last executing test programs: 12m56.773744952s ago: executing program 0 (id=544): socket(0x29, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) 12m56.158745915s ago: executing program 0 (id=554): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x5, 0x1, 0x28040de9, 0x18, 0x5, 0x10001) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) ioctl$auto(0x3, 0x8912, 0x46) 12m56.003820604s ago: executing program 0 (id=548): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setfsuid$auto(0xffffffffffffffff) request_key$auto(0x0, 0x0, 0x0, 0x9) 12m55.418326657s ago: executing program 0 (id=552): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r0, 0x0, &(0x7f0000000000)={{0x0, 0x7}, {0x0, 0xa2b}}, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) 12m55.17325954s ago: executing program 0 (id=555): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x3) shmdt$auto(0x0) madvise$auto(0x0, 0x3, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 12m54.691174743s ago: executing program 0 (id=569): sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048855}, 0x4004801) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x123002, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x18}, 0x1, 0x0, 0x0, 0x64048001}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x10000) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) 12m54.533822103s ago: executing program 32 (id=569): sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048855}, 0x4004801) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x123002, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x18}, 0x1, 0x0, 0x0, 0x64048001}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x10000) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) 12m54.379788828s ago: executing program 1 (id=564): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x200, 0x7000000) 12m53.655616843s ago: executing program 1 (id=573): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) socket(0xa, 0x1, 0x0) setsockopt$auto(0x6, 0x6, 0x20, &(0x7f0000000240)='ns/cgroup\x00', 0xc) 12m53.326078969s ago: executing program 1 (id=567): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x47, 0x0) fsopen$auto(0x0, 0x1) fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) 12m53.187077359s ago: executing program 1 (id=568): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x8, 0x2, 0x6, 0x0, 0xf2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x5, 0x2, 0x3, 0x0, 0xf2) 12m52.8331876s ago: executing program 1 (id=570): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x3) shmdt$auto(0x0) madvise$auto(0x0, 0x3, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 12m51.792500175s ago: executing program 1 (id=576): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40400) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 12m51.651926547s ago: executing program 33 (id=576): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40400) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 10m37.312160124s ago: executing program 3 (id=1616): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ppoll$auto(&(0x7f0000000000)={r1, 0x9, 0x6}, 0x7, 0x0, 0x0, 0x8) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) 10m36.36023683s ago: executing program 3 (id=1625): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x3ff, 0x9) connect$auto(0x3, 0x0, 0x55) shutdown$auto(0x200000003, 0x2) shutdown$auto(0x200000003, 0x2) 10m35.399133724s ago: executing program 3 (id=1640): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) write$auto(0x3, 0x0, 0xfdf3) 10m35.306916392s ago: executing program 3 (id=1641): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x0, 0x3, 0xd, 0x3, 0x81, 0xfffffffc, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0xb0, 0x9, 0x1, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x71a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x202, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 10m35.204771707s ago: executing program 3 (id=1643): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) 10m35.06968691s ago: executing program 3 (id=1644): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dbdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES8=r1], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 10m19.711332019s ago: executing program 34 (id=1644): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dbdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES8=r1], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 9m39.512172644s ago: executing program 2 (id=2094): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0x4) mmap$auto(0x6, 0xe, 0x2, 0x12, 0x10, 0x6) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000000), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) 9m39.189074733s ago: executing program 2 (id=2097): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) socket(0x2, 0x1, 0x0) socket(0x1, 0x2, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) fcntl$auto(0x3, 0x400, 0x2) 9m39.120247138s ago: executing program 2 (id=2098): r0 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010f28d27000fedbdf25070000000c000280070005"], 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x840) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000f9dbdf25020000000b0001"], 0x20}, 0x1, 0x0, 0x0, 0x4008014}, 0x10) r1 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) write$auto(r0, &(0x7f0000000000)='*\x00', 0xfd) 9m38.844317458s ago: executing program 2 (id=2101): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(&(0x7f0000000080)='.\x00', 0x0, 0x1f2) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) open(0x0, 0x22240, 0x155) 9m38.361637455s ago: executing program 2 (id=2106): socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) 9m38.041543021s ago: executing program 2 (id=2109): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) socket(0x1e, 0x4, 0x0) pipe$auto(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) exit$auto(0x3) socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="110000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) poll$auto(&(0x7f0000000000)={r0, 0x7, 0xc}, 0x3, 0x4) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4000040) 9m37.821848322s ago: executing program 35 (id=2109): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) socket(0x1e, 0x4, 0x0) pipe$auto(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) exit$auto(0x3) socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="110000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) poll$auto(&(0x7f0000000000)={r0, 0x7, 0xc}, 0x3, 0x4) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_CONNECT(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4000040) 7.236943521s ago: executing program 7 (id=5095): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x8, 0xfff, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x29, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x7, 0x0, 0x0, 0x0, 0xdd0, 0x5}, 0x3}, 0x10009a6, 0xe2e) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x20, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) 7.016277044s ago: executing program 5 (id=5096): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) request_key$auto(&(0x7f0000000000)='(%\x00', &(0x7f0000000040)=']/\x00', 0x0, 0xfffffffe) r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) read$auto_proc_pid_numa_maps_operations_internal(r0, &(0x7f0000000000)=""/110, 0x6e) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setpriority$auto(0x4000000001, 0x100000001, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xfffffffffffffffc, 0x3, 0x1, 0x7, 0x0, 0x7, 0x1, 0x8, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0xf63, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0x100, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x7]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200)) r1 = socket(0x15, 0x6, 0x80) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), 0xffffffffffffffff) setregid$auto(0x5, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) process_mrelease$auto(0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800", @ANYRES16=r2, @ANYBLOB="000b0000000000000000000000000000008b28786b"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x7, 0xfffff000) ppoll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x6, 0x9}, 0x9, &(0x7f00000002c0)={0x8000000000000001, 0x8001}, &(0x7f0000000300)={0x7ff}, 0x8) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00T\x00'/40, 0x9) fallocate$auto(0x3, 0x0, 0xe, 0x8ec8) finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) 6.799614862s ago: executing program 7 (id=5097): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r1 = gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) sendfile$auto(0x6, 0xffffffffffffffff, 0x0, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = open(0x0, 0x400, 0x23) fchdir$auto(r2) mkdir$auto(&(0x7f0000000140)='MAC80211_HWSIM\x00', 0x1) rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00') process_vm_readv$auto(r1, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) move_pages$auto(r1, 0x4, &(0x7f0000000100)=&(0x7f0000000040), &(0x7f0000000140)=0x3, 0x0, 0x0) 5.092853986s ago: executing program 7 (id=5102): close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendfile$auto(0x6, 0x3, 0x0, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x8c3a, 0x2, 0xf) socket(0x2, 0xa, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x1, 0x89a0, 0x8) read$auto(0x3, 0x0, 0x400000) socket(0xa, 0x3, 0x6) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a00279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 4.533894892s ago: executing program 6 (id=5103): prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x22048814) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r2 = syz_open_procfs$namespace(0x0, 0x0) close_range$auto(r1, 0xfffffffffffff000, 0x2) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000300)=""/223, 0xdf) socket$nl_generic(0x10, 0x3, 0x10) setns(r2, 0x20000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/queue/zone_write_granularity\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000100)=""/16, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/anycast6\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000100)=""/99, 0x63) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x0, 0x3, 0xd, 0x3, 0x81, 0xfffffffc, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0xb0, 0x9, 0x1, 0xffffffff, 0x5, 0x7, 0x0, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x71a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) r6 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) linkat$auto(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) ioctl$auto_RTC_UIE_ON(r6, 0x7003, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc5}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.078159428s ago: executing program 6 (id=5104): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_trace_dev_match\x00', 0x40040, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000100), 0x40600, 0x0) read$auto_nst_seq_fops_netdebug(r1, &(0x7f0000000140)=""/233, 0xe9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/mqueue/msgsize_max\x00', 0x101201, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/195, 0xc3) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) shmctl$auto(0xcb, 0x4, &(0x7f0000000140)={{0xf3, 0x0, 0xee00, 0x317c000, 0xb, 0x0, 0x4}, 0x1, 0x8, 0x8, 0x9, 0x8, 0x0, 0xad, 0x0, 0x0, 0x0}) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x8}, 0x80, 0x400400) ioperm$auto(0xc5, 0x3, 0xc115) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) signalfd$auto(0xffffffff, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYRES32=r4, @ANYBLOB="4a34df988cb25fd474673fd265d315bc7dae5fac84185b2ce78399cbe6c2bf5f86eeb688ab41a2a5773db3276f3fe02154d8a570f1ee73d6c828595bd3de527fbd0547e15ff4b095ad15ec88dba6d4ba17367e5708f0c3f87136976022"], 0x20}, 0x1, 0x0, 0x0, 0xc880}, 0x20000) 3.995162178s ago: executing program 6 (id=5105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x8004) sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @loopback}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @loopback}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @private=0xa010100}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x0}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000000000df52988ba00008000300", @ANYRES32=r6, @ANYBLOB='\b\x00\f'], 0x24}, 0x1, 0x0, 0x0, 0x4000023}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r7 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, 0x0, 0xf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wg0\x00'}) r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}}, 0x140000e4) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r13, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000004140)={0x2c, r14, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r16}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'pimreg\x00'}) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x104, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x24f1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x4}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 3.602075856s ago: executing program 5 (id=5106): mmap$auto(0x0, 0x4, 0xb16e, 0x40eb2, 0x402, 0x300000000000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x0, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) mmap$auto(0xffff, 0x8, 0x100000001, 0x83c, 0x2, 0x6) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=':\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x4000023}, 0x80) fstat$auto(r3, &(0x7f0000000240)={0x0, 0x10000, 0x100000000, 0x4, 0xee01, 0xee01, 0x0, 0xf, 0x6, 0x8, 0x4, 0x3ff, 0x5, 0x1, 0x9, 0x2, 0x7f}) capset$auto(&(0x7f0000000300)={0x72b64b3, 0x0}, &(0x7f0000000340)={0x5, 0x5, 0x2}) stat$auto(&(0x7f0000000380)='./cgroup\x00', &(0x7f00000003c0)={0x2, 0x440, 0x7, 0x10000, 0xee01, 0xffffffffffffffff, 0x0, 0x1, 0x6, 0x4, 0xffffffffffffff80, 0x2, 0x9, 0xa, 0x5, 0x2, 0x7}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'netdevsim0\x00'}) sendmsg$auto_ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)=ANY=[@ANYBLOB="a0010000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf25170000004400018008000100", @ANYRES32=r6, @ANYBLOB="08000300ff0f0000080003000000000000000000000000009400020070696d726567000000000000000000004400018008000100"/64, @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f627269646765001400020076657468315f746f5f62726964676500080003000800000008000300faefffff3400018008000100", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000300000200003000018008000100", @ANYRES32=r6, @ANYBLOB="140002007767310000000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000300020000003c000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3000000000000000000000002c000180080003004006000008000100", @ANYRES16=0x0, @ANYBLOB="08000300ff00000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRESDEC=r9, @ANYRESOCT=r4, @ANYRES16=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020070696d36726567000000000000000000"], 0x1a0}, 0x1, 0x0, 0x0, 0x4048849}, 0x24008004) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b0011074", @ANYRES16=r4, @ANYBLOB="020825bd7000fddbdf259b0000001c01b980f800e4800800a500", @ANYRES32=r7, @ANYBLOB="b192b6f325fd02a4944b08926881c5f99689392280c981992b7319fb0e53d32436251190bbe6178512d760036d92851df4923f6195af48d92b69f3aa4b348f38c4592a0c6791d39d55a17ee063f4a8e97349fcfd64267e6166db17a19b33eded440a33336a15167f57060ff359df55d8c15e27030d7b36b175e0895ceb099efa40d78554eb4e4dd3102258d5f8fcc30154c68a8cbe092c9e77047502a6be652ace393d3302a59c091e70601d53a9090490046e5a25fdd5532416f2d2d52bd548204ed40d5529153949c67437a39501e65ac875a7c6a03da465208cde00da3b95426c5aaf40e2ed047eb8e75b08004a00e00000011800f0800400d88008003900", @ANYRES32=r8, @ANYBLOB='\b\x00\r\x00', @ANYRES32=r9, @ANYRES8=r10, @ANYBLOB="05d3c6d22a50f8e235a9155704e9fd3f874418a821692e2cf482ee73e3151e2df5137694562e700e6f3abd1a0a7bea7bc3086b5206effbeca449159a618cab938bc1a518552484d3f5ef9076f328c7b1e71e37690757c367567ae196e9dc55b8be0ce5d93ee7302a88c9026b58848875408106c1e48631665b542d5b6da85486390760d7f65b45283e7b10d1f6e6750d59f4f01da0326d6ab6874cffdfc7643201f14667bc4b5c47cf657009d7a4657f58773d5106de846d13777a02ce89e26879c967af5885e710b3"], 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) ppoll$auto(&(0x7f0000000000)={r3, 0xa279, 0x4000}, 0x6, &(0x7f0000000040)={0x2, 0x2}, &(0x7f0000000080)={0x9}, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0xeb) bpf$auto(0x9, 0xfffffffffffffffc, 0x0) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') setns(r11, 0x10000000) 3.482387166s ago: executing program 7 (id=5109): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x6, 0x8) fcntl$auto(0x8000000000000001, 0x26, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x1d, 0x4, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_7={@btf_id=0xe9f, 0x4, 0x1c}, 0xa3) bpf$auto(0x2, 0x0, 0xf) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='M\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x24048084}, 0x4004810) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) io_uring_setup$auto(0x40005, 0x0) madvise$auto(0x108000, 0x800034, 0x9) mbind$auto(0x401, 0x400, 0x6, &(0x7f0000000040)=0x7, 0x7fff, 0x5) bind$auto(0xffffffffffffffff, &(0x7f0000000000), 0x69) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.343845188s ago: executing program 6 (id=5110): r0 = socket(0x1e, 0x1, 0x0) getsockname$auto(r0, &(0x7f0000000000), &(0x7f0000000040)=0xd1) listen$auto(r0, 0x9) accept$auto(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 3.31757291s ago: executing program 5 (id=5111): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffc, 0xeb1, 0x8000000000000001, 0x7bfe) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r2 = getuid() sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000003700)=ANY=[@ANYBLOB="e022", @ANYRES16, @ANYBLOB="320129bd7000ffdbdf25010000000c0003000a0000000000000008000100020000000c00080000000000504e00000c0002000500000000000000501009800800c000ffffffff42006780a1245516e2d6fee3a1a894f0db277392a672129c5e4a5f30263743471c36ee303cf95b390c5715936b350ffa1d3ae524b9323bb2b3b9f57aa4da63be4815000010fe98e98c9c5ae612b385d2257b84e8d4ad39b2a9883adc962227e13e228f9867a708ae15b327bb9e169d990394e0f23ea5eedbd435d17518674ff52388cc387f8ad73df032a9c4d8de53d0795a55bedd4abfcd2bbadc760578d7f5e3e377aa8eb93e5a5926aeb4bb51159c74367bb4c30b3c8c302cee11843d0ebb01cfb2d5ac6bd22e60c24ed89ce59e0b79ac6146e2fab3e5ea6c84d71f33fd885245b4d560487de9174b16abd7e5432a7530ad69a58582231083435acb93c154c15809c2f5cf6417215ea2eeac4cfa8b89fe9adaf7d83493cd0e57129f63437cae6c1825ccc2794c024a7bc600361e97f5de8a4f764e5e7aa7f70e5ee5f697cd52497d851d0c907106cf4d162bf1fd691d38b1c794611d55e7facbea0278d8acecc697087842ce64382fee140cfb51381a1526c30208acf402d9d06cd8684bcf8e69c1d11dc96580783cdb6813928b6c8f08e78e2097a77df4c63e0099de7272726f8c017e072b84ad58615f17176d49e77a5f96f8d7757297a09ffda6e206710da8883ad5e1c09c7caf01f67b84a271764cfb8f47cc23ec2161026c4d47516701a36d2489699aec280b28e195b6751145a82d8869220e65602d4328aaa75f5e2451669717997009f2485bda297ca88f7d229575570eb2b607a902876648276ee9326c9adf949336215b555de2f6d40eb6f189028a7c08afd5be0560f3aebdee3c1241c720038d908fd5fbb772d979a6e92f10fcfb03e4fc70fb91467b6c2f9e8e734f949e9344bffd7ceba711750b7f1eff62f553d773f59c7c760a4bfa2b8e32764e321b179c182a11d3eea7bd8d0401c91c748b1343095bdcfb247dab1a7370ddfcf78cb88033194fac50b31fb198eef75761afb8b9d50ce834f7813ef9ac6b7713c73d00858b25bf5b3d14437b0906ed9bc7e0c4bc94d24e251a5eca79c5fa42857b1a1e0a131fcb25da4aa117cbc256614b6e4837c6a604812e5a6cab59f5bc53bc42a77c688c0fe1fe7abf43d4959f052aa35326a136e159e0173737a95e2ff842e02a3d137856829f6d0553a11b4b784e9593797da2a5337591e07f27536ac6ea4b07661ffbec6adc4536d8321fe97ce64ca3269e13d230c74b342e3afff2f206cc601b055b12ea3e9376f8b89d284d466cd22612ce548e8a0a55f1b9ec37252fb7cd23763f174277416a92216cbdc5c581799243103870b8e43f8bdf4e7f4f39801c8549d9a9f326157b1438ac22a59159aa0d682ee53aafc98bcb9e5e86ffcfa47e1df205fafc40f3d37713c1913b15d0eaf48764f62c34a660120a73c7bfb990454435d1aeb738ace93709cde1d1a512c19bffda5dcbbfb9bd13893a4e58e0529acce51f08649846c8b593d455524b93b71914082b0c87e08030507d1ddadb0c63f0a35038d8d565b9a9adf65abe3f0f03175e747bc3d0e6be6c5444896f01b8307fa288cb87c82b06f1c4d081f32f0d596dc64d3e141483a595fc8386819380bdad18e66fad5943f3c3ab5d94674a147f1622af5e9a5186bbe4e1ea09c32dda0008476d23b27081df63a7ab753aafabc07df93445773625fe58ce34ae84e6c80f0922190bf0e3925de5740f5f7c4b3d6419f6456af06f924419a2abfbb644249e690be4198c4c24d40bea9ec17b53a71773b96f7c04483b1f61a98910c4562d6c021f9938e5d3f2346514d48f3b4accd34fa012ccd235e4c75da8e7c9d85d5e93f5b54f87ae7fde6b56028092b007990b6fd8cd5300e5d73f74210ae71c904b19433fd4646921cb5c89363d18e4bb9fc9f8c3f17552369fdf7fa3f07bd5d95e1916362a9a550e71fd892eaba6d4de4af0f726a70af9e135d660e781233e35d68ac1fad52e3c8ed3c7792a9c88b024e7a65ee3fa404fc4917b9d22db55d6487551928f7932fe0756da5c002d635758c0547dabeda09843510107b711716085b712e078e59e21bd6dfd3077b8b095d189eead1cf549d33b17c198e567026548ac586a74092fa883e58afdb6cbf84223164ab0376072a497a1168ef721c3f03321ca8db3d0b2f346b2ce40ce664ed545cfbfb013570af1c9127d14b49324c9bb66511d284905f3e7b0f9ff09ca8d5a31086cfc249a8936770aa909b48880625485b7fe74d3ca94f3b94e5236b345fdec7a40a0a73500981082dd66fcfefdd27401e3fec971a8aefe20d6e84d84c121e89bfa19f093f6590fcb8587c47d0487267816d5162e0ba33fa9eb6a343cd36ed1edf09eca25e2b61d0f0318f7477764bd88d749ae1bd215b57e3a29947d9a95e54b8cb0070a3d02e4c6c22fa0899d650f8840f606767469c34a43c5d73905a06dde25d82db6fab3a56202fab3fd3944158e3707948ba2a3172fdb6df579cf4d7ac8c27b19d3a3802e3ec96ce8bf8e251c231f921e5b12e3257705bd396d5b739bf39ec4c2f848e819440b9d757ceb359e54d9e2ca1f48ed8427f8f224130f6f07207f4762933974852cc99cab0481d17fd07177e03e27d55b4c1693a77504d4096bf9706df0d812d0121bf8dc47779b2a597d5f3ae01ad38b44e8f13a8c39479e485183119643dd93c67d7ecf165d1f7f7b90b069784275387a228708572d0b2132e8efa26a2ff17a7e1e0c741b5864baea302f732e8f048179983a56102c320386809b3b246e09b594fddd190f5273f4ff62c2dba1604b73e250f1da465d7bafff7f669d116f569f9aaa2a47fa773a77f7a01fae5cf388866cdc2c973cae5e2bbcec1a01d5db663492cdfe484b5018c2cc5a52f54bd1abd6099bca9a4c17e6e671a1cb80bff35535267ebdcfaacde12aadd416aa601a0555177582552511bcbe8c01f6d713f2840545c0dd5a2779581b5f8af450923bbd5a102a8067a346a4e8c981a9d753e2bf7771da0db56b6538f5d4f9ac411fe41ec49e53e95e2b1cbc6bea0990b744d1e4e608599c85eb74fa64ca6392d816892a8d8dc686495c718f27eb77b44bf3aeb980e184d61088b98191d8315dc26dfe22aac9d154c0ba1944defa8bd86473c69f875fdf953953e2a133e7854a0ce3d36d298c7d4a61da313a0eee195356d1fb6f17f96a156fdece84f4c6d59595a9b4afff8a04de661a68492867966a44911210978a85d3740ea06be603069b36d4ea91e56ebb617be2e036634e7d625d324db57199383b5337b1276e2668a741f529b79f78ec56f6d44b3ac04f8601cda413bf67571128808f69274af594968179b609b3e0b2b6572974f420dedba4c7f4126afc247d1240f5c963c8075c9f04ea3708367c2f137a11de012c9499bba48908fd62d03bc8654a60bb1044ccd4b00032550cdefb7db094ce5c162e38c80d078b0f575729718bca2ef05f996258f372c9090596752c4c145dc3ed8a489e4e9a7fcf35c5c1ae9b3756439d5c5ac5b97f4752e46f511a21729a80ea846b96e04fc06733a60a4d61befab0b69f9f82cb984633ea3981726c9deaefb7ddb578ffc49a2f2d1d9779fabe7f233359960998d495948930c5dbe3a040a3f2679e41bfa4dda025e34cd571cd56d536c6115904bd7ec198c28b1382b1b26126ee8d06b8b14bc85149a233506e0fc232606e355dc02c9a2c4483a8652fee94e33710956b5de0eb9c81dffb01a74136c17b31d0f0989fe97397ee175e57dcb0d469d3dd5ef83f6c2eb539ffbe48f208af00aa431cbf8e5d15d75291ee77061f48123aa3e7a284379bccbb55a42aece9bca022885a48c4e52081d89115d26e16bae0433aacd531407be0a32a97b24d5298e73789be32b8446d88ae20d9b8f4c12ea7ed110a8a642d5b3d0bd778776849714ffe38ad697a4ef4f92d54aad34d219c2e54ea757952c6156e1091fb261f7cc7e83a78e5fee744f8ff72573313035d1dbe32fb7d5f731df469c5fe2ec542748b77b1aa249311062ca32daeb0a20865c35019672aff2d96ba03d7faf25035a728fc8423af6d614a525628084eb9b73829c8cbb3c670d0c424b117f7b7059bd597e9d2476956eec55a57e25adde2dea5853fdd8e033d4e1183abd3414f107e4bd73d1015d287afdfe41b0b30d40a83b258360278e72f7ef6b52600d321579f5115dca9bc1c9eac38184e82127f191e0cc89745ea7d6db3c1099d941887de36371e177f4724e3dd68bcaaf41e3c76b479e631a2dc12c6301b14a951146a3a740506fa7b9d113ce0700c56bbbc6b47d47e77a9180b403878d1a61e6bb91ed8c4adbbfe86475c3e83575d8b9b5da658ea0c070f86881264cd1c0abaad0e8f8957a1ba7884eb7ac4b2588c4683e771c9462cf8f60d91fae5fa45ac37f08f6daa53bf0463d2e500713317d03c754498dc3fed84de7484e8499c8e68eacf22c7cddceb91c0d264885c0559f5e98cfb98f7a98d3c362b92eb46f714a8a62c542834b7156c9698e14c82ffe7d40fbe56f20172a5396443c9c71d500129874f5c9ee3ccb513c76b603814caab3a39cf65030fec82882671141afd8a48b9f74983bac14fdf87f96835831d572658f7b5f370638f0ba0f1f4de4064500c1df6aab2672e7f64799175be9ba12445f3673a3f8c715abc18419e634096747c3cc7ac60e65731911f9a327254051e99537eaf808b8dee7e8dfe39331d8e7fff3701b63310f3aa82f33e9945bbcba93ba5b9da87c6844b8549a7898f75dff10d95981dfc5fd912b77bf72fbafb7434ef3fda8b9a62bbcbefed594d485e52384986e0cd706ab75907d5be565982cf8d958edb420336cb2bfaaac4bb4fc4fb79fac2bae8bbc0da6c3504eee04f25fd4d23b8d654ddf730997b6586fdc3e07918baeaab0ab0a728a99ba1bd88f2362868a35752909e15561cf67edf7b32d008d8ee5c5131866b9ee5846c5a6ddb6b09c2e4a09c5127669967d41f64886c73d12fdad22c390403efae6648b107c666ef44342829267ebceae1d79a7b095cee1a97d96cf33b5c962bc26f98c1febb02ecce8ccabeda2c790464f9296484afdf07c62836e796365fc2c40d960d465e17fbf73caa2c1ff2a9c46d91b4961aac0bece6bee5f6cd45c13a895280c4459bcb564ffd63515489433458896194026ff37446da0daa93aa72266887ee74a1aa87e2a995d4223e74c855c460175c4769be50ec97503be9d18c8d6ce6722faf36147653054146a259840706642b127fda352042f95aa865c2874af09ede386bfe351491e8f65ff0a28de6152d791642703bd3b7d18d2774586cf241adb65043038ed662cdd8e94cc97e152b21ba97ec5821621e6a8bcdf07a5c1daed46bb746d4ee72b903e991822c067694e8ca8b7acee4b6f16dbc7885c561899ff49f06db4170b8c5d1123c593e6b83ae4b950ad618b88c348784144295eec9e4ecf3929a07cc362d1f20ecda069aeecd65ff8aec86c36708143254df86202828e6232954b54d2f32da2520365ab61bf6a1931e28853140d28bc510b13ae174c6782493065674120d9958bc2b1f3761a5f68528a7be3906e2e1978a554e6873d7b89eb0a10334678c92502ac2af55d812b58efcbe25150683e99d5f42023396bf825b5acc7b4f690f82d4e642c87d533addf72c80ca506e5d18c9c4d05b59e6eeebecd06fc440c86845acd02aab2398ecec7271a008ff07d12588c0a40da4ea4a30109be712566f86d641dfaae7aaf599135a697b274e072da3aff3422954af1136a6537db1f64d5949bf4c169a1b7e7f1dd41b38ac4a49a7222243c3c5dc51071ba502e541227a70d424d63ca92e559e04517cfe0dd9fb11004b59f1def64954151606515276079c303e58d29b700200c3622c8643cfe4089fce617ccc86798b8f634412098008000b00", @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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"], 0x22e0}, 0x1, 0x0, 0x0, 0x4}, 0x80) setreuid$auto(0x0, r2) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) pwrite64$auto(r1, &(0x7f00000002c0)='\vX\xb5n\x91p\xe6\x1e\n\x00\x00\x00\x86\xdde\x1cJ\x99\x00\x03\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xff\xff\x00\x00\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xd2`\x1be2\xd5\x9f[\xea\x1b\x00\x00\x00\x00\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x01\x00\x00\x00E\xd8?\'\x8dg\x01\x00\x01\x00\x00\xaf\x94\x90\xd7\xa6+,j\xf1\x14gJZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x06\x00\x00\x00\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\xf3\xea]BR\xb4J}\xa8\xa1\xe1\x18F\xebb\xbb\xf3>\xd5Bd\xfa\x19\a\x00\xf1\x12lw\xed&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xfd\x82\xa1r\xc0\xc1\x9eG=g\xa7\xe3\x06\xcd\xb9]\xdd\xdcK\x97\x8a\x0e\x94\xd4{\b\xe9\x81<\n\xe9pb\xf7\x9b\xe7\x062T\x85\xc3\xf0x\x1c\x11\xae\xcf\xf2\xd7\x17\xb8\x87\xa0<`\n{P\xafz\xc0\xa4Z\xb1\xbd;\x1d\xc7\xd4g\xe981F\x18j\xc0&0\x7fF\x18Pg\x99L\xdb{\x8a\avR\xfb\x02\xe6\xfe\xb9\xbbCp\xf3K\xff\x8a\x9b\xf1\xbc\xb5\xc64l\x8c\r\xdb\xda|&,\a@\xed[\x1a#m\x01%$\x9b)\xcb\xdf\x0eO~\x80B\'. \xae\xe8\xdf\xb9t\x1f\x8a\xb4\xfb\t\x8eV\xdf\xe9\x17\x8d3\x12\xb6%\x9c!x\xc44uL\xc6\xd5\xc5\xd5\xda\x99\vyg%v\xed\x1f_\xdflt%\xed\xccX\xfc\x17:F\xba\x1c\x17\x13_|\xdc\x1e\xd0\xc2\xec\n\x05\xf9:\x95\x9c\x19V\x95&\xcf\x16\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x97\xfb \xdda\x8c\x9e\xc4\xe4\xe6\xba\xf5/HI`\xb5\x1f\xdc\xc2\xb8\x14\x93(\xde9.UJ\xd6\xba\xfeZ\x02\xb2\xd5\xef\xd4\"!\x9f\xd3\x89\xe3Q\x17,e\xb8\xaf\x1b\x89\xe9\xb5\'\xfa\xb3?K\xbb/\xb1\x86m\xf6v]\xa3\xfc\x01\xf5c~5\x90\x1e\x94R\x95\xe5+Sg\x8dVv\x85\x03\x00\x00\x00\x00\x00\x00]\x97\x90/o7\x9d\x8b\xaf\xed\a2w?\xf9\xde1\xcaa\x8e\nF^\aj\x93\xcb\xe5o\x8cm\xeb\x89\n\xc3\x87%\xf7\xaa\xa5\x90avI=\x02\xb7\x9a&]:e\x99\xb2\x14E\x8e\"\x00\x00\x00\x00\x00\x00\x12\xb1\xf9\xc4\x87\xda\x84/\xd0\x1cd02\x04v\xb8\xd2\xbd\x1fs\xa1#\xa0\\H\xa0\xe9\xdf+\xbf\x028a\xffr\x8e\x19\xe8\xa6\xf86\xe1\xbe{\xf0O\xcd\xaa^\x1d@\xaa\xca\xbaS\x00\x00\x00\x00\x00\x00\x00', 0x80200000007, 0x3) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x45, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.370286227s ago: executing program 6 (id=5115): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(0x3, 0xc1485544, 0xb551) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) recvmmsg$auto(r1, 0x0, 0x3, 0x4, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r3, &(0x7f0000000300)={0x0, 0xffffffffffffffbc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYBLOB="16d7941036ed4e781c4a92ccf78c54a9fa22810e52f8acb4f59e70328558e413a9890443864367cce0ca93dffebdce8ea848527bade464e8", @ANYRESOCT=r0, @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x1) madvise$auto(0x0, 0x20499d, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x108000, 0x800034, 0x9) 2.284832399s ago: executing program 7 (id=5116): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) request_key$auto(&(0x7f0000000000)='(%\x00', &(0x7f0000000040)=']/\x00', 0x0, 0xfffffffe) r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) read$auto_proc_pid_numa_maps_operations_internal(r0, &(0x7f0000000000)=""/110, 0x6e) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setpriority$auto(0x4000000001, 0x100000001, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xfffffffffffffffc, 0x3, 0x1, 0x7, 0x0, 0x7, 0x1, 0x8, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0xf63, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0x100, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x7]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200)) r1 = socket(0x15, 0x6, 0x80) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), 0xffffffffffffffff) setregid$auto(0x5, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) process_mrelease$auto(0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800", @ANYRES16=r2, @ANYBLOB="000b0000000000000000000000000000008b28786b"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x7, 0xfffff000) ppoll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x6, 0x9}, 0x9, &(0x7f00000002c0)={0x8000000000000001, 0x8001}, &(0x7f0000000300)={0x7ff}, 0x8) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00T\x00'/40, 0x9) fallocate$auto(0x3, 0x0, 0xe, 0x8ec8) finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) 2.283021862s ago: executing program 4 (id=5124): mmap$auto(0x0, 0x20009, 0x4000000000db, 0xebd, 0x3, 0xfffffffffffffffc) io_uring_setup$auto(0x6, 0x0) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) r0 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/gid_map\x00', 0x200003, 0x0) setsockopt$auto(r0, 0x80, 0x0, &(0x7f00000003c0)='\x00', 0x2bd) socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x5, 0x7, 0x47, 0x32b, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x2, 0x4, 0xb4, 0x9, 0x2, 0xfffe, 0x80, 0x7, 0x0, 0x7, 0x0, 0x200, 0x0, 0xc00000, [0x5, 0x0, 0x0, 0x50100000000000, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x400000000005b8, 0x0, 0x0, 0x0, 0x4000000000, 0x6, 0xffffffffffffffff, 0x0, 0x1e, 0xfffffffffffffffc, 0x3, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x6, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x541641, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) ioprio_set$auto(0x2, 0x0, 0x8) acct$auto(&(0x7f0000000040)='\x00') acct$auto(0x0) getsockopt$auto(r2, 0x10d, 0xc, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000019c0)=ANY=[@ANYBLOB="90120000", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf253900000013009c00db27e3bfaf924bde58cc5419d84d8f0005003d00060000004812a6804212ca803470ff366b15a87737b8e2e5d9894ac6c67e6ebbda48876b01969fcca20688b90427d4ba2d75058b625877fc6eee6bfea725e474064c8ea98a1a43fd329b94dfd69ab11f51990ed95db5a8cbf6bb1487ae5bf311c3cb24b189c0ab808b8c68e1882db279c19576134b10846348ba431ac27aa311b80dc7d6b1fc1e82b94fe54e0b7b83ef4c13f1644b92cb6ed3cf8562a51c0e403207575022a57917e37268bb6b6cbaeb1d646d528c68dea371994501c5daf065c8296565c5550682a5442b7771ea3a10490bc95a9975c2742af53ae79d7223120ef5c6e1c6ebe7d7eaf3b2a50e341321ce8304423706e0881b978329ee95de6b1a1a77ef4b2f48e2af27a30b33f96a25e9b8818efdcf5567157351517c749b6ac14f8547b2b6acc5dd58aa1f4fa361265b02e0ebee2b2ce379593f3f1823ef5217d3c4daf5eda9a19b1fac84e29bc5680310529600402f324055dc20d9ff4f0e1687e9f2fa99ec4dd0509d125398d2f9a461d2de96e0295deb1bc364396815d06010e8a8b3cd94b629a653736a5fc63d5ea2f178d9632e7509e1946f2b150e0f142f2e58a0953f694c24c7cdc8972f42f47b2b0641ee07a4b538f2c50dc793925da0b6b5199c28c1cdf70804460937f5ab0be013b4ac6ab2d6213cefe19b8022f9b32ec4be1f7be90f3147442970f5686c3940271745252c8ab02be4640b39c38f5c59e8ed0cca01828925c644cd9d6f74a60c6a9f62e3f62887bb1fe2d7ee8d3e23a2f094b8c2274c2b1f61b982344ee252d6caf2fbff57db60805ce91ece4005930a4aeb3a19c3a36f5f9839cba7c5d1f8db55b449660c6139ebd004950534b12f68ac6a849710b732f4ef1033b8c1175a08ab98247e542e71c646675b979b08fe171990c8ef9cc08ccdcefe53a65af2792b30f2e21df4790a3b913e8657b0fedf955a7aa24988cab6da0beb42e04ff1337b10efeb7f5258dac2800793e8c91bba1e77ce69d858d718f6a55b597ec7e04283489b1abc53d00da6a82962cd0492b8be51a42c3bf58de46e8c7e9d978da4de8e2c40877731c7468a11b2570b8aade098f66a1701c9798b4ff83bfd5a8652ccc75d7a8b8f2a8aa40a23a4f219ea37e2104c1e06729385797c4db1016918dcd8322be63a5b20e5427f6e1b25cd46897001301379a9e4859f2124afc9212b8d73dad0f82ebd89f7664a8ee01b7bcf69dc2cd4bfda331e8df037ba256baa798502abdd47d545e795ffe4aa9b058b9e87f5b3b3cae8c8df7a8a73a6315686c47e82585759a8ebdfeed86091a8f34150fb8d98d8b5d57de25c7d1a8d283ec787e33f34717b54a19897e03dc3fde5dbcd9dc18318234383514cfc3c955f9e74122707d5e1db07d1ee293728df4d0e26137e09e9d7bb057983912fb0982003c6fb7a9c9a52c1cf414904a1149ce51f32d7f7f00355fa091ea673bcc1b618f446132f63198bbc78df955cd62c06ae5599824820c4cf61c094c62036afea37589e849d0e034d3cffa2f2b57f2cab116f21e401ec0a797010aa5089527bbf95336bf27214202d147785e3a815fc7a0d9cd6ec2c10fd0096f954fccec503b9028628e66eccbf22fd4796520165dfc4f9490d9b0d3ec5d32973f4a7a01834338ceedc569182f50a8e2b6825c99958b4acc560d1afb99b1cfac92862dd4d70995d50b91249d7e34d211be2df1c484d1e232e7279b74cec9ff6136558cb8bd04ef7b6a6f327a56c1c3da197b2c31242a4f0f7397c103f2166aacba3917af6062732f469188caa3adcb9d8faf28dccc1ee1e78b4c5db10f715f40a580c00dfacffdfc66f230a7200f340795b7780363cc94a00be61cd4ddae7f495d0b6ad537c875f2c1c7ac5cb685fea1d1464d4c7dfd94c045d313d5b60a77978f42fd6240bab49a9fcc5c390184b01e741719713632e17a1be19d30a0a8b441641fe6ef70e3777672228b8f36d778b2524dea0d8e9a8ac1c7160c87f19dd296fda1ccb7eb290c66261ea744069ac0d8494dae9208650595a3465c792b30884380feec4eabe077dcef0ee458a89944ab85220c827db51b5d81f23ee75aba22755396fd05302738acea7f87b622933743cfafb58b0366b5483542ee9db5837040580123c37b974fa77bbb8ff68967a0e95ab926ada87ae1a744464a52582efb137bb576fa859e92de50097050f81726996a3efed3da3a9e5bb930ce58e8b2436c4caa773bdcb9c67be12e569a22fb6eec683faeed632c996853f9b84aea3246563a0a594855fffdc13ffd7cdd7ae2177bbc2f9d1eac0f0cb7c81f3b6c6e51354208eb42e59ca7b235db4ed7cec96c70323ab9dd59bfebc8d11ea6a487cc3ce371fec44154fc220014aa00e6ecbcc56ddcb61909bf829c4ffe74763d67fbad9bcb8d51d2c65e01c83c54ca77ae7bfc880091bb704c065cba353ba1dff428a1f8e9fb421e5cbe1ded7ddbf8eefae97a9eabea73bd5af17fcbc976ab536413653a769e39a138ce3c35a30dae5b1dfe6e7636d2a4aab94eb653a5b486a719a84914337f788dfda74e4fed4878d3b8972a40b9317d79fbdc77d189f5eb7e3f1af7885ceef6e7bbd8c9b608cafbbb252aac8c5ce768dbab661bb93a03b22258a08d9819258fef0f4fd65bdff9ecb45be8a5dfd5f562e7255747e7890d8dae7c4eca22cd0c8c2d87deaa0b73aa08c66b7b9268cb0970feb6b22147ce2bf823b57d38a5dd4da59f051235ee8a98baf36b1dcadec4c84c10cf4280f245e7cdd69cf7346cfd2fb38b4a7a3736efcac0af3efcbbbc1fd2a6d318f94f7be42df1fb2857204dec1078aaf12f8dc33c67c73106cba1645b37e54f9cf738dfa483e870d098cc018c4da73b9883fde5e1e81dff59fee44d73b43cdbb9adc3d1d8f96a17864e76a20725bee34699c69332b4a8ef5fa2fcf4a9657bfb0bb2b29bd1ef77502e72b9af94403e72ba230514bbf98da190d2524b480c9471fb129e01253ec52ca54315a1fb4ba98960b89aecd46e0b2c4732b5b334e583a8bbb04176e2d24c2d878a318d9016444f1c7ae3c95b9b6c6d6cc3fa1637828ddea69375639cfbfb5007c27cf5b4a47851af1dbefea57580bccb60789d38ec828256b0dc251e0cec930221abae42844105ddad641108df118476bf40522243649b417f1eb0292cbcc2375986eeff0f063d0d9021fdb4fb258c6fb0bb855732f5b0c484c76278a5edc26aece85ee1d31c4f0d33bf13632f793a4bcef74d89a57ad53da5f698c7a54766be34c3fc5a581585eaf78aafdad596f329bb7600369361089382c67733c2a5faf99353fbcee4849d0801abe6efeb73d8b919a03077cace72499901559a080d996439eede8b574ce1c5060cc8d971bddd402748311f99a6b777cf3ec1bf8908c47b0d965b67bb8c9d5104d484f66b5049c4d5da1ec608fa0cd636bb9d0ac9155839d495741c22f0bcf9ae1bc25283e3b728d17875b0a05f9d7c4baa1be60e512c12d729a2a0fb1edb32e448f54a9debfbe2e87d8b982f489cee838d3a167bb636ebbe96c95fafe1d0ea1ba1dbbca54a44a0d154fa98f7c571a89ff8fd0735f9ec3e810889a15f56bb2dfd3a94a01e44f2e4a0cb72f7acc6876cc81273ebbf40388cccb13d35477c07cc6212e3c87b3091d0f56bb3c72af7547296b3aa8271a8affc79375a2e289e895fc3c0b297bc7da71a8766806396258b58b966071ed52b10cfe1f944c4604baf0b05aa9da34143961d621fc0b6a946a6e0a953808d164d678b0409112a79b12cf5fe6145f77e6c5f6e3190d90010aaec405df97dea72566c0c7761bc0e4d69187f9fe64fed493bcf7b4ee9416da9d4918f4be953def705dec9b6d363c15a39b05617387e79f13aa85ec89a5e882493ca9b845b3bc796cb737614661da1dc6e5517c24cd8d572d912fad5d4de5bdd8e98745f8f4ed7a7f552172dc7099f0149648f579e9e6287e2c54ca72e316623e1ad6c0a1248a19cb14714804f0df748a2a434c0e91b52fd33b6f7cd1ee38099e2cd86db124c00754d67eb67d45ab2cd67f4e4a49468a5b7fe0860b7fe8e9d23e9531e27263958757ee88402e648537fe522cf17dcd936880f66efc73f72fa3f35795501ae7232faa801cad16e7a28dc2f31ae6b592e561409771301144fb49b8254afcc75a508ad6965e2c23d6fbd94adb2edec34e9596e5b0f85acb7e986ccbfa2b180f57057ead2a0095a2d74a8ba8ba9979c14c2c58cc4460601f7f30d6801a18f84e8e7f782b5a5a5f524021a14c1f4cf6009519727e0804950333c269bd9449bc35f5791eadb12e79049f1014c9a88468021d1d2bb6f2e338fa377b9eeaec5b02963749cc3a3f59c6649cf2c850f1481a4ff6ce69d88942f921bd73d4fe58127b20b0f9709341f759e967e93727acce938a6cee15ac9ee3940527d42783f0094dd919bae9f943c997931afede3df175048cbd6579d6863895f85dde519f741fad18bb88876c09c33910474ca7636f1eb77f566ed638c88f7269525a51020a1d85215db900ec3f5e04a5b32685324e218707f0d51864483ed594290f5e310066c53e343be847f1aff5ef17c49c27bcab86c2e98c1ab70e002192ad42def616c42fb1c91d912e45f5a1f23227cce95079ff0dad05663d223d746ce3412b4f11242c8ede3c3fd83fd07bb0c31798fa458d482133c90cdba5661d0d1b79ad5de29c42fe3f0c8d89a28e516f374d1e3aef4dce8a7ed65c76c02ce36b4c1f3c05f9a98ece0b703a2010ea895bfbdb39b94fd53748ad072702c3ef55a6ce25c120aef1c68777e76e6bcd11c0059e17e9bdcce68237c04138154d0e3b7baa7d3cf913b1172916d6308e48cf3d86d8d1697be2c12e3fceeb5cc3dc8695274850ead43cddd0db405ec3adb77e0db8147e30d1515466ccabb839e1724adeed8f85641b633094eb9d782d06ed896c3a19600db05ef1e392d29dbcdfb5ed230f1fbab7f4bc0cc56de618369ad4bc1609343b05d210fd79c1972a5e289f7506e5ed7bdff1344c41595e38dcfd9c4e604a68bc8b067defe87b247521f0d0999bfa482fe393265e9ca026b17636db3b08f558a72267f75b5d8f2b97d8d2e903aed0a00dcd3952e89c5d0af602b7d11f7e238ded6b5c52f0aa23e87def4325a5edbc1d6499cd020c0a2cc1ccb5d8313cf4f4b6e3ee6aa417f3e3a4a39d614e060bf8803d01d619cf7dba808c7c776f1472d76d72cd2e412d000df780afb9d142f0faf9acd0c18e5ee2de383e7e9ebb356ffc107f7797a2cf673cca550a62904b83348d3b0221da9e2e808694b27caa0addf8eb6dc2559067bd5250174fb33f8381ca186b0082d00b0a9e1a590ac5a3effd6a5cc61d2712748c1bdbbd51fe2947256963853d0fef961ed77a97169d86a41bba0b72ad2d12bb53312e769d253c71e2895ac6ee8b6c422e1cb60dbd13a0e889b3bfe557a03eac21852c40698537fccdb537379d382c260c26adbcc51ec88af5e0f76cf71eb352f54a63713324f4468b6264b83d7d807e7e896027552e14a156b0d4b65fdf5b4a2d3ef5cea75a3e4e4a0f6e6440d106e71633ef322c40ef9f7642459f78f124e75afb90dd033da45280bff6aa77c7d8cffc0b7e32a0bfa45a9debd633652097c5a690e65f40428d10db3e21d2a026886856df2439c1d8735150224b77f9ce075dd5eec2beaa008ae58588762866d507a790d42981a597827c09599c82e7e344fe4bd889761de64c381746bb469b5904e250cc7a9f6a087d36ff39e894578f645563c990b47889e86492aa40708e115ea7a6f1a95c7d8aaea9abfcea68774c7d50d400b973ed7301c3f8a86d76d914ad0419079e62db3d414e0602f13c09ae36a5e8a3510be46593cf70e35cd65d2c6af4ab53823f6ecf735590f41ff0bfba6c69f9a3fe821826c8b09b9ee0b849853ef7ea54f06c0482964743a2b790cb382d647741cac80416439d6f165013d8cad9c04464f19294d55d23760dad6206c9b782f3e4896d75c6649217ba506f01682ca1f1685c9b38717f81059221103c453e7c4bfa83c29a10df7f49d0604d4d129e8417567b3e361914fdbdf3fa4356a80307b58854d83b77d9737702056c43754126dc84160815d81cbb3428c533de3d286c1f1a218401fb10006a8d75eab5312e93d6e95e42302394c65d7d1802c61e781cf9f708f80fbd0d2f73c468ebeb475887eeef5ac3399062ff2e546f8b9eeb883920f5c4ef61048567b76a882e4cf845547c623b68a96b09ae897c560a0470e7be25dac91f64aa4156dfebba0d7c2cfd9b85b0b0bb96b80f52635a84385888325f7d169559f13c7f63fd7ad955c9f75f3a8b24fe90e6cda0397e678248318b1ccf0aa8d625b7891be985dbc6ebdf8748360b540bdf9c8a67ba43ec70b04f5cb35ae0e73604f677c0c99174f662e1432c54af3b2caf028aaf55c28e6fd83e71faf880a8347f7cda6c95bdb49d720a2e78ff1334baf597e0d1775f4d366a8cda3be8b6c2e4574aa2e9f8fa56fa655a66a57f4c4353e35d744ca423b6046fb9bd8f038298a80842bb08194ed3a67ed8cdc608f02279ad9092391788104650ce2f46a35f776677aa85c97a45ea9b0ae5a3cdd8059a942ef8de3b85a19ffedfbeb04ea81e0c17b3f291d09c58000016004901a31d7508824e36fbcbf7bc16fa763b377e960000"], 0x1290}}, 0xc080) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) clock_gettime$auto(0x0, &(0x7f0000000000)={0x6, 0x10001}) capget$auto(&(0x7f0000000040)={0x5, 0xffffffffffffffff}, &(0x7f0000000080)={0x3, 0x8, 0xc0000}) 2.282401413s ago: executing program 5 (id=5125): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_trace_dev_match\x00', 0x40040, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000100), 0x40600, 0x0) read$auto_nst_seq_fops_netdebug(r1, &(0x7f0000000140)=""/233, 0xe9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/mqueue/msgsize_max\x00', 0x101201, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/195, 0xc3) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) shmctl$auto(0xcb, 0x4, &(0x7f0000000140)={{0xf3, 0x0, 0xee00, 0x317c000, 0xb, 0x0, 0x4}, 0x1, 0x8, 0x8, 0x9, 0x8, 0x0, 0xad, 0x0, 0x0, 0x0}) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x8}, 0x80, 0x400400) ioperm$auto(0xc5, 0x3, 0xc115) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) signalfd$auto(0xffffffff, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYRES32=r4, @ANYBLOB="4a34df988cb25fd474673fd265d315bc7dae5fac84185b2ce78399cbe6c2bf5f86eeb688ab41a2a5773db3276f3fe02154d8a570f1ee73d6c828595bd3de527fbd0547e15ff4b095ad15ec88dba6d4ba17367e5708f0c3f8713697602240d314ade0ed6d"], 0x20}, 0x1, 0x0, 0x0, 0xc880}, 0x20000) 915.487243ms ago: executing program 6 (id=5117): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeep\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_4={0x7, r0, 0x5, r0}, 0x92) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) socket(0x1c, 0x3, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000001680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xa, &(0x7f0000000340)={&(0x7f00000016c0)={0x1140, 0x0, 0x400, 0x70bd22, 0x80008}, 0xfffffde0}, 0x1, 0x0, 0x0, 0x20040810}, 0x6810) madvise$auto(0x0, 0x2000000080000001, 0x3) prctl$auto(0x0, 0x40000007a, 0x4, 0x100000001, 0x8) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x7, 0x1, 0x4, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0x20000000000007, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0xdc1, 0x5, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0xa9, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x7]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200)) ppoll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x6, 0x9}, 0x9, &(0x7f00000002c0)={0x8000000000000001, 0x8001}, &(0x7f0000000300)={0x7ff}, 0x8) socket(0x10, 0x2, 0x14) 914.818289ms ago: executing program 4 (id=5127): mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') 914.439961ms ago: executing program 5 (id=5118): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x55) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x23, 0x5, 0x0) socket(0xa, 0x5, 0x0) socket(0x2, 0x80805, 0x0) socket(0x2, 0x1, 0x84) open(0x0, 0xc162, 0x0) socket(0x80000000000000a, 0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) open(0x0, 0x2a4c0, 0x0) socket(0xa, 0x1, 0x84) socket(0xa, 0x801, 0x84) socket(0x11, 0x3, 0x2) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 734.144916ms ago: executing program 5 (id=5119): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x2a, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x110000000000002d, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8000006, 0x2) r3 = gettid() openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/trace_options\x00', 0x408002, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8400) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000200)='./cgroup\x00', 0x400, 0x23) mkdir$auto(&(0x7f0000000140)='MAC80211_HWSIM\x00', 0xc) rmdir$auto(&(0x7f0000000340)='MAC80211_HWSIM\x00') sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES64=r3, @ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) nanosleep$auto(&(0x7f0000000000)={0x3, 0x4}, &(0x7f0000000040)={0x7fffffffffffffff, 0x7}) 643.051993ms ago: executing program 4 (id=5120): prctl$auto(0x41, 0x17, 0x0, 0x0, 0x0) 489.400353ms ago: executing program 4 (id=5121): sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) bind$auto(0x3, 0x0, 0x6b) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x10, 0x2, 0x0) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x208, 0x2, 0xb32, 0xe29, 0xee01, 0xffffffffffffffff, 0x0, 0x5, 0x7eacb662, 0x2139, 0x9, 0xf89b, 0xffffffffffffffff, 0x100000001, 0xfffffffffffffff7, 0x8, 0x200}, 0x3252) symlink$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x8, 0x3, 0x101) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) mkdir$auto(0x0, 0x8001) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mount$auto(0x0, 0x0, 0x0, 0x7fffffff, 0x0) connect$auto(0x3, 0x0, 0x55) 86.613289ms ago: executing program 7 (id=5122): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x88) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) epoll_create$auto(0x4) semctl$auto(0x1ff, 0x2, 0x13, 0x1) socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x6, 0x0, 0x28) setsockopt$auto(0x3, 0x0, 0x24, 0x0, 0x28) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0x4000000000000c8, 0x800454d3, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/4/smp_affinity\x00', 0x141401, 0x0) write$auto(0x3, 0x0, 0x4000) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) write$auto(0xc8, 0x0, 0x40f6) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(0x0, 0x3) socketpair$auto(0xf, 0x7fff, 0x4, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) readv$auto(0x0, 0x0, 0x7ff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) read$auto(0x4, 0x0, 0xfdef) 84.014425ms ago: executing program 4 (id=5123): r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x0, 0x43, 0x0, &(0x7f00000000c0)=0x1e) 0s ago: executing program 4 (id=5126): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x7, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x1e, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x48, 0x4909b6f8, 0x1ffdf, 0x9, 0x579b, 0x2, 0x0, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000002, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x81, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x6, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x1, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0x9) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) kernel console output (not intermixed with test programs): in process `syz.5.957'. [ 188.625023][ T8932] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.861673][ T8938] netlink: 326 bytes leftover after parsing attributes in process `syz.4.959'. [ 189.295553][ T8944] netlink: 334 bytes leftover after parsing attributes in process `syz.4.963'. [ 189.391986][ T8948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.964'. [ 189.511855][ T8948] veth1_macvtap: left promiscuous mode [ 190.026461][ T8963] netlink: 330 bytes leftover after parsing attributes in process `syz.5.970'. [ 190.915056][ T8403] syz.2.831 (8403) used greatest stack depth: 19072 bytes left [ 191.001475][ T8983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.977'. [ 191.021482][ T8983] veth1_macvtap: left promiscuous mode [ 191.872330][ T9003] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 192.139983][ T9014] netlink: 342 bytes leftover after parsing attributes in process `syz.2.990'. [ 192.159246][ T9014] netlink: 214 bytes leftover after parsing attributes in process `syz.2.990'. [ 192.180464][ T9014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.187794][ T9014] IPv6: NLM_F_CREATE should be set when creating new route [ 192.195150][ T9014] IPv6: NLM_F_CREATE should be set when creating new route [ 192.202397][ T9014] IPv6: NLM_F_CREATE should be set when creating new route [ 192.560386][ T9022] netlink: 326 bytes leftover after parsing attributes in process `syz.3.994'. [ 192.682527][ T9027] netlink: 'syz.3.996': attribute type 17 has an invalid length. [ 192.702148][ T9027] netlink: 326 bytes leftover after parsing attributes in process `syz.3.996'. [ 194.538386][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.544732][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.608851][ T9060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1007'. [ 194.690480][ T9060] veth1_macvtap: left promiscuous mode [ 194.823882][ T9064] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1009'. [ 195.074983][ T29] audit: type=1326 audit(1734345274.789:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.5.1010" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff426785d19 code=0x0 [ 195.569965][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1017'. [ 196.021535][ T9094] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1021'. [ 196.051247][ T9094] netlink: 214 bytes leftover after parsing attributes in process `syz.5.1021'. [ 196.097538][ T9094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.104905][ T9094] IPv6: NLM_F_CREATE should be set when creating new route [ 196.112209][ T9094] IPv6: NLM_F_CREATE should be set when creating new route [ 196.119518][ T9094] IPv6: NLM_F_CREATE should be set when creating new route [ 196.519248][ T9100] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1023'. [ 196.548141][ T9100] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1023'. [ 196.570897][ T9100] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1023'. [ 197.225607][ T9119] netlink: 'syz.4.1027': attribute type 64 has an invalid length. [ 198.897408][ T9156] __nla_validate_parse: 4 callbacks suppressed [ 198.897431][ T9156] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1042'. [ 199.749401][ T9171] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1047'. [ 200.411796][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 201.863482][ T9221] delete_channel: no stack [ 202.118480][ T9229] netlink: 'syz.4.1066': attribute type 4 has an invalid length. [ 202.334248][ T9223] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1064'. [ 202.382373][ T9235] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1068'. [ 202.627848][ T9241] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1071'. [ 203.099914][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 203.145015][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 204.205771][ T9276] netlink: 'syz.3.1085': attribute type 19 has an invalid length. [ 204.227553][ T9276] netlink: 114 bytes leftover after parsing attributes in process `syz.3.1085'. [ 204.475172][ T9284] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1089'. [ 208.449404][ T9354] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1113'. [ 208.495084][ T9354] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.699911][ T9360] netlink: 'syz.5.1116': attribute type 21 has an invalid length. [ 208.745217][ T9360] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1116'. [ 210.548673][ T9393] block nbd0: Unsupported socket: shutdown callout must be supported. [ 213.499387][ T9442] netlink: 'syz.2.1145': attribute type 4 has an invalid length. [ 213.518399][ T9442] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1145'. [ 213.734350][ T9447] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1146'. [ 214.081578][ T9457] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1151'. [ 214.603267][ T9464] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1154'. [ 214.740474][ T9469] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1156'. [ 214.951072][ T9473] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1158'. [ 215.226048][ T9478] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1160'. [ 217.809001][ T9529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1179'. [ 218.133978][ T9534] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1183'. [ 218.317478][ T9537] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1181'. [ 218.640327][ T9549] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1188'. [ 218.656147][ T9541] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1185'. [ 218.888472][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1192'. [ 218.921070][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1192'. [ 219.067495][ T9561] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1193'. [ 219.090035][ T9561] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1193'. [ 219.126903][ T9561] netlink: 210 bytes leftover after parsing attributes in process `syz.4.1193'. [ 219.476813][ T9571] netlink: 314 bytes leftover after parsing attributes in process `syz.4.1198'. [ 219.690750][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 220.948936][ T9606] netlink: 'syz.4.1213': attribute type 28 has an invalid length. [ 220.964894][ T9606] netlink: 'syz.4.1213': attribute type 29 has an invalid length. [ 220.974974][ T9606] netlink: 'syz.4.1213': attribute type 30 has an invalid length. [ 220.982836][ T9606] netlink: 'syz.4.1213': attribute type 31 has an invalid length. [ 221.000952][ T9606] netlink: 'syz.4.1213': attribute type 32 has an invalid length. [ 221.014884][ T9606] netlink: 'syz.4.1213': attribute type 33 has an invalid length. [ 221.034908][ T9606] netlink: 'syz.4.1213': attribute type 35 has an invalid length. [ 221.056336][ T9606] netlink: 'syz.4.1213': attribute type 37 has an invalid length. [ 221.070369][ T9606] netlink: 'syz.4.1213': attribute type 39 has an invalid length. [ 221.078729][ T9606] netlink: 'syz.4.1213': attribute type 40 has an invalid length. [ 221.090654][ T9606] netlink: 18 bytes leftover after parsing attributes in process `syz.4.1213'. [ 223.700235][ T9660] __nla_validate_parse: 4 callbacks suppressed [ 223.700256][ T9660] netlink: 322 bytes leftover after parsing attributes in process `syz.5.1232'. [ 228.476346][ T9766] [U]  [ 228.479436][ T9766] [U] [ 228.482173][ T9766] [U] [ 228.484892][ T9766] [U] [ 228.510466][ T9768] netlink: 130 bytes leftover after parsing attributes in process `syz.5.1272'. [ 228.612967][ T9766] [U] [ 228.615746][ T9766] [U] [ 228.618482][ T9766] [U] [ 228.621215][ T9766] [U] [ 228.719762][ T9766] [U] [ 228.722532][ T9766] [U] [ 228.725260][ T9766] [U] [ 228.727981][ T9766] [U] [ 228.843111][ T9766] [U] [ 228.845901][ T9766] [U] [ 228.848660][ T9766] [U] [ 228.851390][ T9766] [U] [ 228.926769][ T9766] [U] [ 228.929564][ T9766] [U] [ 228.932302][ T9766] [U] [ 228.935028][ T9766] [U] [ 229.006150][ T9766] [U] [ 229.008919][ T9766] [U] [ 229.011654][ T9766] [U] [ 229.014375][ T9766] [U] [ 229.087485][ T9766] [U] [ 229.090258][ T9766] [U] [ 229.092994][ T9766] [U] [ 229.095726][ T9766] [U] [ 229.184727][ T9766] [U] [ 229.187484][ T9766] [U] [ 229.190215][ T9766] [U] [ 229.192954][ T9766] [U] [ 229.207942][ T9780] sp0: Synchronizing with TNC [ 229.334882][ T9766] [U] [ 231.022854][ T9807] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1285'. [ 234.225674][ T9851] validate_nla: 4 callbacks suppressed [ 234.225695][ T9851] netlink: 'syz.3.1299': attribute type 39 has an invalid length. [ 234.296261][ T9851] netlink: 'syz.3.1299': attribute type 40 has an invalid length. [ 234.316460][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 234.345401][ T9851] netlink: 'syz.3.1299': attribute type 41 has an invalid length. [ 234.376015][ T9851] netlink: 'syz.3.1299': attribute type 44 has an invalid length. [ 234.423639][ T9851] netlink: 'syz.3.1299': attribute type 46 has an invalid length. [ 234.468538][ T9851] netlink: 'syz.3.1299': attribute type 47 has an invalid length. [ 234.523533][ T9851] netlink: 'syz.3.1299': attribute type 48 has an invalid length. [ 234.574917][ T9851] netlink: 'syz.3.1299': attribute type 49 has an invalid length. [ 234.607642][ T9851] netlink: 'syz.3.1299': attribute type 50 has an invalid length. [ 234.654053][ T9851] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1299'. [ 236.092739][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1317'. [ 236.139259][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1317'. [ 236.845665][ T9905] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1322'. [ 236.974086][ T9907] netlink: 322 bytes leftover after parsing attributes in process `syz.5.1323'. [ 237.130825][ T9912] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1325'. [ 237.165472][ T9912] vcan0: entered promiscuous mode [ 237.524370][ T9924] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1328'. [ 237.996723][ T9936] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 240.228914][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1349'. [ 240.255042][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1349'. [ 242.412269][T10049] netlink: 'syz.5.1375': attribute type 27 has an invalid length. [ 242.428700][T10049] netlink: 'syz.5.1375': attribute type 28 has an invalid length. [ 242.455132][T10049] netlink: 'syz.5.1375': attribute type 29 has an invalid length. [ 242.464028][T10049] netlink: 'syz.5.1375': attribute type 30 has an invalid length. [ 242.504893][T10049] netlink: 'syz.5.1375': attribute type 31 has an invalid length. [ 242.512761][T10049] netlink: 'syz.5.1375': attribute type 32 has an invalid length. [ 242.534860][T10049] netlink: 'syz.5.1375': attribute type 33 has an invalid length. [ 242.579158][T10049] netlink: 'syz.5.1375': attribute type 35 has an invalid length. [ 242.594831][T10049] netlink: 'syz.5.1375': attribute type 37 has an invalid length. [ 242.602764][T10049] netlink: 'syz.5.1375': attribute type 39 has an invalid length. [ 242.625141][T10049] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1375'. [ 244.686120][T10092] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 244.822529][T10100] netlink: 314 bytes leftover after parsing attributes in process `syz.5.1394'. [ 245.035305][T10109] tipc: Started in network mode [ 245.040376][T10109] tipc: Node identity ffffffff, cluster identity 4711 [ 245.048503][T10109] tipc: Node number set to 4294967295 [ 245.396594][T10120] sp0: Synchronizing with TNC [ 245.592497][T10124] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1403'. [ 245.623906][T10124] netlink: 110 bytes leftover after parsing attributes in process `syz.2.1403'. [ 246.247520][T10139] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1407'. [ 247.041970][T10153] mkiss: ax0: crc mode is auto. [ 249.636156][T10230] sctp: [Deprecated]: syz.3.1436 (pid 10230) Use of int in maxseg socket option. [ 249.636156][T10230] Use struct sctp_assoc_value instead [ 250.452189][T10256] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1447'. [ 251.698028][T10298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1462'. [ 251.824091][T10298] hsr_slave_0: left promiscuous mode [ 251.830649][T10298] hsr_slave_1: left promiscuous mode [ 252.262302][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'. [ 252.674939][T10330] ICMPv6: process `syz.5.1474' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 254.002735][T10365] sock: sock_set_timeout: `syz.2.1487' (pid 10365) tries to set negative timeout [ 255.109154][ T29] audit: type=1800 audit(1734345334.839:4): pid=10395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1498" name="dbroot" dev="configfs" ino=23837 res=0 errno=0 [ 255.115517][T10395] db_root: cannot open: initcall:initcall_finish [ 255.115517][T10395] initcall:initcall_start [ 255.115517][T10395] initcall:initcall_level [ 255.115517][T10395] vsyscall:emulate_vsyscall [ 255.115517][T10395] kvm:kvm_test_age_hva [ 255.115517][T10395] kvm:kvm_age_hva [ 255.115517][T10395] kvm:kvm_unmap_hva_range [ 255.115517][T10395] kvm:kvm_dirty_ring_exit [ 255.115517][T10395] kvm:kvm_dirty_ring_reset [ 255.115517][T10395] kvm:kvm_dirty_ring_push [ 255.115517][T10395] kvm:kvm_halt_poll_ns [ 255.115517][T10395] kvm:kvm_async_pf_completed [ 255.115517][T10395] kvm:kvm_async_pf_ready [ 255.115517][T10395] kvm:kvm_async_pf_not_present [ 255.115517][T10395] kvm:kvm_async_pf_repeated_fault [ 255.115517][T10395] kvm:kvm_try_async_get_page [ 255.115517][T10395] kvm:kvm_fpu [ 255.115517][T10395] kvm:kvm_iocsr [ 255.115517][T10395] kvm:kvm_mmio [ 255.115517][T10395] kvm:kvm_ack_irq [ 255.115517][T10395] kvm:kvm_msi_set_irq [ 255.115517][T10395] kvm:kvm_ioapic_delayed_eoi_inj [ 255.115517][T10395] kvm:kvm_ioapic_set_irq [ 255.115517][T10395] kvm:kvm_set_irq [ 255.115517][T10395] kvm:kvm_vcpu_wakeup [ 255.115517][T10395] kvm:kvm_userspace_exit [ 255.115517][T10395] kvm:kvm_rmp_fault [ 255.115517][T10395] kvm:kvm_vmgexit_msr_protocol_exit [ 255.115517][T10395] kvm:kvm_vmgexit_msr_protocol_enter [ 255.115517][T10395] kvm:kvm_vmgexit_exit [ 255.115517][T10395] kvm:kvm_vmgexit_enter [ 255.115517][T10395] kvm:kvm_hv_syndbg_get_msr [ 255.115517][T10395] kvm:kvm_hv_syndbg_set_msr [ 255.115517][T10395] kvm:kvm_nested_vmenter_failed [ 255.115517][T10395] kvm:kvm_pv_tlb_flush [ 255.115517][T10395] kvm:kvm_hv_send_ipi_ex [ 255.115517][T10395] kvm:kvm_hv_send_ipi [ 255.115517][T10395] kvm:kvm_hv_flush_tlb_ex [ 255.115517][T10395] kvm:kvm_hv_flush_tlb [ 255.115517][T10395] kvm:kvm_hv_timer_state [ 255.115517][T10395] kvm:kvm_avic_doorbell [ 255.115517][T10395] kvm:kvm_avic_kick_vcpu_slowpath [ 255.115517][T10395] kvm:kvm_avic_ga_log [ 255.115517][T10395] k [ 255.985704][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.174542][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.872078][T10455] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1521'. [ 258.018336][T10458] netlink: 222 bytes leftover after parsing attributes in process `syz.4.1522'. [ 258.033747][T10458] netlink: 222 bytes leftover after parsing attributes in process `syz.4.1522'. [ 258.045101][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 258.051240][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 259.388580][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1538'. [ 259.402731][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1538'. [ 260.224300][T10530] mkiss: ax0: crc mode is auto. [ 260.372909][T10536] validate_nla: 1 callbacks suppressed [ 260.372928][T10536] netlink: 'syz.4.1554': attribute type 5 has an invalid length. [ 260.396261][T10536] netlink: 314 bytes leftover after parsing attributes in process `syz.4.1554'. [ 261.028121][T10562] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1561'. [ 262.286409][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1575'. [ 262.327948][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1575'. [ 262.613327][T10607] netlink: 'syz.4.1580': attribute type 10 has an invalid length. [ 262.621690][T10607] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1580'. [ 264.029000][T10643] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1592'. [ 264.063598][T10643] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1592'. [ 264.091476][T10643] netlink: 210 bytes leftover after parsing attributes in process `syz.3.1592'. [ 265.705714][T10666] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1600'. [ 266.428661][T10672] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1603'. [ 266.884681][T10681] block nbd0: not configured, cannot reconfigure [ 266.986393][T10686] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1610'. [ 267.004212][T10686] netlink: 158 bytes leftover after parsing attributes in process `syz.4.1610'. [ 268.283734][T10718] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1623'. [ 269.118960][T10744] netlink: 'syz.2.1635': attribute type 4 has an invalid length. [ 269.135104][T10744] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1635'. [ 269.147968][T10744] IPv6: NLM_F_CREATE should be specified when creating new route [ 269.157884][T10744] IPv6: NLM_F_REPLACE set, but no existing node found! [ 269.170322][T10746] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1636'. [ 269.179830][T10746] IPv6: NLM_F_CREATE should be specified when creating new route [ 269.188322][T10746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.195632][T10746] IPv6: NLM_F_CREATE should be set when creating new route [ 269.202888][T10746] IPv6: NLM_F_CREATE should be set when creating new route [ 269.210161][T10746] IPv6: NLM_F_CREATE should be set when creating new route [ 269.481187][T10757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1641'. [ 269.741421][T10764] netlink: 'syz.4.1645': attribute type 33 has an invalid length. [ 269.774830][T10764] netlink: 322 bytes leftover after parsing attributes in process `syz.4.1645'. [ 270.853458][T10783] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1652'. [ 271.068092][T10787] ICMPv6: process `syz.5.1654' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 271.636565][T10797] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1659'. [ 272.985556][T10818] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1665'. [ 273.159725][T10813] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1663'. [ 273.179184][T10813] lo: entered promiscuous mode [ 273.184018][T10813] lo: entered allmulticast mode [ 273.501697][T10835] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1671'. [ 273.530849][T10835] : renamed from bond_slave_1 (while UP) [ 273.689398][T10837] netlink: 'syz.4.1672': attribute type 1 has an invalid length. [ 273.723292][T10837] netlink: 'syz.4.1672': attribute type 1 has an invalid length. [ 273.733825][T10837] netlink: 'syz.4.1672': attribute type 1 has an invalid length. [ 273.741943][T10837] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1672'. [ 273.751134][T10837] netlink: 'syz.4.1672': attribute type 1 has an invalid length. [ 274.396400][T10856] __nla_validate_parse: 3 callbacks suppressed [ 274.396424][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'. [ 275.968085][T10886] nbd: illegal input index 50331648 [ 278.245255][T10916] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1699'. [ 278.281273][T10916] net veth1_virt_wifi ›: renamed from virt_wifi0 [ 279.258914][T10930] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1704'. [ 279.391211][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1705'. [ 280.209747][T10945] sp0: Synchronizing with TNC [ 280.232052][T10947] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1711'. [ 280.256396][T10947] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1711'. [ 280.270164][T10947] netlink: 134 bytes leftover after parsing attributes in process `syz.4.1711'. [ 282.066459][T10974] netlink: 'syz.2.1720': attribute type 4 has an invalid length. [ 282.098823][T10974] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1720'. [ 282.780632][T10986] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1726'. [ 284.409925][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 285.822560][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.833385][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.844903][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.859661][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.888030][ T5144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 285.916559][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.241974][T11024] chnl_net:caif_netlink_parms(): no params data found [ 286.486534][T11024] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.515227][T11024] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.522495][T11024] bridge_slave_0: entered allmulticast mode [ 286.580799][T11024] bridge_slave_0: entered promiscuous mode [ 286.597068][T11024] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.604270][T11024] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.611928][T11024] bridge_slave_1: entered allmulticast mode [ 286.625922][T11024] bridge_slave_1: entered promiscuous mode [ 286.689124][T11024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.738045][T11024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.824276][T11024] team0: Port device team_slave_0 added [ 286.840965][T11024] team0: Port device team_slave_1 added [ 286.980336][T11024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.988246][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.069244][T11024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.093038][T11024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.104824][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.149596][T11024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.233003][T11024] hsr_slave_0: entered promiscuous mode [ 287.239718][T11024] hsr_slave_1: entered promiscuous mode [ 287.253642][T11024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.261900][T11024] Cannot create hsr debugfs directory [ 287.628432][T11024] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 287.679651][T11024] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 287.727539][T11024] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 287.747232][T11055] netlink: 'syz.5.1749': attribute type 4 has an invalid length. [ 287.765294][T11055] netlink: 314 bytes leftover after parsing attributes in process `syz.5.1749'. [ 287.785252][T11024] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 287.934545][T11024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.964990][ T5839] Bluetooth: hci4: command tx timeout [ 287.975374][T11024] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.988956][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.996131][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.031037][ T3023] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.038234][ T3023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.161541][T11024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.187079][T11024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.224893][T11061] Process accounting resumed [ 288.527036][T11024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.960794][T11024] veth0_vlan: entered promiscuous mode [ 288.980811][T11024] veth1_vlan: entered promiscuous mode [ 289.062389][T11024] veth0_macvtap: entered promiscuous mode [ 289.106126][T11024] veth1_macvtap: entered promiscuous mode [ 289.146535][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.185532][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.204812][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.237104][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.270096][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.304889][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.333545][T11024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.351514][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.382400][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.405030][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.441905][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.455231][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.467411][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.479432][T11024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.545406][T11102] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1764'. [ 289.587659][T11024] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.614904][T11024] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.623664][T11024] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.671415][T11024] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.897095][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.954029][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.059253][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.072378][ T5839] Bluetooth: hci4: command tx timeout [ 290.085917][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.425160][T11122] HfR: entered promiscuous mode [ 292.031800][T11170] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1791'. [ 292.053546][T11170] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1791'. [ 292.071636][T11170] netlink: 134 bytes leftover after parsing attributes in process `syz.2.1791'. [ 292.125363][ T5839] Bluetooth: hci4: command tx timeout [ 292.481625][T11188] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1798'. [ 292.561280][T11192] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1800'. [ 292.571026][T11192] ipvlan0: entered allmulticast mode [ 292.577583][T11192] veth0_vlan: entered allmulticast mode [ 294.031204][T11212] netlink: 158 bytes leftover after parsing attributes in process `syz.6.1808'. [ 294.221290][ T5839] Bluetooth: hci4: command tx timeout [ 297.695330][T11293] netlink: 326 bytes leftover after parsing attributes in process `syz.6.1839'. [ 300.879866][T11367] netlink: 266 bytes leftover after parsing attributes in process `syz.2.1861'. [ 301.206167][T11375] netlink: 266 bytes leftover after parsing attributes in process `syz.2.1866'. [ 301.457324][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1870'. [ 301.526591][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1870'. [ 303.311546][T11408] netlink: 'syz.2.1881': attribute type 64 has an invalid length. [ 303.359378][T11408] netlink: 74 bytes leftover after parsing attributes in process `syz.2.1881'. [ 303.649341][T11415] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1884'. [ 304.097932][T11427] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1888'. [ 304.121953][T11427] mac80211_hwsim hwsim14 ›: renamed from wlan0 (while UP) [ 304.576232][T11438] netlink: 138 bytes leftover after parsing attributes in process `syz.5.1891'. [ 305.830396][T11471] netlink: 'syz.5.1904': attribute type 10 has an invalid length. [ 305.849987][T11471] netlink: 'syz.5.1904': attribute type 13 has an invalid length. [ 306.861011][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 306.871623][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 306.984135][T11485] netlink: 'syz.6.1908': attribute type 2 has an invalid length. [ 307.025717][T11485] netlink: 'syz.6.1908': attribute type 2 has an invalid length. [ 307.350744][T11476] kexec: Could not allocate control_code_buffer [ 307.502655][T11503] capability: warning: `syz.5.1917' uses 32-bit capabilities (legacy support in use) [ 308.434027][T11542] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1932'. [ 308.617596][T11545] netlink: 146 bytes leftover after parsing attributes in process `syz.6.1933'. [ 311.174991][T11615] netlink: 504 bytes leftover after parsing attributes in process `syz.5.1959'. [ 311.201219][T11615] netlink: 504 bytes leftover after parsing attributes in process `syz.5.1959'. [ 313.697640][T11707] netlink: 338 bytes leftover after parsing attributes in process `syz.6.1996'. [ 313.718018][T11707] netlink: 338 bytes leftover after parsing attributes in process `syz.6.1996'. [ 313.746520][T11707] netlink: 130 bytes leftover after parsing attributes in process `syz.6.1996'. [ 315.441880][T11750] netlink: 306 bytes leftover after parsing attributes in process `syz.5.2013'. [ 315.474929][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2013'. [ 315.508883][T11750] lo: left promiscuous mode [ 315.513453][T11750] lo: left allmulticast mode [ 315.528017][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2013'. [ 316.007266][T11768] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2019'. [ 316.095429][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2020'. [ 316.294477][T11771] bond0: (slave bond_slave_0): Releasing backup interface [ 316.723720][T11786] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2025'. [ 317.409885][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.566104][ T29] audit: type=1800 audit(1734345397.294:5): pid=11812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2035" name="dbroot" dev="configfs" ino=29178 res=0 errno=0 [ 318.119157][T11822] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2040'. [ 319.746574][T11848] syz.6.2051: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 319.787887][T11848] CPU: 1 UID: 0 PID: 11848 Comm: syz.6.2051 Not tainted 6.13.0-rc3-syzkaller #0 [ 319.796978][T11848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 319.807050][T11848] Call Trace: [ 319.810337][T11848] [ 319.813271][T11848] dump_stack_lvl+0x16c/0x1f0 [ 319.817968][T11848] warn_alloc+0x24d/0x3a0 [ 319.822320][T11848] ? __pfx_warn_alloc+0x10/0x10 [ 319.827186][T11848] ? __pfx_mark_lock+0x10/0x10 [ 319.831978][T11848] ? lock_acquire.part.0+0x11b/0x380 [ 319.837284][T11848] __vmalloc_node_range_noprof+0x10df/0x1530 [ 319.843285][T11848] ? rcu_is_watching+0x12/0xc0 [ 319.848064][T11848] ? trace_contention_end+0xee/0x140 [ 319.853362][T11848] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 319.858666][T11848] ? dvb_demux_do_ioctl+0x496/0x1340 [ 319.863968][T11848] ? __pfx___mutex_lock+0x10/0x10 [ 319.869011][T11848] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 319.875383][T11848] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.881324][T11848] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 319.886644][T11848] vmalloc_noprof+0x6b/0x90 [ 319.891169][T11848] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 319.896472][T11848] dvb_demux_do_ioctl+0x54d/0x1340 [ 319.901610][T11848] dvb_usercopy+0x165/0x320 [ 319.906162][T11848] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 319.911730][T11848] ? __pfx_dvb_usercopy+0x10/0x10 [ 319.916765][T11848] ? __pfx_lock_release+0x10/0x10 [ 319.921807][T11848] ? __fget_files+0x206/0x3a0 [ 319.926539][T11848] dvb_demux_ioctl+0x29/0x40 [ 319.931153][T11848] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 319.936449][T11848] __x64_sys_ioctl+0x190/0x200 [ 319.941240][T11848] do_syscall_64+0xcd/0x250 [ 319.945761][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.951662][T11848] RIP: 0033:0x7f28d8385d19 [ 319.956083][T11848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.975709][T11848] RSP: 002b:00007f28d90eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.984148][T11848] RAX: ffffffffffffffda RBX: 00007f28d8575fa0 RCX: 00007f28d8385d19 [ 319.992122][T11848] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 320.000101][T11848] RBP: 00007f28d8401a20 R08: 0000000000000000 R09: 0000000000000000 [ 320.008113][T11848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.016096][T11848] R13: 0000000000000000 R14: 00007f28d8575fa0 R15: 00007ffdf8b8b228 [ 320.024089][T11848] [ 320.105020][T11848] Mem-Info: [ 320.108309][T11848] active_anon:48992 inactive_anon:0 isolated_anon:0 [ 320.108309][T11848] active_file:4695 inactive_file:53126 isolated_file:0 [ 320.108309][T11848] unevictable:768 dirty:428 writeback:0 [ 320.108309][T11848] slab_reclaimable:10713 slab_unreclaimable:97949 [ 320.108309][T11848] mapped:43031 shmem:42179 pagetables:1010 [ 320.108309][T11848] sec_pagetables:0 bounce:0 [ 320.108309][T11848] kernel_misc_reclaimable:0 [ 320.108309][T11848] free:1291400 free_pcp:3313 free_cma:0 [ 320.193831][T11848] Node 0 active_anon:194680kB inactive_anon:0kB active_file:17064kB inactive_file:212428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:171456kB dirty:1708kB writeback:0kB shmem:166048kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11376kB pagetables:3920kB sec_pagetables:0kB all_unreclaimable? no [ 320.320421][T11848] Node 1 active_anon:0kB inactive_anon:0kB active_file:1716kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1716kB dirty:36kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 320.383816][T11848] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.442209][T11848] lowmem_reserve[]: 0 2465 2466 0 0 [ 320.460937][T11848] Node 0 DMA32 free:1254364kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:190940kB inactive_anon:0kB active_file:17064kB inactive_file:211592kB unevictable:1536kB writepending:1708kB present:3129332kB managed:2551332kB mlocked:0kB bounce:0kB free_pcp:8252kB local_pcp:7112kB free_cma:0kB [ 320.528563][T11848] lowmem_reserve[]: 0 0 0 0 0 [ 320.533368][T11848] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.617406][T11848] lowmem_reserve[]: 0 0 0 0 0 [ 320.655463][T11848] Node 1 Normal free:3899408kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:1716kB inactive_file:76kB unevictable:1536kB writepending:36kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6708kB local_pcp:0kB free_cma:0kB [ 320.714909][T11848] lowmem_reserve[]: 0 0 0 0 0 [ 320.719719][T11848] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 320.743991][T11848] Node 0 DMA32: 258*4kB (UME) 219*8kB (UE) 129*16kB (UE) 28*32kB (UE) 160*64kB (UE) 53*128kB (UE) 110*256kB (UME) 124*512kB (UME) 91*1024kB (UME) 46*2048kB (UME) 231*4096kB (UM) = 1247984kB [ 320.804863][T11848] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 320.825219][T11848] Node 1 Normal: 192*4kB (UM) 58*8kB (UME) 26*16kB (UME) 215*32kB (UME) 101*64kB (UME) 31*128kB (UME) 14*256kB (UME) 10*512kB (UME) 5*1024kB (UME) 8*2048kB (UME) 940*4096kB (UM) = 3899408kB [ 320.855615][T11848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.876825][T11848] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 320.904851][T11848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.914456][T11848] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 320.949719][T11848] 102771 total pagecache pages [ 320.954535][T11848] 29 pages in swap cache [ 320.959907][T11848] Free swap = 122404kB [ 320.964183][T11848] Total swap = 124996kB [ 320.989186][T11848] 2097051 pages RAM [ 320.993188][T11848] 0 pages HighMem/MovableOnly [ 320.998613][T11848] 427368 pages reserved [ 321.002884][T11848] 0 pages cma reserved [ 321.969247][T11900] __nla_validate_parse: 2 callbacks suppressed [ 321.969268][T11900] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2067'. [ 323.307108][T11929] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2079'. [ 323.346443][T11929] netlink: 306 bytes leftover after parsing attributes in process `syz.6.2079'. [ 323.542084][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2081'. [ 323.585834][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2081'. [ 323.648819][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2082'. [ 325.664159][T11978] netlink: 'syz.2.2098': attribute type 5 has an invalid length. [ 325.674329][T11978] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2098'. [ 325.683695][T11978] netlink: 'syz.2.2098': attribute type 5 has an invalid length. [ 325.841716][T11982] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2100'. [ 326.089601][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2103'. [ 326.120539][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2103'. [ 326.527209][ T5836] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 327.243048][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.253053][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.263199][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.272239][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.281174][ T5144] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 327.289382][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.772860][T12009] chnl_net:caif_netlink_parms(): no params data found [ 328.087625][T12009] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.118292][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.177063][T12009] bridge_slave_0: entered allmulticast mode [ 328.214924][T12009] bridge_slave_0: entered promiscuous mode [ 328.232213][T12009] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.262949][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.285418][T12009] bridge_slave_1: entered allmulticast mode [ 328.319736][T12009] bridge_slave_1: entered promiscuous mode [ 328.683273][T12009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.743519][T12009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.907123][T12009] team0: Port device team_slave_0 added [ 328.922040][T12009] team0: Port device team_slave_1 added [ 329.066506][T12009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.084653][T12009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.141072][T12009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.164169][T12009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.181481][T12009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.224793][T12009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.325133][ T5839] Bluetooth: hci0: command tx timeout [ 329.341382][T12009] hsr_slave_0: entered promiscuous mode [ 329.362614][T12009] hsr_slave_1: entered promiscuous mode [ 329.373989][T12009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.404859][T12009] Cannot create hsr debugfs directory [ 329.792246][T12009] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 329.911765][T12009] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 329.992423][T12009] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 330.048052][T12009] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 330.144266][T12009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.161396][T12009] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.172873][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.180048][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.219885][ T3023] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.227091][ T3023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.569663][T12053] could not allocate digest TFM handle [ 330.648141][T12009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.120640][T12009] veth0_vlan: entered promiscuous mode [ 331.153741][T12009] veth1_vlan: entered promiscuous mode [ 331.214191][T12009] veth0_macvtap: entered promiscuous mode [ 331.255079][T12009] veth1_macvtap: entered promiscuous mode [ 331.311741][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.345150][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.384923][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.404793][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.404889][ T5839] Bluetooth: hci0: command tx timeout [ 331.414615][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.414634][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.414652][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.535189][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.551866][T12009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.578544][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.613498][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.633115][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.662030][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.682521][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.693261][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.713636][T12009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.728211][T12009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.746254][T12009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.798624][T12009] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.841899][T12009] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.874846][T12009] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.894910][T12009] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.069433][ T3023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.139369][ T3023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.179996][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.217233][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.485556][ T5839] Bluetooth: hci0: command tx timeout [ 335.565084][ T5839] Bluetooth: hci0: command tx timeout [ 336.431444][T12174] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2157'. [ 338.882114][T12214] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2170'. [ 339.903675][T12239] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2180'. [ 339.953352][T12239] netlink: 274 bytes leftover after parsing attributes in process `syz.6.2180'. [ 342.664551][T12254] syz.7.2183: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 342.694502][T12254] CPU: 1 UID: 0 PID: 12254 Comm: syz.7.2183 Not tainted 6.13.0-rc3-syzkaller #0 [ 342.703589][T12254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 342.713678][T12254] Call Trace: [ 342.716983][T12254] [ 342.719937][T12254] dump_stack_lvl+0x16c/0x1f0 [ 342.724659][T12254] warn_alloc+0x24d/0x3a0 [ 342.729045][T12254] ? __pfx_warn_alloc+0x10/0x10 [ 342.733938][T12254] ? __pfx_mark_lock+0x10/0x10 [ 342.738751][T12254] ? lock_acquire.part.0+0x11b/0x380 [ 342.744077][T12254] __vmalloc_node_range_noprof+0x10df/0x1530 [ 342.750092][T12254] ? rcu_is_watching+0x12/0xc0 [ 342.754896][T12254] ? trace_contention_end+0xee/0x140 [ 342.760220][T12254] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 342.765550][T12254] ? dvb_demux_do_ioctl+0x496/0x1340 [ 342.770887][T12254] ? __pfx___mutex_lock+0x10/0x10 [ 342.775961][T12254] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 342.782337][T12254] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.788277][T12254] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 342.793615][T12254] vmalloc_noprof+0x6b/0x90 [ 342.798163][T12254] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 342.803493][T12254] dvb_demux_do_ioctl+0x54d/0x1340 [ 342.808659][T12254] dvb_usercopy+0x165/0x320 [ 342.813202][T12254] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 342.818798][T12254] ? __pfx_dvb_usercopy+0x10/0x10 [ 342.823877][T12254] ? __pfx_lock_release+0x10/0x10 [ 342.828951][T12254] ? __fget_files+0x206/0x3a0 [ 342.833675][T12254] dvb_demux_ioctl+0x29/0x40 [ 342.838320][T12254] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 342.843648][T12254] __x64_sys_ioctl+0x190/0x200 [ 342.848470][T12254] do_syscall_64+0xcd/0x250 [ 342.853020][T12254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.858958][T12254] RIP: 0033:0x7f430e985d19 [ 342.863402][T12254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.883049][T12254] RSP: 002b:00007f430c7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.891516][T12254] RAX: ffffffffffffffda RBX: 00007f430eb75fa0 RCX: 00007f430e985d19 [ 342.899533][T12254] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 342.907542][T12254] RBP: 00007f430ea01a20 R08: 0000000000000000 R09: 0000000000000000 [ 342.915563][T12254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.923578][T12254] R13: 0000000000000000 R14: 00007f430eb75fa0 R15: 00007ffd28d28538 [ 342.931614][T12254] [ 342.985090][T12254] Mem-Info: [ 342.988266][T12254] active_anon:54043 inactive_anon:5 isolated_anon:0 [ 342.988266][T12254] active_file:4719 inactive_file:53118 isolated_file:0 [ 342.988266][T12254] unevictable:768 dirty:502 writeback:0 [ 342.988266][T12254] slab_reclaimable:10820 slab_unreclaimable:100883 [ 342.988266][T12254] mapped:33946 shmem:42759 pagetables:1039 [ 342.988266][T12254] sec_pagetables:0 bounce:0 [ 342.988266][T12254] kernel_misc_reclaimable:0 [ 342.988266][T12254] free:1278971 free_pcp:6977 free_cma:0 [ 343.115043][T12254] Node 0 active_anon:221472kB inactive_anon:12kB active_file:17160kB inactive_file:212396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134572kB dirty:1956kB writeback:0kB shmem:172588kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11692kB pagetables:4232kB sec_pagetables:0kB all_unreclaimable? no [ 343.312811][T12254] Node 1 active_anon:0kB inactive_anon:0kB active_file:1716kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1716kB dirty:108kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 343.551451][T12254] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.725327][T12254] lowmem_reserve[]: 0 2465 2466 0 0 [ 343.730750][T12254] Node 0 DMA32 free:1208304kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:229868kB inactive_anon:0kB active_file:17160kB inactive_file:211568kB unevictable:1536kB writepending:1992kB present:3129332kB managed:2551332kB mlocked:0kB bounce:0kB free_pcp:2216kB local_pcp:728kB free_cma:0kB [ 343.843856][T12254] lowmem_reserve[]: 0 0 0 0 0 [ 343.875795][T12254] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.064803][T12254] lowmem_reserve[]: 0 0 0 0 0 [ 344.105203][T12254] Node 1 Normal free:3888456kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:1716kB inactive_file:76kB unevictable:1536kB writepending:108kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17604kB local_pcp:12372kB free_cma:0kB [ 344.283577][T12254] lowmem_reserve[]: 0 0 0 0 0 [ 344.306305][T12254] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 344.442650][T12254] Node 0 DMA32: 15*4kB (ME) 20*8kB (UME) 88*16kB (U) 39*32kB (UE) 11*64kB (UE) 3*128kB (ME) 4*256kB (UME) 110*512kB (UME) 106*1024kB (UME) 39*2048kB (UME) 231*4096kB (UM) = 1195900kB [ 344.983781][T12254] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 345.142319][T12254] Node 1 Normal: 163*4kB (UM) 54*8kB (UME) 24*16kB (UME) 172*32kB (UME) 91*64kB (UME) 27*128kB (UE) 12*256kB (UE) 11*512kB (UME) 3*1024kB (UE) 5*2048kB (UME) 940*4096kB (UM) = 3888508kB [ 345.548953][T12254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.579926][T12254] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.655374][T12254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.704855][T12254] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.716354][T12254] 125114 total pagecache pages [ 345.721153][T12254] 30 pages in swap cache [ 345.828903][T12254] Free swap = 124300kB [ 345.833212][T12254] Total swap = 124996kB [ 345.923928][T12254] 2097051 pages RAM [ 345.927905][T12254] 0 pages HighMem/MovableOnly [ 345.932607][T12254] 427368 pages reserved [ 345.990033][T12254] 0 pages cma reserved [ 348.979000][T12363] netlink: 222 bytes leftover after parsing attributes in process `syz.4.2219'. [ 349.001870][T12363] netlink: 222 bytes leftover after parsing attributes in process `syz.4.2219'. [ 349.200810][T12367] netlink: 'syz.5.2220': attribute type 33 has an invalid length. [ 349.225233][T12367] netlink: 322 bytes leftover after parsing attributes in process `syz.5.2220'. [ 349.265400][T12367] netlink: 'syz.5.2220': attribute type 33 has an invalid length. [ 349.294858][T12367] netlink: 322 bytes leftover after parsing attributes in process `syz.5.2220'. [ 350.136073][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2229'. [ 350.479673][T12403] kernel read not supported for file /éçTµhÊYdèܨ3ô`Ãüå—e&jdˆKÜBUXàØ0z¾Lš¼æÆ84³ÿÿÿÿ (pid: 12403 comm: syz.4.2234) [ 350.568925][ T29] audit: type=1800 audit(1734345430.294:6): pid=12403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2234" name=E9E71E54B568CA0E5964E8DCA833F46006C310FCE59765266A64884BDC425558E01BD8307A04BE4C9ABCE6C63834B3FFFFFFFF dev="mqueue" ino=32310 res=0 errno=0 [ 351.220154][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2240'. [ 352.031722][T12441] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2249'. [ 352.715274][T12459] netlink: 22 bytes leftover after parsing attributes in process `syz.7.2257'. [ 353.083932][T12474] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2262'. [ 353.157615][T12479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2265'. [ 353.534423][T12479] team0: Port device team_slave_0 removed [ 354.146816][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2276'. [ 355.316392][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2289'. [ 355.365856][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2290'. [ 356.067359][T12576] sctp: [Deprecated]: syz.7.2300 (pid 12576) Use of int in max_burst socket option deprecated. [ 356.067359][T12576] Use struct sctp_assoc_value instead [ 356.221669][T12570] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2299'. [ 356.922426][T12583] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2302'. [ 356.947791][T12583] veth1_macvtap: left promiscuous mode [ 356.953316][T12583] macsec0: entered promiscuous mode [ 357.845846][T12606] netlink: 246 bytes leftover after parsing attributes in process `syz.4.2311'. [ 358.033670][T12608] netlink: 322 bytes leftover after parsing attributes in process `syz.4.2312'. [ 358.074946][T12608] bond0: entered promiscuous mode [ 358.080131][T12608] bond_slave_1: entered promiscuous mode [ 358.099695][T12608] bond0: entered allmulticast mode [ 358.119321][T12608] bond_slave_1: entered allmulticast mode [ 358.695479][T12601] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 360.076887][T12662] openvswitch: HfR: Dropping previously announced user features [ 360.097773][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2330'. [ 360.119945][T12662] HfR: left promiscuous mode [ 360.616506][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2334'. [ 360.639200][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2334'. [ 360.809457][ T29] audit: type=1806 audit(4294967297.570:7): xattr="." res=0 [ 363.482475][T12753] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2363'. [ 363.667105][T12753] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 365.028401][T12781] netlink: 206 bytes leftover after parsing attributes in process `syz.5.2369'. [ 367.476858][T12824] netlink: 354 bytes leftover after parsing attributes in process `syz.5.2385'. [ 367.870071][T12834] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2390'. [ 367.895701][T12834] netlink: 114 bytes leftover after parsing attributes in process `syz.5.2390'. [ 368.495415][T12844] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 368.532177][T12844] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 368.998657][T12844] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 369.004697][T12844] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 369.056323][T12853] [U] [ 369.059083][T12853] [U] [ 369.061826][T12853] [U] [ 369.064560][T12853] [U] [ 369.087368][T12853] [U] [ 369.090143][T12853] [U] [ 369.092890][T12853] [U] [ 369.095625][T12853] [U] [ 369.132913][T12853] [U] [ 369.135697][T12853] [U] [ 369.138428][T12853] [U] [ 369.141154][T12853] [U] [ 369.183631][T12844] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.189830][T12855] [U] [ 369.194690][T12844] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 369.271254][T12844] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 369.353656][T12844] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 369.366379][T12844] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 369.399265][T12844] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 370.535984][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 371.012765][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 371.244817][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 371.407686][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 372.604904][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 373.111816][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 373.324872][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 373.484801][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 374.021142][T12928] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2416'. [ 374.812286][T12941] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2422'. [ 375.404887][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 375.564960][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 376.085446][T12969] netlink: 158 bytes leftover after parsing attributes in process `syz.4.2431'. [ 377.946764][T12996] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2442'. [ 378.848347][T12997] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2441'. [ 378.862617][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.356591][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2446'. [ 379.402931][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2449'. [ 379.432441][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2449'. [ 379.441973][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2446'. [ 379.451542][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2447'. [ 379.525498][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2447'. [ 383.776628][T13080] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2467'. [ 384.211621][T13080] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.826258][T13080] bridge_slave_0 (unregistering): left allmulticast mode [ 384.878779][T13080] bridge_slave_0 (unregistering): left promiscuous mode [ 384.925128][T13080] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.523649][T13094] netlink: 'syz.7.2471': attribute type 29 has an invalid length. [ 385.585085][T13094] netlink: 'syz.7.2471': attribute type 30 has an invalid length. [ 385.717103][T13094] netlink: 'syz.7.2471': attribute type 31 has an invalid length. [ 385.794827][T13094] netlink: 'syz.7.2471': attribute type 32 has an invalid length. [ 385.865121][T13094] netlink: 'syz.7.2471': attribute type 33 has an invalid length. [ 385.873102][T13094] netlink: 'syz.7.2471': attribute type 35 has an invalid length. [ 385.994918][T13094] netlink: 'syz.7.2471': attribute type 37 has an invalid length. [ 386.034782][T13094] netlink: 18 bytes leftover after parsing attributes in process `syz.7.2471'. [ 386.728321][T13106] netlink: 'syz.5.2475': attribute type 6 has an invalid length. [ 386.744868][T13106] netlink: 306 bytes leftover after parsing attributes in process `syz.5.2475'. [ 388.444535][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2483'. [ 388.490895][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2483'. [ 389.356629][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2488'. [ 389.385673][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 389.414493][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2488'. [ 389.432753][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 389.607121][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2488'. [ 389.670258][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2488'. [ 393.398669][T13205] Invalid ELF header magic: != ELF [ 394.735900][T13232] zram0: detected capacity change from 0 to 8 [ 395.162748][T13240] __nla_validate_parse: 6 callbacks suppressed [ 395.162769][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2521'. [ 397.651619][T13277] HSR: entered promiscuous mode [ 401.314513][T13322] Dead loop on virtual device ip6_vti0, fix it urgently! [ 402.097870][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2553'. [ 402.137357][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2553'. [ 402.843966][T13345] netlink: 22 bytes leftover after parsing attributes in process `syz.6.2554'. [ 406.144966][T13406] netlink: 252 bytes leftover after parsing attributes in process `syz.7.2574'. [ 406.193188][T13406] netlink: 252 bytes leftover after parsing attributes in process `syz.7.2574'. [ 407.869074][T13447] netlink: 'syz.4.2590': attribute type 6 has an invalid length. [ 407.911565][T13447] netlink: 'syz.4.2590': attribute type 7 has an invalid length. [ 407.946788][T13447] netlink: 'syz.4.2590': attribute type 8 has an invalid length. [ 407.954676][T13447] netlink: 'syz.4.2590': attribute type 9 has an invalid length. [ 407.985395][T13447] netlink: 226 bytes leftover after parsing attributes in process `syz.4.2590'. [ 409.619489][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2604'. [ 409.656406][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2604'. [ 410.093028][T13497] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2607'. [ 410.149121][T13497] netlink: 274 bytes leftover after parsing attributes in process `syz.4.2607'. [ 416.327156][T13606] zram: Cannot change disksize for initialized device [ 417.149102][T13611] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2653'. [ 418.984991][T13648] zram: Cannot change disksize for initialized device [ 419.139758][T13650] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2654'. [ 419.391361][T13650] team0: Port device team_slave_0 removed [ 422.476423][T13688] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 423.228744][T13708] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2672'. [ 424.709616][T13745] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2684'. [ 424.893458][T13745] team0: Port device team_slave_0 removed [ 425.665635][T13763] HfR: entered promiscuous mode [ 425.684366][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2690'. [ 425.705902][T13763] HfR: left promiscuous mode [ 426.435903][T13777] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2696'. [ 429.035279][T13833] Invalid ELF header magic: != ELF [ 429.305170][T13839] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2715'. [ 440.289271][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.376572][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2772'. [ 443.403391][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2772'. [ 444.846171][T14073] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2779'. [ 449.105128][T14145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2798'. [ 452.179262][T14184] netlink: 'syz.7.2809': attribute type 6 has an invalid length. [ 452.187277][T14184] netlink: 306 bytes leftover after parsing attributes in process `syz.7.2809'. [ 452.400836][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2811'. [ 452.500708][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2811'. [ 452.945163][T14204] Process accounting resumed [ 453.895370][T14207] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2818'. [ 454.342126][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2821'. [ 454.670307][T14226] netlink: 'syz.4.2822': attribute type 6 has an invalid length. [ 454.683835][T14226] netlink: 306 bytes leftover after parsing attributes in process `syz.4.2822'. [ 454.916838][T14229] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2823'. [ 454.954124][T14229] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.084642][T14229] bridge_slave_0 (unregistering): left allmulticast mode [ 455.118195][T14229] bridge_slave_0 (unregistering): left promiscuous mode [ 455.148200][T14229] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.327513][T14248] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2829'. [ 457.429649][T14262] mmap: syz.6.2834 (14262): VmData 37601280 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 462.011579][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2852'. [ 462.033879][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2852'. [ 462.050220][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2852'. [ 462.067857][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2852'. [ 462.079299][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2852'. [ 462.095143][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2852'. [ 462.112583][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2852'. [ 462.136468][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2852'. [ 462.775058][T14328] netlink: 'syz.5.2855': attribute type 29 has an invalid length. [ 462.805115][T14328] netlink: 'syz.5.2855': attribute type 30 has an invalid length. [ 462.812982][T14328] netlink: 'syz.5.2855': attribute type 31 has an invalid length. [ 462.856820][T14328] netlink: 'syz.5.2855': attribute type 32 has an invalid length. [ 462.876915][T14328] netlink: 'syz.5.2855': attribute type 33 has an invalid length. [ 462.889375][T14328] netlink: 'syz.5.2855': attribute type 35 has an invalid length. [ 462.912939][T14328] netlink: 'syz.5.2855': attribute type 37 has an invalid length. [ 462.933579][T14328] netlink: 18 bytes leftover after parsing attributes in process `syz.5.2855'. [ 465.677023][T14376] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2868'. [ 466.172010][T14356] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 466.576012][T14388] HSR: entered promiscuous mode [ 467.421496][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2875'. [ 467.466371][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2875'. [ 468.587033][T14412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2884'. [ 470.192386][T14439] HSR: entered promiscuous mode [ 471.951251][T14441] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2883'. [ 472.236026][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2892'. [ 472.442076][T14468] lo: entered allmulticast mode [ 472.449546][T14468] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2895'. [ 472.538508][T14470] netlink: 354 bytes leftover after parsing attributes in process `syz.4.2897'. [ 472.666522][T14477] delete_channel: no stack [ 472.731863][T14475] vcan0: entered allmulticast mode [ 472.873161][T14467] lo: left allmulticast mode [ 473.718841][T14497] QAT: Stopping all acceleration devices. [ 474.660267][T14492] kexec: Could not allocate control_code_buffer [ 474.726367][T14516] netlink: 'syz.4.2913': attribute type 2 has an invalid length. [ 474.768025][T14517] mtrr: base(0x100000) is not aligned on a size(0x2e001800000) boundary [ 474.803284][T14516] delete_channel: no stack [ 474.894900][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.700925][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2920'. [ 476.037430][T14543] nbd: must specify at least one socket [ 477.038661][T14561] Dead loop on virtual device ip6_vti0, fix it urgently! [ 479.160563][T14585] lo: entered allmulticast mode [ 479.196617][T14585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2937'. [ 479.738560][T14584] lo: left allmulticast mode [ 480.575737][T14612] Process accounting resumed [ 480.739774][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2947'. [ 481.725036][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2952'. [ 481.756849][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2952'. [ 482.021921][T14639] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2954'. [ 482.616316][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2955'. [ 482.941852][T14638] Invalid ELF header magic: != ELF [ 484.416852][T14679] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2965'. [ 486.226176][T14717] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2977'. [ 487.191551][T14726] HSR: entered promiscuous mode [ 488.096169][T14751] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 488.285246][T14751] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 488.815655][T14766] netlink: 252 bytes leftover after parsing attributes in process `syz.5.2990'. [ 488.895132][T14768] netlink: 252 bytes leftover after parsing attributes in process `syz.5.2990'. [ 494.340288][T14845] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3012'. [ 494.400649][T14845] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3012'. [ 494.452142][T14849] openvswitch: HSR: Dropping previously announced user features [ 494.685597][T14852] delete_channel: no stack [ 494.889586][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3015'. [ 494.944839][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3015'. [ 495.754990][T14873] kernel read not supported for file /#)-\&[} (pid: 14873 comm: syz.4.3023) [ 495.811974][ T29] audit: type=1800 audit(4294967312.940:8): pid=14873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3023" name="#)-\&[}" dev="mqueue" ino=41881 res=0 errno=0 [ 496.362198][T14884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3028'. [ 496.437984][T14886] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3029'. [ 500.155210][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3042'. [ 500.247100][T14930] could not allocate digest TFM handle [ 501.301037][T14954] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3048'. [ 501.735348][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.768468][T14957] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3049'. [ 504.607891][T15028] Process accounting resumed [ 504.845867][T15032] kernel read not supported for file /#)-\&[} (pid: 15032 comm: syz.6.3072) [ 504.853852][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3071'. [ 504.902625][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3071'. [ 504.911699][ T29] audit: type=1800 audit(4294967322.030:9): pid=15032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3072" name="#)-\&[}" dev="mqueue" ino=44106 res=0 errno=0 [ 505.295483][T15038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3073'. [ 505.341330][T15038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3073'. [ 507.539741][T15067] Process accounting resumed [ 509.306206][T15097] Dead loop on virtual device ip6_vti0, fix it urgently! [ 509.425852][T15100] openvswitch: HSR: Dropping previously announced user features [ 509.576199][T15105] delete_channel: no stack [ 510.020342][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3097'. [ 510.073356][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3097'. [ 512.461519][T15134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3103'. [ 518.363062][T15221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3124'. [ 520.970589][T15274] Process accounting resumed [ 525.389685][T15336] netlink: zone id is out of range [ 525.444375][T15336] netlink: set zone limit has 8 unknown bytes [ 525.591368][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3155'. [ 526.076459][T15339] bond0: (slave bond_slave_1): Releasing backup interface [ 527.987226][T15380] netlink: 326 bytes leftover after parsing attributes in process `syz.7.3167'. [ 529.316674][T15391] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3172'. [ 530.413138][T15391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.536373][T15391] bond0 (unregistering): Released all slaves [ 532.352957][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3186'. [ 533.865005][T15425] netlink: 334 bytes leftover after parsing attributes in process `syz.7.3180'. [ 536.674474][T15487] Dead loop on virtual device ip6_vti0, fix it urgently! [ 536.715086][T15487] Dead loop on virtual device ip6_vti0, fix it urgently! [ 536.723275][T15487] Dead loop on virtual device ip6_vti0, fix it urgently! [ 536.732118][T15487] Dead loop on virtual device ip6_vti0, fix it urgently! [ 536.748240][T15487] Dead loop on virtual device ip6_vti0, fix it urgently! [ 536.781331][T15487] Dead loop on virtual device ip6_vti0, fix it urgently! [ 537.201540][T15501] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3206'. [ 537.225200][T15501] unsupported nla_type 14385 [ 537.244546][T15501] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3206'. [ 540.863415][T15558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3218'. [ 540.907924][T15558] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 541.405370][T15566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3225'. [ 541.470428][T15566] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3225'. [ 541.576131][T15564] netlink: 'syz.7.3224': attribute type 46 has an invalid length. [ 542.230994][T15580] sctp: [Deprecated]: syz.7.3230 (pid 15580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.230994][T15580] Use struct sctp_sack_info instead [ 542.435758][T15578] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3230'. [ 542.458990][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3227'. [ 542.496600][T15578] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 542.758579][T15585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3231'. [ 544.944049][T15626] netlink: 'syz.4.3245': attribute type 2 has an invalid length. [ 544.984751][T15626] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3245'. [ 545.005394][T15626] netlink: 'syz.4.3245': attribute type 2 has an invalid length. [ 545.005861][T15627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3244'. [ 545.736630][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3252'. [ 546.507021][T15661] HfR: entered promiscuous mode [ 546.571857][T15661] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3258'. [ 546.596571][T15661] HfR: left promiscuous mode [ 546.730304][T15672] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3262'. [ 549.026064][T15723] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3279'. [ 549.120551][T15726] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3279'. [ 549.495287][T15726] macsec0: entered allmulticast mode [ 549.645067][T15726] veth1_macvtap: entered allmulticast mode [ 551.016885][T15764] Invalid ELF header magic: != ELF [ 551.126541][T15776] tipc: Started in network mode [ 551.131685][T15776] tipc: Node identity ffffffff, cluster identity 4711 [ 551.138743][T15776] tipc: Node number set to 4294967295 [ 551.664410][T15784] netlink: 158 bytes leftover after parsing attributes in process `syz.5.3298'. [ 553.964630][T15836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3308'. [ 553.999613][T15829] HfR: entered promiscuous mode [ 554.068731][T15836] HfR: left promiscuous mode [ 557.972055][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3328'. [ 562.304456][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3350'. [ 562.441585][T15976] bond0: (slave bond_slave_1): Releasing backup interface [ 562.486814][T15976] bond_slave_1 (unregistering): left promiscuous mode [ 562.500747][T15976] bond_slave_1 (unregistering): left allmulticast mode [ 563.205133][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.321035][T16019] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3363'. [ 564.442951][T16019] bond0: (slave bond_slave_1): Releasing backup interface [ 567.129384][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3378'. [ 569.921763][T16119] HfR: entered promiscuous mode [ 569.960121][T16119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3397'. [ 570.089607][T16119] HfR: left promiscuous mode [ 574.143758][T16182] HfR: entered promiscuous mode [ 574.206250][T16182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3402'. [ 574.233609][T16182] HfR: left promiscuous mode [ 575.078285][T16198] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3411'. [ 575.179112][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3412'. [ 578.450200][T16256] netlink: 330 bytes leftover after parsing attributes in process `syz.7.3428'. [ 578.718397][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3431'. [ 579.263482][T16279] HfR: entered promiscuous mode [ 579.315191][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3437'. [ 579.352949][T16279] HfR: left promiscuous mode [ 581.492977][T16318] HfR: entered promiscuous mode [ 581.518804][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3448'. [ 581.554838][T16318] HfR: left promiscuous mode [ 582.128515][T16325] bridge0: port 3(macvlan0) entered blocking state [ 582.152308][T16325] bridge0: port 3(macvlan0) entered disabled state [ 582.176419][T16325] macvlan0: entered allmulticast mode [ 582.202175][T16325] veth1_vlan: entered allmulticast mode [ 582.223461][T16325] macvlan0: entered promiscuous mode [ 582.250915][T16325] bridge0: port 3(macvlan0) entered blocking state [ 582.257636][T16325] bridge0: port 3(macvlan0) entered forwarding state [ 582.862094][T16331] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3451'. [ 583.132891][T16331] team0: Port device team_slave_1 removed [ 585.038631][T16379] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3466'. [ 585.498791][T16391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3469'. [ 587.781250][T16413] Invalid ELF header magic: != ELF [ 587.803030][T16428] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3481'. [ 587.882304][T16431] HfR: entered promiscuous mode [ 587.936618][T16431] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3482'. [ 587.964865][T16431] HfR: left promiscuous mode [ 590.233553][T16483] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3495'. [ 590.889566][T16483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.921700][T16483] bond0 (unregistering): (slave ): Releasing backup interface [ 590.945195][T16483] bond0 (unregistering): Released all slaves [ 592.501404][T16473] Invalid ELF header magic: != ELF [ 594.296690][T16536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3508'. [ 594.823188][T16536] bond0 (unregistering): Released all slaves [ 595.323199][T16550] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3513'. [ 595.345086][T16550] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3513'. [ 595.909101][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3516'. [ 595.934414][T16559] HfR: entered promiscuous mode [ 595.956222][T16564] HfR: left promiscuous mode [ 596.453469][T16570] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3519'. [ 597.050419][T16570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.080156][T16570] bond0 (unregistering): Released all slaves [ 599.462977][T16624] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3533'. [ 601.195924][T16653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3540'. [ 601.522747][T16658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3542'. [ 601.548093][T16658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.616647][T16659] netlink: 'syz.4.3542': attribute type 46 has an invalid length. [ 601.717590][T16658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.640606][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3545'. [ 603.225179][T16649] Invalid ELF header magic: != ELF [ 603.326922][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3547'. [ 603.477125][T16682] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3547'. [ 603.655001][T16686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3549'. [ 603.707839][T16686] vcan0: entered promiscuous mode [ 604.373988][T16702] netlink: 338 bytes leftover after parsing attributes in process `syz.6.3556'. [ 604.954732][T16714] sctp: [Deprecated]: syz.6.3560 (pid 16714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.954732][T16714] Use struct sctp_sack_info instead [ 605.251322][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3560'. [ 605.305290][T16718] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 608.528907][T16789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3579'. [ 608.848755][T16799] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3583'. [ 610.228819][T16829] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3593'. [ 610.243165][T16829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.288953][T16830] netlink: 'syz.7.3593': attribute type 46 has an invalid length. [ 610.410185][T16829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.966107][T16808] Invalid ELF header magic: != ELF [ 611.563811][T16852] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3600'. [ 611.586390][T16852] bridge_slave_1: left allmulticast mode [ 611.604967][T16852] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.006734][T16869] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3605'. [ 612.518194][T16889] netlink: 'syz.4.3612': attribute type 1 has an invalid length. [ 614.081411][T16921] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3623'. [ 614.774256][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3628'. [ 615.040346][T16949] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3631'. [ 615.598246][T16961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3634'. [ 617.509830][T17007] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3648'. [ 619.053589][T17037] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3659'. [ 619.100393][T17037] bridge_slave_1: left allmulticast mode [ 619.118992][T17037] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.936315][T17052] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 619.961592][T17052] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 621.209555][T17079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3669'. [ 622.140293][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3671'. [ 624.607012][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.936863][T17156] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3696'. [ 624.952497][T17156] bridge_slave_1: left allmulticast mode [ 624.958416][T17156] bridge_slave_1: left promiscuous mode [ 624.964254][T17156] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.998988][T17156] bridge_slave_0: left allmulticast mode [ 625.010078][T17156] bridge_slave_0: left promiscuous mode [ 625.019345][T17156] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.144727][T17253] tipc: Started in network mode [ 631.149644][T17253] tipc: Node identity ee00, cluster identity 4711 [ 631.253842][T17253] tipc: Node number set to 60928 [ 634.307510][T17291] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3730'. [ 634.677729][T17299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3733'. [ 635.851171][T17311] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 635.864756][T17311] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 636.911836][T17328] Invalid ELF header magic: != ELF [ 637.550977][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3747'. [ 637.583164][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3747'. [ 637.954572][T17353] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3749'. [ 638.011930][T17353] mac80211_hwsim hwsim14 ›: entered promiscuous mode [ 638.031460][T17353] mac80211_hwsim hwsim14 ›: entered allmulticast mode [ 638.086112][T17351] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 638.105335][T17351] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 640.523717][T17400] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 640.556349][T17400] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 642.329734][T17436] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 642.358677][T17436] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 643.179331][T17445] Invalid ELF header magic: != ELF [ 644.548694][T17493] Invalid ELF header magic: != ELF [ 644.982034][T17502] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 644.992011][T17502] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 647.666100][T17554] netlink: 'syz.4.3814': attribute type 15 has an invalid length. [ 647.674087][T17554] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3814'. [ 647.693777][T17554] netlink: 'syz.4.3814': attribute type 15 has an invalid length. [ 647.702299][T17554] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3814'. [ 648.907533][T17578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3818'. [ 649.320208][T17597] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 649.344524][T17597] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 650.093432][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3831'. [ 650.258508][T17612] team0: Port device team_slave_1 removed [ 650.868279][T17630] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 650.884773][T17630] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 652.872209][T17677] kernel read not supported for file /#)-\&[} (pid: 17677 comm: syz.5.3849) [ 652.883731][ T29] audit: type=1804 audit(4294967327.480:10): pid=17677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3849" name="#)-\&[}" dev="mqueue" ino=54839 res=1 errno=0 [ 652.911204][ T29] audit: type=1800 audit(4294967327.520:11): pid=17677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3849" name="#)-\&[}" dev="mqueue" ino=54839 res=0 errno=0 [ 652.950951][ T29] audit: type=1804 audit(4294967327.520:12): pid=17677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3849" name="#)-\&[}" dev="mqueue" ino=54839 res=1 errno=0 [ 652.991617][ T29] audit: type=1804 audit(4294967327.540:13): pid=17677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3849" name="#)-\&[}" dev="mqueue" ino=54839 res=1 errno=0 [ 658.249606][T17767] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 658.274778][T17767] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 658.674542][T17780] Process accounting resumed [ 662.852604][T17823] Invalid ELF header magic: != ELF [ 663.835882][T17842] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 663.845600][T17842] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 668.624931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 668.633496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 668.675037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 668.683531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 668.692039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 668.700606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 668.844943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 669.731318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 671.075378][T17951] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3917'. [ 671.097441][T17951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.131054][T17951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.207319][T17951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.263095][T17951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.124873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 673.235065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 673.356118][T17995] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3933'. [ 674.666770][T18034] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3945'. [ 675.110089][T18045] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3948'. [ 677.838742][T18096] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3965'. [ 677.855138][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3973'. [ 677.894536][T18096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.932979][T18096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.615844][T18156] lo: entered allmulticast mode [ 682.714056][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3980'. [ 682.719487][T18156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3987'. [ 682.759354][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3981'. [ 683.678760][T18156] lo: left allmulticast mode [ 683.980111][T18162] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3982'. [ 684.281962][T18173] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3985'. [ 684.524965][T18181] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3989'. [ 684.542197][T18181] veth1_macvtap: entered allmulticast mode [ 684.576817][T18181] syz.7.3989 (18181): attempted to duplicate a private mapping with mremap. This is not supported. [ 685.776809][T18207] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3996'. [ 685.812236][T18207] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 686.048553][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.323540][T18241] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4008'. [ 688.622118][T18270] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4017'. [ 688.664029][T18268] netlink: 'syz.5.4016': attribute type 46 has an invalid length. [ 689.015965][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4019'. [ 691.892418][T18311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4022'. [ 692.023532][T18325] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4030'. [ 693.162578][T18348] netlink: 252 bytes leftover after parsing attributes in process `syz.5.4038'. [ 693.213966][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4033'. [ 696.412276][T18419] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4058'. [ 697.369201][T18442] bridge0: port 4(team0) entered blocking state [ 697.376114][T18442] bridge0: port 4(team0) entered disabled state [ 697.382651][T18442] team0: entered allmulticast mode [ 697.392854][T18442] team0: entered promiscuous mode [ 698.272311][T18457] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4068'. [ 700.149004][T18482] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 700.159068][T18482] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 700.285017][T18486] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4078'. [ 700.496394][T18490] Process accounting resumed [ 700.830131][ T29] audit: type=1326 audit(4294967375.439:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18493 comm="syz.7.4081" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f430e985d19 code=0x0 [ 705.900563][T18565] could not allocate digest TFM handle [ 707.146128][T18592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4109'. [ 708.804657][ T29] audit: type=1326 audit(4294967383.409:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.4120" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1779185d19 code=0x0 [ 708.974963][T18633] openvswitch: netlink: Key type 261 is out of range max 32 [ 709.907436][T18653] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 709.953428][T18653] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 714.564731][ T29] audit: type=1800 audit(4294967389.169:16): pid=18744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4153" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 721.720472][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4182'. [ 722.699330][T18904] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4190'. [ 723.136412][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4193'. [ 723.610641][T18926] GUP no longer grows the stack in syz.4.4199 (18926): 1000-41000 (0) [ 723.634923][T18926] CPU: 1 UID: 0 PID: 18926 Comm: syz.4.4199 Not tainted 6.13.0-rc3-syzkaller #0 [ 723.644125][T18926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 723.654229][T18926] Call Trace: [ 723.657552][T18926] [ 723.660517][T18926] dump_stack_lvl+0x16c/0x1f0 [ 723.665245][T18926] gup_vma_lookup+0x1d2/0x220 [ 723.669966][T18926] fixup_user_fault+0x26f/0x540 [ 723.674863][T18926] fault_in_user_writeable+0x70/0xe0 [ 723.680184][T18926] futex_wake_op+0x976/0xdc0 [ 723.684801][T18926] ? __pfx_futex_wake_op+0x10/0x10 [ 723.689933][T18926] ? futex_wait+0x121/0x380 [ 723.694467][T18926] do_futex+0x2eb/0x350 [ 723.698647][T18926] ? __pfx_do_futex+0x10/0x10 [ 723.703341][T18926] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 723.708477][T18926] __x64_sys_futex+0x1e1/0x4c0 [ 723.713262][T18926] ? __pfx___x64_sys_futex+0x10/0x10 [ 723.718564][T18926] ? rcu_is_watching+0x12/0xc0 [ 723.723346][T18926] do_syscall_64+0xcd/0x250 [ 723.727957][T18926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.733878][T18926] RIP: 0033:0x7f1779185d19 [ 723.738296][T18926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.757923][T18926] RSP: 002b:00007f177a08a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 723.766353][T18926] RAX: ffffffffffffffda RBX: 00007f1779375fa0 RCX: 00007f1779185d19 [ 723.774422][T18926] RDX: 0000000000000002 RSI: 0000000000000085 RDI: 0000000000000000 [ 723.782396][T18926] RBP: 00007f1779201a20 R08: 0000000000000000 R09: 0000000000000001 [ 723.790382][T18926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.798539][T18926] R13: 0000000000000000 R14: 00007f1779375fa0 R15: 00007fff729cea98 [ 723.806548][T18926] [ 725.658795][T18984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4214'. [ 725.673242][T18984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.681535][T18984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.447582][ T29] audit: type=1800 audit(4294967401.059:17): pid=19003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4215" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 741.703233][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4316'. [ 741.717750][T19346] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 743.143842][T19392] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 743.220716][T19392] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 747.525120][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.653039][T19615] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 753.671135][T19615] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 755.254146][T19656] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 755.274912][T19656] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 760.307551][T19768] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 760.337756][T19768] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 762.678837][T19823] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 762.717518][T19823] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 763.724754][T19854] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4461'. [ 766.563848][T19895] syz.4.4472: vmalloc error: size 3411968, failed to allocated page array size 6664, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 766.581509][T19895] CPU: 1 UID: 0 PID: 19895 Comm: syz.4.4472 Not tainted 6.13.0-rc3-syzkaller #0 [ 766.590585][T19895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 766.600673][T19895] Call Trace: [ 766.603965][T19895] [ 766.606905][T19895] dump_stack_lvl+0x16c/0x1f0 [ 766.611599][T19895] warn_alloc+0x24d/0x3a0 [ 766.615944][T19895] ? __pfx_warn_alloc+0x10/0x10 [ 766.620814][T19895] ? __get_vm_area_node+0x1b0/0x2f0 [ 766.626029][T19895] ? __get_vm_area_node+0x1dc/0x2f0 [ 766.631241][T19895] __vmalloc_node_range_noprof+0x1105/0x1530 [ 766.637244][T19895] ? ip_set_sockfn_get+0x185/0xc50 [ 766.642376][T19895] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 766.648716][T19895] ? __get_vm_area_node+0x1b0/0x2f0 [ 766.653929][T19895] ? __get_vm_area_node+0x1dc/0x2f0 [ 766.659137][T19895] __vmalloc_node_range_noprof+0xd85/0x1530 [ 766.665046][T19895] ? ip_set_sockfn_get+0x185/0xc50 [ 766.670164][T19895] ? __pfx___lock_acquire+0x10/0x10 [ 766.675389][T19895] ? ip_set_sockfn_get+0x185/0xc50 [ 766.680511][T19895] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 766.686854][T19895] ? apparmor_capable+0x114/0x1d0 [ 766.691904][T19895] ? ip_set_sockfn_get+0x185/0xc50 [ 766.697024][T19895] vmalloc_noprof+0x6b/0x90 [ 766.701537][T19895] ? ip_set_sockfn_get+0x185/0xc50 [ 766.706655][T19895] ip_set_sockfn_get+0x185/0xc50 [ 766.711598][T19895] ? __pfx_lock_release+0x10/0x10 [ 766.716626][T19895] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 766.722092][T19895] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 766.728092][T19895] nf_getsockopt+0x79/0xe0 [ 766.732622][T19895] ip_getsockopt+0x18e/0x1e0 [ 766.737223][T19895] ? __pfx_ip_getsockopt+0x10/0x10 [ 766.742346][T19895] ? __schedule+0xe60/0x5ad0 [ 766.746955][T19895] ? __pfx___lock_acquire+0x10/0x10 [ 766.752264][T19895] ipv6_getsockopt+0x230/0x280 [ 766.757045][T19895] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 766.762341][T19895] ? __pfx_mark_lock+0x10/0x10 [ 766.767134][T19895] sctp_getsockopt+0x1d2/0x7ae0 [ 766.772007][T19895] ? hlock_class+0x4e/0x130 [ 766.776523][T19895] ? mark_lock+0xb5/0xc60 [ 766.780864][T19895] ? aa_label_sk_perm+0x19d/0x5a0 [ 766.785916][T19895] ? __pfx_sctp_getsockopt+0x10/0x10 [ 766.791222][T19895] ? __lock_acquire+0x15a9/0x3c40 [ 766.796278][T19895] ? __pfx___lock_acquire+0x10/0x10 [ 766.801498][T19895] ? find_held_lock+0x2d/0x110 [ 766.806273][T19895] ? __might_fault+0x13b/0x190 [ 766.811057][T19895] ? __pfx_lock_release+0x10/0x10 [ 766.816085][T19895] ? trace_lock_acquire+0x14e/0x1f0 [ 766.821300][T19895] ? lock_acquire+0x2f/0xb0 [ 766.825813][T19895] ? __might_fault+0xe3/0x190 [ 766.830508][T19895] ? __might_fault+0xe3/0x190 [ 766.835206][T19895] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 766.841118][T19895] ? do_sock_getsockopt+0x3fe/0x870 [ 766.846320][T19895] do_sock_getsockopt+0x3fe/0x870 [ 766.851351][T19895] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 766.856909][T19895] ? lock_acquire+0x2f/0xb0 [ 766.861416][T19895] ? __fget_files+0x40/0x3a0 [ 766.866028][T19895] ? __fget_files+0x206/0x3a0 [ 766.870725][T19895] __sys_getsockopt+0x12f/0x260 [ 766.875645][T19895] __x64_sys_getsockopt+0xbd/0x160 [ 766.880786][T19895] ? do_syscall_64+0x91/0x250 [ 766.885482][T19895] ? lockdep_hardirqs_on+0x7c/0x110 [ 766.890703][T19895] do_syscall_64+0xcd/0x250 [ 766.895225][T19895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.901132][T19895] RIP: 0033:0x7f1779185d19 [ 766.905551][T19895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.925184][T19895] RSP: 002b:00007f177a08a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 766.933610][T19895] RAX: ffffffffffffffda RBX: 00007f1779375fa0 RCX: 00007f1779185d19 [ 766.941604][T19895] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000007 [ 766.949617][T19895] RBP: 00007f1779201a20 R08: 0000000020000040 R09: 0000000000000000 [ 766.957791][T19895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.965773][T19895] R13: 0000000000000000 R14: 00007f1779375fa0 R15: 00007fff729cea98 [ 766.973769][T19895] [ 766.988631][T19895] Mem-Info: [ 766.991795][T19895] active_anon:31251 inactive_anon:7 isolated_anon:0 [ 766.991795][T19895] active_file:196 inactive_file:49833 isolated_file:0 [ 766.991795][T19895] unevictable:768 dirty:543 writeback:0 [ 766.991795][T19895] slab_reclaimable:11376 slab_unreclaimable:100136 [ 766.991795][T19895] mapped:24851 shmem:11763 pagetables:1115 [ 766.991795][T19895] sec_pagetables:0 bounce:0 [ 766.991795][T19895] kernel_misc_reclaimable:0 [ 766.991795][T19895] free:1242433 free_pcp:19249 free_cma:0 [ 767.043116][T19895] Node 0 active_anon:116304kB inactive_anon:28kB active_file:784kB inactive_file:197544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98972kB dirty:2000kB writeback:0kB shmem:36816kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11008kB pagetables:4460kB sec_pagetables:0kB all_unreclaimable? no [ 767.080339][T19895] Node 1 active_anon:5700kB inactive_anon:0kB active_file:0kB inactive_file:1788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:432kB dirty:172kB writeback:0kB shmem:7236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 767.112098][T19895] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 767.149108][T19895] lowmem_reserve[]: 0 2465 2466 0 0 [ 767.157613][T19895] Node 0 DMA32 free:1119688kB boost:76944kB min:111144kB low:119692kB high:128240kB reserved_highatomic:0KB active_anon:113888kB inactive_anon:28kB active_file:984kB inactive_file:196648kB unevictable:1600kB writepending:2056kB present:3129332kB managed:2551332kB mlocked:16kB bounce:0kB free_pcp:12072kB local_pcp:36kB free_cma:0kB [ 767.208024][T19895] lowmem_reserve[]: 0 0 0 0 0 [ 767.217468][T19895] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 767.269239][T19895] lowmem_reserve[]: 0 0 0 0 0 [ 767.278092][T19895] Node 1 Normal free:3838336kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:5700kB inactive_anon:0kB active_file:0kB inactive_file:1788kB unevictable:1536kB writepending:180kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:66128kB local_pcp:34376kB free_cma:0kB [ 767.318050][T19895] lowmem_reserve[]: 0 0 0 0 0 [ 767.329731][T19895] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 767.354862][T19895] Node 0 DMA32: 1357*4kB (UME) 1223*8kB (UME) 2086*16kB (UME) 1393*32kB (ME) 822*64kB (ME) 475*128kB (UME) 192*256kB (UME) 62*512kB (UM) 30*1024kB (M) 35*2048kB (UM) 178*4096kB (UME) = 1118956kB [ 767.374692][T19895] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 767.386782][T19895] Node 1 Normal: 1400*4kB (UM) 58*8kB (UME) 49*16kB (ME) 112*32kB (UM) 107*64kB (UME) 60*128kB (UME) 30*256kB (UME) 23*512kB (UME) 11*1024kB (UME) 3*2048kB (UME) 922*4096kB (UM) = 3838336kB [ 767.424704][T19895] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 767.450709][T19895] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 767.471100][T19895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 767.492207][T19895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 767.512119][T19895] 57324 total pagecache pages [ 767.520429][T19895] 1096 pages in swap cache [ 767.530654][T19895] Free swap = 104608kB [ 767.539700][T19895] Total swap = 124996kB [ 767.549616][T19895] 2097051 pages RAM [ 767.558603][T19895] 0 pages HighMem/MovableOnly [ 767.568969][T19895] 427368 pages reserved [ 767.577670][T19895] 0 pages cma reserved [ 769.232502][T19934] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 769.242364][T19934] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 771.036339][T19470] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 771.338111][T19979] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 771.375144][T19979] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 773.111459][T20019] nbd: must specify at least one socket [ 773.477949][T20029] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 773.497700][T20029] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 774.903010][T20058] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4518'. [ 776.627061][T20091] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 776.640913][T20091] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 777.554233][T20101] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4529'. [ 778.344985][T20129] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4536'. [ 778.698579][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4538'. [ 783.289628][T20239] netlink: 346 bytes leftover after parsing attributes in process `syz.4.4563'. [ 785.324866][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4574'. [ 785.406460][T20276] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4574'. [ 785.456264][T20276] veth0_macvtap: left promiscuous mode [ 787.655920][T20297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4578'. [ 789.862419][T20333] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4587'. [ 790.056486][T20333] netlink: 326 bytes leftover after parsing attributes in process `syz.6.4587'. [ 793.050491][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4596'. [ 794.340806][T20396] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 794.352133][T20396] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 795.091566][T20416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4610'. [ 795.334200][T20417] erspan0: entered allmulticast mode [ 796.593311][T20450] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 796.623322][T20450] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 798.232278][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4621'. [ 799.778438][T20514] kernel read not supported for file /#)-\&[} (pid: 20514 comm: syz.6.4633) [ 799.838900][T20514] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4633'. [ 799.868771][ T29] audit: type=1800 audit(2067.940:18): pid=20514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4633" name="#)-\&[}" dev="mqueue" ino=44106 res=0 errno=0 [ 800.786886][T20542] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4640'. [ 802.319724][T20561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4644'. [ 802.468620][T20566] netlink: 326 bytes leftover after parsing attributes in process `syz.4.4644'. [ 802.552311][T20571] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 802.609416][T20569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4645'. [ 802.621509][T20571] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 803.486879][T20593] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4650'. [ 804.172840][T20597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4651'. [ 804.224784][T20597] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 805.029453][T20619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4656'. [ 805.516268][T20619] mac80211_hwsim hwsim14 ›: left promiscuous mode [ 805.546214][T20623] netlink: 326 bytes leftover after parsing attributes in process `syz.5.4656'. [ 805.875771][T20621] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4658'. [ 808.289836][T20674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4668'. [ 808.350927][T20674] hsr_slave_0: entered allmulticast mode [ 808.928142][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.965063][T20680] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4670'. [ 810.745966][T20711] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4679'. [ 812.148370][T20737] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4682'. [ 816.822849][T20796] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4702'. [ 816.846098][T20796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.873947][T20796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.894823][T20796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.929717][T20796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.187469][T20799] ptrace attach of "./syz-executor exec"[11024] was attempted by "./syz-executor exec"[20799] [ 821.116698][T20845] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4714'. [ 821.129769][T20854] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4717'. [ 821.152597][T20845] bridge0: port 4(team0) entered disabled state [ 823.098319][T20887] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4727'. [ 823.113603][T20887] macsec0: entered promiscuous mode [ 823.131743][T20887] macsec0: left allmulticast mode [ 823.148533][T20887] veth1_macvtap: left allmulticast mode [ 826.242854][T20945] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4741'. [ 827.829175][T20968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4749'. [ 829.605360][T20984] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4755'. [ 829.910818][T20984] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 830.743957][T21013] netlink: 'syz.4.4760': attribute type 4 has an invalid length. [ 832.400765][T21034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4767'. [ 832.618166][T21037] netlink: 'syz.5.4767': attribute type 46 has an invalid length. [ 835.442068][T21072] erspan0: entered allmulticast mode [ 839.291915][T20632] syz.7.4654 (20632) used greatest stack depth: 18768 bytes left [ 841.598496][T21155] erspan0: entered allmulticast mode [ 842.257692][T20489] syz.7.4621 (20489) used greatest stack depth: 17440 bytes left [ 843.715922][T21195] kernel read not supported for file /#)-\&[} (pid: 21195 comm: syz.5.4803) [ 843.739443][ T29] audit: type=1800 audit(2123.850:19): pid=21195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4803" name="#)-\&[}" dev="mqueue" ino=54839 res=0 errno=0 [ 844.373316][T21206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4805'. [ 844.818947][T21213] HfR: entered promiscuous mode [ 844.847612][T21213] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4807'. [ 845.415109][T21231] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4812'. [ 847.148407][T21274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4824'. [ 847.166884][T21274] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.235914][T21274] bridge_slave_0 (unregistering): left allmulticast mode [ 847.243003][T21274] bridge_slave_0 (unregistering): left promiscuous mode [ 847.256454][T21274] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.804796][T21295] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4828'. [ 849.045328][T21331] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4835'. [ 849.153088][T21326] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 849.188540][T21326] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 851.723363][T21385] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 851.748753][T21385] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 852.229043][T21396] Invalid ELF header magic: != ELF [ 852.840231][T21408] erspan0: entered allmulticast mode [ 853.479444][T21416] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4854'. [ 853.606455][T21416] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 854.603565][T21441] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 854.625940][T21441] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 855.657867][T21453] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 855.667583][T21453] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 855.749775][T21450] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4863'. [ 855.821902][T21450] team0: Port device team_slave_1 removed [ 857.565440][T21486] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 857.580428][T21486] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 857.834633][T21488] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4872'. [ 859.434018][T21521] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4879'. [ 862.165152][T21586] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4897'. [ 863.144213][T21596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4900'. [ 864.253631][T21633] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4911'. [ 864.341697][T21633] ipvlan0: entered allmulticast mode [ 864.357725][T21633] veth0_vlan: entered allmulticast mode [ 864.592389][T21639] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 864.602282][T21639] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 865.689356][T21667] tipc: Started in network mode [ 865.694275][T21667] tipc: Node identity ee00, cluster identity 4711 [ 865.701238][T21667] tipc: Node number set to 60928 [ 868.588271][T21710] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4929'. [ 869.074339][T21707] Invalid ELF header magic: != ELF [ 869.375466][T21735] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 869.404783][T21735] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 870.368231][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.366194][T21773] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 871.388324][T21773] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 872.666687][T21782] kexec: Could not allocate control_code_buffer [ 873.605392][T21823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4957'. [ 875.917163][T21878] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 875.957909][T21878] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 877.030303][T21892] Invalid ELF header magic: != ELF [ 878.339864][T21933] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4982'. [ 878.568941][T21939] netlink: 330 bytes leftover after parsing attributes in process `syz.5.4983'. [ 879.328078][T21951] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4987'. [ 879.340978][T21951] mac80211_hwsim hwsim14 ›: entered promiscuous mode [ 880.984940][T22001] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5001'. [ 881.036555][T22001] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5001'. [ 881.397798][T22005] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5003'. [ 882.376574][T22032] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5010'. [ 883.695257][T22064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5019'. [ 884.518442][T22105] netlink: 330 bytes leftover after parsing attributes in process `syz.6.5028'. [ 884.972204][T22119] Process accounting resumed [ 884.988828][T22119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5033'. [ 885.525266][T22121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5034'. [ 886.605887][T22154] Process accounting resumed [ 887.124897][T22158] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5043'. [ 887.196203][T22166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5044'. [ 887.228785][T22158] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 888.891872][T22179] kexec: Could not allocate control_code_buffer [ 889.431626][T22208] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5054'. [ 890.462214][T22228] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 890.471992][T22228] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 891.236030][T22256] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 891.296576][T22256] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 895.409001][T22284] Invalid ELF header magic: != ELF [ 896.053354][T22336] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5084'. [ 896.097158][T22336] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 896.141807][ T29] audit: type=1804 audit(2188.252:20): pid=22353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.5087" name="#)-\&[}" dev="mqueue" ino=72130 res=1 errno=0 [ 896.141812][T22353] kernel read not supported for file /#)-\&[} (pid: 22353 comm: syz.7.5087) [ 896.214350][ T29] audit: type=1800 audit(2188.322:21): pid=22353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5087" name="#)-\&[}" dev="mqueue" ino=72130 res=0 errno=0 [ 896.406534][T22349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5086'. [ 896.435914][T22349] team0: left allmulticast mode [ 896.440837][T22349] team0: left promiscuous mode [ 896.464498][T22349] bridge0: port 4(team0) entered disabled state [ 896.480105][ T29] audit: type=1804 audit(2188.592:22): pid=22351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.5087" name="#)-\&[}" dev="mqueue" ino=72130 res=1 errno=0 [ 896.550070][ T29] audit: type=1804 audit(2188.592:23): pid=22351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.5087" name="#)-\&[}" dev="mqueue" ino=72130 res=1 errno=0 [ 896.596938][T22349] macvlan0: left allmulticast mode [ 896.615582][T22349] veth1_vlan: left allmulticast mode [ 896.634624][T22349] macvlan0: left promiscuous mode [ 896.653070][T22349] bridge0: port 3(macvlan0) entered disabled state [ 896.715491][T22349] bridge_slave_1: left allmulticast mode [ 896.725705][T22349] bridge_slave_1: left promiscuous mode [ 896.731566][T22349] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.022636][T22359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5088'. [ 897.606666][T22381] nbd: socks must be embedded in a SOCK_ITEM attr [ 897.672893][T22381] block nbd1: shutting down sockets [ 900.446853][T22434] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5103'. [ 902.275313][T22468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5111'. [ 902.471343][T22490] Process accounting resumed [ 902.493404][T22490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5124'. [ 905.245479][T22529] [ 905.247859][T22529] ====================================================== [ 905.254895][T22529] WARNING: possible circular locking dependency detected [ 905.261939][T22529] 6.13.0-rc3-syzkaller #0 Not tainted [ 905.267323][T22529] ------------------------------------------------------ [ 905.274360][T22529] syz.7.5122/22529 is trying to acquire lock: [ 905.280441][T22529] ffff88803259ee58 (sk_lock-AF_INET){+.+.}-{0:0}, at: sockopt_lock_sock+0x54/0x70 [ 905.289738][T22529] [ 905.289738][T22529] but task is already holding lock: [ 905.297109][T22529] ffffffff8fabf288 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xf9/0x38c0 [ 905.306119][T22529] [ 905.306119][T22529] which lock already depends on the new lock. [ 905.306119][T22529] [ 905.316558][T22529] [ 905.316558][T22529] the existing dependency chain (in reverse order) is: [ 905.325583][T22529] [ 905.325583][T22529] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 905.332834][T22529] __mutex_lock+0x19b/0xa60 [ 905.337983][T22529] do_ipv6_setsockopt+0x1f4d/0x4660 [ 905.343740][T22529] ipv6_setsockopt+0xcb/0x170 [ 905.348980][T22529] tcp_setsockopt+0xa4/0x100 [ 905.354115][T22529] smc_setsockopt+0x1b4/0xc00 [ 905.359342][T22529] do_sock_setsockopt+0x222/0x480 [ 905.364902][T22529] __sys_setsockopt+0x1a0/0x230 [ 905.370283][T22529] __x64_sys_setsockopt+0xbd/0x160 [ 905.375919][T22529] do_syscall_64+0xcd/0x250 [ 905.380950][T22529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.387370][T22529] [ 905.387370][T22529] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 905.395973][T22529] __mutex_lock+0x19b/0xa60 [ 905.401000][T22529] smc_switch_to_fallback+0x2d/0xa00 [ 905.406817][T22529] smc_sendmsg+0x13d/0x520 [ 905.411761][T22529] ____sys_sendmsg+0x9ae/0xb40 [ 905.417051][T22529] ___sys_sendmsg+0x135/0x1e0 [ 905.422253][T22529] __sys_sendmsg+0x16e/0x220 [ 905.427369][T22529] do_syscall_64+0xcd/0x250 [ 905.432396][T22529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.438813][T22529] [ 905.438813][T22529] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 905.446466][T22529] __lock_acquire+0x249e/0x3c40 [ 905.451846][T22529] lock_acquire.part.0+0x11b/0x380 [ 905.457480][T22529] lock_sock_nested+0x3a/0xf0 [ 905.462684][T22529] sockopt_lock_sock+0x54/0x70 [ 905.467974][T22529] do_ip_setsockopt+0x101/0x38c0 [ 905.473428][T22529] ip_setsockopt+0x59/0xf0 [ 905.478360][T22529] raw_setsockopt+0xb8/0x290 [ 905.483471][T22529] do_sock_setsockopt+0x222/0x480 [ 905.489027][T22529] __sys_setsockopt+0x1a0/0x230 [ 905.494402][T22529] __x64_sys_setsockopt+0xbd/0x160 [ 905.500038][T22529] do_syscall_64+0xcd/0x250 [ 905.505062][T22529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.511480][T22529] [ 905.511480][T22529] other info that might help us debug this: [ 905.511480][T22529] [ 905.521697][T22529] Chain exists of: [ 905.521697][T22529] sk_lock-AF_INET --> &smc->clcsock_release_lock --> rtnl_mutex [ 905.521697][T22529] [ 905.535259][T22529] Possible unsafe locking scenario: [ 905.535259][T22529] [ 905.542696][T22529] CPU0 CPU1 [ 905.548051][T22529] ---- ---- [ 905.553404][T22529] lock(rtnl_mutex); [ 905.557381][T22529] lock(&smc->clcsock_release_lock); [ 905.565265][T22529] lock(rtnl_mutex); [ 905.571764][T22529] lock(sk_lock-AF_INET); [ 905.576261][T22529] [ 905.576261][T22529] *** DEADLOCK *** [ 905.576261][T22529] [ 905.584390][T22529] 1 lock held by syz.7.5122/22529: [ 905.589491][T22529] #0: ffffffff8fabf288 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xf9/0x38c0 [ 905.598814][T22529] [ 905.598814][T22529] stack backtrace: [ 905.604696][T22529] CPU: 0 UID: 0 PID: 22529 Comm: syz.7.5122 Not tainted 6.13.0-rc3-syzkaller #0 [ 905.613712][T22529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 905.623767][T22529] Call Trace: [ 905.627039][T22529] [ 905.629965][T22529] dump_stack_lvl+0x116/0x1f0 [ 905.634647][T22529] print_circular_bug+0x41c/0x610 [ 905.639680][T22529] check_noncircular+0x31a/0x400 [ 905.644626][T22529] ? __pfx_check_noncircular+0x10/0x10 [ 905.650095][T22529] ? lockdep_lock+0xc6/0x200 [ 905.654686][T22529] ? __pfx_lockdep_lock+0x10/0x10 [ 905.659718][T22529] __lock_acquire+0x249e/0x3c40 [ 905.664585][T22529] ? __pfx___lock_acquire+0x10/0x10 [ 905.669790][T22529] ? rcu_is_watching+0x12/0xc0 [ 905.674560][T22529] lock_acquire.part.0+0x11b/0x380 [ 905.679669][T22529] ? sockopt_lock_sock+0x54/0x70 [ 905.684615][T22529] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 905.690244][T22529] ? rcu_is_watching+0x12/0xc0 [ 905.695011][T22529] ? trace_lock_acquire+0x14e/0x1f0 [ 905.700211][T22529] ? mark_lock+0xb5/0xc60 [ 905.704547][T22529] ? sockopt_lock_sock+0x54/0x70 [ 905.709494][T22529] ? lock_acquire+0x2f/0xb0 [ 905.713992][T22529] ? sockopt_lock_sock+0x54/0x70 [ 905.718934][T22529] lock_sock_nested+0x3a/0xf0 [ 905.723615][T22529] ? sockopt_lock_sock+0x54/0x70 [ 905.728557][T22529] sockopt_lock_sock+0x54/0x70 [ 905.733325][T22529] do_ip_setsockopt+0x101/0x38c0 [ 905.738722][T22529] ? try_to_wake_up+0x953/0x1490 [ 905.743673][T22529] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 905.749071][T22529] ip_setsockopt+0x59/0xf0 [ 905.753513][T22529] raw_setsockopt+0xb8/0x290 [ 905.758125][T22529] ? __pfx_raw_setsockopt+0x10/0x10 [ 905.763335][T22529] ? sock_common_setsockopt+0x2e/0xf0 [ 905.768710][T22529] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 905.774605][T22529] do_sock_setsockopt+0x222/0x480 [ 905.779641][T22529] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 905.785213][T22529] ? lock_acquire+0x2f/0xb0 [ 905.789727][T22529] __sys_setsockopt+0x1a0/0x230 [ 905.794588][T22529] __x64_sys_setsockopt+0xbd/0x160 [ 905.799704][T22529] ? do_syscall_64+0x91/0x250 [ 905.804383][T22529] ? lockdep_hardirqs_on+0x7c/0x110 [ 905.809582][T22529] do_syscall_64+0xcd/0x250 [ 905.814092][T22529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.819990][T22529] RIP: 0033:0x7f430e985d19 [ 905.824410][T22529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.844019][T22529] RSP: 002b:00007f430c7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 905.852449][T22529] RAX: ffffffffffffffda RBX: 00007f430eb76080 RCX: 00007f430e985d19 [ 905.860435][T22529] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000003 [ 905.868416][T22529] RBP: 00007f430ea01a20 R08: 0000000000000028 R09: 0000000000000000 [ 905.876495][T22529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 905.884476][T22529] R13: 0000000000000000 R14: 00007f430eb76080 R15: 00007ffd28d28538 [ 905.892465][T22529]