last executing test programs: 7.521455557s ago: executing program 1 (id=592): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x34000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7.207060935s ago: executing program 1 (id=594): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000140)=""/44, 0x2c) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) ioctl$auto_def_blk_fops_fs(0xffffffffffffffff, 0xab09, 0x0) getrandom$auto(0x0, 0x4, 0x7) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1, @ANYBLOB="0100ff000000000000ea4900000008000300", @ANYRES32], 0x1c}}, 0x14000080) geteuid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/bcdDevice\x00', 0x28440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000001c0)=""/176, 0xb0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40448c1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20102d}, 0xc, &(0x7f0000002580)={&(0x7f0000000140)={0xac, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_MODES={0x4}, @ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x97}]}, @ETHTOOL_A_FEC_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x81}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_FEC_MODES={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008804}, 0x44000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, 0x0) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 6.160509754s ago: executing program 1 (id=596): r0 = io_uring_setup$auto(0x6, 0x0) fstat$auto(r0, &(0x7f0000000100)={0x4, 0x400, 0x9, 0x1, 0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2, 0x8000002, 0x887, 0x4, 0xffffffffffffffff, 0x9}) getegid() close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2f032abd7000ffdbdf2512000000d6ce8987fce278b81dfec7758bf2a7df0bd9d23ba4fe30423e13a5a5b2edc1a485a9fb31d59552d7fd960be72d29222a55af99133af774c2829ddbb79c338f31f9d7b54d748fb5c254c0357f40490ca38c7f518032c4f4349fdccf0c8aacf9bd4ab05c8650d255ce3a35c9766bf5f90ca8cff1506ad2bac26809d4af89a38045036ee6689b3a94"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r4, 0xc1086201, 0x0) r5 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x1000, 0x400, 0x7ff}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) symlink$auto(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r6 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f00000037c0)='/proc/self/attr/current\x00', 0x1, 0x0) write$auto_proc_pid_attr_operations_base(r6, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x16, 0x2, 0x800000000008000) r7 = io_uring_setup$auto(0x6, 0x0) r8 = socket(0x29, 0x2, 0x0) setsockopt$auto(r8, 0x2, 0x1, 0x0, 0x699cc4dc) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) futex$auto(&(0x7f0000000040)=0x9, 0x5, 0x7, 0x0, 0x0, 0xc0040000) r9 = socket(0x2, 0x3, 0x2a) getsockopt$auto(r9, 0x0, 0x29, 0x0, &(0x7f0000000040)=0xdbb) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0000b1b3d536", @ANYRESOCT=r7, @ANYBLOB="0600b300030000000400160105001801cc00000006006500a3ff00000500c20040000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ram2\x00', 0x1c5000, 0x0) 5.623255411s ago: executing program 1 (id=600): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) r0 = socket(0x10, 0x2, 0x4) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x1, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x5) socket(0x2, 0x1, 0x106) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) mmap$auto(0x2, 0x2020009, 0x3, 0x12, 0xfffffffffffffffa, 0x4000008000) socket(0x11, 0x2, 0x88) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008000) r1 = socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x7, &(0x7f0000000000)={0x10000, 0x80, 0xe, 0x8, 0x1fd, 0x4, r1, [0x7fffffff, 0x8, 0x6], {0x5, 0x800000a, 0x200, 0xffffffff, 0x81, 0x1ff, 0x7, 0x8, 0x200}, {0x1136400, 0x72, 0x1800000, 0x4, 0x8, 0x4, 0x3b72, 0x80, 0xffffffffffffffff}}) write$auto(0x3, 0x0, 0x3f00) rseq$auto(&(0x7f0000000280)={0x4, 0x101, 0xfd, 0x80, 0x7f, 0xe85d, "36bfd52360f8eb8fea5081193e91fe9747310744610f50388038125a769b81dd4cf45efeeadedfda2ef7ad71c890c363"}, 0x7fffffff, 0x0, 0x1) 4.16001767s ago: executing program 0 (id=604): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x3, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/node/node1/compact\x00', 0x101800, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vivid.0/video4linux/radio14/dev_debug\x00', 0x8002, 0x0) write$auto(r0, &(0x7f0000000100)='\t\nD\\\'\x02\x00\x0f;\xd1\t\xbe\b\xe8P\xd2#\xcb\x98p\x81\xe7\x82k\xde|P\xfc\xcb%\xd4\xc2\xe8\x16A\xed \xec7\xa7\x9f\x969\x92t\xc9\xe9J\x1d-X_\xa1\xff@\x88\xbfP\xe9\x91\x82R+N\xe5\x10\x87\x92j\x953\x94\x13\xc4`\xbf\xa0\'\xd5F\x1a\xa0lSQ\x00\x99\xcf\xea\x86\xc3J\x8aE\f*T\x9dn5w}\x17\x97\x92*,\xddn6\xc3\xa4\xbc_\x9a\x9c\xc8\x80\xa3\xb9\x9aQL\x1d\xae\x14Ycd\xc0\xcf,\xb5Z\xab\xac_\xd5e3P\x97\x10X\x7fB\x88\xe63\xca\x00\xcf\xd1\xe3\xce*6\x11\xcbmv\x86\x0eM\xe7\x90\xbb]\xf5\x0f\x00\xee\x8e\x00\x00\x00\x00\x00\x00\x008\x1f\x9a\xe3\xa0\x14\xac\xf2{\x94E;\xef\xd0\x80\x8an\v\x9b\xf4M\xf8\x02\xd2\xe9\xb1\x81\x8d@\r\xc7\x11/\xaa9\xbbl\xb7\x90__[r\\\x9e\xcc\xbe2nw\xac\x02(\xf9\x9ajI\x1c\x91\xd7\xc7\xbc\x15\x8d\x03q\xb9\xd5\xe1\xb2\xc6\x89\x93M\x7f\xaf\xa1\xb9g\f\xe4\xfcfA\x8b\xd0\xd7\x8f\xd8R\x90*\xa6\x8d\xf7\xe5\xb1`E\xb8J[\xa9N\xac\x9bg\xe4\xeegb\xcab\xd1\x10\xfe\xac\xca1XH\xde\xc4\x10l\xaa\x012\x80\xac', 0xce) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') acct$auto(0x0) 3.377778047s ago: executing program 3 (id=605): close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop9\x00', 0x1c5000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop14\x00', 0x48d81, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) bpf$auto(0x10, &(0x7f00000000c0)=@link_detach, 0x40) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r1) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x44) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) ioctl$auto(0x20000000000003, 0x8943, 0x2) io_submit$auto(0x8000000000000001, 0x3ea, &(0x7f0000000080)=&(0x7f0000000000)={0x8, 0xe082, 0x7, 0x5, 0x2c, r0, 0x0, 0x8000, 0x7, 0x0, 0x5, r0}) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c00, 0x0) prctl$auto(0x35, 0x1, 0x2, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC0\x00', 0x402, 0x0) 3.376869964s ago: executing program 0 (id=614): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r2, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r2, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file1\x00', 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x100000000008000) madvise$auto(0x0, 0x3, 0x66) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x180800, 0x0) read$auto(r4, 0x0, 0x39b8) renameat2$auto(r3, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000240)='./file1\x00', 0x2) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004540), 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) sendmsg$auto_OVS_VPORT_CMD_GET(r1, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x42}, 0x4004) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) getsockopt$auto(0x3, 0x6, 0x9, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r5, 0x408, 0x70bd28, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0xffff}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x433}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x800}, @OVS_VPORT_ATTR_UPCALL_PID={0x9b, 0x5, "f02a3a8b5cd3de75d3df4ff5d2462b52e6982437509e0fa48dfb555ca1dae37effe0abcf5216abc929b10e6988dcda6a9e9e57315b885e3af014f46bf7bf4b09307057e4c451e41a5a47f66825386fe1cfd21dfc825da8b55714f11cbc4e7c38c40aa4121c0352702b2bfc4417215d6bc7e2260cfb0418dbec50bee2e10e4354377bcf4dee2934fa6cb4b6f993007a4c1d604e026a7857"}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x10001}]}, 0xd0}, 0x1, 0x0, 0x0, 0x91}, 0x4000010) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/ioports\x00', 0x10b402, 0x0) pread64$auto(r7, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r6, 0x4b41, r8) 2.883466132s ago: executing program 3 (id=606): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000000), r1) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0xff, 0x3, 0x18, r0, 0x80000000008080) mmap$auto(0x7, 0x2020009, 0x3, 0x6bbf, 0xfffffffffffffffa, 0x3) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) kexec_load$auto(0x0, 0x4, 0x0, 0x1) 2.535234096s ago: executing program 0 (id=607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x936355e497c8b7e3, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) socket(0xa, 0x2, 0x88) personality$auto(0xfffffffc) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) ppoll$auto(&(0x7f00000000c0)={r2, 0x4, 0xffc5}, 0x1, &(0x7f0000000300)={0x2, 0x4}, &(0x7f0000000340)={0x4}, 0x8) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @loopback}, 0x55) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1a000, 0x0) 2.352121022s ago: executing program 2 (id=608): mmap$auto(0xfffffffffffffffc, 0x2020009, 0x7f, 0x200000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x18, 0x17) futex_requeue$auto(0x0, 0x80, 0x2, 0x101) r0 = fsmount$auto(0xffffffffffffffff, 0x81, 0xc185) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x1fff, 0xfffc, 0xc, 0x8000300008011, 0x4, 0xbd) prctl$auto(0x10731, 0x3, 0x2008, 0x0, 0x2) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/cmdline\x00', 0x2002, 0x0) read$auto_proc_pid_cmdline_ops_base(r2, &(0x7f0000000200)=""/142, 0xa8) r3 = socket(0x1d, 0x1, 0x6) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="14002e6e", @ANYRES16=0x0, @ANYBLOB="080027bd7000fbdbdf2529000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80805, 0x0) socket(0x2, 0x1, 0x84) setsockopt$auto(r6, 0x10000000084, 0x401, 0x0, 0x10000000) madvise$auto(0xffffffffffffffc0, 0x0, 0x7ff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x1002, 0x6, 0x400, 0x17, r4, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 2.318294836s ago: executing program 3 (id=609): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000b, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0xc0105500, r0) r1 = socket(0x21, 0x2, 0xa) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket(0x21, 0x2, 0xa) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x0, 0x2}, 0x2) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) ioctl$auto_evdev_fops_evdev(r3, 0x40044591, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.14939641s ago: executing program 0 (id=610): r0 = io_uring_setup$auto(0x6, 0x0) fstat$auto(r0, &(0x7f0000000100)={0x4, 0x400, 0x9, 0x1, 0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2, 0x8000002, 0x887, 0x4, 0xffffffffffffffff, 0x9}) getegid() close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2f032abd7000ffdbdf2512000000d6ce8987fce278b81dfec7758bf2a7df0bd9d23ba4fe30423e13a5a5b2edc1a485a9fb31d59552d7fd960be72d29222a55af99133af774c2829ddbb79c338f31f9d7b54d748fb5c254c0357f40490ca38c7f518032c4f4349fdccf0c8aacf9bd4ab05c8650d255ce3a35c9766bf5f90ca8cff1506ad2bac26809d4af89a38045036ee6689b3a94"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r4, 0xc1086201, 0x0) r5 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x1000, 0x400, 0x7ff}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) symlink$auto(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r6 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f00000037c0)='/proc/self/attr/current\x00', 0x1, 0x0) write$auto_proc_pid_attr_operations_base(r6, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x16, 0x2, 0x800000000008000) r7 = io_uring_setup$auto(0x6, 0x0) r8 = socket(0x29, 0x2, 0x0) setsockopt$auto(r8, 0x2, 0x1, 0x0, 0x699cc4dc) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) futex$auto(&(0x7f0000000040)=0x9, 0x5, 0x7, 0x0, 0x0, 0xc0040000) r9 = socket(0x2, 0x3, 0x2a) getsockopt$auto(r9, 0x0, 0x29, 0x0, &(0x7f0000000040)=0xdbb) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0000b1b3d536", @ANYRESOCT=r7, @ANYBLOB="0600b300030000000400160105001801cc00000006006500a3ff00000500c20040000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ram2\x00', 0x1c5000, 0x0) 2.149243496s ago: executing program 1 (id=612): openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x141f02, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) socket(0xa, 0x2, 0x73) fcntl$auto(0x0, 0x407, 0x100000) mlockall$auto(0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pipe2$auto(0x0, 0x80) io_uring_setup$auto(0x1, 0x0) ioctl$auto(0x1, 0x5761, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vidtv.0/i2c-0/name\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r1, &(0x7f0000000040)={0x7, 0x2, "02000000000000"}, 0x2) read$auto(0x3, 0x0, 0xf34) sendfile$auto(r0, r0, 0x0, 0x2) 1.879941951s ago: executing program 3 (id=613): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/loop6\x00', 0xc0542, 0x0) read$auto_def_blk_fops_fs(r0, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/partitions\x00', 0x200, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x1) mremap$auto(0x0, 0x7, 0x80000000000001d4, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x100000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x9, 0x0, 0x5, 0x0, 0x400001, 0x7}, 0x4}, 0xb9ec, 0x300, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/10/smp_affinity_list\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0x7) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/tracing/README\x00', 0x20400, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/current\x00', 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) writev$auto(r2, &(0x7f00000001c0)={0x0, 0x3}, 0x1) io_uring_setup$auto(0x8e3e, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptys1\x00', 0x20400, 0x0) 1.697640776s ago: executing program 0 (id=616): mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000240)={{&(0x7f0000000040), 0x12, 0x0, 0xa, 0x0, 0x8fe, 0x400000b}, 0x800009}, 0x5, 0x20000000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r1, @ANYBLOB="00012bbd7000fddbdf252800000005003e000800000031004801a289c1c1f3026f75a4d3a66a76f9f65578159c8a96f55e156e69b5114d651d9ec494"], 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x1) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x7, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x3, 0x0) setsockopt$auto(0x3, 0xc95, 0x1, 0x0, 0xfffffff8) getsockopt$auto(r2, 0x84, 0xa982078, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r3, 0x0, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x8000, 0x2020009, 0x81, 0xeb2, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)=0x2c5c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/pppoe\x00', 0x313201, 0x0) mknod$auto(&(0x7f0000000000)='*-\x00', 0x5, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) 1.210442797s ago: executing program 1 (id=618): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000011080)={&(0x7f000000e000)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x104}, 0x40) sendmsg$auto_TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)={0x668, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NAME_TABLE={0x175, 0x8, 0x0, 0x1, [@generic="3b253002f2ea497ebbeab172c3436b88e287406c7e1e60d1ac7687de55486a4057dd339854702549a328dcc824a89440e3d1861d3e3347fc4aea41", @typed={0x8, 0x11a, 0x0, 0x0, @binary='^8^Y'}, @nested={0xbd, 0x6f, 0x0, 0x1, [@generic="56a6d8bd91fc2bc8e436cb9de947ac0dc7099da0a1ae77a6fb213a2510d539b7c3492b256754a0741d93af7c910256fdf26fc9ce9598e9775506ef7dc73a6c30d61bb4795ea31d", @generic="7eab1b6271f4624c70af3d6590f3ca0f11769703d6184540f82001f7e62d44994e94e0e78278a3e82628ec52a61c2545e21fbc0a764c11a12800c4f14b4af01c89f9461bf15a0d574769482b4e2086c5b351ce4d9eb3863ca18c05c925191b0f4799f9e65cf9df58f2ab8fed3e720539707a"]}, @generic="40dfd44a60953f37c1b432b505067c7108e76c492d1b5f83a7b402fa5c162dbd8fabc372f07754c5350f8ec9fb9849672cfe114eb7477260142b57c446f911258b2cbf30a19af1226669d6dec14ea94cda757818ab4b46460cda78a60695b587c8e51b656164f9027e2db879b378"]}, @TIPC_NLA_BEARER={0x4dc, 0x1, 0x0, 0x1, [@nested={0x31e, 0xee, 0x0, 0x1, [@generic="c8151dbf7a489446b955068e84de1f8ff1392e14196afc03c9de5b9001f8dfd7c16eb6975a03f3471054cc5c42ad2550aae5056c2e5c44f344b1e6f82244f3909cad2d8f9f0682a0a798c6e4fe3dc01b44173ae7b8f6bc7c4f13a10472b800b87b124519f7a0c1942f2fc116a166680a8044fbd716d7c481f0ac64b001f66ace4207a3344362a78d7b61224deeb49a05e80db0bcaa8fce35dab639200037d62e7966ef5eb0585907c329e83f57c5bd808594c03c3a42f51174d36bc727f6b239893100683a367fb9395caa92e74276b8bd5591130e47700d18108337164d66a0a3f1b71acc", @nested={0x4, 0x120}, @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x28}}, @generic="2d84f7bebda4713d596166317427b1f4cccfb074c8267536caf7c0104533e039957c44d8ae06a7e15e0f5845d2aaee694a7add327c65e89ad60a6cc0ced06287f42d77fb7942e5ff657cc228887dd7a796168e1e6a6d9636f991998bd6c591efcebfbc67e3ad6204ecc2837e87948ba440a6581a777fad4b7864fdcefc05091a3f404598836e0eb768309086ea7fccd25d80de58", @typed={0x4, 0x112}, @generic="92e485c0cf378aff79dfcd777ab78df67844bd2720c6065f5b1121bb6d65ad84ef91927cdd8f5579a884f3aad634bdeeee1d27fd35655e6fdcb044dac5b6ed1b53e211abd92363f971abc8486a6f50dbb7b08c4909df7bb8644044d73cd744743b04e9e2e23b416d454e2ea859dbbb04b7b697c9852197d30f18d45b35a68f3616cfc2103f6fd8bc917927466ff4ebde43bc2ea9432abda736a3f0e8783256e6f41bf5c0ad482c8a2b45e21f798dc2f75f0bfa1d25f70bbdcf372dad259a6c3dfa5fd0650dab0487d98e704a5fc1b547bb6ed1bb831c8771cfa4e0719de8063fc82a9350e4925912f049ba013763898b14", @typed={0x82, 0xa8, 0x0, 0x0, @binary="1b188045c4e1f7c66a6b722ad3f26823383daa0df7cbd9c6d84b94a80e8e8e1c1df500f988b9fe379dcae14cbd866c6e5b1852329936b021f2fc0724e516f7c5e957f3d62ad7b9dff42da4b6677dfac5edc44acc48000a8a7cbc0135d4b088c2340d5c3c444d86442271cad813af9f64cdf6aec435e94a1c72c0277faad8"}, @typed={0xc, 0xfe, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xb8}]}, @generic, @nested={0x1a2, 0xe0, 0x0, 0x1, [@generic="f0d61168a9fe20b363460858bf726616374b66699d645c83566c336fc403fd5e9a6292b33129c7251df037681323ec8f376fbcee9ccde013c9ee316039ee5b4ed0646c2762009dbca5612a74773de87932ddcc71146f39a7215714e032bc7b2760e888", @generic="557a829c2ffc61f992afcf07e6a0aef9b94e574e6dd738e9b4e7a8939da34b72edb6cd34a3d4fc8bfecb04f2c9260a9ac9c6370c71c9da8165f4502ae903", @nested={0x4, 0x87}, @nested={0x4, 0x5c}, @generic="9cceac4f6715b8ad51196365138ca47d82eb9380154ce8bd8840411379a0951b451a29810cf82e0b50e572408e3b0344b92503ed0d806847d7e8669b9d8f0537cfc97a9b03ebc94b1e3a46232a2ec47be96ab00d11a7641115518ce05cf5d08c578668cc42d23b021c0166e97d1b2a7c4b431f39a4eed0796275426836feda81b1905993e07a16b2781c46110ad07124d55021668ea5b658881c23aee6e92f8c6f5797b7763b293cd76c319430b3de274c0ee0e215949ee3e77f1c4b017e0976be6cac58536416c35471697dd5d6c91e11b7a9879deee75bc7369b577f10e024ed8efdc262549007d3e2ef93985d4097972e73c3e4"]}, @nested={0x14, 0x13f, 0x0, 0x1, [@typed={0xc, 0xa7, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x2d}]}]}]}, 0x668}, 0x1, 0x0, 0x0, 0x4000}, 0x24044800) prctl$auto(0x53564d41, 0x0, 0x0, 0xd, 0xf4ff) 1.209681857s ago: executing program 3 (id=626): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/loop6\x00', 0xc0542, 0x0) read$auto_def_blk_fops_fs(r0, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/partitions\x00', 0x200, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x1) mremap$auto(0x0, 0x7, 0x80000000000001d4, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x100000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x9, 0x0, 0x5, 0x0, 0x400001, 0x7}, 0x4}, 0xb9ec, 0x300, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/10/smp_affinity_list\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0x7) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/tracing/README\x00', 0x20400, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/current\x00', 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) writev$auto(r2, &(0x7f00000001c0)={0x0, 0x3}, 0x1) io_uring_setup$auto(0x8e3e, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptys1\x00', 0x20400, 0x0) 1.149661174s ago: executing program 2 (id=619): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000007180)='/sys/devices/virtual/block/zram0/debug_stat\x00', 0x80, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) socket(0xa, 0x801, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x13) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000071c0)=""/118, 0x76) 1.072671819s ago: executing program 2 (id=620): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r2, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r2, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file1\x00', 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x100000000008000) madvise$auto(0x0, 0x3, 0x66) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x180800, 0x0) read$auto(r4, 0x0, 0x39b8) renameat2$auto(r3, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000240)='./file1\x00', 0x2) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004540), 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) sendmsg$auto_OVS_VPORT_CMD_GET(r1, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x42}, 0x4004) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) getsockopt$auto(0x3, 0x6, 0x9, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r5, 0x408, 0x70bd28, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0xffff}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x433}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x800}, @OVS_VPORT_ATTR_UPCALL_PID={0x9b, 0x5, "f02a3a8b5cd3de75d3df4ff5d2462b52e6982437509e0fa48dfb555ca1dae37effe0abcf5216abc929b10e6988dcda6a9e9e57315b885e3af014f46bf7bf4b09307057e4c451e41a5a47f66825386fe1cfd21dfc825da8b55714f11cbc4e7c38c40aa4121c0352702b2bfc4417215d6bc7e2260cfb0418dbec50bee2e10e4354377bcf4dee2934fa6cb4b6f993007a4c1d604e026a7857"}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x10001}]}, 0xd0}, 0x1, 0x0, 0x0, 0x91}, 0x4000010) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/ioports\x00', 0x10b402, 0x0) pread64$auto(r7, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r6, 0x4b41, r8) 883.071646ms ago: executing program 2 (id=621): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x3, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/node/node1/compact\x00', 0x101800, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vivid.0/video4linux/radio14/dev_debug\x00', 0x8002, 0x0) write$auto(r0, &(0x7f0000000100)='\t\nD\\\'\x02\x00\x0f;\xd1\t\xbe\b\xe8P\xd2#\xcb\x98p\x81\xe7\x82k\xde|P\xfc\xcb%\xd4\xc2\xe8\x16A\xed \xec7\xa7\x9f\x969\x92t\xc9\xe9J\x1d-X_\xa1\xff@\x88\xbfP\xe9\x91\x82R+N\xe5\x10\x87\x92j\x953\x94\x13\xc4`\xbf\xa0\'\xd5F\x1a\xa0lSQ\x00\x99\xcf\xea\x86\xc3J\x8aE\f*T\x9dn5w}\x17\x97\x92*,\xddn6\xc3\xa4\xbc_\x9a\x9c\xc8\x80\xa3\xb9\x9aQL\x1d\xae\x14Ycd\xc0\xcf,\xb5Z\xab\xac_\xd5e3P\x97\x10X\x7fB\x88\xe63\xca\x00\xcf\xd1\xe3\xce*6\x11\xcbmv\x86\x0eM\xe7\x90\xbb]\xf5\x0f\x00\xee\x8e\x00\x00\x00\x00\x00\x00\x008\x1f\x9a\xe3\xa0\x14\xac\xf2{\x94E;\xef\xd0\x80\x8an\v\x9b\xf4M\xf8\x02\xd2\xe9\xb1\x81\x8d@\r\xc7\x11/\xaa9\xbbl\xb7\x90__[r\\\x9e\xcc\xbe2nw\xac\x02(\xf9\x9ajI\x1c\x91\xd7\xc7\xbc\x15\x8d\x03q\xb9\xd5\xe1\xb2\xc6\x89\x93M\x7f\xaf\xa1\xb9g\f\xe4\xfcfA\x8b\xd0\xd7\x8f\xd8R\x90*\xa6\x8d\xf7\xe5\xb1`E\xb8J[\xa9N\xac\x9bg\xe4\xeegb\xcab\xd1\x10\xfe\xac\xca1XH\xde\xc4\x10l\xaa\x012\x80\xac', 0xce) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') acct$auto(0x0) 632.230709ms ago: executing program 2 (id=622): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xffffffffffffffff, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) 208.645682ms ago: executing program 3 (id=623): mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r1, @ANYBLOB="00012bbd7000fddbdf252800000005003e000800000031004801a289c1c1f3026f75a4d3a66a76f9f65578159c8a96f55e156e69b5114d651d9ec494a3d7791ee432bb9c"], 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x1) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0x90e, 0x10009b71, 0x5, 0x1) io_uring_setup$auto(0x81c5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) getsockopt$auto(r2, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r3, 0x0, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) mmap$auto(0xffffffffffffffff, 0x2020009, 0x7f, 0xeb2, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)=0x2c5c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/pppoe\x00', 0x313201, 0x0) mknod$auto(&(0x7f0000000000)='*-\x00', 0x5, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) 207.917114ms ago: executing program 2 (id=632): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x3, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/node/node1/compact\x00', 0x101800, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vivid.0/video4linux/radio14/dev_debug\x00', 0x8002, 0x0) write$auto(r0, &(0x7f0000000100)='\t\nD\\\'\x02\x00\x0f;\xd1\t\xbe\b\xe8P\xd2#\xcb\x98p\x81\xe7\x82k\xde|P\xfc\xcb%\xd4\xc2\xe8\x16A\xed \xec7\xa7\x9f\x969\x92t\xc9\xe9J\x1d-X_\xa1\xff@\x88\xbfP\xe9\x91\x82R+N\xe5\x10\x87\x92j\x953\x94\x13\xc4`\xbf\xa0\'\xd5F\x1a\xa0lSQ\x00\x99\xcf\xea\x86\xc3J\x8aE\f*T\x9dn5w}\x17\x97\x92*,\xddn6\xc3\xa4\xbc_\x9a\x9c\xc8\x80\xa3\xb9\x9aQL\x1d\xae\x14Ycd\xc0\xcf,\xb5Z\xab\xac_\xd5e3P\x97\x10X\x7fB\x88\xe63\xca\x00\xcf\xd1\xe3\xce*6\x11\xcbmv\x86\x0eM\xe7\x90\xbb]\xf5\x0f\x00\xee\x8e\x00\x00\x00\x00\x00\x00\x008\x1f\x9a\xe3\xa0\x14\xac\xf2{\x94E;\xef\xd0\x80\x8an\v\x9b\xf4M\xf8\x02\xd2\xe9\xb1\x81\x8d@\r\xc7\x11/\xaa9\xbbl\xb7\x90__[r\\\x9e\xcc\xbe2nw\xac\x02(\xf9\x9ajI\x1c\x91\xd7\xc7\xbc\x15\x8d\x03q\xb9\xd5\xe1\xb2\xc6\x89\x93M\x7f\xaf\xa1\xb9g\f\xe4\xfcfA\x8b\xd0\xd7\x8f\xd8R\x90*\xa6\x8d\xf7\xe5\xb1`E\xb8J[\xa9N\xac\x9bg\xe4\xeegb\xcab\xd1\x10\xfe\xac\xca1XH\xde\xc4\x10l\xaa\x012\x80\xac', 0xce) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') acct$auto(0x0) 0s ago: executing program 0 (id=624): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) write$auto_configfs_file_operations_configfs_internal(r0, &(0x7f00000000c0)="9b", 0x1) write$auto(r0, &(0x7f0000000000)='/sys/kernel/config/target/dbroot\x00', 0xb3c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. syzkaller login: [ 83.257232][ T5819] cgroup: Unknown subsys name 'net' [ 83.387373][ T5819] cgroup: Unknown subsys name 'cpuset' [ 83.395756][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.116598][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.079513][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.102813][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.129621][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.139349][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.147187][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.155606][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.165396][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.182323][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.185424][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.189745][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.199397][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.212430][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.220439][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.230508][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.237075][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.237996][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.253101][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.261123][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.270146][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.277868][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.279047][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.285600][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.306480][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.320690][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.693599][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.770089][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 87.802813][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 87.840846][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.848422][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.858060][ T5834] bridge_slave_0: entered allmulticast mode [ 87.865294][ T5834] bridge_slave_0: entered promiscuous mode [ 87.878436][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.885695][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.893002][ T5834] bridge_slave_1: entered allmulticast mode [ 87.900230][ T5834] bridge_slave_1: entered promiscuous mode [ 87.926515][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.963387][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.010416][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.097503][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.104807][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.115816][ T5828] bridge_slave_0: entered allmulticast mode [ 88.122838][ T5828] bridge_slave_0: entered promiscuous mode [ 88.153997][ T5834] team0: Port device team_slave_0 added [ 88.160159][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.167467][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.174761][ T5838] bridge_slave_0: entered allmulticast mode [ 88.181753][ T5838] bridge_slave_0: entered promiscuous mode [ 88.189056][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.196413][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.203767][ T5828] bridge_slave_1: entered allmulticast mode [ 88.210978][ T5828] bridge_slave_1: entered promiscuous mode [ 88.229397][ T5834] team0: Port device team_slave_1 added [ 88.245739][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.253023][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.260189][ T5838] bridge_slave_1: entered allmulticast mode [ 88.267991][ T5838] bridge_slave_1: entered promiscuous mode [ 88.295143][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.302503][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.309687][ T5833] bridge_slave_0: entered allmulticast mode [ 88.316817][ T5833] bridge_slave_0: entered promiscuous mode [ 88.359075][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.369159][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.377001][ T5833] bridge_slave_1: entered allmulticast mode [ 88.385403][ T5833] bridge_slave_1: entered promiscuous mode [ 88.401533][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.408782][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.435216][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.450719][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.463069][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.476751][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.499008][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.510423][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.523641][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.550395][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.579736][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.601219][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.693138][ T5833] team0: Port device team_slave_0 added [ 88.705520][ T5838] team0: Port device team_slave_0 added [ 88.714165][ T5828] team0: Port device team_slave_0 added [ 88.736349][ T5833] team0: Port device team_slave_1 added [ 88.759932][ T5838] team0: Port device team_slave_1 added [ 88.781024][ T5828] team0: Port device team_slave_1 added [ 88.832941][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.839955][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.866618][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.883232][ T5834] hsr_slave_0: entered promiscuous mode [ 88.889698][ T5834] hsr_slave_1: entered promiscuous mode [ 88.898419][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.905653][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.932058][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.944242][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.951335][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.977320][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.989524][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.996980][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.023917][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.051073][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.058245][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.084362][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.100150][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.107510][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.133732][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.210063][ T5828] hsr_slave_0: entered promiscuous mode [ 89.217008][ T5828] hsr_slave_1: entered promiscuous mode [ 89.224134][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.232373][ T5828] Cannot create hsr debugfs directory [ 89.246896][ T5838] hsr_slave_0: entered promiscuous mode [ 89.253707][ T5838] hsr_slave_1: entered promiscuous mode [ 89.260294][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.268166][ T5838] Cannot create hsr debugfs directory [ 89.296432][ T5833] hsr_slave_0: entered promiscuous mode [ 89.303206][ T5833] hsr_slave_1: entered promiscuous mode [ 89.309561][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.318444][ T5837] Bluetooth: hci2: command tx timeout [ 89.322475][ T5832] Bluetooth: hci0: command tx timeout [ 89.324534][ T5833] Cannot create hsr debugfs directory [ 89.329860][ T54] Bluetooth: hci1: command tx timeout [ 89.391432][ T54] Bluetooth: hci3: command tx timeout [ 89.653833][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.666292][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.676616][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.697782][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.743923][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.762093][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.773063][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.795995][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.854738][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.868308][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.905584][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.927984][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.967732][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.004004][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.016114][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.042306][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.075495][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.140646][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.185161][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.200452][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.207862][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.219579][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.226755][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.287601][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.308169][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.327627][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.334798][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.359055][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.366253][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.387847][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.424475][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.467169][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.474461][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.489240][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.496464][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.578803][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.593135][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.609750][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.679612][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.704006][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.711171][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.750794][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.758125][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.809808][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.982840][ T5834] veth0_vlan: entered promiscuous mode [ 91.010521][ T5834] veth1_vlan: entered promiscuous mode [ 91.044790][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.094440][ T5834] veth0_macvtap: entered promiscuous mode [ 91.123674][ T5834] veth1_macvtap: entered promiscuous mode [ 91.137532][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.171781][ T5828] veth0_vlan: entered promiscuous mode [ 91.184026][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.203357][ T5828] veth1_vlan: entered promiscuous mode [ 91.217186][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.238713][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.249421][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.258809][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.268138][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.356954][ T5828] veth0_macvtap: entered promiscuous mode [ 91.387143][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.394138][ T54] Bluetooth: hci2: command tx timeout [ 91.401230][ T5828] veth1_macvtap: entered promiscuous mode [ 91.407278][ T54] Bluetooth: hci1: command tx timeout [ 91.410052][ T5832] Bluetooth: hci0: command tx timeout [ 91.464111][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.472743][ T5833] veth0_vlan: entered promiscuous mode [ 91.481616][ T5832] Bluetooth: hci3: command tx timeout [ 91.494395][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.539500][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.550790][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.562847][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.586209][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.598094][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.609451][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.618888][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.624331][ T5838] veth0_vlan: entered promiscuous mode [ 91.634948][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.640506][ T5833] veth1_vlan: entered promiscuous mode [ 91.666738][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.675946][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.685354][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.694585][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.725907][ T5838] veth1_vlan: entered promiscuous mode [ 91.766576][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.866947][ T5838] veth0_macvtap: entered promiscuous mode [ 91.895171][ T5838] veth1_macvtap: entered promiscuous mode [ 91.906136][ T5833] veth0_macvtap: entered promiscuous mode [ 91.920166][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.939599][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.971670][ T5833] veth1_macvtap: entered promiscuous mode [ 92.016818][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.020665][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.032009][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.045742][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.059950][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.078813][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.098625][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.130715][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.144068][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.159071][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.171536][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.188615][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.200936][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.214017][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.236838][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.262234][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.307068][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.331878][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.353299][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.364020][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.392654][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.421434][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.438268][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.464556][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.491896][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.513931][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.544392][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.561802][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.570946][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.593988][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.635938][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.651501][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.661758][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.670778][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.985204][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.014938][ T5903] [U] [ 93.017884][ T5903] [U] [ 93.020642][ T5903] [U] [ 93.023402][ T5903] [U] [ 93.025904][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.032421][ T5903] [U] [ 93.036325][ T5903] [U] [ 93.039091][ T5903] [U] [ 93.041853][ T5903] [U] [ 93.098299][ T5903] [U] [ 93.101089][ T5903] [U] [ 93.103824][ T5903] [U] [ 93.106562][ T5903] [U] [ 93.149225][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.151269][ T5903] [U] [ 93.161868][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.232661][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.234501][ T5903] [U] mYT [ 93.240527][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.263318][ T5903] [U] RYE2 Ebُ>O#%y.^:*F]Dk3_P(<;ezVs6Vm1f!"?C1DNQޫpcN5ι;K L:]|]=iz^$.-w.g v]%K&9>c*u_jS,$*h[. [ 93.287125][ T5903] [U] z,Vă>b'Z6quiIְ<#əV6M"gv;e'UO;;&Fqs h [ 93.415909][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.433317][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.473846][ T5832] Bluetooth: hci1: command tx timeout [ 93.479358][ T5832] Bluetooth: hci0: command tx timeout [ 93.481560][ T54] Bluetooth: hci2: command tx timeout [ 93.527639][ T5903] [U] |z1,n~~vDjFޢN=ݷ kXΌ'JEMk..0z]m&$4DC}&&KtDK N^kra162EZXYDu}֯Շă7 }7 5*[})DI%OMh1'E,26"cA),q B(߬\pBFa`AYt =Q>N_$#+7iL5HAkVipIow [ 93.558267][ T5903] [U] GϢ [ 93.562317][ T5903] [U] 0Yo^:<4xlf\"+Uwt`~p<#}ȵUS{bNjAqeٱc bt`blx{HX,L)!hQxΧ%h"1fΆo64)ŐzbtT T2º9(|4E3(He#Ye?.?J?([ [ 93.583287][ T5903] [U] gַ%0> ^hS´Z=S1 wZB6CNP `IOn<mL7,[`B9QyZ:gž9SNٝT \MS2ŰzP2 OèP_Ύ\,uM2Y [ 93.604354][ T5903] [U] CޥCW^ [ 93.606934][ T5832] Bluetooth: hci3: command tx timeout [ 93.609777][ T5903] [U] .8LsXɁg'Aץ 3[^.F8::]GYop1I [ 95.555494][ T5832] Bluetooth: hci2: command tx timeout [ 95.555504][ T5837] Bluetooth: hci1: command tx timeout [ 95.563824][ T5837] Bluetooth: hci0: command tx timeout [ 95.632060][ T5837] Bluetooth: hci3: command tx timeout [ 97.121758][ T5950] mmap: syz.0.8 (5950) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.267784][ T5952] queue_state_write: unsupported operation '' [ 97.295628][ T5952] queue_state_write: use 'run', 'start' or 'kick' [ 97.409854][ T9] cfg80211: failed to load regulatory.db [ 97.626234][ T5959] process 'syz.2.13' launched ':,' with NULL argv: empty string added [ 98.291152][ T5969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16'. [ 101.646078][ T6018] mkiss: ax0: crc mode is auto. [ 102.539176][ T6024] Zero length message leads to an empty skb [ 103.231681][ T6037] Process accounting resumed [ 103.671383][ T29] audit: type=1800 audit(1737123769.679:2): pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="features" dev="configfs" ino=8040 res=0 errno=0 [ 105.752472][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'. [ 106.216128][ T6059] syz.1.36 (6059) used greatest stack depth: 21344 bytes left [ 108.262356][ T6082] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.587221][ T6100] FAULT_INJECTION: forcing a failure. [ 109.587221][ T6100] name failslab, interval 1, probability 0, space 0, times 1 [ 109.631554][ T6100] CPU: 0 UID: 0 PID: 6100 Comm: syz.0.47 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 109.642209][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 109.652333][ T6100] Call Trace: [ 109.655654][ T6100] [ 109.658625][ T6100] dump_stack_lvl+0x16c/0x1f0 [ 109.663395][ T6100] should_fail_ex+0x497/0x5b0 [ 109.668172][ T6100] ? fs_reclaim_acquire+0xae/0x150 [ 109.673351][ T6100] should_failslab+0xc2/0x120 [ 109.678107][ T6100] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 109.683907][ T6100] ? sock_alloc_inode+0x25/0x1c0 [ 109.688918][ T6100] ? __pfx_sock_alloc_inode+0x10/0x10 [ 109.694350][ T6100] sock_alloc_inode+0x25/0x1c0 [ 109.699181][ T6100] alloc_inode+0x5d/0x230 [ 109.703597][ T6100] sock_alloc+0x40/0x280 [ 109.707900][ T6100] __sock_create+0xc1/0x8d0 [ 109.712473][ T6100] __sys_socket+0x14f/0x260 [ 109.717040][ T6100] ? __pfx___sys_socket+0x10/0x10 [ 109.722129][ T6100] ? syscall_user_dispatch+0x77/0x140 [ 109.727571][ T6100] __x64_sys_socket+0x72/0xb0 [ 109.732332][ T6100] do_syscall_64+0xcd/0x250 [ 109.736915][ T6100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.742888][ T6100] RIP: 0033:0x7f053cb85d29 [ 109.747366][ T6100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.767043][ T6100] RSP: 002b:00007f053d9c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 109.775528][ T6100] RAX: ffffffffffffffda RBX: 00007f053cd76080 RCX: 00007f053cb85d29 [ 109.783560][ T6100] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000002 [ 109.791588][ T6100] RBP: 00007f053cc01b08 R08: 0000000000000000 R09: 0000000000000000 [ 109.799620][ T6100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.807642][ T6100] R13: 0000000000000000 R14: 00007f053cd76080 R15: 00007ffedcc9a838 [ 109.815688][ T6100] [ 109.818791][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.892242][ T6100] socket: no more sockets [ 112.977631][ T6133] netlink: 326 bytes leftover after parsing attributes in process `syz.2.56'. [ 113.437514][ T6142] netlink: 326 bytes leftover after parsing attributes in process `syz.2.58'. [ 114.012863][ T6154] sg_write: data in/out 32732/16086 bytes for SCSI command 0x0-- guessing data in; [ 114.012863][ T6154] program syz.0.61 not setting count and/or reply_len properly [ 114.088452][ T29] audit: type=1326 audit(1737123780.099:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.2.62" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1329d85d29 code=0x0 [ 114.240051][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'. [ 115.033400][ T6164] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.744520][ T6169] HSR: entered promiscuous mode syzkaller syzkaller login: [ 118.184484][ T6202] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.243172][ T6229] vhci_hcd: invalid port number 121 [ 119.248604][ T6229] vhci_hcd: default hub control req: 7572 v7469 i0079 l115 [ 119.577581][ T6238] netlink: 326 bytes leftover after parsing attributes in process `syz.2.81'. [ 120.271597][ T6249] mtrr: base(0x400000) is not aligned on a size(0x0000) boundary [ 120.691511][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 123.699602][ T6321] kAFS: bad VL server IP address [ 126.288953][ T29] audit: type=1800 audit(1737123792.289:4): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.100" name="dbroot" dev="configfs" ino=8801 res=0 errno=0 [ 126.374309][ T6371] db_root: cannot open: [ 126.432072][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 132.309159][ T6439] netlink: 342 bytes leftover after parsing attributes in process `syz.2.117'. [ 132.990991][ T6449] Process accounting resumed [ 134.512140][ T6457] netlink: 342 bytes leftover after parsing attributes in process `syz.2.121'. [ 134.981649][ T6468] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 138.035843][ T6500] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 138.355091][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.365385][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.391583][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 140.109027][ T6521] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 140.508404][ T6525] netlink: 334 bytes leftover after parsing attributes in process `syz.3.135'. [ 141.099747][ T6539] Process accounting resumed [ 142.045599][ T6534] syz.0.140 (6534) used greatest stack depth: 20592 bytes left [ 143.399694][ T6557] netlink: 342 bytes leftover after parsing attributes in process `syz.1.143'. [ 146.088063][ T6586] netlink: 342 bytes leftover after parsing attributes in process `syz.2.152'. [ 146.193331][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 147.710887][ T6606] Process accounting resumed [ 148.595688][ T6614] Process accounting resumed [ 149.421820][ T6619] netlink: 342 bytes leftover after parsing attributes in process `syz.3.164'. [ 150.420830][ T6639] netlink: 326 bytes leftover after parsing attributes in process `syz.2.169'. [ 152.501335][ T6671] netlink: 326 bytes leftover after parsing attributes in process `syz.3.185'. [ 152.591404][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 152.991675][ T6683] Process accounting resumed [ 153.070859][ T6687] netlink: 326 bytes leftover after parsing attributes in process `syz.3.179'. [ 155.188216][ T6712] Process accounting resumed [ 155.202622][ T6710] netlink: 326 bytes leftover after parsing attributes in process `syz.0.189'. [ 155.339193][ T6717] Process accounting resumed [ 155.892811][ T6722] netlink: 342 bytes leftover after parsing attributes in process `syz.2.193'. [ 156.647022][ T6741] Process accounting resumed [ 157.294788][ T6752] Process accounting resumed [ 158.101326][ T6761] Process accounting resumed [ 158.230555][ T6763] netlink: 342 bytes leftover after parsing attributes in process `syz.1.204'. [ 158.345650][ T6767] Process accounting resumed [ 158.393837][ T6314] syz.0.88 (6314) used greatest stack depth: 18752 bytes left [ 158.921069][ T6775] Process accounting resumed [ 159.152796][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 159.376316][ T6778] netlink: 326 bytes leftover after parsing attributes in process `syz.2.209'. [ 160.189308][ T6804] Process accounting resumed [ 160.763861][ T6317] syz.0.88 (6317) used greatest stack depth: 17944 bytes left [ 160.778501][ T6810] Process accounting resumed [ 160.791998][ T6811] Process accounting resumed [ 161.566654][ T6823] netlink: 342 bytes leftover after parsing attributes in process `syz.3.220'. [ 162.144068][ T6847] FAULT_INJECTION: forcing a failure. [ 162.144068][ T6847] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 162.191557][ T6847] CPU: 0 UID: 0 PID: 6847 Comm: syz.2.224 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 162.202237][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 162.212339][ T6847] Call Trace: [ 162.215658][ T6847] [ 162.218627][ T6847] dump_stack_lvl+0x16c/0x1f0 [ 162.223391][ T6847] should_fail_ex+0x497/0x5b0 [ 162.228155][ T6847] _copy_from_user+0x2e/0xd0 [ 162.232823][ T6847] ctl_ioctl+0xeb/0xde0 [ 162.237040][ T6847] ? do_vfs_ioctl+0x513/0x1950 [ 162.241851][ T6847] ? __pfx_ctl_ioctl+0x10/0x10 [ 162.246709][ T6847] ? __fget_files+0x206/0x3a0 [ 162.251454][ T6847] dm_ctl_ioctl+0x22/0x30 [ 162.255842][ T6847] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 162.260922][ T6847] __x64_sys_ioctl+0x190/0x200 [ 162.265737][ T6847] do_syscall_64+0xcd/0x250 [ 162.270305][ T6847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.276265][ T6847] RIP: 0033:0x7f1329d85d29 [ 162.280736][ T6847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.300397][ T6847] RSP: 002b:00007f132ac65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.308868][ T6847] RAX: ffffffffffffffda RBX: 00007f1329f75fa0 RCX: 00007f1329d85d29 [ 162.316881][ T6847] RDX: 00000000200001c0 RSI: fffffff7effffd05 RDI: 0000000000000003 [ 162.324896][ T6847] RBP: 00007f132ac65090 R08: 0000000000000000 R09: 0000000000000000 [ 162.332919][ T6847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.341015][ T6847] R13: 0000000000000000 R14: 00007f1329f75fa0 R15: 00007ffd144d6828 [ 162.349050][ T6847] [ 163.815183][ T6871] Process accounting resumed [ 164.127151][ T6875] netlink: 342 bytes leftover after parsing attributes in process `syz.0.232'. [ 164.323279][ T6883] netlink: 342 bytes leftover after parsing attributes in process `syz.1.234'. [ 164.402006][ T6888] netlink: 342 bytes leftover after parsing attributes in process `syz.2.236'. [ 166.392970][ T6924] netlink: 342 bytes leftover after parsing attributes in process `syz.3.246'. [ 166.782865][ T6932] netlink: 342 bytes leftover after parsing attributes in process `syz.0.249'. [ 167.513841][ T6943] ICMPv6: process `syz.3.251' is using deprecated sysctl (syscall) net.ipv6.neigh.erspan0.retrans_time - use net.ipv6.neigh.erspan0.retrans_time_ms instead [ 169.612556][ T6990] netlink: 342 bytes leftover after parsing attributes in process `syz.3.264'. [ 170.073240][ T6998] netlink: 342 bytes leftover after parsing attributes in process `syz.1.266'. [ 171.847659][ T7021] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 172.029875][ T7035] FAULT_INJECTION: forcing a failure. [ 172.029875][ T7035] name failslab, interval 1, probability 0, space 0, times 0 [ 172.106430][ T7035] CPU: 0 UID: 0 PID: 7035 Comm: syz.2.274 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 172.117101][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 172.127191][ T7035] Call Trace: [ 172.130493][ T7035] [ 172.133451][ T7035] dump_stack_lvl+0x16c/0x1f0 [ 172.138175][ T7035] should_fail_ex+0x497/0x5b0 [ 172.142890][ T7035] ? fs_reclaim_acquire+0xae/0x150 [ 172.148048][ T7035] should_failslab+0xc2/0x120 [ 172.152790][ T7035] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 172.158204][ T7035] ? vm_area_dup+0x53/0x300 [ 172.162751][ T7035] vm_area_dup+0x53/0x300 [ 172.167125][ T7035] __split_vma+0x181/0x1210 [ 172.171676][ T7035] ? __pfx___split_vma+0x10/0x10 [ 172.176669][ T7035] vms_gather_munmap_vmas+0x38b/0x1730 [ 172.182187][ T7035] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 172.188141][ T7035] ? mas_walk+0x6a6/0x910 [ 172.192521][ T7035] __mmap_region+0x32c/0x2760 [ 172.197249][ T7035] ? __pfx___mmap_region+0x10/0x10 [ 172.202407][ T7035] ? hlock_class+0x4e/0x130 [ 172.206943][ T7035] ? mark_lock+0xb5/0xc60 [ 172.211352][ T7035] ? hlock_class+0x4e/0x130 [ 172.215887][ T7035] ? __lock_acquire+0xcc5/0x3c40 [ 172.220901][ T7035] ? cap_mmap_addr+0x53/0x320 [ 172.225628][ T7035] mmap_region+0x127/0x320 [ 172.230085][ T7035] do_mmap+0xa09/0x1050 [ 172.234297][ T7035] vm_mmap_pgoff+0x1ba/0x360 [ 172.238957][ T7035] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 172.244148][ T7035] ? __fget_files+0x206/0x3a0 [ 172.248885][ T7035] ksys_mmap_pgoff+0x7d/0x5c0 [ 172.253597][ T7035] ? __pfx_ksys_write+0x10/0x10 [ 172.258484][ T7035] __x64_sys_mmap+0x125/0x190 [ 172.263210][ T7035] do_syscall_64+0xcd/0x250 [ 172.267778][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.273712][ T7035] RIP: 0033:0x7f1329d85d29 [ 172.278153][ T7035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.297809][ T7035] RSP: 002b:00007f132ac23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 172.306250][ T7035] RAX: ffffffffffffffda RBX: 00007f1329f76160 RCX: 00007f1329d85d29 [ 172.314274][ T7035] RDX: 00000000000000df RSI: 0000000000400009 RDI: 0000000000000000 [ 172.322271][ T7035] RBP: 00007f132ac23090 R08: 8000000000000003 R09: 0000000000008000 [ 172.330281][ T7035] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 172.338275][ T7035] R13: 0000000000000000 R14: 00007f1329f76160 R15: 00007ffd144d6828 [ 172.346294][ T7035] [ 172.849707][ T7037] netlink: 342 bytes leftover after parsing attributes in process `syz.1.278'. [ 173.173773][ T7048] Process accounting resumed [ 173.764969][ T7022] kexec: Could not allocate control_code_buffer [ 175.352791][ T7082] syz.1.290 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 175.585825][ T7090] binder: 7088:7090 ioctl 2284 ffffffffffffffff returned -22 [ 175.931745][ T7099] Process accounting resumed [ 177.786688][ T7140] Process accounting resumed [ 178.164159][ T7154] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 179.928718][ T7189] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 180.345287][ T7175] ICMPv6: process `syz.0.315' is using deprecated sysctl (syscall) net.ipv6.neigh.erspan0.retrans_time - use net.ipv6.neigh.erspan0.retrans_time_ms instead [ 180.350729][ T7195] netlink: 342 bytes leftover after parsing attributes in process `syz.3.317'. [ 180.721366][ T7202] Process accounting resumed [ 181.357309][ T7211] netlink: 338 bytes leftover after parsing attributes in process `syz.1.322'. [ 181.373185][ T7214] netlink: 338 bytes leftover after parsing attributes in process `syz.1.322'. [ 181.410126][ T7211] netlink: 210 bytes leftover after parsing attributes in process `syz.1.322'. [ 182.357960][ T7186] kexec: Could not allocate control_code_buffer [ 182.638352][ T7225] binder: 7224:7225 ioctl 2284 ffffffffffffffff returned -22 [ 183.127152][ T7236] netlink: 342 bytes leftover after parsing attributes in process `syz.1.331'. [ 184.164547][ T7255] netlink: 338 bytes leftover after parsing attributes in process `syz.0.336'. [ 184.186697][ T7255] netlink: 338 bytes leftover after parsing attributes in process `syz.0.336'. [ 184.204139][ T7255] netlink: 210 bytes leftover after parsing attributes in process `syz.0.336'. [ 184.972700][ T7266] binder: 7265:7266 ioctl 2284 ffffffffffffffff returned -22 [ 186.305792][ T7295] Process accounting resumed [ 186.643114][ T7299] netlink: 338 bytes leftover after parsing attributes in process `syz.2.351'. [ 186.694571][ T7299] netlink: 338 bytes leftover after parsing attributes in process `syz.2.351'. [ 186.744024][ T7299] netlink: 210 bytes leftover after parsing attributes in process `syz.2.351'. [ 187.232938][ T7308] Process accounting resumed [ 189.147045][ T7333] binder: 7332:7333 ioctl 4018620d 9 returned -22 [ 189.217467][ T7336] netlink: 342 bytes leftover after parsing attributes in process `syz.0.370'. [ 189.471978][ T7341] Process accounting resumed [ 189.941852][ T7354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.368'. [ 190.005409][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.041727][ T7354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.064290][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.081502][ T7354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.083863][ T7351] FAULT_INJECTION: forcing a failure. [ 190.083863][ T7351] name failslab, interval 1, probability 0, space 0, times 0 [ 190.131583][ T7351] CPU: 0 UID: 0 PID: 7351 Comm: syz.1.366 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 190.142268][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 190.152414][ T7351] Call Trace: [ 190.155761][ T7351] [ 190.158744][ T7351] dump_stack_lvl+0x16c/0x1f0 [ 190.163496][ T7351] should_fail_ex+0x497/0x5b0 [ 190.168232][ T7351] ? fs_reclaim_acquire+0xae/0x150 [ 190.173403][ T7351] should_failslab+0xc2/0x120 [ 190.178147][ T7351] __kmalloc_noprof+0xce/0x4f0 [ 190.182970][ T7351] ? __pfx_tracing_update_buffers+0x10/0x10 [ 190.188936][ T7351] ? trace_parser_get_init+0x30/0xc0 [ 190.194290][ T7351] trace_parser_get_init+0x30/0xc0 [ 190.199466][ T7351] ftrace_event_write+0x179/0x290 [ 190.204556][ T7351] ? __pfx_ftrace_event_write+0x10/0x10 [ 190.210169][ T7351] ? ksys_write+0x12b/0x250 [ 190.214747][ T7351] ? __pfx_ftrace_event_write+0x10/0x10 [ 190.220362][ T7351] vfs_write+0x24c/0x1150 [ 190.224755][ T7351] ? __fget_files+0x1fc/0x3a0 [ 190.229505][ T7351] ? __pfx___mutex_lock+0x10/0x10 [ 190.234604][ T7351] ? __pfx_vfs_write+0x10/0x10 [ 190.239439][ T7351] ? __fget_files+0x206/0x3a0 [ 190.244189][ T7351] ksys_write+0x12b/0x250 [ 190.248573][ T7351] ? __pfx_ksys_write+0x10/0x10 [ 190.253490][ T7351] do_syscall_64+0xcd/0x250 [ 190.258065][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.264027][ T7351] RIP: 0033:0x7f60fd185d29 [ 190.268485][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.288153][ T7351] RSP: 002b:00007f60faff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.296663][ T7351] RAX: ffffffffffffffda RBX: 00007f60fd376080 RCX: 00007f60fd185d29 [ 190.304689][ T7351] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000009 [ 190.312717][ T7351] RBP: 00007f60faff6090 R08: 0000000000000000 R09: 0000000000000000 [ 190.320767][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.328792][ T7351] R13: 0000000000000000 R14: 00007f60fd376080 R15: 00007fff15bf3d38 [ 190.336833][ T7351] [ 191.375085][ T7373] binder: 7372:7373 ioctl 4018620d 9 returned -22 [ 191.587801][ T7375] Process accounting resumed [ 191.685175][ T7377] netlink: 342 bytes leftover after parsing attributes in process `syz.2.377'. [ 192.138283][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.144881][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.099794][ T7408] Process accounting resumed [ 193.650290][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.388'. [ 193.684750][ T7415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.756974][ T7415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.799096][ T7415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.809068][ T7415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.865170][ T7420] Process accounting resumed [ 194.052226][ T7425] netlink: 86 bytes leftover after parsing attributes in process `syz.1.392'. [ 194.217467][ T7428] Process accounting resumed [ 194.638337][ T7439] Process accounting resumed [ 195.496227][ T7455] Process accounting resumed [ 195.866573][ T7463] Process accounting resumed [ 196.406983][ T7473] Process accounting resumed [ 196.834114][ T7482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 196.883911][ T7482] lo: entered promiscuous mode [ 196.902295][ T7482] lo: entered allmulticast mode [ 197.409767][ T7494] netlink: 86 bytes leftover after parsing attributes in process `syz.3.417'. [ 197.471949][ T7499] netlink: 86 bytes leftover after parsing attributes in process `syz.1.419'. [ 199.809144][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.815699][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.112601][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.119025][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.154584][ T7539] netlink: 342 bytes leftover after parsing attributes in process `syz.3.430'. [ 202.605316][ T7583] Process accounting resumed [ 204.790838][ T7656] netlink: 342 bytes leftover after parsing attributes in process `syz.3.453'. [ 204.903067][ T7660] netlink: 342 bytes leftover after parsing attributes in process `syz.0.454'. [ 205.110723][ T7665] Process accounting resumed [ 206.084668][ T7690] Process accounting resumed [ 208.757463][ T7743] Process accounting resumed [ 210.334842][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.342824][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.077193][ T7797] netlink: 342 bytes leftover after parsing attributes in process `syz.2.491'. [ 211.097995][ T7797] netlink: 342 bytes leftover after parsing attributes in process `syz.2.491'. [ 211.569044][ T7821] Process accounting resumed [ 211.761765][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.768167][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.099863][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.106382][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.120797][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 212.122001][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 212.129206][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 212.139076][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 212.807117][ T7852] netlink: 342 bytes leftover after parsing attributes in process `syz.1.507'. [ 213.537580][ T7865] Process accounting resumed [ 213.571823][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.578616][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 214.133895][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.515'. [ 214.231468][ T7873] lo: entered promiscuous mode [ 214.239457][ T7873] lo: entered allmulticast mode [ 216.851741][ T7914] Process accounting resumed [ 216.927732][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.934369][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.164101][ T7918] FAULT_INJECTION: forcing a failure. [ 217.164101][ T7918] name failslab, interval 1, probability 0, space 0, times 0 [ 217.331442][ T7918] CPU: 1 UID: 0 PID: 7918 Comm: syz.3.527 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 217.342128][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 217.352231][ T7918] Call Trace: [ 217.355555][ T7918] [ 217.358540][ T7918] dump_stack_lvl+0x16c/0x1f0 [ 217.363296][ T7918] should_fail_ex+0x497/0x5b0 [ 217.368045][ T7918] ? fs_reclaim_acquire+0xae/0x150 [ 217.373221][ T7918] should_failslab+0xc2/0x120 [ 217.377970][ T7918] __kmalloc_cache_node_noprof+0x6f/0x3f0 [ 217.383760][ T7918] ? __pfx_stack_trace_save+0x10/0x10 [ 217.389195][ T7918] ? __get_vm_area_node+0x101/0x2f0 [ 217.394466][ T7918] __get_vm_area_node+0x101/0x2f0 [ 217.399572][ T7918] ? save_trace+0x42/0xa10 [ 217.404072][ T7918] __vmalloc_node_range_noprof+0x26a/0x1530 [ 217.410213][ T7918] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 217.415835][ T7918] ? lockdep_unlock+0x11a/0x290 [ 217.420752][ T7918] ? __lock_acquire+0x2077/0x3c40 [ 217.425865][ T7918] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 217.431484][ T7918] ? hlock_class+0x4e/0x130 [ 217.436059][ T7918] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.442454][ T7918] ? rcu_is_watching+0x12/0xc0 [ 217.447297][ T7918] ? lock_acquire.part.0+0x11b/0x380 [ 217.452648][ T7918] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 217.458309][ T7918] __vmalloc_noprof+0x6d/0x90 [ 217.463059][ T7918] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 217.468689][ T7918] bpf_prog_alloc_no_stats+0x54/0x630 [ 217.474135][ T7918] ? __tun_chr_ioctl+0x101a/0x4960 [ 217.479300][ T7918] bpf_prog_alloc+0x3b/0x230 [ 217.483957][ T7918] __get_filter+0x112/0x2b0 [ 217.488526][ T7918] sk_attach_filter+0x1e/0x180 [ 217.493362][ T7918] __tun_chr_ioctl+0x103d/0x4960 [ 217.498367][ T7918] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 217.503728][ T7918] ? __fget_files+0x206/0x3a0 [ 217.508542][ T7918] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 217.513709][ T7918] __x64_sys_ioctl+0x190/0x200 [ 217.518515][ T7918] do_syscall_64+0xcd/0x250 [ 217.523078][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.529021][ T7918] RIP: 0033:0x7f1a4e585d29 [ 217.533479][ T7918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.553126][ T7918] RSP: 002b:00007f1a4f45d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.561583][ T7918] RAX: ffffffffffffffda RBX: 00007f1a4e775fa0 RCX: 00007f1a4e585d29 [ 217.569584][ T7918] RDX: 000000000000000e RSI: 00000000401054d5 RDI: 00000000000000c8 [ 217.577669][ T7918] RBP: 00007f1a4f45d090 R08: 0000000000000000 R09: 0000000000000000 [ 217.585684][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.593686][ T7918] R13: 0000000000000000 R14: 00007f1a4e775fa0 R15: 00007fff63ba2478 [ 217.601709][ T7918] [ 217.604883][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.657239][ T7918] syz.3.527: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.703420][ T7918] CPU: 0 UID: 0 PID: 7918 Comm: syz.3.527 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 217.714103][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 217.724190][ T7918] Call Trace: [ 217.727500][ T7918] [ 217.730454][ T7918] dump_stack_lvl+0x16c/0x1f0 [ 217.735198][ T7918] warn_alloc+0x24d/0x3a0 [ 217.739574][ T7918] ? __pfx_warn_alloc+0x10/0x10 [ 217.744473][ T7918] ? rcu_is_watching+0x12/0xc0 [ 217.749282][ T7918] ? __kmalloc_cache_node_noprof+0x245/0x3f0 [ 217.755348][ T7918] ? __kasan_kmalloc+0x8a/0xb0 [ 217.760153][ T7918] ? __get_vm_area_node+0x1dc/0x2f0 [ 217.765399][ T7918] __vmalloc_node_range_noprof+0xd27/0x1530 [ 217.771337][ T7918] ? lockdep_unlock+0x11a/0x290 [ 217.776232][ T7918] ? __lock_acquire+0x2077/0x3c40 [ 217.781294][ T7918] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 217.786933][ T7918] ? hlock_class+0x4e/0x130 [ 217.791479][ T7918] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.797846][ T7918] ? rcu_is_watching+0x12/0xc0 [ 217.802662][ T7918] ? lock_acquire.part.0+0x11b/0x380 [ 217.807982][ T7918] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 217.813571][ T7918] __vmalloc_noprof+0x6d/0x90 [ 217.818291][ T7918] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 217.823891][ T7918] bpf_prog_alloc_no_stats+0x54/0x630 [ 217.829308][ T7918] ? __tun_chr_ioctl+0x101a/0x4960 [ 217.834471][ T7918] bpf_prog_alloc+0x3b/0x230 [ 217.839104][ T7918] __get_filter+0x112/0x2b0 [ 217.843658][ T7918] sk_attach_filter+0x1e/0x180 [ 217.848477][ T7918] __tun_chr_ioctl+0x103d/0x4960 [ 217.853461][ T7918] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 217.858796][ T7918] ? __fget_files+0x206/0x3a0 [ 217.863531][ T7918] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 217.868685][ T7918] __x64_sys_ioctl+0x190/0x200 [ 217.873485][ T7918] do_syscall_64+0xcd/0x250 [ 217.878064][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.884099][ T7918] RIP: 0033:0x7f1a4e585d29 [ 217.888549][ T7918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.908202][ T7918] RSP: 002b:00007f1a4f45d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.916655][ T7918] RAX: ffffffffffffffda RBX: 00007f1a4e775fa0 RCX: 00007f1a4e585d29 [ 217.924669][ T7918] RDX: 000000000000000e RSI: 00000000401054d5 RDI: 00000000000000c8 [ 217.932673][ T7918] RBP: 00007f1a4f45d090 R08: 0000000000000000 R09: 0000000000000000 [ 217.940672][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.948670][ T7918] R13: 0000000000000000 R14: 00007f1a4e775fa0 R15: 00007fff63ba2478 [ 217.956693][ T7918] [ 217.971477][ T7918] Mem-Info: [ 217.974754][ T7918] active_anon:5165 inactive_anon:1 isolated_anon:0 [ 217.974754][ T7918] active_file:17025 inactive_file:40512 isolated_file:0 [ 217.974754][ T7918] unevictable:768 dirty:521 writeback:0 [ 217.974754][ T7918] slab_reclaimable:10070 slab_unreclaimable:95729 [ 217.974754][ T7918] mapped:24116 shmem:1433 pagetables:661 [ 217.974754][ T7918] sec_pagetables:0 bounce:0 [ 217.974754][ T7918] kernel_misc_reclaimable:0 [ 217.974754][ T7918] free:1335565 free_pcp:4031 free_cma:0 [ 218.019934][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.049726][ T7918] Node 0 active_anon:20760kB inactive_anon:4kB active_file:68100kB inactive_file:161976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96664kB dirty:2084kB writeback:0kB shmem:4196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10660kB pagetables:2644kB sec_pagetables:0kB all_unreclaimable? no [ 218.082676][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.237796][ T7918] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 218.268031][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.394915][ T7924] svc: failed to register nfsdv3 RPC service (errno 111). [ 218.426414][ T7924] svc: failed to register nfsaclv3 RPC service (errno 111). [ 218.445818][ T7918] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.568608][ T7918] lowmem_reserve[]: 0 2465 2466 0 0 [ 218.577476][ T7918] Node 0 DMA32 free:1432644kB boost:0kB min:34420kB low:43024kB high:51628kB reserved_highatomic:0KB active_anon:20944kB inactive_anon:4kB active_file:68052kB inactive_file:161196kB unevictable:1536kB writepending:2220kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:1636kB local_pcp:1052kB free_cma:0kB [ 218.608839][ T7918] lowmem_reserve[]: 0 0 0 0 0 [ 218.613724][ T7918] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 218.641372][ T7918] lowmem_reserve[]: 0 0 0 0 0 [ 218.646203][ T7918] Node 1 Normal free:3892268kB boost:0kB min:55468kB low:69332kB high:83196kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14388kB local_pcp:5744kB free_cma:0kB [ 218.676391][ T7918] lowmem_reserve[]: 0 0 0 0 0 [ 218.681211][ T7918] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 218.694850][ T7918] Node 0 DMA32: 1089*4kB (UME) 1562*8kB (UME) 1394*16kB (UME) 1069*32kB (UME) 1006*64kB (UME) 424*128kB (UME) 260*256kB (UM) 137*512kB (UME) 66*1024kB (UME) 38*2048kB (UME) 234*4096kB (UM) = 1432596kB [ 218.714916][ T7918] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 218.727458][ T7918] Node 1 Normal: 252*4kB (UM) 60*8kB (UME) 27*16kB (UME) 207*32kB (UME) 88*64kB (UME) 32*128kB (UME) 19*256kB (UME) 9*512kB (UE) 6*1024kB (UE) 6*2048kB (UE) 939*4096kB (M) = 3892320kB [ 218.746114][ T7918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.755805][ T7918] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.765200][ T7918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.774879][ T7918] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.784375][ T7918] 58978 total pagecache pages [ 218.789300][ T7918] 1 pages in swap cache [ 218.793595][ T7918] Free swap = 124436kB [ 218.797777][ T7918] Total swap = 124996kB [ 218.802050][ T7918] 2097051 pages RAM [ 218.805891][ T7918] 0 pages HighMem/MovableOnly [ 218.810598][ T7918] 427367 pages reserved [ 218.814845][ T7918] 0 pages cma reserved [ 219.021582][ T7938] netlink: 86 bytes leftover after parsing attributes in process `syz.2.535'. [ 219.152265][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.158916][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.551971][ T7946] ======================================================= [ 219.551971][ T7946] WARNING: The mand mount option has been deprecated and [ 219.551971][ T7946] and is ignored by this kernel. Remove the mand [ 219.551971][ T7946] option from the mount to silence this warning. [ 219.551971][ T7946] ======================================================= [ 219.586924][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.609242][ T7950] binder: 7949:7950 ioctl 4018620d 9 returned -22 [ 220.249324][ T7965] Process accounting resumed [ 221.086441][ T7971] netlink: 86 bytes leftover after parsing attributes in process `syz.3.547'. [ 221.752508][ T7987] Process accounting resumed [ 221.843526][ T7980] svc: failed to register nfsdv3 RPC service (errno 111). [ 221.871862][ T7980] svc: failed to register nfsaclv3 RPC service (errno 111). [ 223.225328][ T8011] mtrr: base(0x400000) is not aligned on a size(0x0000) boundary [ 223.272597][ T8012] netlink: 326 bytes leftover after parsing attributes in process `syz.3.559'. [ 223.407158][ T8015] netlink: 326 bytes leftover after parsing attributes in process `syz.0.561'. [ 223.507012][ T8003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.557'. [ 226.512199][ T29] audit: type=1800 audit(1737123916.539:5): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.572" name="dbroot" dev="configfs" ino=15823 res=0 errno=0 [ 226.659988][ T8081] db_root: cannot open: [ 228.532923][ T8104] HSR: entered promiscuous mode [ 229.242429][ T29] audit: type=1326 audit(1737123919.269:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8115 comm="syz.0.583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f053cb85d29 code=0x0 [ 232.711677][ T8144] Process accounting resumed [ 234.124630][ T8151] HSR: entered promiscuous mode [ 234.407928][ T29] audit: type=1326 audit(1737123924.419:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.1.594" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60fd185d29 code=0x0 [ 237.498800][ T8199] Process accounting resumed [ 238.258697][ T8202] Process accounting resumed [ 238.773037][ T8213] Process accounting resumed [ 239.365568][ T8222] vhci_hcd: invalid port number 121 [ 239.393540][ T8222] vhci_hcd: default hub control req: 7572 v7469 i0079 l115 [ 240.725756][ T8253] Process accounting resumed [ 241.418386][ T8261] Process accounting resumed [ 241.640603][ T29] audit: type=1800 audit(1737123931.659:8): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.624" name="dbroot" dev="configfs" ino=16564 res=0 errno=0 [ 241.651481][ T8266] db_root: cannot open: [ 241.692196][ T8266] [ 241.694594][ T8266] ============================================ [ 241.700775][ T8266] WARNING: possible recursive locking detected [ 241.706962][ T8266] 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 Not tainted [ 241.714107][ T8266] -------------------------------------------- [ 241.720286][ T8266] syz.0.624/8266 is trying to acquire lock: [ 241.726211][ T8266] ffff888026c78678 (&p->frag_sem){.+.+}-{4:4}, at: __configfs_open_file+0xe8/0x9c0 [ 241.735624][ T8266] [ 241.735624][ T8266] but task is already holding lock: [ 241.743024][ T8266] ffff888026c78678 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x216/0x4b0 [ 241.752425][ T8266] [ 241.752425][ T8266] other info that might help us debug this: [ 241.760516][ T8266] Possible unsafe locking scenario: [ 241.760516][ T8266] [ 241.767990][ T8266] CPU0 [ 241.771281][ T8266] ---- [ 241.774579][ T8266] lock(&p->frag_sem); [ 241.778777][ T8266] lock(&p->frag_sem); [ 241.782958][ T8266] [ 241.782958][ T8266] *** DEADLOCK *** [ 241.782958][ T8266] [ 241.791128][ T8266] May be due to missing lock nesting notation [ 241.791128][ T8266] [ 241.799488][ T8266] 5 locks held by syz.0.624/8266: [ 241.804562][ T8266] #0: ffff88807e6f1eb8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 241.813706][ T8266] #1: ffff88801cba4420 (sb_writers#18){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 241.822862][ T8266] #2: ffff8880245f8088 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x75/0x4b0 [ 241.832977][ T8266] #3: ffff888026c78678 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x216/0x4b0 [ 241.842834][ T8266] #4: ffffffff8ee09108 (target_devices_lock){+.+.}-{4:4}, at: target_core_item_dbroot_store+0x23/0x2e0 [ 241.854083][ T8266] [ 241.854083][ T8266] stack backtrace: [ 241.860013][ T8266] CPU: 0 UID: 0 PID: 8266 Comm: syz.0.624 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 241.870648][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 241.880839][ T8266] Call Trace: [ 241.884167][ T8266] [ 241.887171][ T8266] dump_stack_lvl+0x116/0x1f0 [ 241.891970][ T8266] print_deadlock_bug+0x2e3/0x410 [ 241.897066][ T8266] __lock_acquire+0x2117/0x3c40 [ 241.901975][ T8266] ? __pfx___lock_acquire+0x10/0x10 [ 241.907229][ T8266] ? path_openat+0x1e6a/0x2d60 [ 241.912134][ T8266] ? do_filp_open+0x20c/0x470 [ 241.916868][ T8266] ? file_open_name+0x2a4/0x450 [ 241.921762][ T8266] ? filp_open+0x4b/0x80 [ 241.926055][ T8266] ? target_core_item_dbroot_store+0x10d/0x2e0 [ 241.932347][ T8266] ? configfs_write_iter+0x2f6/0x4b0 [ 241.937671][ T8266] ? vfs_write+0x5ae/0x1150 [ 241.942195][ T8266] ? ksys_write+0x12b/0x250 [ 241.946722][ T8266] lock_acquire.part.0+0x11b/0x380 [ 241.951849][ T8266] ? __configfs_open_file+0xe8/0x9c0 [ 241.957155][ T8266] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 241.962844][ T8266] ? rcu_is_watching+0x12/0xc0 [ 241.967666][ T8266] ? trace_lock_acquire+0x14e/0x1f0 [ 241.972937][ T8266] ? __configfs_open_file+0xe8/0x9c0 [ 241.978313][ T8266] ? lock_acquire+0x2f/0xb0 [ 241.983041][ T8266] ? __configfs_open_file+0xe8/0x9c0 [ 241.988373][ T8266] down_read+0x9a/0x330 [ 241.992563][ T8266] ? __configfs_open_file+0xe8/0x9c0 [ 241.997880][ T8266] ? __pfx_down_read+0x10/0x10 [ 242.002677][ T8266] __configfs_open_file+0xe8/0x9c0 [ 242.007813][ T8266] do_dentry_open+0xf59/0x1ea0 [ 242.012599][ T8266] ? __pfx_configfs_open_file+0x10/0x10 [ 242.018188][ T8266] ? inode_permission+0xdd/0x5f0 [ 242.023251][ T8266] vfs_open+0x82/0x3f0 [ 242.027382][ T8266] ? may_open+0x1f2/0x400 [ 242.031753][ T8266] path_openat+0x1e6a/0x2d60 [ 242.036402][ T8266] ? __pfx_path_openat+0x10/0x10 [ 242.041394][ T8266] ? kasan_save_stack+0x42/0x60 [ 242.046303][ T8266] ? kasan_save_stack+0x33/0x60 [ 242.051249][ T8266] ? kasan_save_track+0x14/0x30 [ 242.056157][ T8266] ? __kasan_slab_alloc+0x89/0x90 [ 242.061252][ T8266] do_filp_open+0x20c/0x470 [ 242.065805][ T8266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.071933][ T8266] ? __pfx_do_filp_open+0x10/0x10 [ 242.077040][ T8266] file_open_name+0x2a4/0x450 [ 242.081761][ T8266] ? __pfx_file_open_name+0x10/0x10 [ 242.087018][ T8266] ? kmem_cache_alloc_noprof+0x21b/0x3b0 [ 242.092681][ T8266] ? getname_kernel+0x52/0x370 [ 242.097566][ T8266] ? __pfx_target_core_item_dbroot_store+0x10/0x10 [ 242.104167][ T8266] filp_open+0x4b/0x80 [ 242.108279][ T8266] target_core_item_dbroot_store+0x10d/0x2e0 [ 242.114326][ T8266] configfs_write_iter+0x2f6/0x4b0 [ 242.119525][ T8266] vfs_write+0x5ae/0x1150 [ 242.123890][ T8266] ? __pfx_configfs_write_iter+0x10/0x10 [ 242.129563][ T8266] ? __pfx___mutex_lock+0x10/0x10 [ 242.134628][ T8266] ? __pfx_vfs_write+0x10/0x10 [ 242.139422][ T8266] ksys_write+0x12b/0x250 [ 242.143771][ T8266] ? __pfx_ksys_write+0x10/0x10 [ 242.148646][ T8266] do_syscall_64+0xcd/0x250 [ 242.153175][ T8266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.159145][ T8266] RIP: 0033:0x7f053cb85d29 [ 242.163598][ T8266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.183226][ T8266] RSP: 002b:00007f053d9e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.191874][ T8266] RAX: ffffffffffffffda RBX: 00007f053cd75fa0 RCX: 00007f053cb85d29 [ 242.199885][ T8266] RDX: 0000000000000b3c RSI: 0000000020000000 RDI: 0000000000000003 [ 242.207885][ T8266] RBP: 00007f053cc01b08 R08: 0000000000000000 R09: 0000000000000000 [ 242.215901][ T8266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.223885][ T8266] R13: 0000000000000000 R14: 00007f053cd75fa0 R15: 00007ffedcc9a838 [ 242.231878][ T8266] [ 242.234919][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.247584][ T8266] db_root: not a directory: /sys/kernel/config/target/dbroot [ 242.255554][ T29] audit: type=1804 audit(1737123932.269:9): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.624" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=16564 res=1 errno=0