last executing test programs: 7m24.406601756s ago: executing program 3 (id=157): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/004/001\x00', 0x2aa143, 0x0) socket(0xf, 0x3, 0x2) setreuid$auto(0x0, 0x2) socket(0xa, 0x5, 0x0) setsockopt$auto(0x4, 0x0, 0x8000000041, 0xfffffffffffffffc, 0x70) mmap$auto(0x0, 0x40009, 0xbf6, 0x9b72, 0x7, 0x28000) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x446000, 0x0) setfsgid$auto(0x9) ioctl$auto(0x3, 0x80085504, 0x1) 7m24.215902494s ago: executing program 3 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000001c0), r0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty4\x00', 0x4a140, 0x0) ioctl$auto_TIOCSBRK2(r1, 0x5427, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, r3, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x19}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r4 = socket(0xb, 0x2, 0x3) connect$auto(0x3, &(0x7f00000000c0), 0x55) readv$auto(0x1, &(0x7f0000000100)={&(0x7f0000000040), 0x3}, 0x9) writev$auto(0xca, &(0x7f0000000000)={&(0x7f00000000c0), 0x3}, 0x7e) r5 = socket(0x2, 0x2, 0x88) setsockopt$auto(r5, 0x0, 0x20, 0x0, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x22, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r4) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r5) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0xc0305616, 0x38) r6 = socket(0x29, 0x5, 0x0) sendmmsg$auto(r6, 0x0, 0x9a6, 0x3ec0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001080), r7) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f5f32f0fe76a", @ANYRES16=r8, @ANYBLOB="01002abd7000ffdbdf25030000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x50114) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/queues/tx-6/traffic_class\x00', 0xe0a00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r9, &(0x7f0000000480)=""/142, 0x8e) fstat$auto(r6, &(0x7f00000028c0)={0x8, 0x52f, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x800, 0x3, 0x7f, 0x67, 0xa, 0x3, 0xc00000000000000, 0xfffffffffffffff9, 0x8, 0x3ff}) 7m23.357008901s ago: executing program 3 (id=162): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.export/channel\x00', 0x48041, 0x0) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) madvise$auto(0x0, 0x20499d, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x108000, 0x800034, 0x9) bpf$auto(0xb, 0x0, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(r1, 0x0, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) close_range$auto(0x2, 0x8, 0x0) 7m20.061223701s ago: executing program 3 (id=172): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fddbdf251400000008000f000700000008d77e013eb6beddaef1ac58827573fb8d8075ae30f3e5b0407ef813b02777a2c4f81768a98d40a1c7fc95000000000000699469c534275de72e2845b4c01c304673b6026506bf2b7ca408c3f635f4c33968d6f041c96ac04690de4e5f996f26b823e291a5bf9ad59b443d38679599cd4321e222842bf3e54f647abde37cffb17dd69fbdffed47ef9f7889c1c3a77729ca418cf6d356402005ac83da533054d9ca8b7a4b0e62e4f84a3c6764eb2b2d555364006f86721787"], 0x24}, 0x1, 0x0, 0x0, 0x4008045}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x24000894}, 0x814) mmap$auto(0x0, 0x200004, 0xe9c, 0x40eb2, 0xd, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000af"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSACTIVE(r1, 0x40107446, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x44f4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x4000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mprotect$auto(0x1ffff000, 0x105, 0xd) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) write$auto(r2, 0x0, 0xeffd) 7m19.458017859s ago: executing program 3 (id=175): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x147602, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x8, 0x0, 0x4) setpriority$auto(0x2, 0x8, 0x8) write$auto(0x3, 0x0, 0xfffffdef) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) ioctl$auto(r0, 0x401870c8, 0x7) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) write$auto(0xffffffffffffffff, 0x0, 0x800) 7m18.134350185s ago: executing program 3 (id=181): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/io\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f00000051c0)=""/103, 0x67) open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x8500, 0x40) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdfdf2502000000080002000100000015541f1ba34dea751a0d3c5ac8c2a5e20367417efafe4b2cefc155159d2bbcaff96e9d156b0f44b6015822433146dce0ab03182332e326fca6f25f6d38fae5dbe21bc86c65f330a2b85240b71a904300427a16aa9bc743205e7ebf92ce4701a17025115d5b362fc0"], 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0xc0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r1 = geteuid() setreuid$auto(r1, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x17, &(0x7f0000000300)={0x7, 0x8cb, 0x14003, 0x2, r1, 0xffffffffffffffff, 0xfffd, 0xfff7, 0x1f9, 0x427, 0x8, 0x4, {0x5, 0x5}, {0x100, 0x7}, {0x7, 0x7ff}, {0xff, 0x8f00}, 0x7, 0xfffffffa, 0xa67, 0x80000000, 0x9, 0x80, 0x10000, 0x8001, 0x709, 0x1c000000, 0x9, 0x7773, [0x2, 0x40000, 0x2, 0x3, 0x5160, 0xfffffffffffffffc, 0x2, 0x9, 0xffffffffffeffffe]}) shmctl$auto(0x9, 0x92c00000, &(0x7f0000000240)={{0x2, 0x0, 0xee01, 0x9e5, 0x4, 0xfff, 0x7}, 0xb, 0x3, 0x10000000, 0x35, @inferred, @inferred, 0x2, 0x0, &(0x7f00000001c0), &(0x7f0000000200)}) r4 = getgid() shmctl$auto(0x0, 0x1, &(0x7f0000000380)={{0x5, r3, r4, 0xa9, 0x0, 0x52, 0x3}, 0x6e98e4ec, 0x2, 0x7fffffffffffffff, 0x1, @inferred, @inferred, 0x1d1b, 0x0, &(0x7f0000000300), &(0x7f0000000340)}) chown$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, r4) setfsgid$auto(r4) shmctl$auto(0x6, 0x4, &(0x7f00000001c0)={{0x7, 0xee00, 0x0, 0x7d, 0xe5a61ce, 0xb97, 0x1}, 0x5, 0x9, 0x8, 0x7fffffffffffffff, @inferred, @inferred, 0x362, 0x0, &(0x7f0000000000), &(0x7f0000000080)}) r6 = getegid() mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x4000050) keyctl$auto(0x4, 0xfffffffb, 0xffffffffffffffff, 0x0, 0xe) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') setresgid$auto(r4, r5, r6) keyctl$auto(0xca, r2, 0x0, r4, 0xffffffffffffff7c) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7m1.989372848s ago: executing program 32 (id=181): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/io\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f00000051c0)=""/103, 0x67) open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x8500, 0x40) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdfdf2502000000080002000100000015541f1ba34dea751a0d3c5ac8c2a5e20367417efafe4b2cefc155159d2bbcaff96e9d156b0f44b6015822433146dce0ab03182332e326fca6f25f6d38fae5dbe21bc86c65f330a2b85240b71a904300427a16aa9bc743205e7ebf92ce4701a17025115d5b362fc0"], 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0xc0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r1 = geteuid() setreuid$auto(r1, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x17, &(0x7f0000000300)={0x7, 0x8cb, 0x14003, 0x2, r1, 0xffffffffffffffff, 0xfffd, 0xfff7, 0x1f9, 0x427, 0x8, 0x4, {0x5, 0x5}, {0x100, 0x7}, {0x7, 0x7ff}, {0xff, 0x8f00}, 0x7, 0xfffffffa, 0xa67, 0x80000000, 0x9, 0x80, 0x10000, 0x8001, 0x709, 0x1c000000, 0x9, 0x7773, [0x2, 0x40000, 0x2, 0x3, 0x5160, 0xfffffffffffffffc, 0x2, 0x9, 0xffffffffffeffffe]}) shmctl$auto(0x9, 0x92c00000, &(0x7f0000000240)={{0x2, 0x0, 0xee01, 0x9e5, 0x4, 0xfff, 0x7}, 0xb, 0x3, 0x10000000, 0x35, @inferred, @inferred, 0x2, 0x0, &(0x7f00000001c0), &(0x7f0000000200)}) r4 = getgid() shmctl$auto(0x0, 0x1, &(0x7f0000000380)={{0x5, r3, r4, 0xa9, 0x0, 0x52, 0x3}, 0x6e98e4ec, 0x2, 0x7fffffffffffffff, 0x1, @inferred, @inferred, 0x1d1b, 0x0, &(0x7f0000000300), &(0x7f0000000340)}) chown$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, r4) setfsgid$auto(r4) shmctl$auto(0x6, 0x4, &(0x7f00000001c0)={{0x7, 0xee00, 0x0, 0x7d, 0xe5a61ce, 0xb97, 0x1}, 0x5, 0x9, 0x8, 0x7fffffffffffffff, @inferred, @inferred, 0x362, 0x0, &(0x7f0000000000), &(0x7f0000000080)}) r6 = getegid() mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x4000050) keyctl$auto(0x4, 0xfffffffb, 0xffffffffffffffff, 0x0, 0xe) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') setresgid$auto(r4, r5, r6) keyctl$auto(0xca, r2, 0x0, r4, 0xffffffffffffff7c) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 29.744153497s ago: executing program 0 (id=1755): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xd, 0x0, 0x4}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0xb1) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x10}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x200}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "e41074eec451d4f774c1c6d28410d08e94575153dabe2ebfecf14f337968088f"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0x101}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200400c5}, 0x4002841) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 29.328022998s ago: executing program 0 (id=1760): mmap$auto(0x0, 0x400008, 0xe1, 0x9b72, 0xffffffffffffffff, 0x80000001) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r0) mmap$auto(0x200000, 0x400008, 0xdf, 0xff, r0, 0x7ffd) r1 = getpid() bpf$auto(0x5, &(0x7f0000000140)=@task_fd_query={r1, r0, 0x6, 0x6, 0x101, 0xfffffffd, r0, 0xf8, 0x5}, 0x4) mmap$auto(0x0, 0x4000000008, 0xdf, 0x9b77, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0xa, 0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x1, 0x10000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x1c200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x8000, 0x2, 0xffffffffffffffff, @relative_id=0x13, 0x6}, 0xf) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4044) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e22}, 0x55) r4 = open(0x0, 0xc162, 0x0) ftruncate$auto(r4, 0xdaaf) 29.096195448s ago: executing program 0 (id=1763): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8c) socket(0x10, 0x2, 0x4) mmap$auto(0xf00000000000000, 0x2020009, 0xe2, 0xeb1, 0x8, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 28.895046672s ago: executing program 0 (id=1766): mmap$auto(0x0, 0x20009, 0xe1, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x4020006, 0x202, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) r0 = socket(0x2, 0x1, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x100) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffc}, 0x55) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x7) open_tree$auto(r1, 0x0, 0x1001) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x3b) io_uring_setup$auto(0x4, 0x0) 28.57587392s ago: executing program 0 (id=1769): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) socket(0xa, 0x801, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000002040)='/proc/kmsg\x00', 0x800, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) tkill$auto(0x1, 0x7) read$auto_dai_list_fops_(r1, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{@raw=0x9, 0x85, 0x20e, 0x9, "669cbbd9e97551b991bea188e0f1a57ce2a1facac1f00b2f4ab8635524133f9e22c7717f6050f2d2252ca5f2", @raw=0x8}, 0x0, @iec958={"31bee81a1537292d6d5cf10129461bcfe21944de67f2c7e2", "45805e24089c633fd962e093b796e736916cd56e8b2bb35e3c8f947e52f345a1832f06560b67fb3b43f9ac6cda5b59234d4f1ac1daa73642e017db1ec71d66d872484e2a198dc86694a7d8f8384d7756ad802f6499b1fc34778aafcfefebb863950c6eed81b14c2e00f36951fbcd5e61ab4cf1444ed57899112d9183f5c351b7f8f3f4c814582e3fbfab15956b11ea2f621365", 0x0, "d8eb943c"}, "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000001480)) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket(0x1e, 0x5, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r3, @ANYRES32], 0x18}}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10048884) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x36, 0x0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 27.836125024s ago: executing program 0 (id=1777): mmap$auto(0x0, 0x20009, 0xe1, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x4020006, 0x202, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) r0 = socket(0x2, 0x1, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x100) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffc}, 0x55) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x7) open_tree$auto(r1, 0x0, 0x1001) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x3b) 27.411558384s ago: executing program 33 (id=1777): mmap$auto(0x0, 0x20009, 0xe1, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x4020006, 0x202, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) r0 = socket(0x2, 0x1, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x100) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffc}, 0x55) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x7) open_tree$auto(r1, 0x0, 0x1001) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x3b) 5.966631054s ago: executing program 1 (id=1870): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) mount$auto(0x0, 0x0, &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xf, 0x2, 0x0) mlockall$auto(0x1) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) 3.954117191s ago: executing program 5 (id=1882): openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/13/spurious\x00', 0x80240, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu9\x00', 0x440000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x18, 0x5, 0x2) r2 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/features/extended_error\x00', 0x400, 0x0) read$auto_binder_features_fops_(r2, &(0x7f00000000c0)=""/116, 0x74) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x28240, 0x0) r4 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r3) sendmsg$auto_NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4d000080", @ANYRES16=r4, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x7}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044800}, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x401004, 0x4000df, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) set_mempolicy$auto(0x4006, 0x0, 0x7) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0) read$auto(r5, 0x0, 0x48) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f00000000c0), 0x55) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ba07000000dbdf252e0000001800018014000200697036677245d83b5a020000e9ffffff070002000c000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) mmap$auto(0x3, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x100) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(0x0, 0xeee00, 0x31) 3.656536556s ago: executing program 1 (id=1885): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000004c40)='/dev/cec22\x00', 0x200, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004c80)={"bbe97ab4", 0x1, 0xd7, 0x3, 0xffffb1e7, 0x8001, "523c0bf6aa439717ef4acd603db82d", "cbb3acb2", "43037964", "5539f1ce", ["7bd0ab432e9665db46e650df", "5c71844f339857759cb05b88", "1effb70bfc533d8d2564ea6b", "2df61f80dce6e1fa38d25a7f"]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x100, 0x0) recvfrom$auto(r1, &(0x7f0000000140)="cd9a564048b3013bea4a87657a4e74ce61c7186c8e1f9e0719a8279c316e75cfd3497caeca28da2e3bac7847957a69dd538abfd7deee9e9b8a0aa0941f6afe543c53dee652b313f04b63c5c15cf0b988cf", 0x8, 0x1, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff}, &(0x7f0000000200)=0x8) adjtimex$auto(&(0x7f0000000000)={0x418a, 0x0, 0x6, 0x3fc0000000000, 0x4, 0x8, 0x2, 0x0, 0x1ff, 0x6, 0x1, {0x3, 0x8000000000000001}, 0x23cb, 0x2, 0x0, 0x100, 0x0, 0x3, 0x7, 0x3, 0x0, 0xb4, 0x2}) r2 = socket(0x15, 0x5, 0x0) setsockopt$auto(r2, 0x114, 0x1d, 0x0, 0x4) 3.441859797s ago: executing program 1 (id=1887): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r1 = open_by_handle_at$auto(r0, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x4909b6fb, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x100, 0xa, 0x70624ce7, 0x0, 0x6, 0xb, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x804, 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x8000000000008, 0xfffffffffffffffc, 0x3, 0xa38, 0x4, 0x4000000000000, 0xfffffffffffffffc, 0x2, 0x3fffffffff, 0x0, 0x2, 0xffff]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = socket(0x2a, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r3) r6 = gettid() sendmsg$auto_NL802154_CMD_DISASSOCIATE(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\t\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000fcdbdf2529000000050007000700000005001f000800000008000b0090c18f1508001c00", @ANYRES32=r6, @ANYBLOB="08002100050000000800160005000000"], 0x44}}, 0x859) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x40d8) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SCAN_DONE_REASON={0x5}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xe4c}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040014}, 0x4000) 3.285409931s ago: executing program 4 (id=1889): madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x6, 0x0) pipe$auto(0x0) poll$auto(0x0, 0x80, 0x400400) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x7ffc) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) connect$auto(0x3, 0x0, 0x55) open(0x0, 0x80002, 0xd0) 3.236093921s ago: executing program 1 (id=1890): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xd, 0x0, 0x4}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0xb1) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x10}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x200}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "e41074eec451d4f774c1c6d28410d08e94575153dabe2ebfecf14f337968088f"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0x101}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200400c5}, 0x4002841) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 2.957327033s ago: executing program 1 (id=1891): syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf251600000283000180140002006e65746465767369ae00f903304aa0ede66d300000000000000500030004000000a19b04004000300b8b36efeba247d1abf1bfa0be219eabbbb4ac3031e041e7060fd9d730deab992dfcc7f55ebfd51f8b74b9530d3a97bae7a049d8c7ed0e07817e02dbc577bc980b703b329c445d8c93ebb643a8aa5ebac489ea5a9c"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) timer_create$auto(0x4, 0x0, 0x0) socket(0x2a, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8008, 0x0, 0x2) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xffffffffffffffff, 0x4020009, 0xde, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mq_open$auto(&(0x7f0000000000)='@^^.^\xa5+#\x00', 0x252d, 0xc2, &(0x7f0000000040)={0x2, 0x55da, 0x5, 0x5}) ioperm$auto(0x7, 0x6, 0x2) mseal$auto(0x0, 0x7dda, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8400) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) 2.954061606s ago: executing program 4 (id=1892): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xd, 0x0, 0x4}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, 0x0, 0x31cd3c7c, 0xb1) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xa6}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x9}, @IEEE802154_ATTR_DURATION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008051) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) 2.852923262s ago: executing program 2 (id=1894): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) socket(0x1d, 0x2, 0x6) bind$auto(0x3, &(0x7f00000000c0), 0xf) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x9, 0xeb1, r0, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x604001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0) socket(0x2, 0x2, 0x0) openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x2300, 0x0) readv$auto(0x5, &(0x7f0000001b40)={0x0, 0x1}, 0xb2) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r1, 0x0, 0x1) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0xfffffffffffff000, 0x2) mlock$auto(0x0, 0x5) 2.821379969s ago: executing program 5 (id=1895): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=0x0], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0xff010000, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) shmctl$auto(0x80000001, 0x3, &(0x7f0000000380)={{0x1, 0xee01, 0x0, 0x6, 0x7ff, 0x800, 0x5}, 0x4, 0x5, 0x9, 0x9, @raw=0x2d04, @inferred, 0x200, 0x0, 0x0, &(0x7f0000000280)="03f2cfb88d6f1dc22886096cf7ffa84a"}) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x7, 0xa, 0xd49, 0x2, r2, 0x0, 0x0, 0x8, 0x8001, 0x1, 0xf29, 0x9, 0xb, 0x8, 0x8000000000000001, 0x10000, 0x8}, 0x8) 2.54010198s ago: executing program 5 (id=1896): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x6, 0x0) pipe$auto(0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x8}, 0x80, 0x400400) setsockopt$auto(r0, 0x113, 0x1, 0x0, 0x81) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) connect$auto(0x3, 0x0, 0x55) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card2/midi1\x00', 0x8a400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000180)=""/210, 0xd2) setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567) socket(0xa, 0x3, 0x73) setsockopt$auto(0x400000000000003, 0x29, 0x40, 0x0, 0x40020000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd15\x00', 0x7dc040, 0x0) readv$auto(0xca, &(0x7f00000001c0)={0x0, 0x7f}, 0x12c) open(&(0x7f0000000000)='./file0\x00', 0x80002, 0xd0) geteuid() 2.359683884s ago: executing program 4 (id=1897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) stat$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x3, 0x2, 0xffff, 0x9, 0xee01, 0xee00, 0x0, 0x1, 0xfffffffffffffffe, 0x7, 0x10, 0x4800000, 0x40, 0x4, 0x7fffffff, 0x1, 0x7}) r4 = waitid$auto(0x950, 0xffffffffffffffff, &(0x7f0000000180)={@_si_pad}, 0x6, &(0x7f0000000200)={{0x0, 0x80000000}, {0xb95, 0x8d7}, 0x6, 0xffffffff, 0xfffffffffffffffb, 0x1678000000000000, 0xffffffffffffffff, 0x8, 0x0, 0x3, 0xc, 0x80000001, 0xffffffffffffffff, 0x7, 0x3f0, 0xffffffff}) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000001840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001800)={&(0x7f00000002c0)={0x153c, r1, 0x600, 0x70bd2b, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x5}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x9, 0x5, 0x6, 0x9, 0x8, 0x6, 0x4f, 0x3}}, @OVS_VPORT_ATTR_UPCALL_STATS={0x14c2, 0xa, 0x0, 0x1, [@generic="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", @typed={0x4, 0x49}, @nested={0xc0, 0x23, 0x0, 0x1, [@typed={0xba, 0x9, 0x0, 0x0, @binary="f395d07339cf313bc2ff35a876f5c51049c8bbc3797428fbf10d612dfa3686860ce73abecbe00e8b5178848e3367498ce2ec89250de75e84928da9ea952dba2e7db017bc86dcc0814678ea68616b57f80c71af782f5834aeeb076f0a849f8d6d2e0a55f69d73a4d9180c193b107f9d56230d0c90294fe9333bf3c824af0044157ae618dafbbbbb4741e3bc11bac74017b764707ce70585485e691ccf974eaa2c2b39bc84d0b39605502af00fd41242ef6385ae71b67d"}]}, @typed={0x8, 0x1, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x43, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x8, 0x57, 0x0, 0x0, @u32=0x3}, @generic="7d7dc7b5eb532a3df83272215738b720646352b2ad2a59692249dd4a5f186ac132b21c6561d44e3d87c8dbd143e9409e5466bf16aa2c54478afcda831a985c0413aaa594b5cc3cc9821d34147ce584ecf5019367e2103200a91c7d65cc23f1f0a863db48c6eccb6f9eaa23cbf212da5766a3db7e649e48fc70620353e32339ae35c9968ba6867abcf75601c6f4726ec4e88f23ea849740e1346eb04a8aad24585b9643f46c1de7d5caa3b94e2824a30ec7fc176794b5d125f20d724a2a14c188f98bdf246c73438467f16141b026d075317366b8c0e2100d671b3df9c0a2a3de10edccff7d5d59438e0778", @nested={0xff, 0x12a, 0x0, 0x1, [@generic="fa69a6a7bc8e6eda76357636cd22039b0a1ceb16ec429100613c191b3f400a1ed2c8a6acf188737a1f9a0cc8a8723aa232de0d57be88135bcf93df179ce75b5b25c186a6b251749216d8f5f27df3b837331422e76a791def91bd943bc170fab9799ad9baf03c66cb65e069f4d239083f725995acbe00d1dcf7186d60e7535af97af3a1c13f96ecf2637fdfecfd02f56c097df22ca2cc5774a2feed468ceb9bf4a20f30fc82afbaafa7a5a0ddb1c5af", @nested={0x4, 0x84}, @nested={0x4, 0x29}, @generic="b80cec79d7a534aba17e29c7826639436727c57cd3ad817c6b140b07aa9db30bef9a43772fff65458f8e4dc9f6f61d436575af7d018424f4", @nested={0x4, 0x136}, @typed={0x6, 0x57, 0x0, 0x0, @str='*\x00'}]}, @generic="414b8100112665b9779d83b81bc3e39b53019b4016518c4fe3a9aa4bb25884132414dc8eae40350cb1d24e563b5e8b6678b01c6f035b26bd5fb323b8ea9374fd9fe402e16d649a6c59737f8febadf3ececbc30f2a85ccb2eb892171e2ca22b884fa3f5c528c2038f147ece343591e1c255c5e4aa7f3440592396891852497f69e3000dc4ffd06b1e4892a313c8b41d12d723ade2079cb0b03b0d83ede4c65814c40bb6bb41ff9fe59dc02dc70e87e8bd32521a", @nested={0x142, 0xce, 0x0, 0x1, [@nested={0x4, 0xbe}, @nested={0x4, 0x29}, @typed={0x4, 0x5c}, @nested={0x4, 0x3}, @generic="5c499b3a83c9e798aa3e87031c54d919eab0693905a0383809eb59c01583fca7d08758d91f305e65c9282bffd84dc13de4f5627a1ce22607a4f6e78b8bafa478a8aeac071eabcecfe5eb59f40c1f6caadeddd25c", @nested={0x4, 0x5e}, @generic="d68574b2c099097fbc9298adb966237b663a813a8959cfd40a95a7617ed98491966e2b1ab68f90b7a348fc78361f124b194e15137dd0897d938bca6b86e1ee6228b28353130d822eb8eb9114ea48d20290192fe0bcf62338b1a971c9b78c1ef7b753fda880210801dc5ef492b088cf7910770133727f2edd9389db972ea475d39af1207fb8e7ec33b4097ab4b93824162be30b8be489b058d9bf8d2a27f1700fca19619cfa1678e6d5f0380dd07f508253466f42be3ddfe92982461c5c8024f3d061cb1d0ce6", @typed={0x5, 0xbb, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x5b, 0x0, 0x0, @pid=r4}]}]}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x7}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x31b}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x800}]}, 0x153c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000001) poll$auto(&(0x7f0000001880)={r0, 0x3, 0x4}, 0x9, 0xffff7fff) read$auto_fops_u16_(r5, &(0x7f00000018c0)=""/4096, 0x1000) r6 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000028c0), 0x408100, 0x0) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000002940), r5) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x54, r7, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x5000000}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x64}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0xfffffffa}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008804}, 0x40001) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000002a80)='/dev/loop5\x00', 0x202000, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sched_getaffinity$auto(r4, 0x5, &(0x7f0000002ac0)=0x9) r10 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000002b40), r5) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000002c40)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)={0x54, r10, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BLA_BACKBONE={0xa, 0x21, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @BATADV_ATTR_DAT_CACHE_HWADDRESS={0xa, 0x24, @random="3e6d5fac98d7"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TT_LAST_TTVN={0x5, 0x12, 0x7}, @BATADV_ATTR_BANDWIDTH_DOWN={0x8, 0x1c, 0x2e29}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c001}, 0x40) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002cc0), r5) sendmsg$auto_NL80211_CMD_GET_SCAN(r0, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x38, r11, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x20, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "4b9d85bd2d4ab464"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7f}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x24004014) r12 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000002e00), r0) r13 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000002e40), 0x503100, 0x0) r14 = openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/kernel/debug/netdevsim/netdevsim5/ports/0/udp_ports_reset\x00', 0x101400, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f0000003bc0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003b80)={&(0x7f0000002ec0)={0xc94, r12, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x443, 0x1, 0x0, 0x1, [@nested={0x8, 0xc5, 0x0, 0x1, [@typed={0x4, 0x103}]}, @nested={0xa9, 0x108, 0x0, 0x1, [@generic="eb2009a254224fff0ff09422d1be2cb8e876fe6c29c801b0c53a3c2573b2542ef2675f55ca661d6638d5ca20e47451b14ca245dc20888a313eca9aac9e65a22a2f020c80600ff18aee119602acb45c9957551127a76c", @nested={0x4, 0x10c}, @generic="67ef2bd60c9f43854634b73cc6651ee75aee6948ba870aef6fa5f71d009f093e3c05072b5483591db850c04e216b5f", @generic, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0x42}, @nested={0x4, 0x6c}]}, @typed={0x8, 0xf6, 0x0, 0x0, @fd=r9}, @generic="eaff4934b5af043e44a2066510b613ea746d0fdb9619d0880a0f9446025f9cbe5fd982477f520213841ce958c484c77e98f65c3ee922d9e1", @typed={0xc, 0x12b, 0x0, 0x0, @u64=0xc}, @generic="d7ae527640d411faa0a646074b37dabdc6ea755c4a806cb225b155f181805f0ae921d301c639ae9847f349d88180e008451c940dd25e72f82b7b7693b21169303a089281a73d042088b2fdd5ce53e6aed8075dc0a569b0e65560bd2da27ddf0fb0e24c236ff4ba388f1efecab7e3b680c2528ba717a9ad3de389f9bb7b6d", @nested={0x10b, 0x109, 0x0, 0x1, [@nested={0x4, 0x58}, @generic="2c19738f7de79cee07ee2f5d6de4acbb412c386ecce779179f", @generic="93b29155e6ce26bea792a4f4f196adae198459d40ad070b7c6ef6f265167a80c74ed3e673f4a21b4e496ab06e2bb61e629419784c18bc52ef81d338e1a2f36690cab44624719e892ed22b3f8e73d6386a6113e488d51f5515a5d093725f5ed727a791552541f78474d1b48e1d6dc80fb65e9b72167868b455236fe24c70c5171b0a0da191d24cea1ea486b28808fd09c67ee52398b46e8f797a53e9463d6a36d5f7b45d6d6306c7fde7d63f3348cbb79f8ebd11257b5532b3280", @typed={0x14, 0x106, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @typed={0x5, 0x13c, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x77}, @typed={0x8, 0x7b, 0x0, 0x0, @u32=0xb3d}, @typed={0x8, 0xc1, 0x0, 0x0, @uid=r2}]}, @generic="522e3067a8cf0d48cea137594d50a7cee448736f037109c67b3cc0bdff419f35e2eaa258d826d99f342552b6349a4404a227164f040bef09cdc408dd8d1861c79d7e4081af0c29fbae9d59ccdefb3d92c207a45598a1ab3e8b05a38664ed83622fb69118d62657761cdee097234991a4ae06de4765bb1a", @generic="d6382e39d0765b0ef07bcb0aec241876e65c806ade12bbf670ed7691f956e1ad52bfd6bc1ae7d0d113c6e5c89acef253a6ef5435527e09db04812302c617dea6cb7d5e47eb73326bb08de8008e9c4a17e5abd1d29d75a82c7dc49ee37757a642476d8ddbfe34a0848271b5bb3fa242ae49480bcd41ecc7e79917170dcec4b83eda6cef81d084f47055747689d25cece5a0fb1afa1c8db435b82923233c02828c8a14250c3dfd135c4633558aa8082c8030e1bc196eb9a8726789f5c72dc7cf91923663f0dc713d10f3fec81babe45b87", @generic="e3fe30ed5c25d226a3fec0a85cb6de25b2050e037ace94c5bff312e6977991c4cc2dcd84e49a28c3dd0912d70308212fa80b1c69dcfffb7af4d54a4388dd827d9181ea5eedfc122ec3f229879e1cf89bc9f830070d50cdf6adb7ee435328cbd428113a5f181f2f0ec69f764fedb8"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xd5, 0x1, 0x0, 0x1, [@nested={0x5c, 0x96, 0x0, 0x1, [@generic="78640f41d455f8f810811e6de77ed4fe0b5ee45ea0c3230332474dfa13a2c3b363b12ea12062ffd5a8efcc5ebba7351a1e25f740f219195dcfe18b6d639c5b1eb51cf4413980d58232cba32404a9a03a1daa1e900240e98f"]}, @typed={0x8, 0x68, 0x0, 0x0, @uid=r2}, @nested={0x18, 0xf1, 0x0, 0x1, [@nested={0x4, 0x118}, @nested={0x4, 0x94}, @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x2f5}]}, @generic="79d2640110b8273d734e9d7d3d3729b93dbc73acad44802c04076afda20e4c666b9adf581e689e6fac1f57bea0c6e16bfaf3d85cba37ac63e96ea1ec42f3e6da8cb9578b40f0f130f555653dbc552f85dcda371b4c"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x73, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x234, 0x1, 0x0, 0x1, [@generic="fc8828fb4dd27880cd4a8200b4e648c86f77e21f04aafb6b6c9c2ed244743d1c23e7bf3239e1faa209284e5ff1c669d611cf15ba0ab07b72d893534a0ec7decd07683e8789ca249ad3892cbe4ff9f0ef5fb35f2d9460d827fae6c1e88b1a75e0a99d28fa9b5a4e26e2b1a12ffe28334fbfca74b3d2c715354cdd0e861648e6f1df366e58ecf4dc0f6ccb95469daa3f5caed7b1ef7f881292411daa821fb0323a7c654ccfc9601d2d98e5e9be377ff420b24e592a66", @nested={0x64, 0x7e, 0x0, 0x1, [@generic="1d1767fd7dbf91adf9e75f34064128a862b4d2d96d779e59e7250f258b19f4d25e7715bf5d51b484e6548529dee31187cce4997280c2051726144dae1a457de4f50fbc39b04cdfc8370c26272b9b83e8", @typed={0x4, 0x46}, @typed={0xc, 0x2c, 0x0, 0x0, @u64=0xd}]}, @typed={0x100, 0x55, 0x0, 0x0, @binary="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"}, @generic="4b6361c8379d72d5eda5aef2c39140", @typed={0x8, 0x7e, 0x0, 0x0, @fd=r13}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1a8, 0x1, 0x0, 0x1, [@nested={0x1a4, 0x67, 0x0, 0x1, [@nested={0x4, 0x95}, @typed={0xd1, 0x144, 0x0, 0x0, @binary="df61c9ab019615459dbac865e71772c02903d959b62994ff3bf14d2a9bc855d135aad332c1967c9555fd7c858bc6ae4c2c2d1c3453ee3bd78401b77084ac254ef301ab43663a8f915b29c42adb805d34f5cee0c1820241798c20057afce79438e4f69c6b799f96c8a60d1a52d0844a039ecadf995aeead3af5f4b6c00b5db41783ed0a94535d3658399f84264a14b2bd6cd9a7884b2bf509b9243cf784b3bfe796d261e39948093856dd137e0473241b4374754119529c267177af7651e2efb9e3b46a2c73de1f015598cb11c2"}, @generic="b873c9cb425d547b6822c228787e25d89022ab18423d2d39f7c4eb1dc4a8927d8ef0e9a705a19b96b4eacf609201ec732c57d8d860b797b828c2ada4b6e134c41bd44e139c91a0e5148735e60c9e5514f52d80a48a4b2d17012c40419b926ab55fc9b70f7fd8", @generic="355e7114678f1c9692c6f16eb8ee6fc93784841dd8167977331104c12d01c1e1acac4aaead22f1aa7d5b434c06ce30b35aee73a0e21c1cd799e811e1a3fd9ab8cdcdf1acab1f4a05bffc26d1e3e0621bff68717e536d", @nested={0x4, 0x108}, @nested={0x4, 0x4a}, @nested={0x4, 0x5b}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x284, 0x1, 0x0, 0x1, [@typed={0x8, 0xcc, 0x0, 0x0, @fd=r14}, @generic="9e9cd6652a040191190f239cca6f2f4d153436fb82c5a361cfe5d61ba1d09253c90a5762aca0782b0e25ff340b666ad23326bfbc0541f4af056d90f76305a12e78aa0a946c501e84753f761a5f6e5fa3c447f04c251d5fa02bbcfdb58c1dc6f1832a6b02ddc713d1facd5b5191ab6961d5f74f082e4a97ae15bf6baccc35eca2eba2dc51647ea1c27a0d4856a27cf567a8f81f6c74b1877ca8d4115b7f3e54f8cb7cb0c0a84ab54fdd6d157d66de1f83267e7c1a1ddac8539ef4fad3aad39b50e6c724b6647fffb0cd8bd866a6bf4b47b8daa2565178ccfe5f23f8ab", @generic="2bff5aeebb0047d39efb3ff4fcfd3f833b459d1debfc69804cc14ac73fa5764d77fff8492fcbb2660dde6508775977a96d26b34e93d204ab8add44042d56efab26d2c9f31e92552787fa17ef0e717ee410573c2e73a62015ba4561c226a68216e1241616789fbaac2023e3", @generic="fbd1b3f0d3af3ae71fb7d7f73f0bb978b3e9c8c5876f69cb4af5f0c3d7d440f3ba57bdb56e4730aa6f45a1c1e47460f32c411e4ca558e10a1abdc405ee97cb6363ed1565994792339843bc96", @generic="e7436109eededf2b0bcac67daa29789ca6ac5656250cbd4b5312001519957c955692cf75b985ef9181adf65ee664e5688c994264876b4c428e7bf976e4de909994a8812df364255004736a767cba6645b2d0491e86eecd8f9e1c63ab37e451d69ffad93b09128eca961bb4860bbe71992385d868776769c883381ab756b3b19dfe765403b2490ef87f10e1cd410fbafc9207f21e8055e44355c5d8c7e42e6e21775bf3fce33f9ace14588871d44b1043bd5e76b1763c5edbd51944b4f2420365b694d76f4fc639da3fe8b0d0e61bdbd628a800fffcfc82f22f6facc4d599f37511860d20c8"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xcb, 0x1, 0x0, 0x1, [@generic="c1197fc75dff74440b615e23ffcac23295e5fbd0059265bf6f2db3e2521cb9fc0de3805446e62651df2b04486b6af139a8df05b96d9dd980910e9a1366e3fbe275e70e41c0f4a56d088d1edb195b0c1e5111b19e793b2d0763bdb0c1303d73842c353215890f2a2612d19a028cef124a8d16e58306c9159a37ae76d9546c40184d62b7b5bf7effba852daca45e6f527a06911c6cbed6bf309b1dcd4882e8e7432e1a575d4abd0cde55a060714c0f40f03abbbd15fd33f1786e11e58b2963d307d92b6c60fb9738"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x14, 0x81, 0x0, 0x1, [@nested={0x4, 0xf3}, @typed={0x8, 0x33, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x117}]}, @typed={0x8, 0xa2, 0x0, 0x0, @fd=r6}]}]}, 0xc94}, 0x1, 0x0, 0x0, 0x4000}, 0x5) r15 = getsockopt$auto(r14, 0x1, 0x0, &(0x7f0000003c00)='*\x00', &(0x7f0000003c40)=0xfff) r16 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000003cc0), r5) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r15, &(0x7f0000003d80)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x2c, r16, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0x3}, @BATADV_ATTR_TT_FLAGS={0x8, 0x15, 0x70}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0xc000) ioctl$auto_vsock_device_ops_af_vsock(r5, 0x28000000, &(0x7f0000003dc0)="cb673a37a14b28cbc1b2ec1bb0082c34ae3b92724dde1388ef62a8f47dd5cb98b8d23163b4483297da1bc0b8b49dd0e7db39b7f14f29ad3370da1f1edbd64ae61fc0e6f27aa5f7c594d09e57b12cc4cda41e788eb560e9365a1b5d841230aa25ddc6ce1109497249e9fd846a0f2fd4ddee03353d0ba930b27865fc0231c7bc82fa58cd31f36019bd93dca5abcf66f8d69d383af8224bab250d97025c10f7e1b1ed7ba7f14e10f402d94264bee9e11f") read$auto_proc_pagemap_operations_internal(0xffffffffffffffff, &(0x7f0000003e80)=""/134, 0x86) io_uring_register$auto(r9, 0x4, &(0x7f0000003f40)="fbbda424783e29a23f12c7f2c8b6a6dba7c9110d97f1dc2bc1e72d9fdc86b57df9fb06dc380f089dc3429fa930c3ee0d18113c02735774b7f18ebcd7036e2fede91a10648ae539f12779d5", 0xde8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/sequencer2\x00', 0x101000, 0x0) lstat$auto(&(0x7f0000004000)='./file0\x00', &(0x7f0000004040)={0x3, 0xffffffffffff7fff, 0x4, 0x9, r2, r3, 0x0, 0x0, 0xfff, 0x4, 0x40fa, 0x8, 0x3, 0xf4, 0xa013, 0x7ff, 0x5}) io_submit$auto(0x0, 0x3, &(0x7f0000004140)=&(0x7f0000004100)={0x40, 0x7, 0x9, 0x9, 0x2, r8, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0xf, r8}) 2.070104943s ago: executing program 2 (id=1898): r0 = socket(0x2b, 0x1, 0x0) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xe, 0x10, 0x6, 0xfffffff8, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x5, 0xfffffffffffffe00, 0xcb3, 0x5, 0xfff, 0x3, 0x6, 0x8, 0xb}) shmctl$auto(0x9, 0x92c00000, &(0x7f0000000240)={{0x2, 0x0, 0xee01, 0x9e5, 0x4, 0xfff, 0x7}, 0xb, 0x3, 0x10000000, 0x35, @inferred, @inferred, 0x2, 0x0, &(0x7f00000001c0), &(0x7f0000000200)}) r3 = getgid() shmctl$auto(0x0, 0x1, &(0x7f0000000380)={{0x5, r2, r3, 0xa9, 0x0, 0x52, 0x3}, 0x6e98e4ec, 0x2, 0x7fffffffffffffff, 0x1, @inferred, @inferred, 0x1d1b, 0x0, &(0x7f0000000300), &(0x7f0000000340)}) chown$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, r3) setfsgid$auto(r3) acct$auto(&(0x7f0000000080)='/proc/sys/kernel/sched_deadline\xdcBH\xc7H\xe2\x1d\b\x00ax_us\x00\xae\xb5\x86\xe9\xf6\xfe\x9b6\x91\x8f\x158\xe7qwI\t0\xc3\xd1\xcd\xf5\x04\xe0B\xe0U<\xb1\x1d\xda\xd2') sendmmsg$auto(r0, &(0x7f0000000340)={{&(0x7f0000000580)="ef8336d34b114ce4e61ed2558e350152159d6008ef55734f148ce2a7f211537cc1a97ddf57795dc16000c52c8bbf58220a705e56a89c4efc3017ead3869f5e39db9c7591d860b4fe2938b984492d7a70fd4b335216b47f3bced631707250334e16bf181f9086ddc4d0142548cab3c087fac08f172874a8025d65ff949e31f678b283a27aec6ba8c7866d163693f57a23bae5b893189714ce920742557fa6fe59ec228f137862979cd939d75b613705700f220b8f02193f2d141e584c16dfe854b6ef0a2d3c342de2e344014226c801498910b74988da03c61f4d2f872032d284", 0x8001, &(0x7f0000000300)={&(0x7f00000002c0)="9dfcb1c0b5b5286636c7bad534", 0x3}, 0x9, &(0x7f0000000680)="16d453874a53be64521669ebf5f35966d91fa2f737b52875af6511245a7bfafcd0a63b5a64dc50f38e708b97325906fe8308d75683b5ad7e907cf42e549cba0b0d72b4f347b9ce607e4310032c21b764904e03286516226125e4c5b616543dd58ef4ac23823db6e91578d37fc3bcf171c864de46ffea5b00b4f34286dbca3f22a8c1e11d5aafa1540b3ec8cf2c0de1aaa720a802d25a90286c38c6ddded991ee6f5ca631b8bb19b66373f061575646ce928f5eb5fea29f23a48098c81d553629488e69a32b5ba319164501b0cd1f4c6acfd60d16aa6ae4f5f20b32655182694bd20f25510a8cd204b211aedbe2aa91eb80e1a5", 0x1, 0x8}, 0x6}, 0x5, 0x10000) shmctl$auto(0x6, 0x4, &(0x7f00000001c0)={{0x7, 0xee00, 0x0, 0x7d, 0xe5a61ce, 0xb97, 0x1}, 0x5, 0x9, 0x8, 0x8, @inferred, @inferred, 0x362, 0x0, &(0x7f00000004c0)="bb188662ce07e4", &(0x7f0000000080)}) r5 = getegid() setresgid$auto(r3, r4, r5) fstat$auto(r0, &(0x7f0000000140)={0x39, 0xc4, 0x7, 0x3, r1, r5, 0x0, 0x0, 0x6, 0x5e, 0x8, 0x2, 0x2903, 0x6, 0x5, 0x3, 0x7fff}) listen$auto(0x3, 0x9) write$auto(0x3, 0x0, 0x81) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000780)='/proc/slabinfo\x00', 0x100, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0x8, 0x300000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) socket(0x1, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffffa, 0x100000000008000) pread64$auto(0xffffffffffffffff, 0x0, 0xf429, 0xb) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x1c8340, 0x0) ioctl$auto(r6, 0xc08c5114, 0x3) 1.852126542s ago: executing program 4 (id=1899): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xd, 0x0, 0x4}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0xb1) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r0, 0x0, 0x4002841) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 1.78571121s ago: executing program 2 (id=1900): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/wakeup/wakeup8/active_time_ms\x00', 0xc2740, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/112, 0x70) r1 = io_uring_setup$auto(0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r1) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x10e, 0x1, 0x0, 0x8002) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 1.469137885s ago: executing program 5 (id=1901): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/extfrag/unusable_index\x00', 0x0, 0x0) read$auto(r0, &(0x7f0000000000)='/sy/kernel/debug/able]index\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40006) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0c/sub7/hw_params\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0xf429, 0xb) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/printk_devkmsg\x00', 0x202, 0x0) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) mmap$auto(0x0, 0x20009, 0x100, 0x310, 0x401, 0x1) socket(0xa, 0x801, 0x106) recvmmsg$auto(0x3, 0x0, 0x20000000, 0x75e, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) socket(0x6, 0x5, 0x8) socket(0x1d, 0x8080e, 0xe7a3) socket(0x29, 0x5, 0x0) open(0x0, 0x0, 0xb5d1af1605322df2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x48000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) memfd_create$auto(0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000100)='./cgroup\x00', 0x50800, 0x412) getdents$auto(r2, 0x0, 0xde) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x80002, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysinfo$auto(0x0) socket(0x2, 0x6, 0x0) 1.456217114s ago: executing program 4 (id=1902): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/ip_vs_conn_sync\x00', 0x400, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) rseq$auto(&(0x7f0000000300)={0xb, 0x401, 0x0, 0x2, 0xffffffff, 0x2}, 0x20008000, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mincore$auto(0x0, 0xffffffff, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x301, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) pidfd_getfd$auto(r0, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/acpi/wakeup\x00', 0x101000, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) get_mempolicy$auto(0x0, 0x0, 0x81, 0x8, 0x2) pidfd_open$auto(0xffffffffffffffff, 0x8) r2 = socket(0x2, 0x801, 0x6) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x1, 0x12, 0x0, 0xa4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x200040d1}, 0x4044800) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) shutdown$auto(0x200000003, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000040), 0xffffffffffffffff) 1.216111933s ago: executing program 2 (id=1903): r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0xe4ff, 0x0, 0x0, 0x2c, 0x2d, 0x0, 0x3}) 1.146117604s ago: executing program 2 (id=1904): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x6, 0x0) pipe$auto(0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x8}, 0x80, 0x0) setsockopt$auto(r0, 0x113, 0x4, 0x0, 0x81) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) connect$auto(0x3, 0x0, 0x55) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x2e6, 0x4020009, 0xdf, 0x1d, 0x401, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567) socket(0xa, 0x80000, 0x5) mmap$auto(0x0, 0x8, 0xe2, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r1) sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="02000000", @ANYRES16=r2, @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x60000}, 0xc840) recvmsg$auto(0x4, 0x0, 0x33c) 663.397087ms ago: executing program 5 (id=1905): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xd, 0x0, 0x4}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, 0x0, 0x31cd3c7c, 0xb1) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xa6}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x9}, @IEEE802154_ATTR_DURATION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008051) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) 359.851163ms ago: executing program 4 (id=1906): openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x121c01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fba400000000f2ff0000021f4de56a4703000000d6f3110aa45aeb6b5e9bd8abc396aa49249256bdf3aa705dd10c661480cb20a3c8f0eca3d46ee322e8719e1239716cd1307d8553a60d7af3b758fd1e98676fd435929103f6"], 0x1c}}, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) read$auto_rfcomm_dlc_debugfs_fops_(r1, &(0x7f0000000080)=""/96, 0x60) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x5714, &(0x7f00000013c0)={&(0x7f0000001380)={0x18, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000001440)={0xb50, r4, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xb34, 0x1a, "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"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0xe0}]}, 0xb50}}, 0x4001) close_range$auto(0x2, 0x8000, 0x0) 177.852238ms ago: executing program 1 (id=1907): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x3, 0x42, 0x940, 0x1ffe2, 0x3, 0x0, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x2, 0x3, 0x80000005, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x8, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x2, 0x40200000000000, 0x0, 0xfffffffffffffffe, 0x6]}, 0x1fe, 0x81) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, [0x0, 0x8000000, 0x0, 0x7]}, 0x1fe, 0x81) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x800000404, 0x8000) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), r1) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0xb75}, @IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_SC_NONE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd$auto(0x1) socket(0xf, 0x3, 0x2) socket(0x2, 0xa, 0xe57a) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x22, 0x3, 0x0) write$auto(0x3, 0x0, 0xfdef) connect$auto(0x5, 0x0, 0x9) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40400c4) sendmmsg$auto(r3, 0x0, 0x7, 0x4008) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 142.344ms ago: executing program 5 (id=1908): statmount$auto(0x0, &(0x7f0000000040)={0xffffffff, 0x0, 0x38, 0xffffff01, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x5, 0x9, 0x2, 0x8, 0x5, 0x8000, 0x0, 0x9, 0x10001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x100000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x40000000007fd, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = socket(0xa, 0x2, 0x3a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x1, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\x87\x02\x1c\xfd\xac\xc7\xaa\n\xf9\x19\xc4#<^\x91\x1d\xda\xc4m\xef\xff(i\xc6@\x91_\vBj\x0eQ\xceV\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) setfsuid$auto(0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/user/max_fanotify_groups\x00', 0x8, 0xf) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x800) acct$auto(&(0x7f0000000000)='}\x00') acct$auto(0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000100)={{@raw=0x9, 0x85, 0x20e, 0x9, "669cbbd9e97551b991bea188e0f1a57ce2a1facac1f00b2f4ab8635524133f9e22c7717f6050f2d2252ca5f2", @raw=0x8}, 0x0, @iec958={"31bee81a1537292d6d5cf10129461bcfe21944de67f2c7e2", "45805e24089c633fd962e093b796e736916cd56e8b2bb35e3c8f947e52f345a1832f06560b67fb3b43f9ac6cda5b59234d4f1ac1daa73642e017db1ec71d66d872484e2a198dc86694a7d8f8384d7756ad802f6499b1fc34778aafcfefebb863950c6eed81b14c2e00f36951fbcd5e61ab4cf1444ed57899112d9183f5c351b7f8f3f4c814582e3fbfab15956b11ea2f621365", 0x0, "d8eb943c"}, "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xcb36}) write$auto_dev_fops_plock(r2, &(0x7f0000000040)="3fc473f0", 0x4) 0s ago: executing program 2 (id=1909): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000080)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40104000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="50001500", @ANYRES16=r2, @ANYBLOB="000426bd7000fbdbdf25020000003c00018008000100", @ANYRES32=r3, @ANYBLOB="14000200766c616e30000000000000000000000008000300ff0f00001400020076657468305f766972745f7769666900"], 0x50}, 0x1, 0x0, 0x0, 0x88044}, 0x4000000) mmap$auto(0x0, 0x7f00000000, 0x2, 0x9b72, 0x5, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = open(&(0x7f0000000000)='./file0\x00', 0xe63e, 0x20) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x6, 0x0, &(0x7f0000000080)=0x9c8) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000100), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c00038008000c007f0000011200a538898771f1c19f17790485908286dd00000400028004000800ff8de5238b72ec16e3a2c55a58f55815e619773b19efeb0327d99e4aed7b10345decd163a923f2b41f005c653204ec36603d13ef5baab70c3382acc6d7e6ebc66b8ec862521fbd562b580e95a46c06"], 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r7 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f00000000c0), r1) sendmsg$auto_SMC_PNETID_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf25010000000c0001006e6c39303231310006000300290000000d40a5005d2795245d235d2e00000000090001002c25212100000000060001005e0000000500040009000000af298641615b7ad1a4c3799fb61791622bcd88c1644df6a525c7"], 0x54}}, 0x400c4) clock_gettime$auto(0x1, 0x0) modify_ldt$auto(0x11, 0x0, 0x10) kernel console output (not intermixed with test programs): d0 [ 205.100139][ T7143] simple_read_from_buffer+0xd0/0x160 [ 205.105609][ T7143] proc_fail_nth_read+0x198/0x270 [ 205.110725][ T7143] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.116383][ T7143] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.122018][ T7143] vfs_read+0x1df/0xbe0 [ 205.126251][ T7143] ? __fget_files+0x1fc/0x3a0 [ 205.131012][ T7143] ? __pfx___mutex_lock+0x10/0x10 [ 205.136110][ T7143] ? __pfx_vfs_read+0x10/0x10 [ 205.140864][ T7143] ? __fget_files+0x206/0x3a0 [ 205.145622][ T7143] ksys_read+0x12b/0x250 [ 205.149933][ T7143] ? __pfx_ksys_read+0x10/0x10 [ 205.154766][ T7143] do_syscall_64+0xcd/0x250 [ 205.159343][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.165318][ T7143] RIP: 0033:0x7fb3c898473c [ 205.169803][ T7143] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 205.189482][ T7143] RSP: 002b:00007fb3c9726030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.197963][ T7143] RAX: ffffffffffffffda RBX: 00007fb3c8b76080 RCX: 00007fb3c898473c [ 205.206087][ T7143] RDX: 000000000000000f RSI: 00007fb3c97260a0 RDI: 0000000000000003 [ 205.214126][ T7143] RBP: 00007fb3c9726090 R08: 0000000000000000 R09: 0000000000000000 [ 205.222158][ T7143] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 205.230196][ T7143] R13: 0000000000000001 R14: 00007fb3c8b76080 R15: 00007ffedce6ed58 [ 205.238257][ T7143] [ 207.061190][ T7135] kexec: Could not allocate control_code_buffer [ 207.357738][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 212.157499][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 212.167288][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 212.169027][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 212.713746][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 213.219226][ T7275] kexec: Could not allocate control_code_buffer [ 217.818771][ T7345] [U] [ 217.821816][ T7345] [U] [ 217.824590][ T7345] [U] [ 217.827355][ T7345] [U] [ 217.847370][ T7345] [U] [ 217.850203][ T7345] [U] [ 217.852973][ T7345] [U] [ 217.855736][ T7345] [U] [ 217.900428][ T7345] [U] [ 217.903245][ T7345] [U] [ 217.906030][ T7345] [U] [ 217.908806][ T7345] [U] [ 217.976349][ T7350] [U] [ 221.227723][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.287490][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.323403][ T7474] IPVS: length: 11322 != 424 [ 223.951723][ T7500] udc dummy_udc.0: soft-connect without a gadget driver [ 225.804747][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.316'. [ 226.488097][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 226.536856][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 227.344346][ T7534] kexec: Could not allocate control_code_buffer [ 227.684250][ T7598] ecryptfs_parse_packet_length: Error parsing packet length [ 227.717095][ T7598] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 227.831608][ T7598] Process accounting resumed [ 230.400662][ T7693] mkiss: ax0: crc mode is auto. [ 230.684527][ T7701] aoe: invalid device specification [ 230.829320][ T7701] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.846537][ T7701] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 230.958430][ T7701] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.981900][ T7701] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 231.032437][ T7701] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.077728][ T7701] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 231.150643][ T7701] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 231.188656][ T7701] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 231.267301][ T7701] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 231.452556][ T7727] lo: entered allmulticast mode [ 231.718249][ T7735] lo: left allmulticast mode [ 231.988382][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 232.882614][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 232.959114][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 233.037190][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 233.205809][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 233.263483][ T7773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.360'. [ 233.297348][ T7773] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 234.879089][ T7820] netlink: zone id is out of range [ 234.884813][ T7820] netlink: del zone limit has 4 unknown bytes [ 234.960365][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 235.037901][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 235.117193][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 235.291456][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 236.414638][ T7839] FAULT_INJECTION: forcing a failure. [ 236.414638][ T7839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.431962][ T7737] kexec: Could not allocate control_code_buffer [ 236.461745][ T7839] CPU: 1 UID: 0 PID: 7839 Comm: syz.4.371 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 236.472437][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 236.482552][ T7839] Call Trace: [ 236.485902][ T7839] [ 236.488874][ T7839] dump_stack_lvl+0x16c/0x1f0 [ 236.493599][ T7839] should_fail_ex+0x497/0x5b0 [ 236.498336][ T7839] _copy_to_user+0x32/0xd0 [ 236.502819][ T7839] simple_read_from_buffer+0xd0/0x160 [ 236.508264][ T7839] proc_fail_nth_read+0x198/0x270 [ 236.513352][ T7839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.518953][ T7839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.524553][ T7839] vfs_read+0x1df/0xbe0 [ 236.528776][ T7839] ? __fget_files+0x1fc/0x3a0 [ 236.533490][ T7839] ? __pfx___mutex_lock+0x10/0x10 [ 236.538553][ T7839] ? __pfx_vfs_read+0x10/0x10 [ 236.543275][ T7839] ? __fget_files+0x206/0x3a0 [ 236.547998][ T7839] ksys_read+0x12b/0x250 [ 236.552284][ T7839] ? __pfx_ksys_read+0x10/0x10 [ 236.557105][ T7839] do_syscall_64+0xcd/0x250 [ 236.561653][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.567592][ T7839] RIP: 0033:0x7f8da458473c [ 236.572039][ T7839] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 236.591950][ T7839] RSP: 002b:00007f8da5421030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.600490][ T7839] RAX: ffffffffffffffda RBX: 00007f8da4775fa0 RCX: 00007f8da458473c [ 236.608484][ T7839] RDX: 000000000000000f RSI: 00007f8da54210a0 RDI: 0000000000000005 [ 236.616478][ T7839] RBP: 00007f8da5421090 R08: 0000000000000000 R09: 0000000000000000 [ 236.624475][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.632473][ T7839] R13: 0000000000000000 R14: 00007f8da4775fa0 R15: 00007ffee69e83b8 [ 236.640489][ T7839] [ 237.154201][ T7846] Process accounting resumed [ 237.365740][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 237.626025][ T7856] netlink: 350 bytes leftover after parsing attributes in process `syz.1.374'. [ 237.766585][ T7856] netlink: 350 bytes leftover after parsing attributes in process `syz.1.374'. [ 238.469671][ T7877] aoe: invalid device specification [ 238.485947][ T7879] syz.4.380 uses obsolete (PF_INET,SOCK_PACKET) [ 239.133742][ T7877] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.158332][ T7877] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 239.221341][ T7877] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.307405][ T7877] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 239.372678][ T7888] program syz.4.384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.977690][ T7913] [U] [ 239.980502][ T7913] [U] [ 239.983269][ T7913] [U] [ 239.986038][ T7913] [U] [ 240.028144][ T7913] [U] [ 240.030959][ T7913] [U] [ 240.033726][ T7913] [U] [ 240.036490][ T7913] [U] [ 240.068283][ T7913] [U] [ 240.071182][ T7913] [U] [ 240.073948][ T7913] [U] [ 240.076716][ T7913] [U] [ 240.104929][ T7913] [U] [ 240.107760][ T7913] [U] [ 240.110531][ T7913] [U] [ 240.113298][ T7913] [U] [ 240.146216][ T7913] [U] [ 240.149122][ T7913] [U] [ 240.151887][ T7913] [U] [ 240.154666][ T7913] [U] [ 240.183071][ T7913] [U] [ 240.185942][ T7913] [U] [ 240.188718][ T7913] [U] [ 240.191463][ T7913] [U] [ 240.227309][ T7913] [U] [ 240.230118][ T7913] [U] [ 240.232887][ T7913] [U] [ 240.235651][ T7913] [U] [ 240.257461][ T7913] [U] [ 240.260279][ T7913] [U] [ 240.263057][ T7913] [U] [ 240.265842][ T7913] [U] [ 240.295380][ T7913] [U] [ 240.298203][ T7913] [U] [ 240.301019][ T7913] [U] [ 240.303795][ T7913] [U] [ 240.337393][ T7913] [U] [ 240.340207][ T7913] [U] [ 240.342976][ T7913] [U] [ 240.345740][ T7913] [U] [ 240.377431][ T7913] [U] [ 240.380256][ T7913] [U] [ 240.383014][ T7913] [U] [ 240.385782][ T7913] [U] [ 240.413960][ T7913] [U] [ 240.416844][ T7913] [U] [ 240.419614][ T7913] [U] [ 240.422385][ T7913] [U] [ 240.447424][ T7913] [U] [ 240.450244][ T7913] [U] [ 240.453027][ T7913] [U] [ 240.455812][ T7913] [U] [ 240.469145][ T7913] [U] [ 240.471963][ T7913] [U] [ 240.474732][ T7913] [U] [ 240.477509][ T7913] [U] [ 240.507379][ T7913] [U] [ 240.510207][ T7913] [U] [ 240.512986][ T7913] [U] [ 240.515778][ T7913] [U] [ 240.537129][ T7913] [U] [ 240.539948][ T7913] [U] [ 240.542716][ T7913] [U] [ 240.545574][ T7913] [U] [ 240.564962][ T7913] [U] [ 240.567806][ T7913] [U] [ 240.570575][ T7913] [U] [ 240.573356][ T7913] [U] [ 240.603706][ T7913] [U] [ 240.606579][ T7913] [U] [ 240.609360][ T7913] [U] [ 240.612140][ T7913] [U] [ 240.652105][ T7913] [U] [ 240.654918][ T7913] [U] [ 240.657693][ T7913] [U] [ 240.660454][ T7913] [U] [ 240.680869][ T7913] [U] [ 240.797645][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 241.067560][ T7924] lo: entered allmulticast mode [ 241.207127][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 241.277262][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 241.282420][ T7926] lo: left allmulticast mode [ 241.357627][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 242.113557][ T7933] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 242.177326][ T7933] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 243.218428][ T7944] aoe: invalid device specification [ 243.317753][ T7944] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.326866][ T7944] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.410019][ T7944] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.416159][ T7944] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 243.631768][ T7968] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 243.903268][ T7975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.402'. [ 243.955735][ T7978] FAULT_INJECTION: forcing a failure. [ 243.955735][ T7978] name failslab, interval 1, probability 0, space 0, times 1 [ 243.991005][ T7978] CPU: 1 UID: 0 PID: 7978 Comm: syz.0.403 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 244.001697][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 244.011812][ T7978] Call Trace: [ 244.015143][ T7978] [ 244.018127][ T7978] dump_stack_lvl+0x16c/0x1f0 [ 244.022871][ T7978] should_fail_ex+0x497/0x5b0 [ 244.027615][ T7978] ? fs_reclaim_acquire+0xae/0x150 [ 244.032791][ T7978] should_failslab+0xc2/0x120 [ 244.037555][ T7978] __kmalloc_noprof+0xce/0x4f0 [ 244.042390][ T7978] ? inc_ucount+0x23e/0x2e0 [ 244.046961][ T7978] ? net_alloc_generic+0x1e/0x70 [ 244.052071][ T7978] net_alloc_generic+0x1e/0x70 [ 244.056914][ T7978] copy_net_ns+0xc7/0x6c0 [ 244.061298][ T7978] ? copy_cgroup_ns+0xa4/0x6f0 [ 244.066372][ T7978] create_new_namespaces+0x3ea/0xad0 [ 244.071740][ T7978] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 244.077448][ T7978] ksys_unshare+0x45d/0xa40 [ 244.082025][ T7978] ? __pfx_ksys_unshare+0x10/0x10 [ 244.087126][ T7978] ? ksys_write+0x1ba/0x250 [ 244.091716][ T7978] __x64_sys_unshare+0x31/0x40 [ 244.096559][ T7978] do_syscall_64+0xcd/0x250 [ 244.101135][ T7978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.107087][ T7978] RIP: 0033:0x7f0f0fd85d29 [ 244.111531][ T7978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.131175][ T7978] RSP: 002b:00007f0f10c94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 244.139623][ T7978] RAX: ffffffffffffffda RBX: 00007f0f0ff75fa0 RCX: 00007f0f0fd85d29 [ 244.147621][ T7978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 244.155639][ T7978] RBP: 00007f0f10c94090 R08: 0000000000000000 R09: 0000000000000000 [ 244.163652][ T7978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.171656][ T7978] R13: 0000000000000001 R14: 00007f0f0ff75fa0 R15: 00007fff7f9a2d58 [ 244.179670][ T7978] [ 245.019832][ T7998] netlink: zone id is out of range [ 245.078323][ T7998] netlink: set zone limit has 8 unknown bytes [ 245.357355][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 245.363560][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 245.437739][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 245.443856][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 249.833226][ T8043] kexec: Could not allocate control_code_buffer [ 251.514005][ T8084] Invalid ELF header magic: != ELF [ 255.080029][ T8113] perf: Dynamic interrupt throttling disabled, can hang your system! [ 256.240362][ T8121] netlink: zone id is out of range [ 256.258611][ T8121] netlink: set zone limit has 8 unknown bytes [ 259.663577][ T8165] netlink: 330 bytes leftover after parsing attributes in process `syz.2.446'. [ 260.687699][ T8169] netlink: zone id is out of range [ 260.770507][ T8169] netlink: set zone limit has 8 unknown bytes [ 261.280071][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.286465][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.383401][ T8195] netlink: 330 bytes leftover after parsing attributes in process `syz.0.456'. [ 263.796749][ T8186] kexec: Could not allocate control_code_buffer [ 264.096379][ T8200] kexec: Could not allocate control_code_buffer [ 265.880695][ T8240] futex_wake_op: syz.1.467 tries to shift op by 64; fix this program [ 265.920545][ T8240] netlink: 338 bytes leftover after parsing attributes in process `syz.1.467'. [ 266.316698][ T8258] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 268.186613][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 270.706801][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.715755][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.519597][ T7964] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.705222][ T7964] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.874254][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 273.116965][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.126430][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.136277][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.144897][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.154246][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.173523][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.196629][ T7964] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.624710][ T7964] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.989854][ T8364] chnl_net:caif_netlink_parms(): no params data found [ 274.009642][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 274.117701][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 274.525129][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.542787][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.550106][ T8364] bridge_slave_0: entered allmulticast mode [ 274.584092][ T8364] bridge_slave_0: entered promiscuous mode [ 274.600807][ T7964] bridge_slave_1: left allmulticast mode [ 274.607111][ T7964] bridge_slave_1: left promiscuous mode [ 274.638415][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.723590][ T7964] bridge_slave_0: left allmulticast mode [ 274.737452][ T7964] bridge_slave_0: left promiscuous mode [ 274.752815][ T7964] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.272590][ T5846] Bluetooth: hci1: command tx timeout [ 275.745751][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.767449][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.808365][ T8364] bridge_slave_1: entered allmulticast mode [ 275.825553][ T8364] bridge_slave_1: entered promiscuous mode [ 276.118239][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 276.130583][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 276.270208][ T8364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.304952][ T8364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.520138][ T8364] team0: Port device team_slave_0 added [ 276.611023][ T8364] team0: Port device team_slave_1 added [ 276.746702][ T7964] hsr_slave_0: left promiscuous mode [ 276.889059][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.917108][ T7964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.968713][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.991507][ T7964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.071643][ T7964] veth1_macvtap: left promiscuous mode [ 277.077343][ T7964] veth0_macvtap: left promiscuous mode [ 277.110232][ T7964] veth1_vlan: left promiscuous mode [ 277.141173][ T7964] veth0_vlan: left promiscuous mode [ 277.352305][ T5846] Bluetooth: hci1: command tx timeout [ 277.652774][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'. [ 277.683455][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'. [ 278.587381][ T7964] team0 (unregistering): Port device team_slave_1 removed [ 279.430805][ T5846] Bluetooth: hci1: command tx timeout [ 279.655106][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.680266][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.716524][ T8364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.869021][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.881591][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.938469][ T8364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.069270][ T8364] hsr_slave_0: entered promiscuous mode [ 280.124203][ T8364] hsr_slave_1: entered promiscuous mode [ 280.890896][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.913163][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.931348][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.089564][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.103174][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 281.112398][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.509333][ T5846] Bluetooth: hci1: command tx timeout [ 282.236397][ T8364] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 282.273113][ T8464] chnl_net:caif_netlink_parms(): no params data found [ 282.296663][ T8364] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 282.368863][ T8364] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 282.420472][ T8364] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 282.905993][ T8464] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.923409][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.948087][ T8464] bridge_slave_0: entered allmulticast mode [ 282.967398][ T8478] kexec: Could not allocate control_code_buffer [ 282.972745][ T8464] bridge_slave_0: entered promiscuous mode [ 283.031336][ T8464] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.050864][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.068997][ T8464] bridge_slave_1: entered allmulticast mode [ 283.083862][ T8464] bridge_slave_1: entered promiscuous mode [ 283.188873][ T5846] Bluetooth: hci2: command tx timeout [ 283.243134][ T8464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.298757][ T8464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.393241][ T8364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.503932][ T8464] team0: Port device team_slave_0 added [ 283.542171][ T8464] team0: Port device team_slave_1 added [ 283.660144][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.667178][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.709631][ T8464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.889380][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.896411][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.968633][ T8464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.111048][ T8364] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.321669][ T8464] hsr_slave_0: entered promiscuous mode [ 284.340676][ T8464] hsr_slave_1: entered promiscuous mode [ 284.358325][ T8464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.366040][ T8464] Cannot create hsr debugfs directory [ 284.749048][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.756251][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.806249][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.813515][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.054241][ T8464] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.275359][ T8464] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.277743][ T5846] Bluetooth: hci2: command tx timeout [ 285.315684][ T8364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.396650][ T8464] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.583776][ T8464] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.685655][ T8364] veth0_vlan: entered promiscuous mode [ 285.715028][ T8364] veth1_vlan: entered promiscuous mode [ 285.839698][ T8364] veth0_macvtap: entered promiscuous mode [ 285.849175][ T8364] veth1_macvtap: entered promiscuous mode [ 285.872958][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.883675][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.893858][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.904575][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.914997][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.925950][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.937503][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.970184][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.988620][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.005265][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.027095][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.038723][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.050960][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.103801][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.184336][ T8364] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.216889][ T8364] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.225692][ T8364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.266853][ T8364] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.442872][ T8464] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.478302][ T8464] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 286.526041][ T8464] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 286.584725][ T8464] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 286.653110][ T7964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.676268][ T7964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.870226][ T7958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.897401][ T7958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.008660][ T8562] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 287.022414][ T8464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.045195][ T8464] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.060293][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.067612][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.091504][ T8562] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 287.139577][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.146792][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.346458][ T5846] Bluetooth: hci2: command tx timeout [ 287.778725][ T8571] mkiss: ax0: crc mode is auto. [ 288.014178][ T8464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.211170][ T8464] veth0_vlan: entered promiscuous mode [ 288.224298][ T8464] veth1_vlan: entered promiscuous mode [ 288.324042][ T8464] veth0_macvtap: entered promiscuous mode [ 288.341326][ T8464] veth1_macvtap: entered promiscuous mode [ 288.368877][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.387842][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.402178][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.421054][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.435608][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.453178][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.474252][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.496031][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.514782][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.544906][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.563975][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.575116][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.587577][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.601039][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.612017][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.622985][ T8464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.646485][ T8464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.667282][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.678342][ T8582] nbd: socks must be embedded in a SOCK_ITEM attr [ 288.693185][ T8464] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.708763][ T8582] block nbd0: shutting down sockets [ 288.742577][ T8464] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.751951][ T8464] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.771475][ T8464] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.002491][ T7964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.045475][ T7964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.101877][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.125849][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.425862][ T5846] Bluetooth: hci2: command tx timeout [ 289.874192][ T8566] kexec: Could not allocate control_code_buffer [ 291.258045][ T8633] kexec: Could not allocate control_code_buffer [ 293.323139][ T8667] Process accounting resumed [ 296.198232][ T8717] netlink: 146 bytes leftover after parsing attributes in process `syz.2.560'. [ 296.304969][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 298.586271][ T8740] kexec: Could not allocate control_code_buffer [ 298.772847][ T8774] FAULT_INJECTION: forcing a failure. [ 298.772847][ T8774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.791858][ T8774] CPU: 1 UID: 0 PID: 8774 Comm: syz.1.574 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 298.802582][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 298.812699][ T8774] Call Trace: [ 298.816024][ T8774] [ 298.818996][ T8774] dump_stack_lvl+0x16c/0x1f0 [ 298.823759][ T8774] should_fail_ex+0x497/0x5b0 [ 298.828526][ T8774] _copy_from_user+0x2e/0xd0 [ 298.833191][ T8774] kstrtouint_from_user+0xd7/0x1c0 [ 298.838343][ T8774] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 298.844109][ T8774] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 298.849781][ T8774] proc_fail_nth_write+0x84/0x250 [ 298.854973][ T8774] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 298.860782][ T8774] ? ksys_write+0x12b/0x250 [ 298.865356][ T8774] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 298.871081][ T8774] vfs_write+0x24c/0x1150 [ 298.875458][ T8774] ? __fget_files+0x1fc/0x3a0 [ 298.880194][ T8774] ? __pfx___mutex_lock+0x10/0x10 [ 298.885257][ T8774] ? __pfx_vfs_write+0x10/0x10 [ 298.890064][ T8774] ? __fget_files+0x206/0x3a0 [ 298.894789][ T8774] ksys_write+0x12b/0x250 [ 298.899150][ T8774] ? __pfx_ksys_write+0x10/0x10 [ 298.904064][ T8774] do_syscall_64+0xcd/0x250 [ 298.908607][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.914542][ T8774] RIP: 0033:0x7fd93f9847df [ 298.918990][ T8774] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 298.938729][ T8774] RSP: 002b:00007fd940809030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 298.947182][ T8774] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd93f9847df [ 298.955183][ T8774] RDX: 0000000000000001 RSI: 00007fd9408090a0 RDI: 0000000000000006 [ 298.963180][ T8774] RBP: 00007fd940809090 R08: 0000000000000000 R09: 0000000000000000 [ 298.971178][ T8774] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 298.979199][ T8774] R13: 0000000000000000 R14: 00007fd93fb76080 R15: 00007ffc12af48c8 [ 298.987216][ T8774] [ 300.303814][ T8800] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 301.302688][ T7963] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.628799][ T7963] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.842307][ T7963] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.159140][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.169700][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.178240][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.187904][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.196701][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 302.204451][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.302685][ T7963] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.805399][ T7963] bridge_slave_1: left allmulticast mode [ 302.814492][ T7963] bridge_slave_1: left promiscuous mode [ 302.845286][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.889442][ T7963] bridge_slave_0: left allmulticast mode [ 302.898600][ T7963] bridge_slave_0: left promiscuous mode [ 302.905862][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.298393][ T5839] Bluetooth: hci1: command tx timeout [ 304.514676][ T7963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.545870][ T7963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.571993][ T7963] bond0 (unregistering): Released all slaves [ 305.226610][ T8812] chnl_net:caif_netlink_parms(): no params data found [ 305.290294][ T8839] warning: `syz.4.591' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 305.940204][ T7963] hsr_slave_0: left promiscuous mode [ 305.946552][ T7963] hsr_slave_1: left promiscuous mode [ 305.956792][ T7963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.966459][ T7963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.988826][ T7963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.996727][ T7963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.036617][ T7963] veth1_macvtap: left promiscuous mode [ 306.042667][ T7963] veth0_macvtap: left promiscuous mode [ 306.056418][ T7963] veth1_vlan: left promiscuous mode [ 306.061935][ T7963] veth0_vlan: left promiscuous mode [ 306.379412][ T5839] Bluetooth: hci1: command tx timeout [ 306.764754][ T7963] team0 (unregistering): Port device team_slave_1 removed [ 306.818340][ T7963] team0 (unregistering): Port device team_slave_0 removed [ 307.388654][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.395904][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.413272][ T8812] bridge_slave_0: entered allmulticast mode [ 307.426258][ T8812] bridge_slave_0: entered promiscuous mode [ 307.434831][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.442605][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.450081][ T8812] bridge_slave_1: entered allmulticast mode [ 307.458897][ T8812] bridge_slave_1: entered promiscuous mode [ 307.528515][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.582853][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.713742][ T8812] team0: Port device team_slave_0 added [ 307.775398][ T8812] team0: Port device team_slave_1 added [ 307.926699][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.934426][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.995787][ T8812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.040931][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.055240][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.082695][ T8812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.244697][ T8812] hsr_slave_0: entered promiscuous mode [ 308.253201][ T8812] hsr_slave_1: entered promiscuous mode [ 308.459980][ T5839] Bluetooth: hci1: command tx timeout [ 308.843938][ T8890] netlink: 32 bytes leftover after parsing attributes in process `syz.2.598'. [ 310.056713][ T8812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.097848][ T8812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.138204][ T8812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.206157][ T8812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.316069][ T8888] kexec: Could not allocate control_code_buffer [ 310.544178][ T5839] Bluetooth: hci1: command tx timeout [ 310.949055][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.000067][ T8812] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.035208][ T7963] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.042526][ T7963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.169664][ T7964] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.176851][ T7964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.518680][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.721652][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.870714][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.166797][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.178159][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.187117][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.195497][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.203299][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 312.210891][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.310314][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.386132][ T8812] veth0_vlan: entered promiscuous mode [ 312.404068][ T8812] veth1_vlan: entered promiscuous mode [ 312.492980][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.692529][ T8812] veth0_macvtap: entered promiscuous mode [ 312.762403][ T8812] veth1_macvtap: entered promiscuous mode [ 312.851684][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.911269][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.931071][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.953480][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.964153][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.002725][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.023460][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.056327][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.072853][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.223649][ T81] bridge_slave_1: left allmulticast mode [ 313.229398][ T81] bridge_slave_1: left promiscuous mode [ 313.283620][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.330705][ T81] bridge_slave_0: left allmulticast mode [ 313.352527][ T81] bridge_slave_0: left promiscuous mode [ 313.365442][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.293178][ T5839] Bluetooth: hci2: command tx timeout [ 314.427184][ T9022] netlink: 'syz.2.618': attribute type 4 has an invalid length. [ 314.610059][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.643554][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.675398][ T81] bond0 (unregistering): Released all slaves [ 314.756036][ T9012] HfR: entered promiscuous mode [ 314.793908][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.810705][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.841042][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.863059][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.881090][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.918823][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.929049][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.954642][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.992671][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.155098][ T8812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.172058][ T8812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.212728][ T8812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.221676][ T8812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.292473][ T8968] chnl_net:caif_netlink_parms(): no params data found [ 315.680758][ T81] hsr_slave_0: left promiscuous mode [ 315.687804][ T81] hsr_slave_1: left promiscuous mode [ 315.708627][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.723007][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.741403][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.770969][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.844646][ T81] veth1_macvtap: left promiscuous mode [ 315.850284][ T81] veth0_macvtap: left promiscuous mode [ 315.872325][ T81] veth1_vlan: left promiscuous mode [ 315.890691][ T81] veth0_vlan: left promiscuous mode [ 316.374662][ T5839] Bluetooth: hci2: command tx timeout [ 316.946435][ T81] team0 (unregistering): Port device team_slave_1 removed [ 317.020345][ T81] team0 (unregistering): Port device team_slave_0 removed [ 318.080585][ T7956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.109228][ T7956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.264251][ T8968] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.291116][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.298415][ T8968] bridge_slave_0: entered allmulticast mode [ 318.332234][ T8968] bridge_slave_0: entered promiscuous mode [ 318.371074][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.378248][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.410995][ T8968] bridge_slave_1: entered allmulticast mode [ 318.420562][ T8968] bridge_slave_1: entered promiscuous mode [ 318.451178][ T5839] Bluetooth: hci2: command tx timeout [ 318.522322][ T7964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.525445][ T8968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.568289][ T7964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.653875][ T8968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.909810][ T8968] team0: Port device team_slave_0 added [ 318.918577][ T8968] team0: Port device team_slave_1 added [ 319.039735][ T8968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.060429][ T8968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.127604][ T8968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.191084][ T8968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.198114][ T8968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.281624][ T8968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.437744][ T8968] hsr_slave_0: entered promiscuous mode [ 319.471536][ T8968] hsr_slave_1: entered promiscuous mode [ 319.536889][ T8968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.563489][ T8968] Cannot create hsr debugfs directory [ 320.529812][ T5839] Bluetooth: hci2: command tx timeout [ 321.284938][ T8968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.334465][ T8968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.392550][ T8968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 321.662053][ T8968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.947123][ T8968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.032376][ T8968] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.075086][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.082509][ T7956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.150863][ T7956] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.158062][ T7956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.633687][ T8968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.693510][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.700634][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.234131][ T8968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.366082][ T8968] veth0_vlan: entered promiscuous mode [ 323.422373][ T8968] veth1_vlan: entered promiscuous mode [ 323.501904][ T8968] veth0_macvtap: entered promiscuous mode [ 323.542939][ T8968] veth1_macvtap: entered promiscuous mode [ 323.613299][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.643771][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.679219][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.709104][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.740941][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.765478][ T9175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.632'. [ 323.779211][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.809362][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.829401][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.860567][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.992750][ T9175] veth1_macvtap: left promiscuous mode [ 324.027617][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 324.287633][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.310553][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.320634][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.331245][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.341199][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.351849][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.362082][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.372791][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.384154][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.394606][ T8968] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.404450][ T8968] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.413643][ T8968] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.422803][ T8968] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.798419][ T7956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.839208][ T7956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.010670][ T7963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.027871][ T7963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.958138][ T9180] kexec: Could not allocate control_code_buffer [ 328.765019][ T9202] kexec: Could not allocate control_code_buffer [ 329.128089][ T9235] HfR: entered promiscuous mode [ 329.304567][ T9241] netlink: 'syz.4.647': attribute type 4 has an invalid length. [ 329.367202][ T29] audit: type=1800 audit(8277292215.787:2): pid=9241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.647" name="dbroot" dev="configfs" ino=25387 res=0 errno=0 [ 331.310625][ T9280] netlink: 'syz.1.658': attribute type 2 has an invalid length. [ 331.370627][ T9280] netlink: 'syz.1.658': attribute type 2 has an invalid length. [ 333.853042][ T9290] kexec: Could not allocate control_code_buffer [ 334.384758][ T9307] HfR: entered promiscuous mode [ 334.545966][ T9309] netlink: 'syz.0.664': attribute type 4 has an invalid length. [ 334.588369][ T29] audit: type=1800 audit(8277292220.987:3): pid=9309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.664" name="dbroot" dev="configfs" ino=26419 res=0 errno=0 [ 334.739474][ T9322] Process accounting resumed [ 334.974236][ T9320] Process accounting resumed [ 335.522907][ T9336] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 335.639128][ T9336] CIFS mount error: No usable UNC path provided in device string! [ 335.639128][ T9336] [ 335.662166][ T9336] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 337.953302][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.685'. [ 343.054238][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 344.700568][ T9460] FAULT_INJECTION: forcing a failure. [ 344.700568][ T9460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.755827][ T9462] netlink: zone id is out of range [ 344.767804][ T9462] netlink: del zone limit has 4 unknown bytes [ 344.788313][ T9460] CPU: 0 UID: 0 PID: 9460 Comm: syz.4.709 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 344.799117][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 344.809237][ T9460] Call Trace: [ 344.812565][ T9460] [ 344.815556][ T9460] dump_stack_lvl+0x16c/0x1f0 [ 344.820313][ T9460] should_fail_ex+0x497/0x5b0 [ 344.825080][ T9460] _copy_to_user+0x32/0xd0 [ 344.829685][ T9460] simple_read_from_buffer+0xd0/0x160 [ 344.835160][ T9460] proc_fail_nth_read+0x198/0x270 [ 344.840272][ T9460] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.845927][ T9460] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.851567][ T9460] vfs_read+0x1df/0xbe0 [ 344.855893][ T9460] ? __fget_files+0x1fc/0x3a0 [ 344.860646][ T9460] ? __pfx___mutex_lock+0x10/0x10 [ 344.865743][ T9460] ? __pfx_vfs_read+0x10/0x10 [ 344.870598][ T9460] ? __fget_files+0x206/0x3a0 [ 344.875361][ T9460] ksys_read+0x12b/0x250 [ 344.879775][ T9460] ? __pfx_ksys_read+0x10/0x10 [ 344.884629][ T9460] do_syscall_64+0xcd/0x250 [ 344.889218][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.895181][ T9460] RIP: 0033:0x7f8da458473c [ 344.899672][ T9460] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 344.919521][ T9460] RSP: 002b:00007f8da53df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.928012][ T9460] RAX: ffffffffffffffda RBX: 00007f8da4776160 RCX: 00007f8da458473c [ 344.936045][ T9460] RDX: 000000000000000f RSI: 00007f8da53df0a0 RDI: 0000000000000007 [ 344.944519][ T9460] RBP: 00007f8da53df090 R08: 0000000000000000 R09: 0000000000000000 [ 344.952568][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.960605][ T9460] R13: 0000000000000000 R14: 00007f8da4776160 R15: 00007ffee69e83b8 [ 344.968662][ T9460] [ 346.537805][ T9465] kexec: Could not allocate control_code_buffer [ 350.343306][ T9482] kexec: Could not allocate control_code_buffer [ 350.808775][ T9523] netlink: 32 bytes leftover after parsing attributes in process `syz.0.723'. [ 353.357493][ T9580] can0: slcan on pty48. [ 353.559839][ T9584] can0 (unregistered): slcan off pty48. [ 355.632750][ T9647] ======================================================= [ 355.632750][ T9647] WARNING: The mand mount option has been deprecated and [ 355.632750][ T9647] and is ignored by this kernel. Remove the mand [ 355.632750][ T9647] option from the mount to silence this warning. [ 355.632750][ T9647] ======================================================= [ 355.836646][ T9652] binder: 9651:9652 ioctl 40044900 800000000000003 returned -22 [ 356.078903][ T9661] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 358.203954][ T2992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.435470][ T2992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.483132][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.762'. [ 359.096155][ T9702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.106517][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.120683][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.128161][ T9702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.137123][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.146924][ T9702] bond0 (unregistering): Released all slaves [ 359.153829][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.164148][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 359.173237][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.243198][ T2992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.464463][ T2992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.163681][ T9713] chnl_net:caif_netlink_parms(): no params data found [ 360.325958][ T2992] bridge_slave_1: left allmulticast mode [ 360.340164][ T2992] bridge_slave_1: left promiscuous mode [ 360.346114][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.378173][ T2992] bridge_slave_0: left allmulticast mode [ 360.389424][ T2992] bridge_slave_0: left promiscuous mode [ 360.395267][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.259836][ T5839] Bluetooth: hci2: command tx timeout [ 361.491279][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.503578][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.531804][ T2992] bond0 (unregistering): Released all slaves [ 361.685762][ T9713] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.709364][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.716778][ T9713] bridge_slave_0: entered allmulticast mode [ 361.731424][ T9713] bridge_slave_0: entered promiscuous mode [ 361.806904][ T2992] HfR: left promiscuous mode [ 361.917702][ T9713] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.931805][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.951693][ T9713] bridge_slave_1: entered allmulticast mode [ 361.975908][ T9713] bridge_slave_1: entered promiscuous mode [ 362.113403][ T9713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.413509][ T9713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.705328][ T9713] team0: Port device team_slave_0 added [ 362.746799][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.758528][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.776513][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.794900][ T9713] team0: Port device team_slave_1 added [ 362.874269][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.882808][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 362.898725][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.173459][ T2992] hsr_slave_0: left promiscuous mode [ 363.260724][ T2992] hsr_slave_1: left promiscuous mode [ 363.316276][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.325027][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.339420][ T5839] Bluetooth: hci2: command tx timeout [ 363.360065][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.378387][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.514006][ T2992] veth1_macvtap: left promiscuous mode [ 363.539202][ T2992] veth0_macvtap: left promiscuous mode [ 363.544913][ T2992] veth1_vlan: left promiscuous mode [ 363.571501][ T2992] veth0_vlan: left promiscuous mode [ 364.930754][ T5839] Bluetooth: hci1: command tx timeout [ 365.212093][ T2992] team0 (unregistering): Port device team_slave_1 removed [ 365.410326][ T5839] Bluetooth: hci2: command tx timeout [ 365.454322][ T2992] team0 (unregistering): Port device team_slave_0 removed [ 367.009291][ T5839] Bluetooth: hci1: command tx timeout [ 367.332189][ T9713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.369174][ T9713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.429153][ T9713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.489379][ T5846] Bluetooth: hci2: command tx timeout [ 367.506840][ T9713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.529505][ T9713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.607006][ T9713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.782810][ T9713] hsr_slave_0: entered promiscuous mode [ 367.801121][ T9713] hsr_slave_1: entered promiscuous mode [ 367.807641][ T9713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.818721][ T9713] Cannot create hsr debugfs directory [ 368.524681][ T2992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.623486][ T9764] chnl_net:caif_netlink_parms(): no params data found [ 368.878021][ T2992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.056137][ T2992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.089868][ T5846] Bluetooth: hci1: command tx timeout [ 369.444476][ T2992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.337434][ T9764] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.356749][ T9764] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.391125][ T9764] bridge_slave_0: entered allmulticast mode [ 370.410446][ T9764] bridge_slave_0: entered promiscuous mode [ 370.431454][ T9764] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.439955][ T9764] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.447366][ T9764] bridge_slave_1: entered allmulticast mode [ 370.454749][ T9764] bridge_slave_1: entered promiscuous mode [ 370.603241][ T9764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.636220][ T9764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.845322][ T9764] team0: Port device team_slave_0 added [ 370.914711][ T9764] team0: Port device team_slave_1 added [ 370.929617][ T2992] bridge_slave_1: left allmulticast mode [ 370.935369][ T2992] bridge_slave_1: left promiscuous mode [ 370.977993][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.012131][ T2992] bridge_slave_0: left allmulticast mode [ 371.017866][ T2992] bridge_slave_0: left promiscuous mode [ 371.024348][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.169405][ T5846] Bluetooth: hci1: command tx timeout [ 371.344954][ T9844] Process accounting resumed [ 372.526522][ T9850] netlink: 342 bytes leftover after parsing attributes in process `syz.4.793'. [ 372.611446][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.628249][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.686606][ T9764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.932840][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.949097][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.015915][ T9764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.127748][ T9713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 373.153565][ T9713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 373.303134][ T9764] hsr_slave_0: entered promiscuous mode [ 373.326553][ T9764] hsr_slave_1: entered promiscuous mode [ 373.349743][ T9764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.369506][ T9764] Cannot create hsr debugfs directory [ 373.379813][ T9713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 373.400748][ T9713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 373.874429][ T2992] hsr_slave_0: left promiscuous mode [ 373.949280][ T2992] hsr_slave_1: left promiscuous mode [ 373.963445][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.982073][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.033206][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.049114][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.145021][ T2992] veth1_macvtap: left promiscuous mode [ 374.169307][ T2992] veth0_macvtap: left promiscuous mode [ 374.175481][ T2992] veth1_vlan: left promiscuous mode [ 374.199339][ T2992] veth0_vlan: left promiscuous mode [ 375.640356][ T2992] team0 (unregistering): Port device team_slave_1 removed [ 375.820317][ T2992] team0 (unregistering): Port device team_slave_0 removed [ 378.557745][ T9713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.745014][ T9713] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.757368][ T7964] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.764813][ T7964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.952626][ T7964] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.959910][ T7964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.191597][ T9894] HSR: entered promiscuous mode [ 379.304555][ T9906] delete_channel: no stack [ 379.398072][ T9764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 379.427248][ T9764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 379.475660][ T9713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.502424][ T9764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 379.522977][ T9764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 379.635138][ T9713] veth0_vlan: entered promiscuous mode [ 379.702546][ T9713] veth1_vlan: entered promiscuous mode [ 379.824895][ T9713] veth0_macvtap: entered promiscuous mode [ 379.871449][ T9764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.893468][ T9713] veth1_macvtap: entered promiscuous mode [ 379.941711][ T9764] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.973911][ T7958] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.981154][ T7958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.018678][ T9713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.036378][ T9713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.064875][ T9713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.087721][ T9713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.109495][ T9713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.144236][ T9713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.170467][ T9713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.209513][ T7958] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.216701][ T7958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.237644][ T9936] Process accounting resumed [ 380.273430][ T9713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.285984][ T9713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.296346][ T9713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.306921][ T9713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.316848][ T9713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.327771][ T9713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.341863][ T9713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.377055][ T9713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.408971][ T9713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.429088][ T9713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.437880][ T9713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.660581][ T7958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.668488][ T7958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.832802][ T7963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.870101][ T7963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.161150][ T9764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.221331][ T9764] veth0_vlan: entered promiscuous mode [ 381.234099][ T9764] veth1_vlan: entered promiscuous mode [ 381.263929][ T9764] veth0_macvtap: entered promiscuous mode [ 381.273971][ T9764] veth1_macvtap: entered promiscuous mode [ 381.290690][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.301723][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.311911][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.322872][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.332853][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.343641][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.354616][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.365189][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.377905][ T9764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.387920][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.398902][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.409553][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.420717][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.431067][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.441760][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.451937][ T9764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.462807][ T9764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.473919][ T9764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.503354][ T9764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.512232][ T9764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.521257][ T9764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.530145][ T9764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.807791][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.859362][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.992245][ T7963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.011403][ T7963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.131548][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.137946][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.895784][T10035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.825'. [ 387.939643][T10035] veth1_macvtap: left promiscuous mode [ 390.308776][T10049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.827'. [ 390.380652][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.827'. [ 390.499341][T10040] macsec0: entered allmulticast mode [ 390.518875][T10040] veth1_macvtap: entered allmulticast mode [ 395.292358][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.840'. [ 395.398314][T10108] HfR: left promiscuous mode [ 399.749731][T10159] lo: entered allmulticast mode [ 399.909455][T10163] lo: left allmulticast mode [ 400.315259][T10165] netlink: 'syz.2.858': attribute type 2 has an invalid length. [ 403.351295][T10199] netlink: zone id is out of range [ 403.409415][T10199] netlink: del zone limit has 4 unknown bytes [ 404.096325][T10212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.871'. [ 404.675752][T10212] hsr_slave_1 (unregistering): left promiscuous mode [ 405.130580][ T29] audit: type=1800 audit(8277292291.547:4): pid=10223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.875" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 412.437203][T10303] CIFS mount error: No usable UNC path provided in device string! [ 412.437203][T10303] [ 412.463902][T10303] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 415.991983][T10327] kexec: Could not allocate control_code_buffer [ 417.076188][T10347] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 417.360721][T10350] netlink: 146 bytes leftover after parsing attributes in process `syz.2.915'. [ 419.249598][T10379] ima: policy update failed [ 419.266250][ T29] audit: type=1802 audit(8277292305.687:5): pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.923" res=0 errno=0 [ 419.409098][T10383] lo: entered allmulticast mode [ 419.515059][T10385] lo: left allmulticast mode [ 421.404474][T10399] netlink: 32 bytes leftover after parsing attributes in process `syz.1.928'. [ 422.106463][ T29] audit: type=1800 audit(8277292308.527:6): pid=10406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.929" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 422.201022][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 422.227976][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 422.369393][T10384] syz.4.922 (10384) used greatest stack depth: 19280 bytes left [ 424.355697][T10431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.939'. [ 424.965479][T10046] syz.4.824 (10046) used greatest stack depth: 19248 bytes left [ 425.601398][T10462] netlink: 338 bytes leftover after parsing attributes in process `syz.1.945'. [ 425.708786][T10462] veth0_macvtap: left promiscuous mode [ 426.354644][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.545847][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.757145][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.095192][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.115602][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.140156][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.148577][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.159294][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 427.168524][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 427.188545][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.772100][ T12] bridge_slave_1: left allmulticast mode [ 427.778110][ T12] bridge_slave_1: left promiscuous mode [ 427.815096][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.907681][ T12] bridge_slave_0: left allmulticast mode [ 427.941764][ T12] bridge_slave_0: left promiscuous mode [ 427.966892][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.026604][ T9966] syz.4.807 (9966) used greatest stack depth: 18016 bytes left [ 429.279300][ T5839] Bluetooth: hci2: command tx timeout [ 430.411540][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.509679][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.560710][ T12] bond0 (unregistering): Released all slaves [ 431.329420][ T5839] Bluetooth: hci2: command tx timeout [ 431.345109][T10479] chnl_net:caif_netlink_parms(): no params data found [ 431.997539][ T12] hsr_slave_0: left promiscuous mode [ 432.009739][ T12] hsr_slave_1: left promiscuous mode [ 432.045078][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.058555][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.082669][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.104289][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.176237][ T12] veth0_macvtap: left promiscuous mode [ 432.193802][ T12] veth1_vlan: left promiscuous mode [ 432.204349][ T12] veth0_vlan: left promiscuous mode [ 433.334864][ T12] team0 (unregistering): Port device team_slave_1 removed [ 433.409240][ T5839] Bluetooth: hci2: command tx timeout [ 433.442695][ T12] team0 (unregistering): Port device team_slave_0 removed [ 434.782202][T10479] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.793082][T10479] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.807691][T10479] bridge_slave_0: entered allmulticast mode [ 434.816013][T10479] bridge_slave_0: entered promiscuous mode [ 434.871528][T10479] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.878717][T10479] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.909360][T10479] bridge_slave_1: entered allmulticast mode [ 434.938507][T10479] bridge_slave_1: entered promiscuous mode [ 435.126094][T10479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.165697][T10479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.338549][T10479] team0: Port device team_slave_0 added [ 435.418045][T10479] team0: Port device team_slave_1 added [ 435.509666][ T5839] Bluetooth: hci2: command tx timeout [ 435.814730][T10479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.839263][T10479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.919688][T10479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.952540][T10479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.976433][T10479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.046930][T10479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.317302][T10479] hsr_slave_0: entered promiscuous mode [ 436.345010][T10479] hsr_slave_1: entered promiscuous mode [ 436.600721][T10584] svc: failed to register nfsdv3 RPC service (errno 111). [ 436.655919][T10586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.971'. [ 436.698713][T10584] svc: failed to register nfsaclv3 RPC service (errno 111). [ 438.082602][T10615] netlink: 'syz.2.977': attribute type 1 has an invalid length. [ 438.192502][T10479] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 438.257893][T10479] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 438.307304][T10479] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 438.350371][T10479] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 438.618877][T10479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.710166][T10479] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.769729][ T7958] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.776984][ T7958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.830118][ T7958] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.837361][ T7958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.561839][T10479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.859801][ T81] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.219661][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.345275][T10479] veth0_vlan: entered promiscuous mode [ 440.440857][ T81] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.541497][T10479] veth1_vlan: entered promiscuous mode [ 440.684429][ T81] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.802411][T10479] veth0_macvtap: entered promiscuous mode [ 440.850776][T10479] veth1_macvtap: entered promiscuous mode [ 440.895481][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.934042][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 440.945112][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 440.953833][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 440.954538][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.978211][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.988883][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.010311][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.032100][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.053709][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.076212][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 441.078412][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.122908][T10479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.182360][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.221753][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.238711][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 441.246851][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 441.257050][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.329545][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.375544][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.407406][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.431026][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.456135][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.488226][T10479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.561370][T10479] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.595629][T10479] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.615566][T10479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.629182][T10479] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.031190][ T81] bridge_slave_1: left allmulticast mode [ 442.036922][ T81] bridge_slave_1: left promiscuous mode [ 442.107491][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.156814][ T81] bridge_slave_0: left allmulticast mode [ 442.167609][ T81] bridge_slave_0: left promiscuous mode [ 442.195568][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.333350][ T5839] Bluetooth: hci3: command tx timeout [ 443.432649][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.473292][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.490980][ T81] bond0 (unregistering): Released all slaves [ 443.619568][ T81] HSR: left promiscuous mode [ 443.783061][ T7964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.819407][ T7964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.222383][ T7963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.245958][ T7963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.349789][ T81] hsr_slave_0: left promiscuous mode [ 444.356075][ T81] hsr_slave_1: left promiscuous mode [ 444.364576][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.372890][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.394979][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.402713][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.435180][ T81] veth0_macvtap: left promiscuous mode [ 444.441003][ T81] veth1_vlan: left promiscuous mode [ 444.446354][ T81] veth0_vlan: left promiscuous mode [ 445.240032][ T81] team0 (unregistering): Port device team_slave_1 removed [ 445.323538][ T81] team0 (unregistering): Port device team_slave_0 removed [ 445.409252][ T5839] Bluetooth: hci3: command tx timeout [ 445.571625][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.578194][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.371735][T10658] chnl_net:caif_netlink_parms(): no params data found [ 447.033485][T10658] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.055632][T10658] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.078446][T10658] bridge_slave_0: entered allmulticast mode [ 447.100434][T10658] bridge_slave_0: entered promiscuous mode [ 447.174839][T10658] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.219773][T10658] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.227104][T10658] bridge_slave_1: entered allmulticast mode [ 447.257521][T10658] bridge_slave_1: entered promiscuous mode [ 447.441238][T10658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.483536][T10658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.499374][ T5839] Bluetooth: hci3: command tx timeout [ 447.600244][T10783] netlink: 'syz.0.999': attribute type 1 has an invalid length. [ 447.728622][T10658] team0: Port device team_slave_0 added [ 447.752077][T10658] team0: Port device team_slave_1 added [ 447.939621][T10658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.946652][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.009503][T10658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.059661][T10658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.066677][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.120911][T10658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.226691][T10794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1003'. [ 448.253193][T10658] hsr_slave_0: entered promiscuous mode [ 448.261107][T10658] hsr_slave_1: entered promiscuous mode [ 448.267606][T10658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.278133][T10658] Cannot create hsr debugfs directory [ 448.696087][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 449.485380][T10837] netlink: 'syz.1.1009': attribute type 1 has an invalid length. [ 449.569998][ T5839] Bluetooth: hci3: command tx timeout [ 449.581939][T10658] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 449.626005][T10658] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 449.642550][T10658] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 449.672321][T10658] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.939487][T10658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.011209][T10658] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.054257][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.061479][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.129759][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.136995][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.838215][T10658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.594778][T10658] veth0_vlan: entered promiscuous mode [ 451.634502][T10658] veth1_vlan: entered promiscuous mode [ 451.733410][T10658] veth0_macvtap: entered promiscuous mode [ 451.763345][T10658] veth1_macvtap: entered promiscuous mode [ 451.798030][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.816760][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.827374][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.838133][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.867058][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.887685][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.899266][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.910491][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.923787][T10658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.967164][T10899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'. [ 451.980444][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.009210][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.029120][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.059146][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.088550][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.124406][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.169039][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.183762][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 452.199193][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.209432][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.220841][T10658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.228502][T10899] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 452.265826][T10658] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.290234][T10658] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.309095][T10658] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.317901][T10658] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.578618][ T7963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.599371][ T7963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.687865][ T7963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.719096][ T7963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.987469][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 453.444461][T10920] netlink: 'syz.0.1020': attribute type 1 has an invalid length. [ 453.656048][T10931] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 454.095620][T10941] netlink: 'syz.2.1027': attribute type 39 has an invalid length. [ 454.107469][T10941] netlink: 'syz.2.1027': attribute type 40 has an invalid length. [ 454.115976][T10941] netlink: 'syz.2.1027': attribute type 41 has an invalid length. [ 454.124188][T10941] netlink: 'syz.2.1027': attribute type 44 has an invalid length. [ 454.132385][T10941] netlink: 'syz.2.1027': attribute type 46 has an invalid length. [ 454.140395][T10941] netlink: 'syz.2.1027': attribute type 47 has an invalid length. [ 454.149660][T10941] netlink: 'syz.2.1027': attribute type 48 has an invalid length. [ 454.157563][T10941] netlink: 'syz.2.1027': attribute type 49 has an invalid length. [ 454.165829][T10941] netlink: 'syz.2.1027': attribute type 50 has an invalid length. [ 454.168103][T10942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1026'. [ 454.174075][T10941] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1027'. [ 454.418448][T10942] hsr_slave_1 (unregistering): left promiscuous mode [ 456.966028][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 457.664286][T11006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1045'. [ 457.900020][T11006] veth1_macvtap: left allmulticast mode [ 457.913299][T11006] veth1_macvtap: left promiscuous mode [ 458.053463][T11001] kexec: Could not allocate control_code_buffer [ 458.542271][T11025] netlink: zone id is out of range [ 458.547474][T11025] netlink: del zone limit has 4 unknown bytes [ 458.705505][T11027] validate_nla: 2 callbacks suppressed [ 458.705534][T11027] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 459.754780][T11040] mkiss: ax0: crc mode is auto. [ 461.541828][T11069] netlink: 'syz.0.1065': attribute type 1 has an invalid length. [ 461.999116][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 464.990368][T11102] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 467.175570][T11136] kexec: Could not allocate control_code_buffer [ 467.330763][T11145] netlink: 'syz.4.1084': attribute type 1 has an invalid length. [ 467.899224][T11151] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 469.869904][T11180] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 470.157231][T11187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1097'. [ 473.248497][T11232] netlink: zone id is out of range [ 473.258452][T11232] netlink: set zone limit has 8 unknown bytes [ 473.925315][T11251] Process accounting resumed [ 474.044012][T11253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1118'. [ 474.082742][T11253] veth1_macvtap: left promiscuous mode [ 474.401835][T11263] futex_wake_op: syz.1.1121 tries to shift op by 64; fix this program [ 475.074650][T11282] capability: warning: `syz.2.1124' uses 32-bit capabilities (legacy support in use) [ 477.362963][T11323] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 480.649057][T11341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1142'. [ 480.905120][T11341] veth1_macvtap: left promiscuous mode [ 481.767404][T11361] netlink: 'syz.4.1146': attribute type 1 has an invalid length. [ 482.255198][T11366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 482.278300][T11366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 483.158619][T11381] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1154'. [ 483.434785][T11392] netlink: 'syz.4.1157': attribute type 1 has an invalid length. [ 484.676453][T11426] CIFS mount error: No usable UNC path provided in device string! [ 484.676453][T11426] [ 484.686776][T11426] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 484.899037][T11430] netlink: 'syz.1.1168': attribute type 1 has an invalid length. [ 485.225359][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1171'. [ 488.609506][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 491.176321][T11555] netlink: zone id is out of range [ 491.197330][T11555] netlink: del zone limit has 4 unknown bytes [ 492.584110][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'. [ 494.945572][T11642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1226'. [ 495.136618][T11658] netlink: zone id is out of range [ 495.142113][T11658] netlink: del zone limit has 4 unknown bytes [ 496.249442][T11686] FAULT_INJECTION: forcing a failure. [ 496.249442][T11686] name failslab, interval 1, probability 0, space 0, times 0 [ 496.269219][T11686] CPU: 0 UID: 0 PID: 11686 Comm: syz.4.1246 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 496.280085][T11686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 496.290201][T11686] Call Trace: [ 496.293523][T11686] [ 496.296492][T11686] dump_stack_lvl+0x16c/0x1f0 [ 496.301333][T11686] should_fail_ex+0x497/0x5b0 [ 496.306174][T11686] ? fs_reclaim_acquire+0xae/0x150 [ 496.311422][T11686] should_failslab+0xc2/0x120 [ 496.316186][T11686] __kmalloc_node_noprof+0xd1/0x520 [ 496.321468][T11686] ? security_capable+0x7e/0x260 [ 496.326496][T11686] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 496.332040][T11686] ? ns_capable_noaudit+0xda/0x110 [ 496.337235][T11686] __kvmalloc_node_noprof+0xad/0x1a0 [ 496.342619][T11686] proc_sys_call_handler+0x2f6/0x5d0 [ 496.348076][T11686] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 496.353980][T11686] vfs_write+0x5ae/0x1150 [ 496.358393][T11686] ? __pfx_proc_sys_write+0x10/0x10 [ 496.363685][T11686] ? __pfx___mutex_lock+0x10/0x10 [ 496.368879][T11686] ? __pfx_vfs_write+0x10/0x10 [ 496.373839][T11686] ksys_write+0x12b/0x250 [ 496.378268][T11686] ? __pfx_ksys_write+0x10/0x10 [ 496.383210][T11686] do_syscall_64+0xcd/0x250 [ 496.387765][T11686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.393708][T11686] RIP: 0033:0x7fe5d4385d29 [ 496.398153][T11686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.417796][T11686] RSP: 002b:00007fe5d529b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 496.426277][T11686] RAX: ffffffffffffffda RBX: 00007fe5d4575fa0 RCX: 00007fe5d4385d29 [ 496.434391][T11686] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000003 [ 496.442412][T11686] RBP: 00007fe5d529b090 R08: 0000000000000000 R09: 0000000000000000 [ 496.450592][T11686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.458605][T11686] R13: 0000000000000000 R14: 00007fe5d4575fa0 R15: 00007ffdd83faca8 [ 496.466723][T11686] [ 497.055001][T11704] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 498.720689][T11738] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 499.511845][T11757] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1264'. [ 500.277093][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 500.286854][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 500.295587][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 500.305247][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 500.313113][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 500.320687][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 501.181354][ T2992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.299773][T11781] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 501.455918][ T2992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.537467][T11769] chnl_net:caif_netlink_parms(): no params data found [ 501.780647][ T2992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.181725][ T2992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.229570][T11769] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.249204][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.256518][T11769] bridge_slave_0: entered allmulticast mode [ 502.296798][T11769] bridge_slave_0: entered promiscuous mode [ 502.330912][T11769] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.356755][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.369414][ T5839] Bluetooth: hci3: command tx timeout [ 502.376096][T11769] bridge_slave_1: entered allmulticast mode [ 502.395886][T11769] bridge_slave_1: entered promiscuous mode [ 502.612022][T11769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.701338][T11769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.853647][T11769] team0: Port device team_slave_0 added [ 502.892435][T11769] team0: Port device team_slave_1 added [ 503.095353][T11769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.102926][T11769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.162582][T11769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.196096][ T2992] bridge_slave_1: left allmulticast mode [ 503.203319][ T2992] bridge_slave_1: left promiscuous mode [ 503.214563][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.279876][ T2992] bridge_slave_0: left allmulticast mode [ 503.285657][ T2992] bridge_slave_0: left promiscuous mode [ 503.299340][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.995071][T11823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1284'. [ 504.459926][ T5839] Bluetooth: hci3: command tx timeout [ 504.636568][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.666077][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.687182][ T2992] bond0 (unregistering): Released all slaves [ 504.716638][T11769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.731340][T11769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.767723][T11769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.116897][T11769] hsr_slave_0: entered promiscuous mode [ 505.156649][T11769] hsr_slave_1: entered promiscuous mode [ 505.180362][T11769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.207987][T11769] Cannot create hsr debugfs directory [ 505.971510][ T2992] hsr_slave_0: left promiscuous mode [ 505.980317][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.988618][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.000376][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.013520][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.029077][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'. [ 506.066842][ T2992] veth0_macvtap: left promiscuous mode [ 506.089421][ T2992] veth1_vlan: left promiscuous mode [ 506.094806][ T2992] veth0_vlan: left promiscuous mode [ 506.531523][ T5839] Bluetooth: hci3: command tx timeout [ 506.831241][ T2992] team0 (unregistering): Port device team_slave_1 removed [ 506.891009][ T2992] team0 (unregistering): Port device team_slave_0 removed [ 507.018199][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.029455][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.524967][T11854] HfR: entered promiscuous mode [ 507.543253][T11856] HfR: left promiscuous mode [ 508.402745][T11769] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 508.441950][T11769] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 508.483790][T11769] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 508.526705][T11769] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 508.609292][ T5839] Bluetooth: hci3: command tx timeout [ 508.695747][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'. [ 508.710800][T11769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.753332][T11769] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.796673][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.803869][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.864324][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.871568][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.269358][T11908] netlink: 'syz.2.1303': attribute type 8 has an invalid length. [ 509.415472][T11769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.150573][T11769] veth0_vlan: entered promiscuous mode [ 510.197167][T11769] veth1_vlan: entered promiscuous mode [ 510.261647][T11769] veth0_macvtap: entered promiscuous mode [ 510.283923][T11769] veth1_macvtap: entered promiscuous mode [ 510.333751][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.354757][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.375353][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.386780][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.400101][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.411324][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.429175][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.449895][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.471127][T11769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.478677][T11943] openvswitch: HfR: Dropping previously announced user features [ 510.511896][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.559473][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.579690][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1306'. [ 510.589713][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.609561][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.629257][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.644578][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.655122][T11769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.666207][T11769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.691968][T11769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.717305][T11940] HfR: left promiscuous mode [ 510.773123][T11769] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.787233][T11769] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.806480][T11769] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.824850][T11769] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.154058][ T7958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.181373][ T7958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.245680][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.267510][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.643543][T11967] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 511.910230][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1314'. [ 512.813242][T11997] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 513.065806][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1325'. [ 513.079691][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1325'. [ 513.236763][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 513.896868][T12030] netlink: 'syz.0.1332': attribute type 1 has an invalid length. [ 516.719528][T12101] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1352'. [ 521.142163][T12163] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 521.257829][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 523.209874][T12196] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 523.295730][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'. [ 523.629566][T12217] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1390'. [ 523.725373][T12217] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1390'. [ 523.764161][T12217] bridge_slave_1: left allmulticast mode [ 523.786266][T12217] bridge_slave_1: left promiscuous mode [ 523.794113][T12217] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.820491][T12217] bridge_slave_0: left allmulticast mode [ 523.826316][T12217] bridge_slave_0: left promiscuous mode [ 523.833275][T12217] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.389370][T12237] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1397'. [ 525.471229][T12267] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1407'. [ 525.591505][T12267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1407'. [ 525.600889][T12267] bridge_slave_1: left allmulticast mode [ 525.606832][T12267] bridge_slave_1: left promiscuous mode [ 525.626487][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.666276][T12267] bridge_slave_0: left allmulticast mode [ 525.673051][T12267] bridge_slave_0: left promiscuous mode [ 525.684676][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.166846][T12283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1412'. [ 526.227960][T12285] futex_wake_op: syz.4.1412 tries to shift op by 64; fix this program [ 530.294867][T12369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1445'. [ 530.823483][T12369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.841203][T12369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.860695][T12369] bond0 (unregistering): Released all slaves [ 533.179843][T12426] mkiss: ax0: crc mode is auto. [ 533.267664][T12428] mkiss: ax1: crc mode is auto. [ 534.905999][T12473] vivid-013: ================= START STATUS ================= [ 534.917957][T12473] vivid-013: Generate PTS: true [ 534.926270][T12473] vivid-013: Generate SCR: true [ 534.935868][T12473] tpg source WxH: 640x360 (Y'CbCr) [ 534.944984][T12473] tpg field: 1 [ 534.948541][T12473] tpg crop: 640x360@0x0 [ 534.964557][T12473] tpg compose: 640x360@0x0 [ 534.972808][T12473] tpg colorspace: 8 [ 534.985018][T12473] tpg transfer function: 0/0 [ 534.992612][T12473] tpg Y'CbCr encoding: 0/0 [ 534.997234][T12473] tpg quantization: 0/0 [ 535.008060][T12473] tpg RGB range: 0/2 [ 535.014596][T12473] vivid-013: ================== END STATUS ================== [ 535.204166][T12480] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1482'. [ 535.474719][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'. [ 535.499987][T12496] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 535.529195][T12496] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 537.761876][T12557] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 540.067757][T12630] openvswitch: netlink: IP tunnel dst address not specified [ 541.573758][T12671] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1536'. [ 543.650046][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 544.127060][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 544.530884][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 546.425819][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1568'. [ 546.447805][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1568'. [ 547.020587][T12796] netlink: zone id is out of range [ 547.029268][T12796] netlink: del zone limit has 4 unknown bytes [ 547.291749][T12805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1577'. [ 547.877613][T12820] netlink: 'syz.1.1582': attribute type 2 has an invalid length. [ 547.885824][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 548.398522][T12811] Invalid ELF header magic: != ELF [ 549.466597][T12866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1598'. [ 549.563025][T12866] veth1_macvtap: left promiscuous mode [ 550.001063][T12883] netlink: 178 bytes leftover after parsing attributes in process `syz.1.1603'. [ 550.043925][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 550.222232][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 552.921902][T12950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1626'. [ 552.998977][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'. [ 557.840840][T13054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1656'. [ 558.207214][T13060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1658'. [ 558.530013][T13064] openvswitch: netlink: Duplicate key (type 15). [ 559.664931][T13088] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1665'. [ 561.191754][T13114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1673'. [ 561.937852][T13120] raw_sendmsg: syz.2.1675 forgot to set AF_INET. Fix it! [ 563.508271][T13140] Invalid ELF header magic: != ELF [ 564.176005][T13145] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1681'. [ 565.557728][T13168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1684'. [ 567.700189][T13228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1702'. [ 568.439440][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.449290][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.364920][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 569.516058][T13269] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1714'. [ 571.173573][T13331] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1730'. [ 573.058920][T13376] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1740'. [ 573.104725][T13376] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1740'. [ 574.383937][T13407] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1750'. [ 574.393076][T13407] IPv6: NLM_F_CREATE should be specified when creating new route [ 574.401626][T13407] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 574.409358][T13407] IPv6: NLM_F_CREATE should be set when creating new route [ 574.416667][T13407] IPv6: NLM_F_CREATE should be set when creating new route [ 575.786236][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1765'. [ 577.100662][ T2992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.354715][ T2992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.586322][ T2992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.745265][ T2992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.015012][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 578.029593][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 578.048049][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 578.062448][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 578.072376][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 578.080969][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 578.173826][ T2992] bridge_slave_1: left allmulticast mode [ 578.179594][ T2992] bridge_slave_1: left promiscuous mode [ 578.265176][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.299808][ T2992] bridge_slave_0: left allmulticast mode [ 578.323668][ T2992] bridge_slave_0: left promiscuous mode [ 578.357274][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.672191][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.688353][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.703019][ T2992] bond0 (unregistering): Released all slaves [ 580.113617][ T5846] Bluetooth: hci2: command tx timeout [ 580.228044][ T2992] hsr_slave_0: left promiscuous mode [ 580.256250][ T2992] hsr_slave_1: left promiscuous mode [ 580.282294][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.300953][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.324331][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.334948][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.399426][ T2992] veth0_macvtap: left promiscuous mode [ 580.414208][ T2992] veth1_vlan: left promiscuous mode [ 580.420217][ T2992] veth0_vlan: left promiscuous mode [ 581.360540][T13599] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 581.573362][ T2992] team0 (unregistering): Port device team_slave_1 removed [ 581.663059][ T2992] team0 (unregistering): Port device team_slave_0 removed [ 582.203493][ T5846] Bluetooth: hci2: command tx timeout [ 582.859602][T13504] chnl_net:caif_netlink_parms(): no params data found [ 583.268948][T13608] kexec: Could not allocate control_code_buffer [ 583.393453][T13504] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.400644][T13504] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.412960][T13504] bridge_slave_0: entered allmulticast mode [ 583.420989][T13504] bridge_slave_0: entered promiscuous mode [ 583.452499][T13504] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.470386][T13504] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.478172][T13504] bridge_slave_1: entered allmulticast mode [ 583.486596][T13504] bridge_slave_1: entered promiscuous mode [ 583.602626][T13504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.626335][T13504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.768686][T13504] team0: Port device team_slave_0 added [ 583.837692][T13504] team0: Port device team_slave_1 added [ 584.055316][T13504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.093005][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.203354][T13504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.250139][T13504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.269840][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.313480][ T5846] Bluetooth: hci2: command tx timeout [ 584.432164][T13504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.692529][T13504] hsr_slave_0: entered promiscuous mode [ 584.750239][T13504] hsr_slave_1: entered promiscuous mode [ 584.894397][T13669] HSR: entered promiscuous mode [ 585.312469][T13669] delete_channel: no stack [ 585.372776][T13504] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 585.456674][T13504] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 585.486693][T13504] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 585.530401][T13504] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 585.647361][T13504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.696856][T13504] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.711509][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.718754][ T7954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.809206][T13507] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.816470][T13507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.365164][ T5846] Bluetooth: hci2: command tx timeout [ 586.553929][T13504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.405766][T13731] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1818'. [ 587.614088][T13504] veth0_vlan: entered promiscuous mode [ 587.643116][T13504] veth1_vlan: entered promiscuous mode [ 587.886100][T13504] veth0_macvtap: entered promiscuous mode [ 587.970013][T13504] veth1_macvtap: entered promiscuous mode [ 588.036955][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.069353][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.100058][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.149028][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.208887][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.253959][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.284064][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.315123][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.337369][T13504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.397295][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.421939][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.451628][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.482953][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.523565][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.551248][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.571803][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.599894][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.624582][T13504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.651903][T13504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.662577][T13504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.680320][T13504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.690320][T13504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.871010][ T7955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.904211][ T7955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.985649][T13503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.003838][T13503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.560661][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 596.011103][T13928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 596.093109][T13928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 598.605400][T13997] openvswitch: netlink: Tunnel attr 8453 out of range max 16 [ 598.625101][T13996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1868'. [ 598.638768][T13997] openvswitch: netlink: Tunnel attr 8453 out of range max 16 [ 600.550412][T14039] netlink: 'syz.2.1879': attribute type 1 has an invalid length. [ 601.315684][T14065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1887'. [ 601.325491][T14065] ipvlan0: entered allmulticast mode [ 601.331638][T14065] veth0_vlan: entered allmulticast mode [ 604.752216][T14173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1907'. [ 604.782502][T14177] [ 604.784925][T14177] ====================================================== [ 604.792073][T14177] WARNING: possible circular locking dependency detected [ 604.799228][T14177] 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 Not tainted [ 604.806386][T14177] ------------------------------------------------------ [ 604.813619][T14177] syz.5.1908/14177 is trying to acquire lock: [ 604.819727][T14177] ffffffff8fabf788 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x1f4d/0x4660 [ 604.829064][T14177] [ 604.829064][T14177] but task is already holding lock: [ 604.836506][T14177] ffff88805c1a0aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xc00 [ 604.846706][T14177] [ 604.846706][T14177] which lock already depends on the new lock. [ 604.846706][T14177] [ 604.857150][T14177] [ 604.857150][T14177] the existing dependency chain (in reverse order) is: [ 604.866255][T14177] [ 604.866255][T14177] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 604.874945][T14177] __mutex_lock+0x19b/0xa60 [ 604.880054][T14177] smc_switch_to_fallback+0x2d/0xa00 [ 604.885944][T14177] smc_sendmsg+0x13d/0x520 [ 604.890959][T14177] ____sys_sendmsg+0x9ae/0xb40 [ 604.896274][T14177] ___sys_sendmsg+0x135/0x1e0 [ 604.901521][T14177] __sys_sendmmsg+0x201/0x420 [ 604.906849][T14177] __x64_sys_sendmmsg+0x9c/0x100 [ 604.912372][T14177] do_syscall_64+0xcd/0x250 [ 604.917436][T14177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.923890][T14177] [ 604.923890][T14177] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 604.931663][T14177] lock_sock_nested+0x3a/0xf0 [ 604.936922][T14177] sockopt_lock_sock+0x54/0x70 [ 604.942264][T14177] do_ipv6_setsockopt+0x1f55/0x4660 [ 604.948049][T14177] ipv6_setsockopt+0xcb/0x170 [ 604.953308][T14177] udpv6_setsockopt+0x7d/0xd0 [ 604.958563][T14177] do_sock_setsockopt+0x222/0x480 [ 604.964154][T14177] __sys_setsockopt+0x1a0/0x230 [ 604.969564][T14177] __x64_sys_setsockopt+0xbd/0x160 [ 604.975234][T14177] do_syscall_64+0xcd/0x250 [ 604.980307][T14177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.986755][T14177] [ 604.986755][T14177] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 604.994011][T14177] __lock_acquire+0x249e/0x3c40 [ 604.999424][T14177] lock_acquire.part.0+0x11b/0x380 [ 605.005077][T14177] __mutex_lock+0x19b/0xa60 [ 605.010219][T14177] do_ipv6_setsockopt+0x1f4d/0x4660 [ 605.015974][T14177] ipv6_setsockopt+0xcb/0x170 [ 605.021216][T14177] tcp_setsockopt+0xa4/0x100 [ 605.026359][T14177] smc_setsockopt+0x1b4/0xc00 [ 605.031608][T14177] do_sock_setsockopt+0x222/0x480 [ 605.037202][T14177] __sys_setsockopt+0x1a0/0x230 [ 605.042610][T14177] __x64_sys_setsockopt+0xbd/0x160 [ 605.048280][T14177] do_syscall_64+0xcd/0x250 [ 605.053362][T14177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.059895][T14177] [ 605.059895][T14177] other info that might help us debug this: [ 605.059895][T14177] [ 605.070135][T14177] Chain exists of: [ 605.070135][T14177] rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock [ 605.070135][T14177] [ 605.084254][T14177] Possible unsafe locking scenario: [ 605.084254][T14177] [ 605.091716][T14177] CPU0 CPU1 [ 605.097120][T14177] ---- ---- [ 605.102502][T14177] lock(&smc->clcsock_release_lock); [ 605.107928][T14177] lock(sk_lock-AF_INET6); [ 605.114981][T14177] lock(&smc->clcsock_release_lock); [ 605.122897][T14177] lock(rtnl_mutex); [ 605.127010][T14177] [ 605.127010][T14177] *** DEADLOCK *** [ 605.127010][T14177] [ 605.135165][T14177] 1 lock held by syz.5.1908/14177: [ 605.140309][T14177] #0: ffff88805c1a0aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xc00 [ 605.150936][T14177] [ 605.150936][T14177] stack backtrace: [ 605.156845][T14177] CPU: 0 UID: 0 PID: 14177 Comm: syz.5.1908 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 605.167647][T14177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 605.177724][T14177] Call Trace: [ 605.181027][T14177] [ 605.183978][T14177] dump_stack_lvl+0x116/0x1f0 [ 605.188729][T14177] print_circular_bug+0x41c/0x610 [ 605.194011][T14177] check_noncircular+0x31a/0x400 [ 605.198994][T14177] ? __pfx_check_noncircular+0x10/0x10 [ 605.204518][T14177] ? hlock_class+0x4e/0x130 [ 605.209140][T14177] ? hlock_class+0x4e/0x130 [ 605.213689][T14177] ? lockdep_lock+0xc6/0x200 [ 605.218323][T14177] ? __pfx_lockdep_lock+0x10/0x10 [ 605.223477][T14177] __lock_acquire+0x249e/0x3c40 [ 605.228410][T14177] ? __pfx___lock_acquire+0x10/0x10 [ 605.233652][T14177] ? __lock_acquire+0x15a9/0x3c40 [ 605.238743][T14177] lock_acquire.part.0+0x11b/0x380 [ 605.243898][T14177] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 605.249326][T14177] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 605.254995][T14177] ? rcu_is_watching+0x12/0xc0 [ 605.259824][T14177] ? trace_lock_acquire+0x14e/0x1f0 [ 605.265084][T14177] ? __pfx___lock_acquire+0x10/0x10 [ 605.270351][T14177] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 605.275800][T14177] ? lock_acquire+0x2f/0xb0 [ 605.280339][T14177] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 605.285771][T14177] __mutex_lock+0x19b/0xa60 [ 605.290315][T14177] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 605.295728][T14177] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 605.301134][T14177] ? __pfx___mutex_lock+0x10/0x10 [ 605.306191][T14177] ? __pfx_lock_release+0x10/0x10 [ 605.311239][T14177] ? trace_lock_acquire+0x14e/0x1f0 [ 605.316477][T14177] ? __pfx_register_lock_class+0x10/0x10 [ 605.322137][T14177] ? __might_fault+0xe3/0x190 [ 605.327074][T14177] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 605.332478][T14177] ? rtnl_lock+0x9/0x20 [ 605.336686][T14177] do_ipv6_setsockopt+0x1f4d/0x4660 [ 605.341922][T14177] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 605.347501][T14177] ? lock_acquire.part.0+0x11b/0x380 [ 605.352899][T14177] ? __mutex_trylock_common+0xea/0x250 [ 605.358383][T14177] ? __pfx___mutex_trylock_common+0x10/0x10 [ 605.364317][T14177] ? smc_setsockopt+0x101/0xc00 [ 605.369225][T14177] ? rcu_is_watching+0x12/0xc0 [ 605.374031][T14177] ? trace_contention_end+0xee/0x140 [ 605.379347][T14177] ? __mutex_lock+0x1cc/0xa60 [ 605.384062][T14177] ? __pfx___futex_wait+0x10/0x10 [ 605.389117][T14177] ? smc_setsockopt+0x101/0xc00 [ 605.394017][T14177] ? __pfx___mutex_lock+0x10/0x10 [ 605.399079][T14177] ? ipv6_setsockopt+0xcb/0x170 [ 605.403963][T14177] ipv6_setsockopt+0xcb/0x170 [ 605.408697][T14177] tcp_setsockopt+0xa4/0x100 [ 605.413324][T14177] smc_setsockopt+0x1b4/0xc00 [ 605.418056][T14177] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 605.423976][T14177] ? __pfx_smc_setsockopt+0x10/0x10 [ 605.429227][T14177] ? lock_acquire.part.0+0x11b/0x380 [ 605.434563][T14177] ? __pfx_smc_setsockopt+0x10/0x10 [ 605.439810][T14177] do_sock_setsockopt+0x222/0x480 [ 605.444886][T14177] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 605.450489][T14177] ? __pfx_do_futex+0x10/0x10 [ 605.455245][T14177] ? __x64_sys_futex+0x1e1/0x4c0 [ 605.460223][T14177] ? __x64_sys_futex+0x1ea/0x4c0 [ 605.465207][T14177] __sys_setsockopt+0x1a0/0x230 [ 605.470098][T14177] __x64_sys_setsockopt+0xbd/0x160 [ 605.475246][T14177] ? do_syscall_64+0x91/0x250 [ 605.479957][T14177] ? lockdep_hardirqs_on+0x7c/0x110 [ 605.485197][T14177] do_syscall_64+0xcd/0x250 [ 605.489739][T14177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.495710][T14177] RIP: 0033:0x7fdde0785d29 [ 605.500148][T14177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.519786][T14177] RSP: 002b:00007fdde15dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 605.528234][T14177] RAX: ffffffffffffffda RBX: 00007fdde0975fa0 RCX: 00007fdde0785d29 [ 605.536240][T14177] RDX: 0000000000000001 RSI: 0000000000000029 RDI: 0000000000000003 [ 605.544357][T14177] RBP: 00007fdde0801a20 R08: 0000000010000110 R09: 0000000000000000 [ 605.552457][T14177] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 605.560494][T14177] R13: 0000000000000000 R14: 00007fdde0975fa0 R15: 00007ffe276dfa58 [ 605.568499][T14177] [ 605.574080][T14170] base_sock_release(ffff888059544200) sk=ffff888064c96000