(r3, 0x0, 0x0, 0x6f, 0x7ff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f00000000c0)=""/9, 0x9) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000100)=""/97, 0x61) 210.086395ms ago: executing program 3 (id=1377): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x4) socket(0x23, 0x80006, 0x9) socket(0x10, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x801, 0xc) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0xfffffffc, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=r0, 0x1, @old_prog_fd=r0}, 0x7) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r1 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/o2hb/failed_regions\x00', 0xe000, 0x0) read$auto_o2hb_debug_fops_heartbeat(r1, &(0x7f0000000080)=""/4096, 0x1000) sysfs$auto(0x2, 0x4, 0x4) mincore$auto(0x1000, 0x8001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/video61\x00', 0x902, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001080)='/dev/ptywc\x00', 0x40000, 0x0) select$auto(0x5, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x8000000000000201, 0x9, 0x3, 0x6, 0x7, 0xd886, 0x5e58296b, 0x341, 0x41, 0x7, 0x200, 0x8, 0xc]}, 0x0, 0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4004af05, r3) io_uring_enter$auto(r2, 0x1, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) 121.473761ms ago: executing program 2 (id=1378): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) clone$auto(0x20003b4b, 0x8000000000000000, 0x0, 0x0, 0x9) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x123080, 0x75) (async) socket(0x840000000002, 0x3, 0xff) (async) connect$auto(0x3, &(0x7f0000000000), 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) madvise$auto(0x108000, 0x800034, 0x9) 0s ago: executing program 1 (id=1379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x15) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40040) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7", @ANYRESOCT=r3, @ANYRES8=r4], 0x2c}, 0x1, 0x0, 0x0, 0x60000004}, 0xc800) mprotect$auto(0x1ffff000, 0x8000000000000002, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETFAMILY(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20048000) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r2) sendmsg$auto_TIPC_NL_MEDIA_SET(r2, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f00000009c0)={0x11bc, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x11a5, 0x4, 0x0, 0x1, [@nested={0x10c9, 0xa0, 0x0, 0x1, [@nested={0x4, 0x27}, @generic="81d939739dc565f1c24b9f21d78072ce68903a858766f97bba23b6b6bb2c3887979ae93a55ec55cf140a03a98f4be224881ba653351cbbc16101bb82b03b9ed16cbbd19f26b9875305a4a41f097c0b8c3c820aafed780c7c516e7e5070c892c9128d6d45349c2a2edc93e3939bc078d8e7af06f36cb8497a574a2db8ec6fd723fbd0bc4e3027edc98d328d1f15426e3f3fd1697b50d2ab34c75543af52b772934e9a7d6f884242cb7377c4059627f965919b66d1d9", @generic="36e15c46762808925cebc206b8b61348cd1836a39f2077c46c938916d20b22f227148b8f8901948e80056dc5e0d87ee0f681df8b76806357ef53ef7a49ae2c6e4a984442f0e43803866b65d6c2db6f319bdf24d37e5a1eedd7beb8d9f33dddda6fb5a44ac72388f0667844477d5a49ccaf9c96eacaa784c892fec2c9aec22154c10db890f82576078be93a9bea62b37f703f550008db5abd4a4288a54954d22009bbf114e08c4d024046d4c21ffe7fae32a4a242a928eafab393b0a3aca026b70b2b7a33253cf0f5346aa322174db016ee58280182a8624f84b8f8b1bfcfc4f6257502519498d14e132bc5e04ae649eff6111506b2e967b4f876f4fa5adbef123314350684a7434eef9f4c776fb1c8987c3d673d1b3eccee72ff21fd278b4aea49491ee53ea50782c181900930701e85e0d44adfd65551ad049ac4320204218e71961d3388b437b725739908ac04982aeeda129ea602848792935b390a0d24fa4b561e550d681f2bceef884ed3960abee6d27dcf85b13eb63a82eb08456983f62ff584a68792155266700cc0e35386b9c162e955352615f9da1f20dd0eef11baedfeffa5dd3690db9684b5266aae46956ba8ddc994535ab6937acb5c28197a3ad1e95b5e6fe2af81959dce0590016f3bc20ed40a7f08607911dabdd83fd30e1117aadad93d207ace0a56571f6a4723c99ac9940bcea0250ed01edbb25956629b5e756285ce45b2794265bc2996840acba617a8d1c7fc802bfef592b92fb92c1fe3a9f554adf362c7be2f4d52251555d81cd6683428ace447532bfce0dcdca5e6da23849c9648e89f4782094c7544d09505369cb45a8119c9538b44725644c7cf0b4b2088c7ae94e072549a13f01e55f11282fabe75842c8cbe57065a59f58931d2726106d01a3fbebba747cce1c44a7a780f81fa26ebe905a655ea556f10c1d15206a5da3a6d2a9c6540f5e2b87d21ac9a11d17d00fc23689a4f5da8634789b64b0ff3a4ec1d44c12ed7c148b672e529d668d32605f3aa428057677cc7b25630487a9ecc30f510ec624b76a83bf2527f506dabe3b497ddc41093fba0743d672c858cdd75971ba26554a5e1fbb1d805954001b70badb93f660df20969c9bd3c15f6214ace0eb7f2b595a118aa06e0d01a780bab78fd0f42e780b7e00d21e90b7a4d1f28fdcdf9fbf873190c47c726cc9bf8ef2a3686fdfde1163c7c6328655704aa3a3d205b9ed008699f02b4241edc440c73883bc7939d07e09452c29f3a089f3a316838637d07ee0d4f6137cb777a69061c51385b21c7445880da4ad10352bc11954309af5ea20e783f5d975a073ab0ab64a54bdcbef5bd30c07a00f0dc786d03b967dfe51f27f258239e303f6e066f88c8de79552ad37e431ae007b23a69151e5a0e5bb81b4610b38c184bd04e6c189332d0d3f246efeb0b822884984cad407d5013881945737449c6ba664fbbd2d2d5625572c9f2d136df1f010a142b12d67e9c5f27ed5d3bd503dcf7996a38f8ff23ca2bc9d66f30038f537a587d15f1e8c552e4e89877dd4d3dd8d74b5444b3a644e22bf69df207cb174ecb659e2ac22b115a75f87b38773f47d36513e83230fd1b520c041ddcc9cefefb59326e503ebfed02c8352f295a5b362ee677d7f4132576a36590e548c45a1a092f3d13715e548d8ab9e88044c00fc662cc508ea29957f2ad4a9e8bc827f59abdb1b3db21d646fccbed6cfa719f6811cad46a1e45ce8aeffe77dc6412abe64a5f7ef726c89fd9e2e9cfae9394e98f268be7c1cbfdb5e125a0553446a220ed669de1875b921fbe1e390c0a411de2542b0065e002b9f947514fcd14853dae0ec4a66e1eaed8711ee2c80642900db4000da168b77cfa54e83e52c2651b97a0bb2c6b58bf4cc0694179c2975bbfe75b924f06fbb54ad094425570369980763ceee139794b88bb7138332258c31240575c71f9497c3ea3bf022cc96522b1bb9e8531503c2ed02547271f65201abb0f925f7017a660123e6bb6cb987ac5457110da13163b0860e36e60449ea0328ae04137732651f763df0c5644b7c03fe67e25d74b43c6f4b5e6a643922fcea63c5cd190959c72d6d2b865e2ba8407b5ff977880fd648d73a427e409bb5837db5a6b01b935ab964a6fa132a5f534222bd05ad9420f01d5b8c51eb9c67768a90492e8b1992cc3353b8e9542cb23c485e8c937da1214a50155bd7a26fd00b92fb334ac2f063162d7ae8cb447f9e6c1415c6d638cf81aeda91af2e50f73434dad7b8062a8534744b6280eb8d9fd734a968aa1aed26615778a9401f711129269f950def4eb85b49b9fc8075b8e469a899421b5e376377b72035ea8517a3e9f8cf05280ec90a16129eaa667c9246bf24a2ff789eb1321b2ea6f247504263109b081133d23be4eb2ea618f4d1489b2436f953d2592ac59863f8cef21250a1eb0b9af3c775ebd6caab057af27e6e3c2959e33eb82062bd08ceecfe026107853e582ba36df5af3aeaee4db6467b74c5aac21e81c231fc61bc265e9a9bbcdf5bf30af1ca36f90699fa4dc52645b5e76ab74c10635ccbade4b56de77115d65dc3f9611307f5a699fecdce80f1f9b8b0516fb789693c6e0937a65af5afe772b8d2ae3b570d4f156f3b38302af7517a7c734139881f31ea14f0ef128cc12bb2e77f8368054d7a78402fd677a578d4efb3f6362607d7e8d8c02b02c23b94da07879700ea1cb252f6ae383d9e32a8059fc3ab89061f10bea20a7bd0dbae83667d10a9e2d8aa6efdee47e6228aea0baf50a477ca23f4901897911a0872b36ea4bbe4cbdd49b32a77d7cee1d52d0bcca92e02837e715dc61f816e3efbde6de27d46f0e0328b6b9effb14659be7324ee21f92c643ec5f48ffa7f03506c4e9ec3c48d61890f94c5473fd65563a41135c4d89c8233a76f1ef02219567b4e36ad0084a02a208da436743919e4b74e8c8b44ac9c34896c49dc73017d2e99c506a5cb4478094c06e3253f0ffc799c825fcf9c99fa9d1835e05e1402fca9902b559bb7493d06d3f9dbd9d14dccf3a7bd126645aa8fdf99abcbb691d0f819617a368d0150875f8401c9113b12bbd93331204d14501e872603250fd3888bc62fe7083fe1c66686f7d063ddd726d9273ee01c3e2f7ee41ce7ee8c314489db04b93dab242a1b1061cd9e59b9028f575ffc63b26f43d45da04e74669bde88af3b46990562e641b0c1fc7c3d8685c4d89b84418a78d45f1f9da014e57ad42da0f3618865757c4e646c3d0f46d728622663ee8f126793951d2895b008e897905a9bedd79ce037d7394e6d4f3252d6760de0112643a19f8ef2ec438a70e2fea49bc6ed762b7a9db5a41172d197ed4a68b0b8097802ccfc36c93da41e2574f770fc5e25c2d0fa6b497956801327aa850d0986a3dde07be16d30a7ce200a3f26acfbb1b905a4938c2c0843d8facec3bc386ae6d7300b2886ca10d8bf4b8b225d991be37f9e26d0248718e125516a225ee8f7c6fe60020f815c32d9d83168731fb13bca16417ced69d25653905fe3c9bbbcca0aeb20e3240919df0697f3a621a1eb5f7252be9f47394b6bf4b1388118eec526e778d4dbad6876156c5af29b4e4537cf546c5fe01def517fb97078bf4468b2759725ec726114cce2dc2650f3d6efcff3407c5142810c5f89d8f5df6323507f6f3c711ad3698955e9bcbceeacf87267d44cdbff84362ee67fd31ecee60fd2affaf58560ab199c86e2184038d617e7c96c01145816d6917998424d48d37ca4ddc66ff246f8a5c2f7cbbcfdff2227dcae6384d4da8af1008187513562568e783081a2f03590f930185081a012d731d5395704bbddd5c66cfec35cefa260ca225a12a875df5dc36a1f24312715bf7e255b9297e253fbc958ce6316c3b40b39c0dcb4d38738b7b297e9b1e00f5c1685aab3c63b8511bdf474906953185114d1446db482a382fbb3a747d281f7d64864a17a8b46ce7104bd73cf0d1d3cbed062651e6f0e44889e1f8cd36e5797fcb9f3de43c72ed4c110ac8c252eb07a801a0666371fffa42eb0866569ffc84d5c7b31bbffaaa5d5767db9bb4a17d638fa6532cd4af3588e667868953e741ff7f439ba3d83a36c8dead6176800e31f17970ffe7a0e3d4a9036bfba6bae922e0246217b0cff79b4379f27307cfc4638fc3052089dea8e84ab187c2a8ff36dcaeba655452304076f292bb02ebee429c35337f0219a85e1608cbe9ac1fd363c776b1527683b1ea8386b56c9b90cd365b4444eb0448b3ed23665d2dfdd2689762146dde321e6bc9e7de93bcc33de902d9aeace2fd2ce159aad6b803a34be8569189e9373627a50513410da53104ac038f7e361f8974da93189a6d0809609b6a8e54ea531e02390e8754fb165f7f1e336feb78bc675b0a85ea25fc7e529b65b3bc6b410b1cbe1b5b962ae3375f9d1c15ea0f0de656a06d2e7137aa123d63fc0a672d8c438aa6a8caf6fa87e7457ba04e7f498a748a27ca31ac958f04beae45aed19701b6dffce7d5ea9abd2c7cc09e577880d657971ea6c3beacf0b08b08666b8f3179938c47062276a743f4eab10ffd68c99c1b627f52e098ccfc4355cb5910c7a0c295fe7eb069705b893853c3b957879b04e81cc36018eaa8f63fc9cb0d88053a376669ce2eeb3b700f0d3d06ebdeaab93ad5c6b62686f8ea37a250c4c3f11ddadc20ff50c251a468b3146a73371e258cb0f5da5bc9d08c7136e9dbd3f6ef1601da2d01df2e03123dda2a9d9646cdd7ca959eef2cce8747fae0773fde1b3d3364ace11613986d3d3b40dbc59ba1fbe4417c8f1f62996386ce5a9f72d41a4535677493316e48229b5948f6ea7a54cdde321a936adc8c98ae3e8368e012b285c8fe1529b16f643c1ff8a799cc810130b67a98a11d436de6cf2c85c692d25f9bdc4d488a73571951201613cc4b3faae3ce1fd8ccbf60f63bab5c0ec97e3d9851fce70d38be3bb988a9767a5ebad6d98b024010c27d9e61841274c784df0daddc38acfd1b98ecbafb5b649a6947988f7018c93f58f047771736ecf8d2b53d3dc88c641e8e28f6f69d788aa63a8d3f076027515ade3aa8aed859705260343ed6fe94d6de27798c464d5641ded27aa90951345becde76b4cc516a706ad8fc062da9e145a9c7bc5bf5b565dab7a4b528e0f4ebe046a90df76c4243f53fe427adf23385ce79b2b7c567ada594748ba31ed8aac36b87fe080b0261bd0962525685e5e322c9853995a4eb13eda955e3e8fe46217140bb7d84bbf44e611b76f9353234bd9bf885b55f389e0411b363e563afe84aabea349f2ae1858a88cb295130474a11105a626373682bec36324454451e8c189a875c9860896d651d387b380cff84ab2203f7f0be64744b1ecfa044457e64255c0f0395393fb079a74b142572ad041fa2915ccb9ff66aeebe7ae1e383c43ba5912980810e7ad78e6a75cefb05e64fcf00e9e7585cea111f34e3a9a524ed965d9a99befbebd9a431f54d80a79d88310f8c6cc156ada4a007c2797da8dee8e4d7621b1a6f7ee3e2eda09d7c0768791afecec80146f9cf4911aaf70aaa575ecb18bf35c4530e8195f31fdc7e4f5f9a0eeeab9e9988dd360e159e9833ffe89d53bdadb7677566632c320ecd2194c1033b7a861d21d2901c29328aa2f73b95d62d19ff1788a517f99c24d36b52d6b97df41eb21f7e660d730321e4d1c113cc851529442beecd3fff00d92bba9b2467f7a35417b0b10e07c4c68c5dc4d247ba0e303b25bba514332c4b4378a4963216a5194173a59977ed5290d08fba1860651c91d23e7a5e", @typed={0x7, 0x73, 0x0, 0x0, @str='^[\x00'}, @nested={0x4, 0x138}]}, @generic="b2d1c9ce0998b457e8a5d4ff9690b6c8402cf84ad8ccc4b29e24bbd7f4bb4c32e61bb1713c80aa436574815a7846d80a4670d9415028a63beea8a8a382fc573ee82d5d60ee9e5d3ddf55ceec35fdaef8f968ec4249987c0f3daa8878850970300516473402567e24d15b18920dc571d7bda2f7275acdc72fcafd5f6c28c9861ee98709b2e878ca406a", @nested={0x49, 0x60, 0x0, 0x1, [@generic="1d867110d4c12a46231899b16837f2ca6483722a13ee83809d8322ad191494d22d35cafc1227a7d3be077aefcbcb33ab70054dd1305cf7dc8a", @typed={0xc, 0xcc, 0x0, 0x0, @u64=0x7}]}]}]}, 0x11bc}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r1, 0xa05, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0x5, 0x3, '!'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. [ 349.221628][ T5848] cgroup: Unknown subsys name 'net' [ 349.339791][ T5848] cgroup: Unknown subsys name 'cpuset' [ 349.348566][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 351.122050][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 353.272226][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.283080][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.285697][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.298796][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.299976][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.309992][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.313755][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.329282][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.335427][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.337454][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.353304][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.363508][ T5870] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 353.371266][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.374165][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.378750][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.387001][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.399730][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.407570][ T5872] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 353.422757][ T5872] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 353.430111][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.440146][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.450430][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.461387][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 353.469772][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.852736][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 353.917050][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 353.938431][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 354.086258][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 354.097424][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.104723][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.113128][ T5860] bridge_slave_0: entered allmulticast mode [ 354.120171][ T5860] bridge_slave_0: entered promiscuous mode [ 354.147680][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.154864][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.162745][ T5860] bridge_slave_1: entered allmulticast mode [ 354.170153][ T5860] bridge_slave_1: entered promiscuous mode [ 354.224104][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.232393][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.240078][ T5859] bridge_slave_0: entered allmulticast mode [ 354.248119][ T5859] bridge_slave_0: entered promiscuous mode [ 354.282624][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.290794][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.298284][ T5859] bridge_slave_1: entered allmulticast mode [ 354.305663][ T5859] bridge_slave_1: entered promiscuous mode [ 354.323571][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.332904][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.341845][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.349758][ T5858] bridge_slave_0: entered allmulticast mode [ 354.357100][ T5858] bridge_slave_0: entered promiscuous mode [ 354.397300][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.417168][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.424279][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.432036][ T5858] bridge_slave_1: entered allmulticast mode [ 354.439372][ T5858] bridge_slave_1: entered promiscuous mode [ 354.482453][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.494740][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.513769][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.527538][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.545066][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.552411][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.560332][ T5857] bridge_slave_0: entered allmulticast mode [ 354.567461][ T5857] bridge_slave_0: entered promiscuous mode [ 354.588902][ T5860] team0: Port device team_slave_0 added [ 354.624561][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.631903][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.640060][ T5857] bridge_slave_1: entered allmulticast mode [ 354.648417][ T5857] bridge_slave_1: entered promiscuous mode [ 354.656529][ T5860] team0: Port device team_slave_1 added [ 354.674626][ T5859] team0: Port device team_slave_0 added [ 354.683337][ T5858] team0: Port device team_slave_0 added [ 354.692404][ T5858] team0: Port device team_slave_1 added [ 354.727085][ T5859] team0: Port device team_slave_1 added [ 354.736369][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.766547][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.773529][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.799752][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.822957][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.832772][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.840007][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.866192][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.879226][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.886299][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.912332][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.935981][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.942956][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.969185][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.012967][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.020070][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.046791][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.077887][ T5857] team0: Port device team_slave_0 added [ 355.092107][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.099550][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.125664][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.152858][ T5857] team0: Port device team_slave_1 added [ 355.183425][ T5858] hsr_slave_0: entered promiscuous mode [ 355.190339][ T5858] hsr_slave_1: entered promiscuous mode [ 355.233521][ T5860] hsr_slave_0: entered promiscuous mode [ 355.240231][ T5860] hsr_slave_1: entered promiscuous mode [ 355.247220][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.255067][ T5860] Cannot create hsr debugfs directory [ 355.261981][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.269716][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.295764][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.319909][ T5859] hsr_slave_0: entered promiscuous mode [ 355.326313][ T5859] hsr_slave_1: entered promiscuous mode [ 355.332411][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.340192][ T5859] Cannot create hsr debugfs directory [ 355.353857][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.361115][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.387215][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.429304][ T5146] Bluetooth: hci3: command tx timeout [ 355.505462][ T5146] Bluetooth: hci1: command tx timeout [ 355.505470][ T5875] Bluetooth: hci2: command tx timeout [ 355.516760][ T5875] Bluetooth: hci0: command tx timeout [ 355.526933][ T5857] hsr_slave_0: entered promiscuous mode [ 355.533832][ T5857] hsr_slave_1: entered promiscuous mode [ 355.540890][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.548641][ T5857] Cannot create hsr debugfs directory [ 355.805155][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 355.819031][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 355.833150][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 355.846685][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 355.904185][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.922302][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.948948][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.968071][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.025096][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 356.061309][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.074235][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 356.099171][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 356.153360][ T5857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 356.177254][ T5857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 356.191151][ T5857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.212474][ T5857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.229200][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.292447][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.318528][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.326023][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.348036][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.389467][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.396680][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.421745][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.443938][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.451145][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.478121][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.485812][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.529157][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.584276][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.609497][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.616709][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.652493][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.668222][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.675443][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.729608][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.774261][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.781463][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.804184][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.811361][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.031104][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.162835][ T5860] veth0_vlan: entered promiscuous mode [ 357.192801][ T5860] veth1_vlan: entered promiscuous mode [ 357.242273][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.315030][ T5860] veth0_macvtap: entered promiscuous mode [ 357.338018][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.349798][ T5860] veth1_macvtap: entered promiscuous mode [ 357.361185][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.394898][ T5858] veth0_vlan: entered promiscuous mode [ 357.423321][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.436562][ T5858] veth1_vlan: entered promiscuous mode [ 357.463203][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.480123][ T5860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.489875][ T5860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.499230][ T5860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.505746][ T5146] Bluetooth: hci3: command tx timeout [ 357.509834][ T5860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.550733][ T5859] veth0_vlan: entered promiscuous mode [ 357.561572][ T5857] veth0_vlan: entered promiscuous mode [ 357.585912][ T5146] Bluetooth: hci0: command tx timeout [ 357.586010][ T5875] Bluetooth: hci2: command tx timeout [ 357.591461][ T54] Bluetooth: hci1: command tx timeout [ 357.626464][ T5858] veth0_macvtap: entered promiscuous mode [ 357.636766][ T5857] veth1_vlan: entered promiscuous mode [ 357.643572][ T5858] veth1_macvtap: entered promiscuous mode [ 357.661619][ T5859] veth1_vlan: entered promiscuous mode [ 357.683740][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.698970][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.713666][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.755637][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.766452][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.778519][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.802726][ T5858] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.811724][ T5858] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.820642][ T5858] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.830679][ T5858] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.871830][ T5859] veth0_macvtap: entered promiscuous mode [ 357.886095][ T5857] veth0_macvtap: entered promiscuous mode [ 357.895042][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.899207][ T5857] veth1_macvtap: entered promiscuous mode [ 357.913878][ T5859] veth1_macvtap: entered promiscuous mode [ 357.922367][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.962040][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.977217][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.987250][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.999106][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.010384][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.057995][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.072999][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.084470][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.095227][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.107447][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.121261][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.132045][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.142117][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.153818][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.163811][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.174346][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.185684][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.199533][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.202431][ T5857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.207439][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.224326][ T5857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.235225][ T5857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.244719][ T5857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.268668][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.279398][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.289419][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.299925][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.311302][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.321871][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.332686][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.375082][ T5859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.384120][ T5859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.394776][ T5859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.404227][ T5859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.419336][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.435798][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.461501][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 358.528258][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.537589][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.669084][ T5905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.687050][ T5905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.742997][ T5905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.766415][ T5905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.781195][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.793043][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.918580][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.938018][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 358.963932][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.002649][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 359.178007][ T5926] Zero length message leads to an empty skb [ 359.404539][ T5942] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 359.490738][ T5935] zswap: compressor not available [ 359.585912][ T5146] Bluetooth: hci3: command tx timeout [ 359.670728][ T5146] Bluetooth: hci0: command tx timeout [ 359.678361][ T5146] Bluetooth: hci1: command tx timeout [ 359.683836][ T5146] Bluetooth: hci2: command tx timeout [ 359.845645][ T5953] sg_write: data in/out 1347869271/28903 bytes for SCSI command 0x0-- guessing data in; [ 359.845645][ T5953] program syz.3.7 not setting count and/or reply_len properly [ 360.786536][ T5970] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 361.665803][ T5875] Bluetooth: hci3: command tx timeout [ 361.747312][ T5875] Bluetooth: hci2: command tx timeout [ 361.747361][ T5146] Bluetooth: hci1: command tx timeout [ 361.752758][ T5875] Bluetooth: hci0: command tx timeout [ 362.262558][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 362.534818][ T5984] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 363.393415][ T6003] Invalid ELF header magic: != ELF [ 364.990620][ T6028] process 'syz.0.21' launched ':,' with NULL argv: empty string added [ 367.195963][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 368.452313][ T6091] netlink: 330 bytes leftover after parsing attributes in process `syz.1.30'. [ 368.516550][ T6091] ›: renamed from hsr0 (while UP) [ 368.872145][ T6084] ======================================================= [ 368.872145][ T6084] WARNING: The mand mount option has been deprecated and [ 368.872145][ T6084] and is ignored by this kernel. Remove the mand [ 368.872145][ T6084] option from the mount to silence this warning. [ 368.872145][ T6084] ======================================================= [ 370.395196][ T6118] netlink: 350 bytes leftover after parsing attributes in process `syz.3.36'. [ 372.272442][ T6135] sp0: Synchronizing with TNC [ 373.318696][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 374.936840][ T6164] HfR: entered promiscuous mode [ 374.978005][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 375.175774][ T6164] HfR: left promiscuous mode [ 376.899609][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 378.857360][ T6228] ovs_: entered promiscuous mode [ 379.430325][ T6228] binder: 6227:6228 unknown command 1986356271 [ 379.535536][ T6228] binder: 6227:6228 ioctl c0306201 9 returned -22 [ 380.718716][ T6235] capability: warning: `syz.0.60' uses 32-bit capabilities (legacy support in use) [ 381.627538][ T29] audit: type=1800 audit(8277292047.130:2): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.67" name="dbroot" dev="configfs" ino=9242 res=0 errno=0 [ 381.647489][ T29] audit: type=1804 audit(8277292047.140:3): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.67" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=9242 res=1 errno=0 [ 381.830621][ T6268] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 383.996001][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.002593][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.329438][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 384.390261][ T6316] ubi0: attaching mtd0 [ 384.400283][ T6316] ubi0: scanning is finished [ 384.404983][ T6316] ubi0: empty MTD device detected [ 384.486233][ T6317] netlink: 338 bytes leftover after parsing attributes in process `syz.3.80'. [ 384.665420][ T6316] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 384.685475][ T6316] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 384.692848][ T6316] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 384.733700][ T6316] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 384.781436][ T6316] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 384.807665][ T6316] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 384.849327][ T6316] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2971927851 [ 384.904336][ T6316] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 384.953856][ T6324] ubi0: background thread "ubi_bgt0d" started, PID 6324 [ 385.074920][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 385.270688][ T6339] sock: sock_set_timeout: `syz.2.84' (pid 6339) tries to set negative timeout [ 385.487023][ T5875] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 385.884681][ T6355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.91'. [ 385.904481][ T6356] netlink: 334 bytes leftover after parsing attributes in process `syz.0.90'. [ 387.017340][ T6379] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 387.023949][ T6379] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 387.209100][ T6379] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 387.455027][ T6379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.483210][ T6379] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 387.554676][ T6379] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 387.726373][ T6379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 387.732409][ T6379] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 387.862888][ T6379] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 387.952276][ T6379] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 387.965665][ T6379] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 388.010253][ T6379] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 389.027096][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 389.505885][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout [ 389.801338][ T5875] Bluetooth: hci2: command 0x0c1a tx timeout [ 389.985485][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout [ 390.498014][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.106'. [ 390.583420][ T6439] lo: entered promiscuous mode [ 390.600082][ T6439] lo: entered allmulticast mode [ 391.100334][ T6454] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 391.118715][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 391.585831][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout [ 391.825446][ T5875] Bluetooth: hci2: command 0x0c1a tx timeout [ 392.065700][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout [ 392.580167][ T6475] zero sized request [ 393.193122][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 393.665644][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout [ 393.905463][ T5875] Bluetooth: hci2: command 0x0c1a tx timeout [ 394.147141][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout [ 395.574471][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'. [ 402.951061][ T6651] Invalid ELF header magic: != ELF [ 403.831691][ T6667] binder: 6665:6667 ioctl c0105512 1 returned -22 [ 404.997550][ T6675] ip_vti0: entered allmulticast mode [ 405.198232][ T6686] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 405.337851][ T6686] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 405.405902][ T6686] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 405.485747][ T6686] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 406.227510][ T6716] kAFS: No cell specified [ 407.035494][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 407.345614][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout [ 407.425520][ T5875] Bluetooth: hci2: command 0x0c1a tx timeout [ 407.505374][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout [ 407.594090][ T6738] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[6738] [ 407.681373][ T6745] netlink: 326 bytes leftover after parsing attributes in process `syz.1.177'. [ 407.745330][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.754486][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.285182][ T29] audit: type=1800 audit(8277292075.840:4): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.193" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 413.128991][ T6860] Process accounting resumed [ 414.687588][ T6853] Process accounting resumed [ 415.469728][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 415.716698][ T6907] netlink: 322 bytes leftover after parsing attributes in process `syz.3.213'. [ 415.785324][ T6908] netlink: 322 bytes leftover after parsing attributes in process `syz.3.213'. [ 418.125590][ T6931] netlink: 334 bytes leftover after parsing attributes in process `syz.3.218'. [ 418.142511][ T6931] netlink: 'syz.3.218': attribute type 11 has an invalid length. [ 418.552983][ T6937] HfR: entered promiscuous mode [ 418.676001][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'. [ 418.755800][ T6937] HfR: left promiscuous mode [ 420.700536][ T6954] ima: policy update failed [ 420.765493][ T29] audit: type=1802 audit(8277292086.320:5): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.224" res=0 errno=0 [ 425.576993][ T7061] netlink: 'syz.0.241': attribute type 1 has an invalid length. [ 428.407612][ T7083] mkiss: ax0: crc mode is auto. [ 434.481653][ T7176] netlink: 'syz.3.263': attribute type 4 has an invalid length. [ 434.651908][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.263'. [ 435.896551][ T7180] team0: Port device team_slave_0 removed [ 438.952277][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'. [ 439.067972][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'. [ 439.134138][ T7237] netlink: 342 bytes leftover after parsing attributes in process `syz.3.279'. [ 443.109450][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 443.140102][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 445.435770][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.442148][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.515461][ T7366] mmap: syz.3.302 (7366) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 446.530051][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 447.152994][ T29] audit: type=1326 audit(8277292041.590:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.3.306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc98c385d29 code=0x0 [ 447.265863][ T29] audit: type=1326 audit(8277292041.590:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.3.306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc98c385d29 code=0x0 [ 448.189576][ T7419] netlink: 338 bytes leftover after parsing attributes in process `syz.2.314'. [ 449.205880][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 450.084684][ T7464] ovs_: entered promiscuous mode [ 450.226849][ T7472] netlink: zone id is out of range [ 450.232044][ T7472] netlink: zone id is out of range [ 450.266766][ T7472] netlink: zone id is out of range [ 450.272000][ T7472] netlink: zone id is out of range [ 450.290570][ T7465] binder: 7463:7465 unknown command 1986356271 [ 450.291642][ T7472] netlink: zone id is out of range [ 450.319214][ T7465] binder: 7463:7465 ioctl c0306201 9 returned -22 [ 450.341428][ T7472] netlink: zone id is out of range [ 450.366113][ T7472] netlink: zone id is out of range [ 450.371312][ T7472] netlink: zone id is out of range [ 450.398513][ T7472] netlink: zone id is out of range [ 450.403714][ T7472] netlink: zone id is out of range [ 451.113416][ T7494] netlink: 'syz.3.327': attribute type 3 has an invalid length. [ 451.122297][ T7494] netlink: 332 bytes leftover after parsing attributes in process `syz.3.327'. [ 451.167108][ T7495] netlink: 'syz.3.327': attribute type 3 has an invalid length. [ 451.174873][ T7495] netlink: 332 bytes leftover after parsing attributes in process `syz.3.327'. [ 451.605834][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 452.603838][ T7513] delete_channel: no stack [ 452.728881][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'. [ 468.531445][ T7786] kAFS: unparsable volume name [ 468.735218][ T7786] svc: failed to register nfsdv3 RPC service (errno 111). [ 468.745582][ T7786] svc: failed to register nfsaclv3 RPC service (errno 111). [ 469.860035][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'. [ 471.807633][ T7841] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[7841] [ 472.093042][ T7848] netlink: 504 bytes leftover after parsing attributes in process `syz.2.403'. [ 472.170657][ T7848] netlink: 504 bytes leftover after parsing attributes in process `syz.2.403'. [ 472.669450][ T29] audit: type=1807 audit(8277292067.111:8): UNKNOWN=$ res=0 [ 472.767241][ T29] audit: type=1802 audit(8277292067.211:9): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.405" res=0 errno=0 [ 473.214469][ T7853] ima: policy update failed [ 473.244274][ T29] audit: type=1802 audit(8277292067.691:10): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.405" res=0 errno=0 [ 473.851089][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 473.933978][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. syzkaller syzkaller login: [ 474.598822][ T7870] Process accounting resumed [ 478.679511][ T7942] netlink: 330 bytes leftover after parsing attributes in process `syz.1.423'. [ 481.071776][ T7955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 481.307055][ T7955] gretap0: entered promiscuous mode [ 486.530114][ T8037] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 491.816357][ T29] audit: type=1326 audit(8277292086.253:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.0.458" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9db4585d29 code=0x0 [ 493.313872][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.465'. [ 494.520758][ T8183] netlink: 322 bytes leftover after parsing attributes in process `syz.1.468'. [ 494.679450][ T8183] bond0: entered promiscuous mode [ 494.690218][ T8183] bond_slave_0: entered promiscuous mode [ 494.728559][ T8183] bond_slave_1: entered promiscuous mode [ 494.751911][ T8183] bond0: entered allmulticast mode [ 494.768621][ T8183] bond_slave_0: entered allmulticast mode [ 494.780875][ T8183] bond_slave_1: entered allmulticast mode [ 497.665940][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'. [ 498.762271][ T8226] bond0: (slave bond_slave_1): Releasing backup interface [ 504.963439][ T8327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.495'. [ 505.331998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 505.522105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 505.530773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 505.540764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 505.549435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 505.558164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 505.753472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 506.524580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 506.864473][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.871161][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.061742][ T8336] Process accounting paused [ 507.179541][ T8349] cgroup: fork rejected by pids controller in /syz2 syzkaller syzkaller login: [ 509.011797][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 510.527697][ T8534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.512'. [ 510.527740][ T8534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.527821][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.982971][ T8534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.983010][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.450885][ T8580] futex_wake_op: syz.0.520 tries to shift op by 64; fix this program [ 515.054785][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 515.111770][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 521.789906][ T8682] netlink: 342 bytes leftover after parsing attributes in process `syz.0.546'. [ 522.352667][ T8697] netlink: 338 bytes leftover after parsing attributes in process `syz.1.545'. [ 522.398614][ T8697] netlink: 338 bytes leftover after parsing attributes in process `syz.1.545'. [ 523.701106][ T8720] Invalid ELF header magic: != ELF [ 526.672461][ T8780] Process accounting resumed [ 530.398075][ T8870] lo: entered allmulticast mode [ 530.456538][ T8870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.584'. [ 530.558247][ T8867] type: 256 invalid [ 531.592410][ T8869] lo: left allmulticast mode [ 532.296692][ T8873] kexec: Could not allocate control_code_buffer [ 532.609102][ T8895] GUP no longer grows the stack in syz.3.588 (8895): 1000-401000 (0) [ 532.641923][ T8895] CPU: 0 UID: 0 PID: 8895 Comm: syz.3.588 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 532.652609][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 532.662732][ T8895] Call Trace: [ 532.666065][ T8895] [ 532.669048][ T8895] dump_stack_lvl+0x16c/0x1f0 [ 532.673806][ T8895] gup_vma_lookup+0x1d2/0x220 [ 532.678557][ T8895] fixup_user_fault+0x26f/0x540 [ 532.683503][ T8895] fault_in_user_writeable+0x70/0xe0 [ 532.688875][ T8895] futex_wake_op+0x976/0xdc0 [ 532.693555][ T8895] ? __pfx_futex_wake_op+0x10/0x10 [ 532.698726][ T8895] ? futex_wait+0x121/0x380 [ 532.703346][ T8895] do_futex+0x2eb/0x350 [ 532.707592][ T8895] ? __pfx_do_futex+0x10/0x10 [ 532.712354][ T8895] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 532.717603][ T8895] __x64_sys_futex+0x1e1/0x4c0 [ 532.722451][ T8895] ? __pfx___x64_sys_futex+0x10/0x10 [ 532.727810][ T8895] ? rcu_is_watching+0x12/0xc0 [ 532.732663][ T8895] do_syscall_64+0xcd/0x250 [ 532.737268][ T8895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.743240][ T8895] RIP: 0033:0x7fc98c385d29 [ 532.747718][ T8895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.769485][ T8895] RSP: 002b:00007fc98d169038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 532.777969][ T8895] RAX: ffffffffffffffda RBX: 00007fc98c575fa0 RCX: 00007fc98c385d29 [ 532.785992][ T8895] RDX: 0000000000000002 RSI: 0000000000000085 RDI: 0000000000000000 [ 532.794019][ T8895] RBP: 00007fc98c401b08 R08: 0000000000000000 R09: 0000000000000001 [ 532.802054][ T8895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.810079][ T8895] R13: 0000000000000000 R14: 00007fc98c575fa0 R15: 00007ffd78e31808 [ 532.818117][ T8895] [ 532.821317][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.137475][ T8931] netlink: 'syz.1.595': attribute type 4 has an invalid length. [ 536.032885][ T8943] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 537.188494][ T8961] Process accounting resumed [ 537.988796][ T8980] netlink: 338 bytes leftover after parsing attributes in process `syz.1.606'. [ 539.952070][ T8999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.610'. [ 540.072434][ T8999] ip6gre0: entered promiscuous mode [ 541.214698][ T9019] mkiss: ax0: crc mode is auto. [ 546.220687][ T9098] netlink: 'syz.2.636': attribute type 4 has an invalid length. [ 546.255539][ T9098] netlink: 314 bytes leftover after parsing attributes in process `syz.2.636'. [ 547.120646][ T9118] nfsd: Unknown parameter 'IPVS' [ 547.148936][ T9121] nfsd: Unknown parameter 'IPVS' [ 547.575475][ T9133] UHID_CREATE from different security context by process 687 (syz.1.644), this is not allowed. [ 548.991940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 549.997879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 553.095876][ T9214] Process accounting resumed [ 554.854417][ T9257] binder: 9256:9257 ioctl 541b 9 returned -22 [ 556.846906][ T9308] Process accounting paused [ 556.865222][ T9305] HfR: entered promiscuous mode [ 556.870989][ T9311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.693'. [ 556.889100][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.691'. [ 556.914068][ T9305] HfR: left promiscuous mode [ 557.094460][ T9316] binder: 9315:9316 ioctl c0105512 1 returned -22 [ 557.122041][ T9316] binder: 9315:9316 ioctl c0306201 9 returned -14 [ 557.532480][ T29] audit: type=1800 audit(8277292054.960:12): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.694" name="dbroot" dev="configfs" ino=20801 res=0 errno=0 [ 562.316458][ T29] audit: type=1800 audit(8277292059.750:13): pid=9393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.712" name="version" dev="configfs" ino=21602 res=0 errno=0 [ 563.684123][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 563.822996][ T9402] rtc_cmos 00:00: Alarms can be up to one day in the future [ 564.000853][ T9422] can: request_module (can-proto-0) failed. [ 564.141897][ T9404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.535398][ T9439] warning: `syz.1.725' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 566.527670][ T9453] ima: policy update failed [ 566.555036][ T29] audit: type=1802 audit(8277292063.990:14): pid=9453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.727" res=0 errno=0 [ 568.305779][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.314094][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.852557][ T29] audit: type=1800 audit(8277292067.290:15): pid=9532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.745" name="version" dev="configfs" ino=21936 res=0 errno=0 [ 571.157537][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 572.885843][ T9575] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 572.912375][ T9575] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 572.919623][ T9575] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 572.933363][ T9575] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 573.830933][ T9606] netlink: 342 bytes leftover after parsing attributes in process `syz.0.764'. [ 574.223009][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 574.941715][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 574.947825][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 574.955779][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout [ 575.836282][ T9628] netlink: 330 bytes leftover after parsing attributes in process `syz.2.770'. [ 576.032021][ T9628] ›: renamed from veth0_vlan [ 576.047095][ T29] audit: type=1800 audit(8277292073.480:16): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.771" name="version" dev="configfs" ino=22622 res=0 errno=0 [ 576.192165][ T9630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.769'. [ 576.894078][ T9653] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 577.411000][ T9654] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 577.664442][ T9661] ecryptfs_miscdev_write: Invalid packet size [49] [ 578.235552][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'. [ 579.482906][ T29] audit: type=1800 audit(8277292076.910:17): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.784" name="version" dev="configfs" ino=22236 res=0 errno=0 [ 581.098987][ T29] audit: type=1800 audit(8277292078.530:18): pid=9736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.793" name="version" dev="configfs" ino=22765 res=0 errno=0 [ 583.509477][ T29] audit: type=1326 audit(8277292080.920:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9774 comm="syz.1.801" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc758585d29 code=0x0 [ 583.778088][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.801'. [ 584.683010][ T9780] Process accounting paused [ 585.081970][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'. [ 587.566675][ T9671] Process accounting resumed [ 588.524193][ T9826] device-mapper: ioctl: Unable to rename non-existent device, to „ [ 588.854949][ T9851] Process accounting resumed [ 590.741075][ T9885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.825'. [ 590.844213][ T9885] ipvlan0: entered promiscuous mode [ 590.870481][ T9885] ipvlan0: entered allmulticast mode [ 590.879032][ T9885] veth0_vlan: entered allmulticast mode [ 592.030322][ T9910] netlink: 'syz.2.835': attribute type 28 has an invalid length. [ 592.077168][ T9910] netlink: 326 bytes leftover after parsing attributes in process `syz.2.835'. [ 592.441387][ T9898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.831'. [ 592.472281][ T9898] lo: entered promiscuous mode [ 592.477135][ T9898] lo: entered allmulticast mode [ 595.533555][ T9973] netlink: 338 bytes leftover after parsing attributes in process `syz.1.849'. [ 596.532431][ T9975] netlink: 338 bytes leftover after parsing attributes in process `syz.1.849'. [ 599.455118][T10012] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.1024.4294967293), cmd(2) [ 603.784373][T10051] tipc: Started in network mode [ 603.789513][T10051] tipc: Node identity ee00, cluster identity 4711 [ 603.811875][T10051] tipc: Node number set to 60928 [ 604.118645][T10055] FAULT_INJECTION: forcing a failure. [ 604.118645][T10055] name failslab, interval 1, probability 0, space 0, times 0 [ 604.150939][T10055] CPU: 0 UID: 0 PID: 10055 Comm: syz.3.867 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 604.161793][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 604.171901][T10055] Call Trace: [ 604.175223][T10055] [ 604.178218][T10055] dump_stack_lvl+0x16c/0x1f0 [ 604.182964][T10055] should_fail_ex+0x497/0x5b0 [ 604.187702][T10055] ? fs_reclaim_acquire+0xae/0x150 [ 604.192873][T10055] should_failslab+0xc2/0x120 [ 604.197621][T10055] __kmalloc_noprof+0xce/0x4f0 [ 604.202456][T10055] ? kernfs_fop_read_iter+0x3ef/0x580 [ 604.207917][T10055] kernfs_fop_read_iter+0x3ef/0x580 [ 604.213194][T10055] ? rw_verify_area+0xd0/0x700 [ 604.218031][T10055] vfs_read+0x87f/0xbe0 [ 604.222260][T10055] ? __pfx_vfs_read+0x10/0x10 [ 604.227007][T10055] ? lock_acquire+0x2f/0xb0 [ 604.231570][T10055] ? __fget_files+0x40/0x3a0 [ 604.236244][T10055] __x64_sys_pread64+0x1f6/0x250 [ 604.241251][T10055] ? __pfx___x64_sys_pread64+0x10/0x10 [ 604.246791][T10055] do_syscall_64+0xcd/0x250 [ 604.251368][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.257377][T10055] RIP: 0033:0x7fc98c385d29 [ 604.261841][T10055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.281512][T10055] RSP: 002b:00007fc98d169038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 604.289997][T10055] RAX: ffffffffffffffda RBX: 00007fc98c575fa0 RCX: 00007fc98c385d29 [ 604.298029][T10055] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 604.306063][T10055] RBP: 00007fc98d169090 R08: 0000000000000000 R09: 0000000000000000 [ 604.314270][T10055] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 604.322296][T10055] R13: 0000000000000000 R14: 00007fc98c575fa0 R15: 00007ffd78e31808 [ 604.330347][T10055] [ 608.411468][T10119] netlink: 122 bytes leftover after parsing attributes in process `syz.2.883'. [ 609.333225][T10124] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 609.339727][T10124] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 609.354060][T10124] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 609.370517][T10124] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 610.032763][T10151] netlink: 338 bytes leftover after parsing attributes in process `syz.3.892'. [ 610.052039][T10151] netlink: 338 bytes leftover after parsing attributes in process `syz.3.892'. [ 610.085785][T10154] netlink: 210 bytes leftover after parsing attributes in process `syz.3.892'. [ 610.798351][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 611.349171][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout [ 611.421952][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout [ 611.426427][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 616.629750][T10228] Process accounting resumed [ 618.025687][T10296] netlink: 342 bytes leftover after parsing attributes in process `syz.2.917'. [ 618.046210][T10296] netlink: 182 bytes leftover after parsing attributes in process `syz.2.917'. [ 618.253765][T10304] net_ratelimit: 364 callbacks suppressed [ 618.253790][T10304] openvswitch: netlink: Message has 4 unknown bytes. [ 618.375106][T10305] syz.0.918 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 618.782529][T10276] Process accounting paused [ 619.313492][T10311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.921'. [ 620.320730][T10326] could not allocate digest TFM handle [ 621.636027][T10349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.929'. [ 621.832016][T10349] hsr_slave_0: left promiscuous mode [ 621.889030][T10349] hsr_slave_1: left promiscuous mode [ 625.799332][T10398] could not allocate digest TFM handle [ 627.192536][T10430] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 627.886772][T10446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.947'. [ 629.063019][T10476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.957'. [ 629.746147][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.752791][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.268516][T10507] netlink: 'syz.2.965': attribute type 11 has an invalid length. [ 630.285537][T10507] netlink: 'syz.2.965': attribute type 11 has an invalid length. [ 630.803027][T10512] netlink: 8956 bytes leftover after parsing attributes in process `syz.2.966'. [ 630.832974][T10512] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 631.753306][T10530] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(2) [ 634.701930][ T29] audit: type=1800 audit(4294967299.830:20): pid=10596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.984" name="version" dev="configfs" ino=25586 res=0 errno=0 [ 635.831925][T10611] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[10611] [ 637.395113][ T29] audit: type=1800 audit(4294967308.519:21): pid=10657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.995" name="version" dev="configfs" ino=26723 res=0 errno=0 [ 638.485156][T10680] bridge0: port 3(vlan1) entered blocking state [ 638.524151][T10680] bridge0: port 3(vlan1) entered disabled state [ 638.566801][T10680] vlan1: entered allmulticast mode [ 638.597194][T10680] veth0_vlan: entered allmulticast mode [ 638.637052][T10680] vlan1: entered promiscuous mode [ 638.841157][T10691] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1005'. [ 638.906091][T10691] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1005'. [ 638.933665][T10697] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1007'. [ 639.704574][T10713] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 639.724523][T10713] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 640.395398][T10716] Process accounting resumed [ 643.283563][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'. [ 643.702527][T10787] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1029'. [ 645.852935][T10809] HfR: entered promiscuous mode [ 645.922142][ T29] audit: type=1800 audit(4294967317.051:22): pid=10812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1036" name="version" dev="configfs" ino=27065 res=0 errno=0 [ 647.078788][T10803] Process accounting paused [ 647.911181][T10832] ecryptfs_miscdev_write: Invalid packet size [49] [ 648.013546][T10837] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1041'. [ 648.143040][T10841] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1041'. [ 649.162451][T10850] Process accounting resumed [ 653.973668][T10926] binder: 10925:10926 ioctl 40186210 9 returned -22 syzkaller syzkaller login: [ 664.095022][T10983] kexec: Could not allocate control_code_buffer [ 664.105904][T11015] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1074'. [ 664.538711][ T5146] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 665.467007][T11031] FAULT_INJECTION: forcing a failure. [ 665.467007][T11031] name failslab, interval 1, probability 0, space 0, times 0 [ 665.508036][T11031] CPU: 0 UID: 0 PID: 11031 Comm: syz.3.1079 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 665.518903][T11031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 665.529016][T11031] Call Trace: [ 665.532342][T11031] [ 665.535318][T11031] dump_stack_lvl+0x16c/0x1f0 [ 665.540068][T11031] should_fail_ex+0x497/0x5b0 [ 665.544813][T11031] ? fs_reclaim_acquire+0xae/0x150 [ 665.549992][T11031] should_failslab+0xc2/0x120 [ 665.554749][T11031] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 665.560199][T11031] ? getname_flags.part.0+0x4c/0x550 [ 665.565567][T11031] getname_flags.part.0+0x4c/0x550 [ 665.570765][T11031] ? bpf_lsm_capable+0x9/0x10 [ 665.575511][T11031] getname+0x8d/0xe0 [ 665.579470][T11031] __x64_sys_acct+0x73/0x220 [ 665.584124][T11031] ? lockdep_hardirqs_on+0x7c/0x110 [ 665.589482][T11031] do_syscall_64+0xcd/0x250 [ 665.594065][T11031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.600036][T11031] RIP: 0033:0x7fc98c385d29 [ 665.604508][T11031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.624188][T11031] RSP: 002b:00007fc98d169038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 665.632664][T11031] RAX: ffffffffffffffda RBX: 00007fc98c575fa0 RCX: 00007fc98c385d29 [ 665.640686][T11031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 665.648801][T11031] RBP: 00007fc98d169090 R08: 0000000000000000 R09: 0000000000000000 [ 665.656828][T11031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.664856][T11031] R13: 0000000000000000 R14: 00007fc98c575fa0 R15: 00007ffd78e31808 [ 665.672900][T11031] [ 669.240662][ T29] audit: type=1800 audit(4294967340.331:23): pid=11067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1087" name="version" dev="configfs" ino=28346 res=0 errno=0 [ 670.515491][T11077] erspan0: entered allmulticast mode [ 672.533958][T11069] Process accounting paused [ 674.493765][T11110] ptrace attach of "./syz-executor exec"[5860] was attempted by "./syz-executor exec"[11110] [ 676.608828][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1099'. [ 678.070744][T11135] Process accounting resumed [ 680.269485][T11161] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1107'. [ 680.635406][T11162] Process accounting paused [ 682.474375][T11211] usb usb15: usbfs: interface 0 claimed by hub while 'syz.3.1116' sets config #0 [ 682.595297][T11212] usb usb15: usbfs: interface 0 claimed by hub while 'syz.3.1116' sets config #0 [ 684.010659][T10889] syz.0.1048 (10889) used greatest stack depth: 18544 bytes left [ 691.180979][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.187381][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.352121][T11286] nbd: couldn't find device at index 33904 [ 692.363217][T11294] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1130'. [ 693.638968][T11316] vivid-003: ================= START STATUS ================= [ 693.712345][T11316] vivid-003: Radio HW Seek Mode: Bounded [ 693.726496][T11316] vivid-003: Radio Programmable HW Seek: false [ 693.754798][T11316] vivid-003: RDS Rx I/O Mode: Block I/O [ 693.772450][T11316] vivid-003: Generate RBDS Instead of RDS: false [ 693.794813][T11316] vivid-003: RDS Reception: true [ 693.829316][T11316] vivid-003: RDS Program Type: 0 inactive [ 693.845657][T11316] vivid-003: RDS PS Name: inactive [ 693.901603][T11316] vivid-003: RDS Radio Text: inactive [ 693.930963][T11316] vivid-003: RDS Traffic Announcement: false inactive [ 693.964669][T11316] vivid-003: RDS Traffic Program: false inactive [ 693.979676][T11316] vivid-003: RDS Music: false inactive [ 693.996896][T11316] vivid-003: ================== END STATUS ================== [ 694.265576][ T29] audit: type=1800 audit(4294967365.381:24): pid=11326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1139" name="version" dev="configfs" ino=29249 res=0 errno=0 [ 698.499907][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 699.299253][ T29] audit: type=1800 audit(4294967370.431:25): pid=11388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1153" name="version" dev="configfs" ino=30111 res=0 errno=0 [ 699.321332][T11388] FAULT_INJECTION: forcing a failure. [ 699.321332][T11388] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 699.349836][T11388] CPU: 1 UID: 0 PID: 11388 Comm: syz.0.1153 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 699.360766][T11388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 699.370853][T11388] Call Trace: [ 699.374156][T11388] [ 699.377108][T11388] dump_stack_lvl+0x16c/0x1f0 [ 699.381826][T11388] should_fail_ex+0x497/0x5b0 [ 699.386550][T11388] strncpy_from_user+0x3b/0x2d0 [ 699.391440][T11388] getname_flags.part.0+0x8f/0x550 [ 699.396600][T11388] getname_flags+0x93/0xf0 [ 699.401048][T11388] user_path_at+0x24/0x60 [ 699.405432][T11388] __x64_sys_truncate+0xf7/0x1e0 [ 699.410418][T11388] ? __pfx___x64_sys_truncate+0x10/0x10 [ 699.416026][T11388] do_syscall_64+0xcd/0x250 [ 699.420574][T11388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.426515][T11388] RIP: 0033:0x7f9db4585d29 [ 699.430976][T11388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.450728][T11388] RSP: 002b:00007f9db545b038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 699.459223][T11388] RAX: ffffffffffffffda RBX: 00007f9db4775fa0 RCX: 00007f9db4585d29 [ 699.467222][T11388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 699.475216][T11388] RBP: 00007f9db545b090 R08: 0000000000000000 R09: 0000000000000000 [ 699.483647][T11388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.491657][T11388] R13: 0000000000000000 R14: 00007f9db4775fa0 R15: 00007ffdd72a41e8 [ 699.499675][T11388] [ 700.145702][T11406] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 700.263473][T11409] Process accounting resumed [ 701.973425][ T29] audit: type=1800 audit(4294967373.101:26): pid=11441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1163" name="version" dev="configfs" ino=30292 res=0 errno=0 [ 701.996009][T11441] FAULT_INJECTION: forcing a failure. [ 701.996009][T11441] name failslab, interval 1, probability 0, space 0, times 0 [ 702.026696][T11441] CPU: 1 UID: 0 PID: 11441 Comm: syz.0.1163 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 702.037561][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 702.047674][T11441] Call Trace: [ 702.051005][T11441] [ 702.053983][T11441] dump_stack_lvl+0x16c/0x1f0 [ 702.058760][T11441] should_fail_ex+0x497/0x5b0 [ 702.063503][T11441] ? fs_reclaim_acquire+0xae/0x150 [ 702.068676][T11441] should_failslab+0xc2/0x120 [ 702.073401][T11441] __kmalloc_noprof+0xce/0x4f0 [ 702.078215][T11441] ? tomoyo_encode2+0x100/0x3e0 [ 702.083107][T11441] tomoyo_encode2+0x100/0x3e0 [ 702.087834][T11441] tomoyo_realpath_from_path+0x1a7/0x710 [ 702.093507][T11441] ? tomoyo_path_perm+0x262/0x480 [ 702.098589][T11441] tomoyo_path_perm+0x276/0x480 [ 702.103574][T11441] ? tomoyo_path_perm+0x262/0x480 [ 702.108648][T11441] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 702.114068][T11441] ? __pfx_map_id_up+0x10/0x10 [ 702.118877][T11441] ? __pfx_from_kgid+0x10/0x10 [ 702.123693][T11441] ? generic_permission+0xad/0x7d0 [ 702.128858][T11441] ? get_current_fs_domain+0x184/0x1f0 [ 702.134392][T11441] security_path_truncate+0x138/0x290 [ 702.139811][T11441] vfs_truncate+0x3a9/0x4e0 [ 702.144356][T11441] __x64_sys_truncate+0x174/0x1e0 [ 702.149451][T11441] ? __pfx___x64_sys_truncate+0x10/0x10 [ 702.155047][T11441] do_syscall_64+0xcd/0x250 [ 702.159597][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.165531][T11441] RIP: 0033:0x7f9db4585d29 [ 702.169977][T11441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.189613][T11441] RSP: 002b:00007f9db545b038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 702.198066][T11441] RAX: ffffffffffffffda RBX: 00007f9db4775fa0 RCX: 00007f9db4585d29 [ 702.206073][T11441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 702.214067][T11441] RBP: 00007f9db545b090 R08: 0000000000000000 R09: 0000000000000000 [ 702.222064][T11441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.230156][T11441] R13: 0000000000000000 R14: 00007f9db4775fa0 R15: 00007ffdd72a41e8 [ 702.238176][T11441] [ 702.278600][T11444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1165'. [ 702.399181][T11441] ERROR: Out of memory at tomoyo_realpath_from_path. [ 703.689692][T11442] Process accounting resumed [ 704.352592][T11487] FAULT_INJECTION: forcing a failure. [ 704.352592][T11487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.368213][ T29] audit: type=1800 audit(4294967375.481:27): pid=11487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1175" name="version" dev="configfs" ino=30818 res=0 errno=0 [ 704.428438][T11487] CPU: 0 UID: 0 PID: 11487 Comm: syz.0.1175 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 704.439299][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 704.449418][T11487] Call Trace: [ 704.452745][T11487] [ 704.455719][T11487] dump_stack_lvl+0x16c/0x1f0 [ 704.460469][T11487] should_fail_ex+0x497/0x5b0 [ 704.465224][T11487] _copy_to_user+0x32/0xd0 [ 704.469725][T11487] simple_read_from_buffer+0xd0/0x160 [ 704.475162][T11487] proc_fail_nth_read+0x198/0x270 [ 704.480271][T11487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.485907][T11487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.491554][T11487] vfs_read+0x1df/0xbe0 [ 704.495774][T11487] ? __fget_files+0x1fc/0x3a0 [ 704.500519][T11487] ? __pfx___mutex_lock+0x10/0x10 [ 704.505704][T11487] ? __pfx_vfs_read+0x10/0x10 [ 704.510464][T11487] ? __fget_files+0x206/0x3a0 [ 704.515221][T11487] ksys_read+0x12b/0x250 [ 704.519529][T11487] ? __pfx_ksys_read+0x10/0x10 [ 704.524372][T11487] do_syscall_64+0xcd/0x250 [ 704.528958][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.534947][T11487] RIP: 0033:0x7f9db458473c [ 704.539443][T11487] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 704.559121][T11487] RSP: 002b:00007f9db545b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 704.567599][T11487] RAX: ffffffffffffffda RBX: 00007f9db4775fa0 RCX: 00007f9db458473c [ 704.575624][T11487] RDX: 000000000000000f RSI: 00007f9db545b0a0 RDI: 0000000000000004 [ 704.583649][T11487] RBP: 00007f9db545b090 R08: 0000000000000000 R09: 0000000000000000 [ 704.591679][T11487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.599702][T11487] R13: 0000000000000000 R14: 00007f9db4775fa0 R15: 00007ffdd72a41e8 [ 704.607750][T11487] [ 705.441655][T11505] program syz.2.1180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 705.500634][T11505] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 707.099491][T11533] FAULT_INJECTION: forcing a failure. [ 707.099491][T11533] name failslab, interval 1, probability 0, space 0, times 0 [ 707.144837][T11533] CPU: 1 UID: 0 PID: 11533 Comm: syz.3.1187 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 707.155688][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 707.165798][T11533] Call Trace: [ 707.169122][T11533] [ 707.172094][T11533] dump_stack_lvl+0x16c/0x1f0 [ 707.176848][T11533] should_fail_ex+0x497/0x5b0 [ 707.181584][T11533] ? fs_reclaim_acquire+0xae/0x150 [ 707.186772][T11533] should_failslab+0xc2/0x120 [ 707.191527][T11533] __kmalloc_noprof+0xce/0x4f0 [ 707.196362][T11533] ? io_alloc_async_data+0x9d/0x150 [ 707.201626][T11533] ? __io_alloc_req_refill+0xeb/0x5b0 [ 707.207067][T11533] io_alloc_async_data+0x9d/0x150 [ 707.212160][T11533] io_prep_rw+0x30d/0xb70 [ 707.216548][T11533] io_prep_rwv+0xa8/0x360 [ 707.220933][T11533] ? __pfx_io_prep_rwv+0x10/0x10 [ 707.225941][T11533] io_submit_sqes+0x850/0x25f0 [ 707.230813][T11533] __do_sys_io_uring_enter+0xd43/0x1620 [ 707.236440][T11533] ? __fget_files+0x206/0x3a0 [ 707.241183][T11533] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 707.247238][T11533] ? fput+0x67/0x440 [ 707.251201][T11533] ? ksys_write+0x1ba/0x250 [ 707.255756][T11533] ? __pfx_ksys_write+0x10/0x10 [ 707.260681][T11533] do_syscall_64+0xcd/0x250 [ 707.265261][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.271231][T11533] RIP: 0033:0x7fc98c385d29 [ 707.275688][T11533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.295357][T11533] RSP: 002b:00007fc98d169038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 707.303839][T11533] RAX: ffffffffffffffda RBX: 00007fc98c575fa0 RCX: 00007fc98c385d29 [ 707.311857][T11533] RDX: 000000000000cd00 RSI: 0000000000000001 RDI: 0000000000000003 [ 707.319870][T11533] RBP: 00007fc98d169090 R08: 0000000000000000 R09: ffffffffffffffff [ 707.327889][T11533] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 707.335906][T11533] R13: 0000000000000000 R14: 00007fc98c575fa0 R15: 00007ffd78e31808 [ 707.343946][T11533] [ 708.603813][T11551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1188'. [ 709.285572][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1186'. [ 709.301596][T11575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1186'. [ 709.364275][T11569] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 709.474563][T11551] Process accounting paused [ 710.185499][ T29] audit: type=1800 audit(4294967381.301:28): pid=11593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1199" name="version" dev="configfs" ino=30666 res=0 errno=0 [ 715.842485][T11671] Invalid ELF header magic: != ELF [ 717.022352][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'. [ 717.121197][ T29] audit: type=1800 audit(4294967388.241:29): pid=11695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1220" name="version" dev="configfs" ino=31901 res=0 errno=0 [ 723.639566][T11855] netlink: 4755 bytes leftover after parsing attributes in process `syz.1.1251'. [ 724.977373][T11876] zswap: compressor not available [ 725.698078][T11907] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1257'. [ 726.055829][T11915] can: request_module (can-proto-0) failed. [ 727.310665][ T29] audit: type=1800 audit(4294967398.421:30): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1263" name="version" dev="configfs" ino=32772 res=0 errno=0 [ 730.993322][T11978] zram0: detected capacity change from 0 to 224 [ 731.143214][ T29] audit: type=1800 audit(4294967402.271:31): pid=11984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1273" name="version" dev="configfs" ino=32369 res=0 errno=0 [ 732.115825][T12007] afs: Unknown parameter '¨ÎP4Åtd0' syzkaller syzkaller login: [ 732.858942][T12013] random: crng reseeded on system resumption [ 733.313675][ T5867] block nbd0: NBD_DISCONNECT [ 733.342728][ T5867] block nbd0: Send disconnect failed -22 [ 733.364583][ T5867] block nbd0: Disconnected due to user request. [ 733.443158][ T5867] block nbd0: shutting down sockets [ 734.375316][ T29] audit: type=1800 audit(4294967405.501:32): pid=12041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1284" name="version" dev="configfs" ino=33022 res=0 errno=0 [ 734.680397][T12029] Process accounting paused [ 737.047098][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'. [ 737.289004][T12111] random: crng reseeded on system resumption [ 737.335359][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1300'. [ 740.444169][T12139] Process accounting resumed [ 741.168535][T12182] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1317'. [ 741.177661][T12182] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 745.994660][T12285] ptrace attach of "./syz-executor exec"[5860] was attempted by "./syz-executor exec"[12285] [ 749.052140][T12318] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1346'. [ 749.119073][T12318] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1346'. [ 750.490930][T12333] __vm_enough_memory: pid: 12333, comm: syz.3.1349, bytes: 4503599627366400 not enough memory for the allocation [ 752.626443][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.633832][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.831834][T12366] vivid-013: ================= START STATUS ================= [ 752.854049][T12366] vivid-013: Generate PTS: true [ 752.890002][T12366] vivid-013: Generate SCR: true [ 752.894981][T12366] tpg source WxH: 640x360 (Y'CbCr) [ 752.968233][T12366] tpg field: 1 [ 752.972086][T12366] tpg crop: 640x360@0x0 [ 753.038326][T12366] tpg compose: 640x360@0x0 [ 753.068993][T12374] FAULT_INJECTION: forcing a failure. [ 753.068993][T12374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.083318][T12366] tpg colorspace: 8 [ 753.087211][T12366] tpg transfer function: 0/0 [ 753.128249][T12366] tpg Y'CbCr encoding: 0/0 [ 753.132842][T12366] tpg quantization: 0/0 [ 753.137049][T12366] tpg RGB range: 0/2 [ 753.150270][T12374] CPU: 1 UID: 0 PID: 12374 Comm: syz.2.1356 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 753.161123][T12374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 753.171235][T12374] Call Trace: [ 753.174556][T12374] [ 753.177532][T12374] dump_stack_lvl+0x16c/0x1f0 [ 753.182303][T12374] should_fail_ex+0x497/0x5b0 [ 753.187052][T12374] _copy_to_user+0x32/0xd0 [ 753.191548][T12374] simple_read_from_buffer+0xd0/0x160 [ 753.196986][T12374] proc_fail_nth_read+0x198/0x270 [ 753.202091][T12374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 753.207721][T12374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 753.213350][T12374] vfs_read+0x1df/0xbe0 [ 753.217573][T12374] ? __fget_files+0x1fc/0x3a0 [ 753.222321][T12374] ? __pfx___mutex_lock+0x10/0x10 [ 753.227417][T12374] ? __pfx_vfs_read+0x10/0x10 [ 753.232163][T12374] ? __fget_files+0x206/0x3a0 [ 753.232233][T12366] vivid-013: ================== END STATUS ================== [ 753.236887][T12374] ksys_read+0x12b/0x250 [ 753.248810][T12374] ? __pfx_ksys_read+0x10/0x10 [ 753.253704][T12374] do_syscall_64+0xcd/0x250 [ 753.258288][T12374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.264260][T12374] RIP: 0033:0x7ff88958473c [ 753.268737][T12374] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 753.288408][T12374] RSP: 002b:00007ff88a388030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 753.296890][T12374] RAX: ffffffffffffffda RBX: 00007ff889776080 RCX: 00007ff88958473c [ 753.304974][T12374] RDX: 000000000000000f RSI: 00007ff88a3880a0 RDI: 0000000000000003 [ 753.313002][T12374] RBP: 00007ff88a388090 R08: 0000000000000000 R09: 0000000000000000 [ 753.321115][T12374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.329140][T12374] R13: 0000000000000000 R14: 00007ff889776080 R15: 00007ffe52d8dc48 [ 753.337189][T12374] [ 753.511323][T12362] could not allocate digest TFM handle [ 753.847704][T12361] could not allocate digest TFM handle [ 756.180951][T12400] netlink: 222 bytes leftover after parsing attributes in process `syz.2.1360'. [ 756.208591][T12361] [U] [ 756.211787][T12361] [U] [ 756.214547][T12361] [U] [ 756.217302][T12361] [U] [ 756.330721][T12362] [U] [ 758.282339][T12414] sg_write: data in/out 32677/64969 bytes for SCSI command 0x0-- guessing data in; [ 758.282339][T12414] program syz.3.1363 not setting count and/or reply_len properly [ 759.868420][ T29] audit: type=1800 audit(4294967430.971:33): pid=12431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1368" name="version" dev="configfs" ino=34087 res=0 errno=0 [ 760.545345][T12422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1366'. [ 764.040946][T12477] ------------[ cut here ]------------ [ 764.046520][T12477] WARNING: CPU: 0 PID: 12477 at io_uring/io_uring.h:140 io_lockdep_assert_cq_locked+0x1e9/0x320 [ 764.057106][T12477] Modules linked in: [ 764.061105][T12477] CPU: 0 UID: 0 PID: 12477 Comm: syz.3.1377 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 764.072035][T12477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 764.082194][T12477] RIP: 0010:io_lockdep_assert_cq_locked+0x1e9/0x320 [ 764.088938][T12477] Code: 44 89 e6 e8 e9 8e 0c fd 45 85 e4 0f 84 13 ff ff ff e8 db 93 0c fd e8 b6 3b d5 fc 48 85 c0 0f 85 00 ff ff ff e8 c8 93 0c fd 90 <0f> 0b 90 e9 f2 fe ff ff e8 ba 93 0c fd 31 ff 89 ee e8 b1 8e 0c fd [ 764.109241][T12477] RSP: 0018:ffffc900196af820 EFLAGS: 00010293 [ 764.115376][T12477] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff8161faba [ 764.123625][T12477] RDX: ffff88807bd59e00 RSI: ffffffff848cbea8 RDI: 0000000000000005 [ 764.131832][T12477] RBP: ffff88807bd59e00 R08: 0000000000000005 R09: 0000000000000000 [ 764.140116][T12477] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000001 [ 764.148340][T12477] R13: 0000000000000000 R14: ffff88802718e138 R15: ffff88808825e078 [ 764.156361][T12477] FS: 00007fc98d1696c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 764.165389][T12477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 764.172082][T12477] CR2: 0000001b31febff8 CR3: 0000000061f68000 CR4: 00000000003526f0 [ 764.180163][T12477] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 764.188248][T12477] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 764.196269][T12477] Call Trace: [ 764.199745][T12477] [ 764.202721][T12477] ? __warn+0xea/0x3c0 [ 764.207273][T12477] ? io_lockdep_assert_cq_locked+0x1e9/0x320 [ 764.213567][T12477] ? report_bug+0x3c0/0x580 [ 764.218166][T12477] ? handle_bug+0x54/0xa0 [ 764.222561][T12477] ? exc_invalid_op+0x17/0x50 [ 764.227308][T12477] ? asm_exc_invalid_op+0x1a/0x20 [ 764.232525][T12477] ? current_work+0x6a/0xe0 [ 764.237249][T12477] ? io_lockdep_assert_cq_locked+0x1e8/0x320 [ 764.243538][T12477] ? io_lockdep_assert_cq_locked+0x1e9/0x320 [ 764.249669][T12477] __io_submit_flush_completions+0x131/0x1fd0 [ 764.255806][T12477] ? __pfx_io_poll_task_func+0x10/0x10 [ 764.261416][T12477] __io_run_local_work+0x13d/0x560 [ 764.266597][T12477] ? __pfx___io_run_local_work+0x10/0x10 [ 764.272374][T12477] io_uring_try_cancel_requests+0x89a/0xd50 [ 764.278367][T12477] ? xa_find+0x1ca/0x370 [ 764.282677][T12477] ? __pfx_io_uring_try_cancel_requests+0x10/0x10 [ 764.289263][T12477] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 764.295132][T12477] ? __percpu_counter_sum+0x1ee/0x270 [ 764.300642][T12477] io_uring_cancel_generic+0x651/0x8e0 [ 764.306183][T12477] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 764.312646][T12477] ? do_exit+0x313/0x2d70 [ 764.317060][T12477] ? __pfx_lock_release+0x10/0x10 [ 764.322431][T12477] ? __pfx_autoremove_wake_function+0x10/0x10 [ 764.328657][T12477] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 764.334115][T12477] ? io_uring_unreg_ringfd+0xbc/0x130 [ 764.339722][T12477] do_exit+0x53c/0x2d70 [ 764.343954][T12477] ? get_signal+0x8f7/0x2610 [ 764.348867][T12477] ? __pfx_do_exit+0x10/0x10 [ 764.353529][T12477] ? do_raw_spin_lock+0x12d/0x2c0 [ 764.358655][T12477] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 764.364097][T12477] do_group_exit+0xd3/0x2a0 [ 764.368747][T12477] get_signal+0x2576/0x2610 [ 764.373325][T12477] ? __pfx_get_signal+0x10/0x10 [ 764.378367][T12477] ? __pfx_do_futex+0x10/0x10 [ 764.383111][T12477] arch_do_signal_or_restart+0x90/0x7e0 [ 764.388853][T12477] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 764.395093][T12477] ? rcu_is_watching+0x12/0xc0 [ 764.400010][T12477] syscall_exit_to_user_mode+0x150/0x2a0 [ 764.405718][T12477] do_syscall_64+0xda/0x250 [ 764.410394][T12477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.416682][T12477] RIP: 0033:0x7fc98c385d29 [ 764.421382][T12477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.441144][T12477] RSP: 002b:00007fc98d1690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 764.449845][T12477] RAX: fffffffffffffe00 RBX: 00007fc98c575fa8 RCX: 00007fc98c385d29 [ 764.457995][T12477] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc98c575fa8 [ 764.466294][T12477] RBP: 00007fc98c575fa0 R08: 0000000000000000 R09: 0000000000000000 [ 764.474470][T12477] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc98c575fac [ 764.482547][T12477] R13: 0000000000000000 R14: 00007ffd78e31720 R15: 00007ffd78e31808 [ 764.490660][T12477] [ 764.493722][T12477] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 764.501044][T12477] CPU: 0 UID: 0 PID: 12477 Comm: syz.3.1377 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 764.511858][T12477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 764.521960][T12477] Call Trace: [ 764.525273][T12477] [ 764.528257][T12477] dump_stack_lvl+0x3d/0x1f0 [ 764.532910][T12477] panic+0x71d/0x800 [ 764.536864][T12477] ? __pfx_panic+0x10/0x10 [ 764.541356][T12477] ? show_trace_log_lvl+0x29d/0x3d0 [ 764.546876][T12477] ? check_panic_on_warn+0x1f/0xb0 [ 764.552062][T12477] ? io_lockdep_assert_cq_locked+0x1e9/0x320 [ 764.558110][T12477] check_panic_on_warn+0xab/0xb0 [ 764.563105][T12477] __warn+0xf6/0x3c0 [ 764.567069][T12477] ? io_lockdep_assert_cq_locked+0x1e9/0x320 [ 764.573137][T12477] report_bug+0x3c0/0x580 [ 764.577508][T12477] handle_bug+0x54/0xa0 [ 764.581784][T12477] exc_invalid_op+0x17/0x50 [ 764.586365][T12477] asm_exc_invalid_op+0x1a/0x20 [ 764.591463][T12477] RIP: 0010:io_lockdep_assert_cq_locked+0x1e9/0x320 [ 764.598111][T12477] Code: 44 89 e6 e8 e9 8e 0c fd 45 85 e4 0f 84 13 ff ff ff e8 db 93 0c fd e8 b6 3b d5 fc 48 85 c0 0f 85 00 ff ff ff e8 c8 93 0c fd 90 <0f> 0b 90 e9 f2 fe ff ff e8 ba 93 0c fd 31 ff 89 ee e8 b1 8e 0c fd [ 764.617874][T12477] RSP: 0018:ffffc900196af820 EFLAGS: 00010293 [ 764.623968][T12477] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff8161faba [ 764.631965][T12477] RDX: ffff88807bd59e00 RSI: ffffffff848cbea8 RDI: 0000000000000005 [ 764.639962][T12477] RBP: ffff88807bd59e00 R08: 0000000000000005 R09: 0000000000000000 [ 764.647958][T12477] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000001 [ 764.655954][T12477] R13: 0000000000000000 R14: ffff88802718e138 R15: ffff88808825e078 [ 764.663975][T12477] ? current_work+0x6a/0xe0 [ 764.668528][T12477] ? io_lockdep_assert_cq_locked+0x1e8/0x320 [ 764.674562][T12477] __io_submit_flush_completions+0x131/0x1fd0 [ 764.680669][T12477] ? __pfx_io_poll_task_func+0x10/0x10 [ 764.686187][T12477] __io_run_local_work+0x13d/0x560 [ 764.691349][T12477] ? __pfx___io_run_local_work+0x10/0x10 [ 764.697025][T12477] io_uring_try_cancel_requests+0x89a/0xd50 [ 764.702955][T12477] ? xa_find+0x1ca/0x370 [ 764.707252][T12477] ? __pfx_io_uring_try_cancel_requests+0x10/0x10 [ 764.713719][T12477] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 764.719561][T12477] ? __percpu_counter_sum+0x1ee/0x270 [ 764.724971][T12477] io_uring_cancel_generic+0x651/0x8e0 [ 764.730475][T12477] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 764.736492][T12477] ? do_exit+0x313/0x2d70 [ 764.740861][T12477] ? __pfx_lock_release+0x10/0x10 [ 764.745913][T12477] ? __pfx_autoremove_wake_function+0x10/0x10 [ 764.752022][T12477] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 764.757424][T12477] ? io_uring_unreg_ringfd+0xbc/0x130 [ 764.762820][T12477] do_exit+0x53c/0x2d70 [ 764.767012][T12477] ? get_signal+0x8f7/0x2610 [ 764.771631][T12477] ? __pfx_do_exit+0x10/0x10 [ 764.776256][T12477] ? do_raw_spin_lock+0x12d/0x2c0 [ 764.781312][T12477] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 764.786780][T12477] do_group_exit+0xd3/0x2a0 [ 764.791323][T12477] get_signal+0x2576/0x2610 [ 764.795870][T12477] ? __pfx_get_signal+0x10/0x10 [ 764.800771][T12477] ? __pfx_do_futex+0x10/0x10 [ 764.805490][T12477] arch_do_signal_or_restart+0x90/0x7e0 [ 764.811068][T12477] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 764.817277][T12477] ? rcu_is_watching+0x12/0xc0 [ 764.822106][T12477] syscall_exit_to_user_mode+0x150/0x2a0 [ 764.827865][T12477] do_syscall_64+0xda/0x250 [ 764.832405][T12477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.838331][T12477] RIP: 0033:0x7fc98c385d29 [ 764.842764][T12477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.862478][T12477] RSP: 002b:00007fc98d1690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 764.870917][T12477] RAX: fffffffffffffe00 RBX: 00007fc98c575fa8 RCX: 00007fc98c385d29 [ 764.878942][T12477] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc98c575fa8 [ 764.886938][T12477] RBP: 00007fc98c575fa0 R08: 0000000000000000 R09: 0000000000000000 [ 764.894935][T12477] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc98c575fac [ 764.902927][T12477] R13: 0000000000000000 R14: 00007ffd78e31720 R15: 00007ffd78e31808 [ 764.910926][T12477] [ 764.914330][T12477] Kernel Offset: disabled [ 764.918740][T12477] Rebooting in 86400 seconds..